Privacy Policy Hantam88 — Personal Data Protection for Members of Malaysia's Online Casino Platform

Hantam88 ("kami", "platform") respects the privacy of every individual who uses our services. This Privacy Policy explains in detail how we collect, use, disclose, store, and protect your personal information when you use our online casino website and platform at hantam88.my.

This document has been prepared in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and reflects our commitment to data security and the privacy of all members. By registering an account or using any Hantam88 service, you agree that your personal data will be processed as described in this Privacy Policy.

If you do not agree with any part of this Privacy Policy, please discontinue use of our platform. Should you have any questions about how we handle your personal data, do not hesitate to contact us at support@hantam88.my.

Hantam88 collect various types of personal information from you when you register and use our platform. This information falls into two main categories:

Information you provide directly:

• Identity information: Full name, national identification card or passport number, date of birth, gender.
• Contact information: Email address, Malaysian phone number, residential address.
• Account information: Username, password (stored in encrypted form), game preferences, and account activity history.
• Financial information: Details of the payment method used (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX via Maybank2u or CIMB Clicks), along with deposit and withdrawal transaction history in Malaysian Ringgit (MYR).
• Verification documents: Identity documents requested during the identity verification (KYC) process.

Automatically collected information:

• Technical data: IP address, device type, operating system, browser type, screen resolution.
• Usage data: Pages visited, games played, time spent on the platform, and actions taken during a session.
• Cookie data: Session cookies, preference cookies, and tracking identifiers to enhance the user experience — see Section 8 for full details.
• Location data: Geographic location based on IP address for eligibility verification and fraud prevention purposes.

The personal data we collect is used for the following purposes, all of which are directly related to the delivery of our services Hantam88 to you:

• Account management: Creates and manages your member account, processes registration and identity verification, and handles account recovery when needed.
• Transaction processing: Processing deposits and withdrawals in MYR via your chosen Malaysian payment method, ensuring all financial transactions are carried out securely and accurately.
• Gaming service delivery: Allows you to access and play all games available on the platform — slots, live casino, table games, jackpots, and Sports Betting.
• Security and fraud prevention: Detecting, investigating, and preventing fraudulent activity, money laundering, unauthorised access, and platform misuse.
• Legal compliance: Fulfilling legal obligations applicable in Malaysia, including KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements.
• Customer support: Assisting you with any enquiries, complaints, or technical issues you encounter while using the platform.
• Service communications: Sending you important account notices, changes to terms, security updates, and transaction information.
• Marketing (with consent): Sending promotional information, bonuses, and special offers to members who have consented to receive marketing communications.
• Platform improvement: Analysing usage patterns on an aggregated (non-individual) basis to improve the platform's functionality, design, and overall experience.
• Responsible gaming: Monitoring gameplay patterns to identify signs of at-risk gambling and reaching out to members who may need support.

Hantam88 does not use your personal data to make decisions based solely on automated processing (profiling) that materially affects your rights, unless required by law or with your explicit consent.

Hantam88 processes your personal data on valid legal grounds in accordance with Malaysia's PDPA 2010. The legal bases we rely on are as follows:

• Contract fulfilment: Processing required to manage the agreement between you and Hantam88 — including account management, payment processing, and the delivery of gaming services.
• Legal obligation: Processing required to fulfil applicable Malaysian legal obligations — including KYC and AML requirements, and reporting to relevant authorities.
• Legitimate interests: Processing for the purposes of platform security, fraud prevention, and service improvement — carried out in a manner that is proportionate and does not override your privacy interests.
• Consent: For marketing communications and the use of non-essential cookies — processing only takes place once you have given clear consent, which may be withdrawn at any time.

If you would like to know the specific legal basis used for any particular processing activity, please contact us at support@hantam88.my.

Hantam88 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL Encryption: All data transmitted between your device and our servers is encrypted using the latest TLS/SSL standards — the same technology used by Malaysia's major banks.
• Data encryption at rest: Sensitive data such as passwords (stored as one-way hashes) and financial information is encrypted at rest within our database.
• Tiered access controls: A role-based access control (RBAC) system ensures that only staff who require access to specific data are granted permission — and all such access is automatically logged.
• Fund segregation: Member funds are held in accounts that are segregated from the company's operational funds and are protected by additional security measures.
• Regular security audits: The Hantam88 platform undergoes regular independent penetration testing and security audits to identify and address any vulnerabilities.
• 24/7 Monitoring: An automated security monitoring system operates around the clock to detect suspicious activity or anomalies in data access patterns.
• Incident response plan: Hantam88 has a clear incident response procedure for handling any data breach, including notifying affected members and the relevant authorities as required under Malaysian law.

Hantam88 does not sell, rent, or trade members' personal data to any third party. Your data may be shared only in the following limited circumstances, and only to the extent necessary:

• Payment service providers: Data required to process deposit and withdrawal transactions via your chosen Malaysian payment methods — Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX (Maybank2u, CIMB Clicks). These providers are required to comply with payment industry security standards.
• Game software providers: Minimum game data required to enable providers such as Pragmatic Play, PG Soft, NetEnt, Play'n GO, and Evolution Gaming to deliver games to you. These providers maintain their own privacy policies and are responsible for the data they process.
• Relevant authorities: When required by Malaysian law, a court order, or a lawful request from a law enforcement agency, Hantam88 will disclose the necessary data within the scope permitted by law.
• Technical service providers: Providers of server infrastructure, cloud services, and analytics tools used in platform operations — all of whom are bound by strict data processing agreements and are not permitted to use your data for their own purposes.
• Identity verification (KYC): KYC service providers who assist us in verifying member identities in accordance with Malaysia's anti-money laundering legal requirements.

In all of the situations above, Hantam88 ensures that third parties who receive your personal data are obligated to protect it to a standard no less stringent than this Privacy Policy.

Some of the service providers used by Hantam88 may operate or store data in countries other than Malaysia. This includes international gaming software providers and technology infrastructure providers. When your personal data is transferred outside Malaysia, we ensure that:

• Data recipients are contractually required to maintain a level of data protection equivalent to that prescribed by Malaysia's PDPA 2010, enforced through binding agreements.
• Data transfers occur only to countries or entities that maintain recognised data protection standards or have agreed to the data protection terms we require.
• Any data transfers carried out comply with Section 129 of Malaysia's PDPA 2010 regarding the transfer of personal data outside of Malaysia.

If you would like to know more about the specific safeguards applied to cross-border data transfers, please contact us at support@hantam88.my.

Hantam88 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Strictly Necessary Cookies: Cookies essential to the platform's core functions — including login session management, account security, and language preferences. These cookies cannot be disabled as they are required for the platform to function properly.
• Performance cookies: Collecting information about how you use our platform — pages visited most frequently, time spent on the platform, and any error messages you encounter. This data is used to improve overall platform performance.
• Functionality cookies: Allowing the platform to remember your preferences — such as your selected language, display settings, and personal configurations — to deliver a more personalised experience.
• Analytics cookies: Helps us understand aggregate platform usage patterns to make data-driven decisions in improving platform design and content.

You can manage your cookie settings through your web browser. However, disabling certain cookies may affect platform functionality. For cookies that require consent, you will be prompted to provide it via a notice displayed during your first visit to our platform.

Under Malaysia's Personal Data Protection Act 2010, you have the following rights with respect to your personal data that we process:

To exercise any of the rights above, please submit a written request to us at support@hantam88.my by stating the right you wish to exercise and providing sufficient details for us to verify your identity. We will process your request within 21 business days as required under PDPA 2010.

Please note that certain exceptions may prevent us from fulfilling your request — for example, we may be required to retain certain data to meet legal obligations or to defend a legal claim. We will inform you clearly if this is the case.

Hantam88 only retains your personal data for as long as necessary for the purposes stated in this Privacy Policy, or as required by Malaysian law. The following are the general data retention periods we apply:

• Active account data: Retained for the duration your account remains active, together with any mandatory retention period following account closure.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian legal requirements on financial records and anti-money laundering.
• Identity verification documents (KYC): Retained for a minimum of 5 years after the business relationship ends, in accordance with Malaysia's Anti-Money Laundering Act 2001.
• Customer support communication logs: Retained for 2 years for reference and service improvement purposes.
• Game data and activity: Retained for 3 years for dispute resolution purposes and responsible gaming analysis.
• Marketing data (consent-based): Retained until you withdraw your consent to receive marketing communications.

Once the retention period expires, your personal data will be deleted or anonymised in a secure and irreversible manner. Anonymised data (where your identity can no longer be identified) may be retained for statistical analysis and platform improvement purposes.

Platform Hantam88 is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18. If you believe we have inadvertently collected personal data from someone under 18, please contact us immediately at support@hantam88.my.

Once we confirm that the data belongs to a minor, we will take immediate steps to delete it from our systems and close the associated account. We may also report the matter to the relevant authorities as required under Malaysian law.

When you make a deposit or withdrawal via Hantam88, your financial data flows through secure, encrypted channels. Below is an overview of the data flow within the payment process:

Platform Hantam88 works with a range of third-party service providers to deliver the best possible experience to our members. Each provider is carefully selected and required to comply with strict privacy standards:

• Game providers: Pragmatic Play, PG Soft, NetEnt, Play'n GO, Evolution Gaming, Microgaming, Hacksaw Gaming, and other providers — each processes only the minimum data necessary to deliver games to you.
• Payment providers: Payment gateway providers that process transactions for Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX.
• Infrastructure providers: Cloud computing and server hosting providers that store and process platform data.
• KYC service providers: Parties that assist us in verifying member identities in accordance with Malaysia's anti-money laundering laws.
• Customer support providers: The tools and platforms we use to deliver customer support services via live chat, email, and WhatsApp.

All third-party providers are required to: (a) process your data only in accordance with Hantam88's instructions; (b) not use your data for their own purposes; (c) protect your data to a security standard equivalent to or higher than our own; and (d) delete or return your data upon termination of their agreement with us.

Hantam88 reserves the right to update or amend this Privacy Policy from time to time in line with changes to Malaysian law, industry practice, or our platform operations. When material changes are made, we will:

• Updating the "Last Updated" date at the top of this document.
• Displaying a clear notice within the platform upon your next login.
• Sending an email notification to the address registered on your account for any significant changes.

We encourage you to review this Privacy Policy periodically. Continued use of the Hantam88 after any changes take effect will be considered acceptance of the updated Privacy Policy.

If you do not agree with the changes made, you have the right to close your account and request deletion of your data in accordance with the procedure set out in Section 9.

If you have any questions, concerns, or complaints regarding how Hantam88 how we manage your personal data, or if you wish to exercise any of the rights set out in Section 9, please contact us through the following channels:

• Email: support@hantam88.my — for general enquiries and data rights requests.
• Live Chat: Available within the Hantam88 platform — average response time under 2 minutes, operating 24 hours a day, 7 days a week.
• WhatsApp: For matters requiring an immediate response relating to privacy or account security.

We are committed to responding to all privacy-related enquiries within 21 business days of receipt. For more complex requests that require further investigation, we will keep you informed of the expected timeline and provide updates on progress.

If you are dissatisfied with how we have handled your privacy complaint, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia in accordance with the procedures set out under PDPA 2010.