Privacy Policy

This Privacy Policy ("Policy") describes how HengHeng2 ("HengHeng2", "we", "us", "our"), operator of the online gaming platform at hengheng2.cam, collects, processes, stores, shares, and protects the personal data of individuals who access or use our platform ("you", "Player", "User").

HengHeng2 operates an online casino and sports betting platform designed for Malaysian players and other permitted users. In the course of providing our services — including account registration, payment processing, game access, and customer support — we necessarily process certain categories of personal data. This Policy explains precisely what data we process, on what legal basis, and for what purposes.

By registering an account with HengHeng2, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree to this Policy, you should not use our platform.

This Policy should be read alongside our Terms & Conditions, which govern the overall contractual relationship between you and HengHeng2.

For the purposes of this Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial data, and online identifiers such as IP addresses and cookie identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means HengHeng2, which determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means a third party that processes Personal Data on behalf of HengHeng2, subject to a binding data processing agreement.
• "Sensitive Personal Data" means Personal Data revealing racial or ethnic origin, political opinions, religious beliefs, health data, biometric data, or financial account details, which are subject to heightened protection requirements.
• "Consent" means a freely given, specific, informed, and unambiguous indication by which a data subject signifies their agreement to the processing of their personal data for a specific purpose.
• "KYC" means Know Your Customer — the identity verification process required for regulatory and anti-fraud compliance.

HengHeng2 collects the following categories of personal data, depending on your interaction with the Platform:

HengHeng2 collects personal data through the following channels:

• Directly from you: When you register an account, complete your profile, submit KYC documents, make a deposit or withdrawal request, contact our support team, or participate in a promotion.
• Automatically: When you access or use the Platform, certain Technical Data (IP address, device information, session data) is collected automatically through server logs, cookies, and similar tracking technologies.
• Through payment processors: When you initiate a deposit or withdrawal via DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, Touch 'n Go eWallet, Boost, or GrabPay, our payment processing partners transmit confirmation and transaction reference data to us.
• From third-party identity verification services: Where we use approved third-party KYC verification providers to assist in confirming your identity, these providers may supply us with verification outcome data.
• From fraud detection and AML screening services: We use automated screening tools that process certain data points to detect potentially fraudulent activity or sanctions list matches, as required by applicable anti-money-laundering regulations.

HengHeng2 processes your personal data for the following specific and legitimate purposes:

1. Account Creation and Management: To create, maintain, and administer your HengHeng2 account, including authenticating your identity at login and managing account settings.
2. Service Delivery: To provide you with access to casino games, sports betting markets, live dealer tables, lottery products, and all other Platform features.
3. Transaction Processing: To process deposits and withdrawals in MYR via your chosen payment method (DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank), and to maintain accurate financial records.
4. KYC and Identity Verification: To verify your identity and age (21+ requirement) in compliance with applicable regulatory obligations and our internal anti-fraud policies.
5. Regulatory Compliance and AML: To detect, investigate, and report suspicious activity, including money laundering, fraud, and other financial crimes, as required under applicable law.
6. Responsible Gambling: To monitor gaming patterns, enforce self-exclusion requests, administer deposit limits and loss limits, and identify Players who may be at risk of problem gambling.
7. Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance via live chat, email, and WhatsApp.
8. Platform Security: To detect and prevent unauthorised access, fraud, bot activity, and other security threats to the Platform and its users.
9. Marketing Communications: To send you promotional offers, bonus notifications, CNY festive promotions, and platform updates — only where you have provided explicit consent or where permitted by applicable law. You may opt out at any time.
10. Platform Improvement: To analyse usage data, identify performance issues, and improve the design and functionality of the Platform for all users.

HengHeng2 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contract Performance: Processing is necessary to perform our contractual obligations to you as described in our Terms & Conditions — including account administration, payment processing, and game access.
• Legal Obligation: Processing is required to comply with applicable laws, including anti-money-laundering regulations, age verification requirements, and financial record-keeping obligations.
• Legitimate Interests: Processing is necessary for our legitimate business interests, including platform security, fraud prevention, and platform improvement, provided that such interests are not overridden by your rights and interests.
• Consent: Where we process data for direct marketing purposes or use non-essential cookies, we do so on the basis of your freely given and explicitly recorded consent. You may withdraw consent at any time without prejudice to the lawfulness of prior processing.

HengHeng2 does not sell, rent, or trade your personal data to third parties. We may share your data with the following categories of third parties strictly to the extent necessary for the purposes outlined in Section 5:

• Payment Service Providers: Processing partners such as DuitNow operators, FPX network participants, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong Bank receive the minimum data necessary to process your financial transactions.
• KYC and Identity Verification Providers: Approved identity verification service providers who assist in confirming the identity and age of registering Players in compliance with our regulatory obligations.
• Fraud Detection and AML Screening Services: Third-party risk management platforms that assist in identifying and preventing fraudulent activity and money laundering.
• Game Software Providers: The developers and operators of casino games, live dealer platforms, and sports betting engines hosted on HengHeng2 receive anonymised session data necessary to deliver their products. They do not receive your identity or financial data.
• IT Infrastructure and Cloud Service Providers: Hosting, cloud storage, and network security providers who process data on our behalf under binding data processing agreements.
• Legal and Regulatory Authorities: We may disclose personal data to law enforcement agencies, financial regulators, courts, or other governmental authorities where required to do so by law or in response to a lawful request.

8.1 HengHeng2's primary operations and data storage are hosted in secure facilities. Some of our third-party service providers — including certain game software providers and cloud infrastructure providers — may process data in jurisdictions outside Malaysia.

8.2 Where personal data is transferred outside the jurisdiction of collection, HengHeng2 takes appropriate steps to ensure that such transfers are conducted in compliance with applicable data protection law, including by relying on approved transfer mechanisms such as standard contractual clauses, adequacy decisions, or other appropriate safeguards.

8.3 By using the HengHeng2 platform, you acknowledge that your personal data may be transferred to and processed in countries outside Malaysia. We ensure that all such transfers are subject to the same level of data protection as described in this Policy.

9.1 HengHeng2 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Account Data (identity and contact information): Retained for the duration of the account relationship and for a period of five (5) years following account closure, to comply with AML and financial record-keeping obligations.
• Transaction Records: Retained for a minimum of seven (7) years from the date of each transaction, as required by applicable financial regulations.
• KYC Documents: Retained for five (5) years following account closure or the last transaction date, whichever is later.
• Gaming Activity Logs: Retained for a period of three (3) years from the date of the relevant session, to support dispute resolution and responsible gambling monitoring.
• Communication Records (live chat, email): Retained for two (2) years from the date of each communication, for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Retained for the duration of the marketing relationship and for three (3) years following opt-out, to demonstrate compliance with consent obligations.

9.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures.

10.1 HengHeng2 uses cookies and similar tracking technologies (collectively, "Cookies") to operate the Platform, improve user experience, and, where you have consented, to measure the effectiveness of our communications.

10.2 The following categories of Cookies are used on the Platform:

• Strictly Necessary Cookies: Essential to the functioning of the Platform — including session authentication, security tokens, and load balancing. These Cookies cannot be disabled without affecting Platform functionality and do not require your consent.
• Analytical / Performance Cookies: Used to understand how Players interact with the Platform — including page visit frequency, session duration, and error occurrence rates. This data is used in aggregate and anonymised form to improve Platform performance. These Cookies are deployed only with your consent.
• Preference Cookies: Used to remember your language preference, display settings, and other personalisation choices. Deployed only with your consent.

10.3 HengHeng2 does not deploy third-party advertising or tracking cookies that would allow external parties to build a profile of your browsing behaviour across the web.

10.4 You may manage your Cookie preferences at any time via your browser settings. Please note that disabling strictly necessary Cookies may impair your ability to use certain features of the Platform, including logging into your account.

Subject to applicable law and any overriding legal obligations (such as AML retention requirements), you have the following rights in relation to your personal data held by HengHeng2:

• Right of Access: You have the right to request a copy of the personal data HengHeng2 holds about you, along with information about how it is being processed. We will respond to verified access requests within 30 calendar days.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held by HengHeng2. You may update certain account details directly within your Account Settings; for other corrections, please contact our support team.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is otherwise unlawful — subject to any overriding legal retention obligations.
• Right to Restrict Processing: You may request that we restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to its processing.
• Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data based on our legitimate interests, including profiling for direct marketing purposes. Where you object to marketing processing, we will cease such processing immediately.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

12.1 HengHeng2 is strictly an adult platform. The minimum age requirement to register an account and use our Platform is 21 years of age. We do not knowingly collect personal data from any person under the age of 21.

12.2 If HengHeng2 becomes aware that personal data has been collected from a person under the age of 21 — through account registration, a parental complaint, or any other means — we will immediately suspend the relevant account, delete the collected data in accordance with our data disposal procedures, and report the matter to the appropriate regulatory authority if required.

12.3 Parents or guardians who believe that a minor may have created an account on HengHeng2 are encouraged to contact our support team immediately at [email protected]. We take underage gambling extremely seriously and will act swiftly to investigate and resolve any reported case.

13.1 HengHeng2 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption: All data transmitted between your device and the HengHeng2 Platform is encrypted using 256-bit TLS/SSL protocols. Personal data stored in our databases is encrypted at rest.
• Access Controls: Access to personal data is restricted to authorised HengHeng2 personnel on a strict need-to-know basis. All staff who have access to personal data undergo data protection training.
• Two-Factor Authentication (2FA): Available on all Player accounts to provide an additional layer of security against unauthorised login attempts.
• Firewalls and Intrusion Detection: Our infrastructure is protected by enterprise-grade firewalls, DDoS mitigation systems, and continuous intrusion detection monitoring.
• Regular Security Audits: We conduct regular internal and third-party security audits and penetration testing to identify and address potential vulnerabilities.
• Data Breach Response: In the event of a data breach that poses a risk to your rights and freedoms, HengHeng2 will notify affected individuals and the relevant supervisory authority within the timeframe required by applicable law.

13.2 While we take all reasonable steps to protect your personal data, no method of electronic transmission or storage is 100% secure. You are responsible for maintaining the security of your account credentials and for notifying us immediately of any suspected unauthorised access to your account.

14.1 The HengHeng2 Platform may contain references to third-party services and payment providers (including Maybank, CIMB, Public Bank, Hong Leong Bank, Touch 'n Go eWallet, Boost, and GrabPay). Where you are redirected to a third-party platform to complete a payment or verification, that third party's own privacy policy will govern the processing of your data within their systems.

14.2 HengHeng2 is not responsible for the privacy practices or content of third-party services. We encourage you to review the privacy policies of any third-party service provider whose platforms you access in connection with your use of HengHeng2.

15.1 HengHeng2 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. All amendments will be published on this page with an updated effective date.

15.2 Where amendments are material — that is, they significantly affect your rights or our obligations — we will provide notice to registered Players by email to their registered address at least seven (7) days prior to the revised Policy taking effect.

15.3 Your continued use of the HengHeng2 Platform following publication of a revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not agree to any amendment, you should cease using the Platform and contact us to request account closure.

If you have any questions, concerns, or requests in relation to this Privacy Policy or the processing of your personal data by HengHeng2, please contact our Data Protection team using the details below. Please note that contact details are provided for correspondence — email addresses are plain text and are not clickable links.

• Live Chat: Available 24 hours a day, 7 days a week via the HengHeng2 Platform in English, 中文, and Bahasa Melayu. Average response time: 3–5 minutes.
• Email (Data Protection Enquiries): [email protected] — please include "Privacy Request" in your subject line.

We will acknowledge receipt of your request within 3 business days and provide a substantive response within 30 calendar days of receiving a valid, verified request. For complex requests, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it.

For matters relating to our Terms of Service, please refer to our Terms & Conditions page. For responsible gambling support and self-exclusion tools, please visit our Responsible Gambling page.