Privacy Policy

1. Introduction

hijau888 ("we", "us", "our") operates the online gaming platform accessible at hijau888.co and any associated subdomains (the "Platform"). We act as the data controller in respect of personal data collected from users ("you", "User") of the Platform.

This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, with whom we share it, and what rights you have over your information. It applies to all interactions with the hijau888 Platform, including account registration, gameplay, deposits, withdrawals, and customer support communications.

By registering an account on hijau888 or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside the hijau888 Terms & Conditions, which incorporate the Privacy Policy by reference.

2. Personal Data We Collect

hijau888 collects personal data in several ways: directly from you when you register or interact with the Platform, automatically through your use of the Platform, and from third parties where permitted and necessary for our operations.

We do not collect sensitive personal data categories (such as health data or biometric data) unless specifically required and consented to for responsible gaming verification purposes in exceptional circumstances.

3. How We Use Your Personal Data

hijau888 uses personal data for the following purposes:

• Account Management: To create, verify, maintain, and administer your hijau888 account, including identity and age verification (21+ requirement enforcement).
• Service Provision: To process deposits and withdrawals, deliver gaming services, administer bonuses and promotions, and operate the VIP loyalty programme.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, money laundering, account takeover attempts, and collusion. Technical data and gameplay patterns are analysed for this purpose.
• Legal & Regulatory Compliance: To fulfil obligations under the licensing framework under which hijau888 operates, including anti-money laundering (AML) requirements, know-your-customer (KYC) obligations, and mandatory reporting requirements.
• Responsible Gaming: To monitor for indicators of problem gambling behaviour, administer self-imposed limits and exclusions, and comply with player protection requirements under our gaming licence.
• Customer Support: To respond to and resolve your queries, complaints, and dispute submissions.
• Platform Improvement: To analyse aggregate usage data and gameplay trends to improve the hijau888 Platform, optimise user experience, and inform game catalogue decisions.
• Marketing Communications: To send you promotional offers, bonus announcements, and platform updates where you have provided consent or where we have a legitimate interest. You may opt out of marketing communications at any time via account settings or by contacting support.

4. Legal Bases for Processing

hijau888 processes your personal data on the following legal grounds, depending on the purpose of processing:

• Contractual Necessity: Processing required to perform our obligations under the agreement formed when you register a hijau888 account — including account administration, payment processing, and service delivery.
• Legal Obligation: Processing necessary to comply with applicable law, including AML, KYC, licensing conditions, and mandatory regulatory reporting.
• Legitimate Interests: Processing where hijau888's legitimate business interests apply, including fraud prevention, security monitoring, responsible gaming monitoring, and aggregate analytics — provided those interests are not overridden by your data protection rights.
• Consent: Processing based on your explicit consent, primarily for direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing & Disclosure

hijau888 does not sell personal data to third parties. We disclose personal data only in the following circumstances:

• Payment Processors: We share financial data with payment service providers — including Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and Visa/Mastercard acquiring networks — to the extent necessary to process your transactions. Each provider handles data under its own privacy terms.
• Game Software Providers: Game session data may be transmitted to third-party game studios (such as Pragmatic Play, PG Soft, Evolution Gaming) solely for the purpose of delivering the relevant game service and generating RNG-certified outcomes.
• Identity Verification Services: KYC and age verification data is shared with certified third-party identity verification providers to fulfil regulatory obligations.
• Regulatory & Law Enforcement Authorities: We are legally obligated to report suspicious transaction activity to relevant authorities under applicable AML frameworks. We will disclose data to law enforcement agencies when required by valid legal process.
• Licensing Authority: Operational data may be disclosed to the licensing authority under which hijau888 operates as part of ongoing regulatory oversight and audit processes.
• Corporate Transactions: In the event of a merger, acquisition, or sale of business assets, personal data held by hijau888 may be transferred to a successor entity, subject to equivalent data protection commitments.

All third-party processors engaged by hijau888 are subject to contractual data processing agreements that require them to handle personal data only as instructed and to maintain appropriate security standards.

6. Cookies & Tracking Technologies

The hijau888 Platform uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies used are:

• Strictly Necessary Cookies: Required for the Platform to function — including session authentication, security tokens, and load balancing. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Store your preferences such as language settings, remembered username (if enabled), and responsible gaming notification preferences.
• Analytics Cookies: Aggregate, anonymised data about how users navigate the Platform — page views, session durations, feature usage — used to improve Platform performance. No personally identifying information is transmitted via analytics cookies.
• Fraud Prevention Cookies: Device fingerprinting and session integrity markers used to detect and prevent fraudulent activity, account takeover, and multi-accounting.

You may manage cookie preferences via your browser settings. Disabling strictly necessary cookies will impair your ability to use the hijau888 Platform, including logging in to your account. hijau888 does not use cookies to deliver third-party advertising.

7. Data Retention

hijau888 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention considerations:

• Active accounts: Personal data is retained for the duration of the account relationship plus any mandatory post-closure retention period required by applicable law or licensing conditions.
• Closed accounts: Identity, financial transaction, and KYC records are retained for a minimum of five (5) years from account closure, in accordance with anti-money laundering regulatory requirements applicable to our licensing jurisdiction.
• Self-excluded accounts: Self-exclusion records are retained indefinitely to ensure self-exclusion decisions are honoured and to prevent re-registration during exclusion periods.
• Marketing data: Retained until you withdraw consent or opt out of marketing communications, whichever is earlier.
• Technical logs: Server and access logs are retained for up to twelve (12) months for security and fraud investigation purposes.

Data that is no longer required is securely deleted or anonymised in a manner that prevents re-identification.

8. Data Security

hijau888 implements technical and organisational security measures proportionate to the risk associated with the personal data we process. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the hijau888 Platform.
• Encryption of sensitive data at rest, including financial data and identity documents stored for KYC purposes.
• Access controls limiting internal staff access to personal data on a need-to-know basis, with access logging and periodic access reviews.
• Password hashing and salting — plain-text passwords are never stored by hijau888 systems.
• Intrusion detection systems and continuous security monitoring of the Platform infrastructure.
• Regular third-party security assessments and penetration testing of the Platform.

No data transmission or storage system can be guaranteed to be 100% secure. In the event of a data breach that is likely to result in a high risk to your rights, hijau888 will notify affected users and relevant authorities in accordance with applicable notification obligations.

9. Your Data Rights

Subject to applicable law and regulatory constraints, you have the following rights in respect of personal data held by hijau888:

• Right of Access: You may request a copy of the personal data hijau888 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data in your hijau888 account.
• Right to Erasure: You may request deletion of personal data where it is no longer necessary for the purpose it was collected, subject to our legal retention obligations (particularly AML retention requirements that apply to gaming accounts).
• Right to Restriction: You may request that we restrict processing of your data in certain circumstances — for example, while a rectification request is under review.
• Right to Data Portability: You may request your personal data in a structured, machine-readable format where processing is based on consent or contractual necessity.
• Right to Object: You may object to processing based on legitimate interests, including profiling for marketing purposes. You may opt out of direct marketing at any time.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, submit a written request to [email protected] with your account username and a description of your request. We will acknowledge and respond within 30 days. Identity verification is required before we action any data rights request.

10. Children's Privacy

The hijau888 Platform is strictly restricted to individuals aged 21 years and above. We do not knowingly collect personal data from persons under 21 years of age. If we become aware that personal data has been collected from a person under 21, we will close the relevant account, delete the associated personal data to the extent permitted by applicable law, and report the matter as required.

If you have reason to believe that a minor has registered an account on hijau888, please notify us immediately at [email protected].

11. International Data Transfers

hijau888 operates internationally and may transfer personal data to third-party service providers located outside of Malaysia. Where such transfers occur, hijau888 takes steps to ensure that adequate safeguards are in place to protect the transferred data — including contractual data protection clauses with recipients.

Payment processing data transmitted to Malaysian payment providers (Touch n Go eWallet, Boost, Maybank2u, CIMB Clicks, Public Bank) is processed within Malaysia in accordance with each provider's own data policies and applicable Malaysian financial regulatory requirements.

12. Changes to This Privacy Policy

hijau888 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or Platform features. Material changes will be communicated to registered users by email and via a notice on the Platform prior to the updated Policy taking effect.

The current version of this Privacy Policy, with its effective date, is always accessible at hijau888.co/privacy-policy. Continued use of the Platform following the effective date of an updated Policy constitutes your acceptance of the changes.

13. Contact Us

For questions, concerns, or requests relating to this Privacy Policy or hijau888's data handling practices, contact us through the following channels:

• Email: [email protected] — for data rights requests, privacy queries, and formal complaints.
• Live Chat: Available 24/7 via the Platform for general privacy queries. For formal data rights requests, email is the required channel.

We aim to acknowledge all privacy-related enquiries within two (2) business days and to provide a substantive response within thirty (30) days of receiving a complete request.