Official Data Protection Document

Privacy Policy H2M Online – Our Commitment to Protecting Malaysian Players' Data

Your privacy is not something we take lightly. This document explains in detail how h2m online collect, use, store and protect your personal data – as well as your rights as a player in controlling your own information.

Updated: January 2026 Bahasa Melayu (ms-MY) SSL 256-bit
No sale of data to third parties Full encryption of all transactions Your data access rights, anytime

Six H2M Online Data Protection Principles

This is the foundation of how we manage and protect the personal information of every Malaysian player at h2m online

256-bit SSL Encryption at All Times

All data transmitted between your device and our servers h2m online is protected by 256-bit SSL encryption – the same security standard used by leading banking institutions in Malaysia. This means your login credentials, personal data, and financial details cannot be read or intercepted by unauthorised parties during transmission.

No Sale of Data to Third Parties

H2m online does not sell, rent, or trade players' personal data to third parties for advertising, marketing, or any other commercial purpose. Your data belongs to you – we use it solely to provide platform services and process your transactions, not as a business commodity.

Minimum Necessary Data Collection

We only collect data that is strictly necessary to operate our services h2m online securely and responsibly. We only collect the minimum information necessary and continually assess whether each type of data has a clear and legitimate purpose. This "data minimisation" principle reduces the risks to your privacy.

Full Transparency in Data Use

We explain clearly and in plain language how each type of data we collect is used. There is no "hidden" data use or undisclosed secondary purposes beyond what is stated in this privacy policy. H2m online believes that players have the right to know exactly what happens with their information at all times.

Full Control in Your Hands

As a player h2m online, you have the right to access your personal data, request corrections to inaccurate information, apply for data deletion in certain circumstances, and withdraw consent for specific data processing activities. All such requests can be made through our support team, available 24/7.

Malaysian Legal Compliance

H2m online operates in compliance with applicable personal data protection laws in Malaysia, including the Personal Data Protection Act 2010 (PDPA). We conduct regular compliance reviews and continuously update our data protection practices to meet the current standards set by the relevant authorities.

Introduction – Why This Privacy Policy Matters to You

This Privacy Policy explains how we H2M Online ("we", "platform" or "h2m online") collects, uses, discloses, stores, and protects your personal information when you use our platform. This document applies to all registered players, users browsing our website, and anyone who interacts with our services h2m online in any capacity.

By registering an account or using the platform h2m online, you consent to our collection and use of your data as described in this document. If you have any questions about this privacy policy, please contact us via live chat 24/7 or by email at support@h2monline.net. We are committed to addressing every privacy-related enquiry with care and thoroughness.

1

Information We Collect

1.1 Information You Provide Directly

When you register an account at h2m online, we collect information you voluntarily provide, including your full name as per your MyKad, an active Malaysian phone number, a valid email address, your date of birth for age verification, and your e-wallet or banking account details for deposits and withdrawals. All of this information is required to activate and manage your account and to process financial transactions securely.

1.2 Automatically Collected Information

When you use the platform h2m online, our systems automatically record certain technical information for security and service improvement purposes. This includes your device's IP address, browser type and version, operating system, pages visited and time spent, your in-account game and betting history, as well as login session details including timestamps and approximate location.

Purpose of Automatic Data Collection: Automatically collected technical information is used solely for security purposes (detecting unauthorised login attempts), fraud prevention, technical troubleshooting, and platform performance improvements h2m online. We do not use this data to build personal profiles for marketing purposes without your consent.

1.3 Identity Verification Information (KYC)

In certain situations – particularly before processing large withdrawals or when there is a legal compliance requirement – h2m online may request additional identity verification documents such as a copy of your MyKad or passport, a recent bank statement, or proof of ownership of the e-wallet or bank account being used. These documents are stored in a secure system with strictly limited access and are used solely for identity verification and anti-money laundering compliance purposes.

1.4 Data Categories by Purpose

Data Category Example Information Primary Purpose
Identity Name, date of birth, MyKad Account verification & KYC
Contact Phone number, email Communications & notifications
Financial E-wallet & bank account Deposit & Withdrawal
Technical IP, device, browser Security & fraud prevention
Games Betting history, sessions Compliance & services
2

How We Use Your Information

2.1 Platform Service Provision

The primary purposes for which your data is used by h2m online is to provide the platform services you have requested – including managing your account, processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, or CIMB Clicks, processing withdrawal of winnings, and providing access to all games and betting on the platform.

2.2 Security & Fraud Prevention

Your technical data and transaction history are used by our security systems h2m online to detect and prevent fraudulent activity, money laundering, multiple account usage, and any form of platform abuse. This is to protect you and all other players from malicious activity that could compromise the integrity of the platform.

2.3 Legal Compliance

H2m online is responsible for complying with all applicable laws and regulations in Malaysia, including financial reporting requirements and anti-money laundering obligations. In fulfilling these legal responsibilities, we may need to retain certain transaction records for periods prescribed by law, or share information with the relevant authorities when required by a court order or a directive from a lawful authority.

2.4 Service Communications

We use your email address and phone number to send important account-related notifications such as deposit and withdrawal confirmations, security alerts, updates to our terms and policies, as well as promotional and bonus information (if you have consented to receiving marketing communications). You may unsubscribe from marketing communications at any time through your account settings at h2m online.

Regarding Marketing Communications: H2m online only send marketing communications to players who have given explicit consent during registration or through the communication preference settings in their account. You may opt out of all marketing communications at any time without affecting your access to the platform's services.

3

Data Sharing with Third Parties

3.1 Core Principle – No Data Selling

H2m online does not sell, rent, or disclose players' personal data to third parties for marketing, advertising, or any other commercial purpose without your explicit consent. This is a firm, non-negotiable commitment in the way we operate. Your data is not a commodity – it is information you have entrusted to us, and we respect that trust.

3.2 Authorised Service Providers

In the course of operating the platform, h2m online work with a number of trusted third-party service providers. These include payment service providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and banks offering FPX services, as well as gaming software providers that power our slots, baccarat, blackjack and Live Casino games. All service providers are bound by strict data protection agreements and are only permitted to use your data for the specific purposes relating to the services they provide for h2m online.

3.3 Legal Requirements & Authorities

In situations required by law or a valid court order, h2m online may be required to disclose player information to the relevant authorities in Malaysia. This includes financial crime investigations, anti-money laundering efforts, or compliance with directions from the relevant regulatory authorities. In such cases, we will disclose only the minimum information necessary and, to the extent permitted by law, will notify you of the disclosure.

  • Data is not shared with advertisers or third-party marketing companies
  • All service providers must sign a data protection agreement with h2m online
  • Disclosure to authorities is only made when required by law
  • No cross-border data transfers without adequate safeguards
  • Service providers are not permitted to use your data for purposes outside the scope of their services
4

Security & Data Protection

4.1 Technical Security Measures

H2m online implement multiple layers of technical security to protect player data. All data communications are protected by SSL 256-bit encryption. Player passwords are stored in a hashed format that is unreadable – even to our internal staff. Access to player data within our internal systems is restricted to personnel who genuinely require it to carry out their duties, and all access is logged and regularly audited.

4.2 Regular Security Audits

Platform h2m online undergo periodic independent security audits by accredited cybersecurity firms to identify and address any potential vulnerabilities. Penetration testing is conducted on a regular basis to simulate cyberattacks and assess the resilience of our systems. Findings from these audits are acted upon immediately to strengthen data protection.

4.3 Response to Data Breaches

While we take all reasonable precautions, no system can guarantee absolute protection against every cyber threat. In the event of a data breach affecting a player's personal information, h2m online is committed to notifying affected players promptly via their registered email and taking all necessary steps to minimise the impact of the breach. We will also report significant breaches to the relevant authorities in accordance with legal requirements.

Shared Responsibility: The security of your account is a shared responsibility. H2m online provides a robust security infrastructure, but you should also ensure your password is strong and unique, never share your login credentials with anyone, use a secure internet connection when accessing your account, and notify us immediately if you suspect any suspicious activity on your account.

5

Your Rights as a Player

As a player h2m online, you have the following rights regarding your personal data, in accordance with the Malaysian Personal Data Protection Act 2010 and the international best practices we voluntarily uphold:

Right of Access

You may request a copy of all personal data we hold about you at any time. We will provide this information in a readily readable format within 14 working days of receiving your request.

Right to Rectification

If you find that any personal information we hold about you is inaccurate or outdated, you have the right to request a correction. Please contact h2m online support with the details that need to be updated.

Right to Deletion

In certain circumstances, you may request the deletion of your personal data. Please note that some data may need to be retained for legal compliance purposes or while your account remains active.

Right to Withdraw Consent

You may withdraw consent for certain data processing activities – such as marketing communications – at any time, without affecting the core services of h2m online that you use.

Data Portability Rights

You have the right to receive your personal data in a machine-readable format (such as CSV or JSON) for personal use or to transfer to another platform should you choose to do so.

Right to Object

You have the right to object to the processing of your data for specific purposes, such as automated profiling. Please contact the h2m online support team to discuss this right in more detail.

How to Exercise Your Rights: To exercise any of the above rights, please contact the support team at h2m online via in-platform live chat 24/7 or by email at support@h2monline.net. Please state the specific right you wish to exercise along with any relevant details. We will verify your identity before processing your request to ensure no unauthorised party makes a request on your behalf. Most requests will be processed within 14 business days.

6

Cookies & Tracking Technologies

6.1 What Are Cookies and Why We Use Them

Cookies are small text files stored on your device when you visit the h2m online. It helps us recognise your device across different sessions, store your preferences, and ensure that certain features function correctly. Without cookies, many core platform functions such as automatic login and language settings would not work properly.

6.2 Types of Cookies Used

  • Essential Cookies: Required for core platform functions such as login session authentication and security. These cookies cannot be disabled without affecting platform functionality.
  • Performance Cookies: Collects information on how players use the platform to help us improve the user experience. All information is anonymised.
  • Preference Cookies: Stores your preferences such as language, display theme, and other settings so you do not have to reconfigure them each time you log in to h2m online.
  • Security Cookies: System support h2m online detect suspicious activity such as login attempts from unusual locations or unrecognised devices.

6.3 Managing Cookies

You can manage and delete cookies through your web browser settings. Most modern browsers allow you to view stored cookies, delete specific cookies, and set preferences for accepting or rejecting new ones. Please refer to your browser's help section for specific instructions. Note that removing or blocking essential cookies may affect your experience on the platform h2m online.

7

Data Retention & Deletion

7.1 Data Retention Period

H2m online retains your personal data for as long as your account remains active and for the required period following account closure to meet legal obligations, resolve any outstanding disputes, and enforce our agreements. Financial transaction records are typically kept for a minimum of 7 years in accordance with applicable Malaysian financial regulations.

7.2 Active Data Deletion

When data is no longer needed for the purpose it was collected and there is no legal obligation to retain it, h2m online will actively delete or anonymise the data in question. This is part of our commitment to the principle of "data minimisation" – we do not retain information for longer than necessary.

7.3 Account Deletion Requests by Players

If you close your account h2m online you and wish to request the deletion of your personal data, you may do so through our support team. We will delete all data that is eligible for deletion within 30 days of confirming your request, subject to any legal retention requirements that may prevent the full deletion of certain records.

Have Questions About Your Data? Data protection team h2m online is ready to help you understand your rights and process any requests relating to your personal data. Reach us via the in-platform 24/7 live chat or by email at support@h2monline.net. We are committed to responding to all privacy-related enquiries within 3 working days.

Changes to This Privacy Policy

H2m online reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, applicable legislation, or the way we conduct our business. Any material changes to this policy will be communicated to all members via email notification sent to your registered address at least 14 days before the changes take effect.

The "Last Updated" date at the top of this document reflects the date of the current version of this Privacy Policy. We encourage you to review this page periodically to ensure you are always aware of how h2m online protect your information.

If you do not agree with any changes made to this Privacy Policy, you have the right to close your account and request data deletion in accordance with the rights set out in Section 5 above. Continued use of the platform h2m online after the changes take effect will be considered acceptance of the updated Privacy Policy.

Privacy Commitment Summary

  • No sale of data to third parties
  • 256-bit SSL encryption on all transactions
  • Regular independent security audits
  • You can access your data at any time
  • You can request corrections to inaccurate data
  • Right to request deletion of personal data
  • Opt out of marketing at any time
  • Malaysia PDPA 2010 Compliance
  • Only the minimum necessary data is collected

Secure Payment Methods

All deposit and withdrawal transactions at h2m online are fully protected. Payment methods we support:

TNG eWallet GrabPay Boost ShopeePay DuitNow Maybank2u CIMB Clicks FPX

Contact Us About Privacy

Live Chat 24/7
Instant in-platform response
Email
support@h2monline.net
Response Time
Privacy enquiries answered within 3 business days
Your Data, Your Rights
You can access, correct, or delete your data at any time. Contact h2m online support or visit Terms & Conditions for full details.

Play at H2M Online with Complete Confidence

Now that you know how h2m online protect your privacy and personal data, create an account with complete peace of mind. Our platform is built from the ground up to ensure security, fairness and trust – so you can focus entirely on enjoying your gaming experience.

SSL 256-bit
Full encryption
No Data Selling
Privacy guaranteed
Deposit RM10
TNG, GrabPay & more
24/7 Support
In Bahasa Malaysia

By registering, you agree to the Terms & Conditions and this Privacy Policy. Please ensure you are 18 years of age or older. Play responsibly.

H2M Online Privacy Guarantee
Data stored on secure servers
Access is restricted, audited and monitored at all times
Malaysia PDPA 2010 Compliance
We operate in accordance with local data protection laws
Your right to access your data is absolute
Request, correct or delete your data at any time
Data breach notification within 72 hours
We will notify you if an incident occurs that affects your data
No marketing profiling without consent
You control who can contact you and for what purpose
Bahasa Melayu