Privacy Policy hanabi88 — Malaysia Member Data Protection

1 Information We Collect

Hanabi88 collects various types of personal information from members for legitimate and transparent purposes. We only collect data necessary to provide you with the best service and to meet our legal compliance obligations. The categories of data we collect are as follows:

A. Information You Provide Directly

• Registration Information: Full name, date of birth, email address, mobile number, and preferred username.
• Identity Verification Documents (KYC): A copy of your MyKad, recent bank statement, or proof of current address is required to verify your identity before your first withdrawal.
• Financial Information: Payment method details used — including bank account name, partial account number (not full), or digital wallet ID — to securely process deposits and withdrawals.
• Communications: Any messages, complaints, or inquiries you submit to our support team via Live Chat or email.

B. Automatically Collected Information

• Technical Data: IP address, browser type and version, device operating system, screen resolution, and time zone.
• Usage Data: Pages visited, session duration, games played, login time and frequency.
• Device Data: A unique Device ID is assigned when you use the hanabi88 mobile app.
• Cookie Data: Session information and preferences stored via cookies to enhance your user experience.

2 How We Use Your Data

Every piece of data we collect has a clear and specific purpose. hanabi88 does not use your data for purposes beyond the stated scope without obtaining additional consent from you. The following is a detailed breakdown of how your data is used:

Hanabi88 does not use any fully automated decision-making system that could significantly affect your rights or interests without human intervention. Every important decision — including account suspension or withdrawal rejection — is reviewed by our team before being carried out.

3 Sharing Information with Third Parties

Hanabi88 takes great care when sharing members' personal information. We does not sell, rent, or disclose your data to third parties for marketing or commercial purposes. However, in certain limited situations, we may share your information with the following parties:

• Payment Service Providers: To process deposits and withdrawals, the necessary financial data is shared with trusted payment gateways such as DuitNow, Touch 'n Go, and our partner banks. All such providers are bound by strict confidentiality agreements.
• Game Software Providers: To grant you access to games from providers such as Pragmatic Play, Evolution Gaming, and others, minimal session information is required. These providers do not receive your financial information.
• Identity Verification Services: A certified third-party KYC platform is used to verify your identity documents securely and efficiently.
• Legal Authorities: We are required to disclose information when mandated by law, court order, or the relevant regulatory authority.
• Analytics Partners: Anonymised & aggregated data may be shared with analytics services to help us understand usage patterns and improve the platform.

4 Data Security

Protecting your personal data from unauthorized access, leaks, or misuse is hanabi88's highest priority. We continuously invest in security infrastructure to ensure your data remains safeguarded at all times. The security measures we implement include:

• 256-bit SSL Encryption: All communications between your browser and hanabi88 servers are encrypted using TLS 1.3 — the highest industry standard available.
• Two-Factor Authentication (2FA): Members are encouraged to enable 2FA to add an extra layer of protection to their account beyond just a password.
• Regular Security Audits: Our systems undergo independent third-party security audits every six months to identify and address any vulnerabilities.
• 24/7 Monitoring: Our security team monitors suspicious activity continuously around the clock and can take immediate action should any threat be detected.
• Internal Access Controls: Members' personal data is only accessible to staff who require it to perform their duties — the principle of least privilege is strictly observed.
• Secure Data Backup: Data is regularly backed up to secure, encrypted locations to ensure service continuity.

While we take all reasonable precautions, no system can be guaranteed 100% secure. In the event of a data breach that affects you, hanabi88 is committed to notifying you within 72 hours after we become aware of it, in line with international best practices.

5 Cookies & Tracking Technologies

Hanabi88 uses cookies and similar tracking technologies to enhance your experience, analyze website traffic, and deliver relevant content. The types of cookies we use are as follows:

• Essential Cookies: Required for core platform functions such as login, session security, and language preferences. These cookies cannot be disabled as they are critical to website operation.
• Performance Cookies: Collecting anonymous information about how you use our website — the most frequently visited pages, time spent, and pages that caused errors. This data helps us improve the platform.
• Functional Cookies: Remembering your preferences such as language, currency, and display theme settings to provide a more personalized experience.
• Analytics Cookies: Used by analytics tools to understand overall traffic patterns and user behaviour without identifying individuals.

You can control and manage cookie settings through your browser. Most modern browsers allow you to view, delete, or block cookies. However, disabling essential cookies may affect platform functionality. For guidance on managing cookies in your browser, please refer to your browser's help section.

6 Your Rights as a Member

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices, you have the following rights regarding your personal data held by hanabi88:

To exercise any of the above rights, please contact our privacy team via Live Chat within the platform or by email at [email protected]. We will process your request within seven (7) business days. In cases requiring additional identity verification, this period may be extended up to 14 business days.

7 Data Retention & Deletion

Hanabi88 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by Malaysian law. Our data retention guidelines are as follows:

• Active Account Data: Retained for the duration your account is active and used on a regular basis.
• Financial Transaction Data: Retained for a minimum of seven (7) years after the transaction occurs, in compliance with Malaysia's financial and tax legal requirements.
• KYC Documents: Retained for a minimum of five (5) years after account closure or the date the documents were submitted, whichever is later, in compliance with anti-money laundering requirements.
• Support Communication Logs: Retained for three (3) years for dispute resolution and service improvement purposes.
• Cookie & Session Data: Session cookies are deleted when you close your browser; persistent cookies expire according to the duration set within each cookie.
• Inactive Account: Account data that has been inactive for more than three (3) years will go through a review process and may be archived or deleted after notification has been sent to you.

When data is no longer needed and there is no legal obligation to retain it, hanabi88 will securely delete or anonymise that data using methods that ensure it cannot be recovered.

8 Children's Privacy

Hanabi88 is a platform strictly restricted to individuals who are of age 18 years and above. We do not knowingly collect, process, or store any personal information from children or minors.

If we find that personal data has been collected from individuals under 18 years of age without proper verification, we will take immediate action to delete that data and close the account in question. Parents or guardians who believe their child or dependent may have registered on this platform are urged to contact our support team immediately.

9 Privacy Policy Amendments

Hanabi88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. When significant amendments are made, we will:

• Displaying a clear notice on the platform's home page for at least 14 days before the amendments take effect.
• Sending a notification to your registered email address to inform you of key changes made.
• Updating the "Last Updated" date at the top of this document so you always know which version you are reading.
• Archiving older versions of this Privacy Policy for at least one year for your reference if needed.

Continued use of the hanabi88 platform after any amendments take effect constitutes your acceptance of the revised policy. If you disagree with any changes, you have the right to close your account and request deletion of your personal data following the procedure outlined in Section 6 above. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal information.

10 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact our dedicated privacy team through the following channels:

We are committed to addressing every inquiry seriously and professionally. Our Data Protection Officer team is always ready to help you understand your rights and ensure your personal data is managed in a proper, transparent, and fully accountable manner.