Introduction
hhgg2 ("we", "us", "our", or "the Platform") operates the online casino and sports betting platform accessible at https://hhgg2.cam. We are committed to protecting the personal data of all individuals who interact with our Platform ("you", "User", or "data subject") in a manner consistent with applicable data protection standards.
This Privacy Policy applies to all personal data collected via the hhgg2 website, any associated mobile-optimised web application, and all direct communications between you and our support team. It describes our practices regarding the collection, use, storage, and disclosure of personal data, as well as the rights available to you as a data subject.
By registering an account, making a deposit, placing a wager, or otherwise using the hhgg2 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to our data practices as described herein. If you do not agree to the terms of this Privacy Policy, you must not use the Platform.
ℹ️ Scope of This Policy: This Privacy Policy covers data processed by hhgg2 in connection with your use of our Platform. It does not apply to third-party websites or services that may be linked from our Platform. We are not responsible for the privacy practices of any third-party operators.
Definitions
For the purposes of this Privacy Policy, the following terms shall have the meanings assigned below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial data, location data, and online identifiers. |
| "Processing" | Any operation performed on personal data, including collection, recording, organisation, storage, adaptation, retrieval, disclosure, or deletion. |
| "Data Controller" | hhgg2, being the entity that determines the purposes and means of processing your personal data. |
| "Data Processor" | Any third party that processes personal data on behalf of hhgg2, such as payment service providers, KYC verification vendors, and cloud hosting services. |
| "KYC" | Know Your Customer — the identity and address verification process required for account compliance and regulatory purposes. |
| "Cookies" | Small text files placed on your device by the Platform for functional, analytical, or preference-management purposes. |
| "Consent" | A freely given, specific, informed, and unambiguous indication by which you signify agreement to the processing of your personal data for a stated purpose. |
Data We Collect
hhgg2 collects personal data in the following categories, depending on the nature of your interaction with the Platform:
3.1 Registration & Identity Data
When you create an account, we collect: full legal name, date of birth, gender, Malaysian National Registration Identity Card (NRIC) number or passport number (for KYC purposes), residential address, nationality, and a valid email address. This data is required to establish your identity, verify your age eligibility (21+ minimum), and comply with our legal obligations.
3.2 Contact & Communication Data
We collect your email address and, where voluntarily provided, your mobile phone number. We also retain records of all communications between you and our support team — including live chat transcripts, email correspondence, and feedback submissions — for quality assurance, dispute resolution, and regulatory compliance.
3.3 Financial & Transaction Data
We collect details of all financial transactions conducted via your hhgg2 Wallet, including: deposit amounts and payment methods (e.g., Touch 'n Go eWallet, Boost, GrabPay, DuitNow, Maybank, CIMB, Public Bank, Hong Leong Bank, FPX, and cryptocurrency transactions); withdrawal requests, amounts, and destination account details; Wallet balance history; and bonus credits and redemption records. We do not store full payment card numbers. Cryptocurrency wallet addresses used for transactions are recorded for compliance purposes.
3.4 Gameplay & Wagering Data
We record all wagering activity on the Platform including game sessions, bet placements and outcomes, sports betting selections (including Liga Super Malaysia, EPL, and other markets), game history, and session durations. This data is used for account management, responsible gambling monitoring, fraud detection, and dispute resolution.
3.5 Technical & Device Data
We automatically collect certain technical information when you access the Platform, including: IP address, browser type and version, operating system, device type and unique device identifiers, time zone and language settings, and referring URL. This data is used to maintain Platform security, detect unusual access patterns, and improve the user experience.
3.6 KYC Verification Documents
To process withdrawal requests and comply with anti-money laundering (AML) obligations, we collect and retain copies of identity verification documents, including your NRIC or passport, proof of residential address (such as a utility bill or bank statement dated within 90 days), and any additional documents requested during enhanced due diligence procedures.
Data Processing & Legal Basis
hhgg2 processes personal data only where a valid legal basis exists. The principal legal bases on which we rely are as follows:
| Legal Basis | Application |
|---|---|
| Contractual Necessity | Processing required to perform the contract between hhgg2 and the User — including account management, payment processing, and customer support. |
| Legal Obligation | Processing required to comply with applicable AML obligations, age verification requirements, and regulatory record-keeping standards. |
| Legitimate Interests | Processing necessary for hhgg2's legitimate business interests, including fraud prevention, Platform security, and network analytics — provided such interests are not overridden by your fundamental rights. |
| Consent | Where consent is the basis for processing (e.g., direct marketing communications), you may withdraw your consent at any time by contacting our support team or adjusting your account notification preferences. |
How We Use Your Personal Data
Personal data collected by hhgg2 is used for the following purposes:
- Account Registration and Management: To create, verify, and administer your hhgg2 account, including KYC verification and ongoing account maintenance.
- Payment Processing: To facilitate deposits via local Malaysian payment methods (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX bank transfers) and cryptocurrency, and to process withdrawal requests to verified payment accounts.
- Gameplay and Wagering Services: To enable participation in casino games, sports betting on Liga Super Malaysia, EPL, UFC, and other markets, live dealer games, lottery, and all other Platform products.
- Responsible Gambling Compliance: To monitor wagering patterns, identify Users who may be experiencing gambling-related harm, apply and enforce deposit limits, session timers, and self-exclusion arrangements, and fulfil our responsible gambling obligations.
- Fraud Detection and Prevention: To identify and investigate suspicious activity, including multi-accounting, bonus abuse, AML red flags, and unauthorised access attempts.
- Customer Support: To respond to queries, resolve disputes, and maintain records of support interactions for quality assurance and training purposes.
- Legal and Regulatory Compliance: To maintain records required by applicable AML, KYC, and data protection regulations, and to respond to lawful requests from regulatory or law enforcement authorities.
- Platform Improvement: To analyse aggregate usage data, improve the user experience, optimise game performance, and develop new features tailored to the preferences of Malaysian players.
- Communications: To send transactional notifications (deposit confirmations, withdrawal updates, KYC status updates) and, where you have consented, promotional communications about hhgg2 offers and promotions.
Data Sharing & Disclosure
hhgg2 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection obligations:
6.1 Payment Service Providers
To process deposits and withdrawals, we share transaction-relevant data with our payment processing partners, including operators of FPX, DuitNow, and e-wallet integrations (Touch 'n Go eWallet, Boost, GrabPay), and cryptocurrency payment gateways. These providers act as Data Processors under binding data processing agreements and are not permitted to use your data for any purpose other than fulfilling their payment processing function.
6.2 KYC and Identity Verification Vendors
We engage third-party identity verification service providers to conduct KYC checks. These vendors receive only the minimum personal data required (typically a copy of your NRIC or passport and a selfie image) and are contractually bound to process it solely for the purpose of identity verification.
6.3 Regulatory and Law Enforcement Authorities
We may disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where we are required to do so by applicable law, court order, or regulatory direction. We will endeavour to notify you of such disclosures where legally permissible.
6.4 Cloud Infrastructure and IT Service Providers
Our Platform infrastructure is hosted on secure cloud servers. Our hosting and IT service providers process data on our behalf as Data Processors and are bound by data processing agreements that require them to maintain appropriate technical and organisational security measures.
✅ Our Data Sharing Commitment: hhgg2 will never sell your personal data. We will never share your data with third-party advertisers, data brokers, or external marketing platforms. Any data sharing arrangement is governed by a formal data processing agreement and limited strictly to what is necessary for the stated purpose.
Data Retention
hhgg2 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following indicative retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 7 years post-closure | AML regulatory obligation |
| KYC verification documents | Duration of account + 7 years post-closure | AML regulatory obligation |
| Transaction records | 7 years from transaction date | Financial record-keeping obligation |
| Gameplay and wagering logs | 3 years from last activity | Dispute resolution and audit |
| Support correspondence | 3 years from last interaction | Quality assurance and dispute resolution |
| Technical and device data | 13 months from collection | Security and fraud prevention |
| Marketing consent records | Until consent is withdrawn + 2 years | Consent evidence |
Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised in accordance with our internal data lifecycle management procedures.
Data Security
hhgg2 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:
- Encryption in Transit: All data transmitted between your browser and our servers is protected by 256-bit SSL/TLS encryption. Look for the padlock icon in your browser's address bar when using the Platform.
- Encryption at Rest: Sensitive personal data, including KYC document images and financial records, is stored in encrypted form on our servers.
- Access Controls: Access to personal data within hhgg2 is restricted on a strict need-to-know basis. Staff members are granted only the minimum data access required for their role and are subject to binding confidentiality obligations.
- Two-Factor Authentication: hhgg2 supports two-factor authentication (2FA) on all User accounts to reduce the risk of unauthorised account access.
- Regular Security Audits: We engage independent third-party security specialists to conduct periodic penetration testing and vulnerability assessments of our Platform infrastructure.
- Incident Response: We maintain a documented data breach response procedure. In the event of a security incident involving your personal data, we will notify affected Users and relevant authorities in accordance with applicable requirements.
⚠️ Your Responsibility: While hhgg2 implements robust security measures on our end, the security of your account also depends on your own practices. You are responsible for maintaining the confidentiality of your login credentials and for ensuring that you log out of the Platform when using shared or public devices. If you suspect your account has been compromised, contact our support team immediately.
Cookies & Tracking Technologies
hhgg2 uses cookies and similar tracking technologies to operate and improve our Platform. Cookies are small data files stored on your device when you visit the Platform. We use the following categories of cookies:
9.1 Strictly Necessary Cookies
These cookies are essential for the Platform to function and cannot be disabled without impairing core functionality. They include session cookies that maintain your login state, security tokens, and load-balancing identifiers. No consent is required for these cookies as they are operationally necessary.
9.2 Analytical Cookies
We use first-party analytical cookies to collect aggregated, anonymised data on how visitors interact with the Platform — including pages visited, session duration, error reports, and navigation flows. This data is used solely to improve Platform performance and user experience. Analytical cookies are deployed only where we have a legitimate interest in improving our services.
9.3 Preference Cookies
These cookies remember your language preferences, notification settings, and other personalisation choices so that you do not need to reconfigure them on each visit.
9.4 Cookie Management
You may manage your cookie preferences through your browser settings. Most modern browsers allow you to block, delete, or restrict cookies. Please note that disabling cookies may affect the functionality of certain parts of the Platform, including login persistence and session management. Instructions for managing cookies are available in your browser's help documentation.
Your Rights as a Data Subject
Subject to applicable data protection law, you hold the following rights in respect of the personal data that hhgg2 processes about you. To exercise any of these rights, please contact our support team via the details in Section 14 of this Policy.
Request a copy of all personal data we hold about you, along with information about how it is processed.
Request correction of inaccurate or incomplete personal data held in your account.
Request deletion of your personal data, subject to our legal retention obligations and regulatory requirements.
Request that we limit processing of your data in certain circumstances, e.g. while accuracy is contested.
Request your data in a structured, machine-readable format for transfer to another service provider where technically feasible.
Object to processing based on legitimate interests, including direct marketing, where your interests override ours.
Where processing is based on consent (e.g., marketing), withdraw that consent at any time without affecting prior lawful processing.
Lodge a complaint with the relevant data protection authority if you believe your data rights have been infringed.
hhgg2 will respond to verifiable data subject requests within a reasonable period of receipt. We may require proof of identity before processing any request to safeguard against unauthorised access. Please note that certain rights are subject to limitations where data retention is required by law — for example, we are unable to delete transaction records that we are legally required to retain.
Protection of Minors
The hhgg2 Platform is strictly intended for persons aged 21 years and above. We do not knowingly collect, store, or process personal data belonging to individuals under the age of 21. All new account registrations are subject to age verification as part of our KYC process.
If we discover or are notified that personal data belonging to a person under 21 has been collected through our Platform, we will take immediate steps to close the associated account, delete or anonymise the data, and return any deposited funds in accordance with our minor account closure procedure.
If you believe that a person under the age of 21 has created an account on hhgg2, please notify us immediately at [email protected] so that we can investigate and take appropriate action.
International Data Transfers
hhgg2's primary operations and data processing activities are configured with the security and privacy of Malaysian users in mind. Where personal data is transferred to or processed by third-party service providers (such as KYC verification vendors or cloud infrastructure providers) located outside Malaysia, we ensure that such transfers are subject to appropriate contractual safeguards, including data processing agreements that impose obligations equivalent to those applicable in Malaysia, to ensure your data remains protected regardless of where it is processed.
hhgg2 will not transfer your personal data to any country that does not offer an adequate level of data protection without first implementing appropriate contractual protections.
Amendments to This Privacy Policy
hhgg2 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. When material changes are made, we will notify registered Users via the Platform notification system or by email prior to the changes taking effect.
The "Last Updated" date displayed at the top of this page reflects the most recent revision. We encourage you to review this Privacy Policy periodically. Your continued use of the Platform following the effective date of any amendment constitutes your acknowledgement of the revised Privacy Policy. Prior versions of this Policy are available upon request by contacting our support team.
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy, or if you wish to exercise any of your data subject rights, please contact the hhgg2 Data Protection team using the following details. All contact information is provided as plain text only — these are not clickable links.
- Support and Privacy Enquiries Email: [email protected]
- Live Chat: Available 24 hours a day, 7 days a week via the Platform
- Response Commitment: Privacy-related queries acknowledged within 24 hours; substantive responses within 30 calendar days
- Support Languages: English, Bahasa Melayu, and Chinese (Mandarin / Cantonese)
When submitting a data subject request, please provide your registered email address and a brief description of your request to help us process it efficiently. We may request additional identity verification before actioning any request.
✅ Our Commitment to You: At hhgg2, your privacy is not an afterthought — it is a foundational principle of how we build and operate our Platform. We are committed to being transparent about our data practices, responsive to your requests, and accountable for how we handle your personal information.