Privacy Policy haha69 — Your Personal Data Protection

01 Introduction & Scope of This Policy

This Privacy Policy ("Policy") describes how haha69 ("we", "Platform") collects, uses, processes, stores and protects your personal data when you use our website, mobile app and all services we offer.

This Policy applies to all users and registered members of the haha69 platform, including those who browse the website without creating an account. By continuing to use our platform, you agree to the data processing practices as described in this Policy.

This Privacy Policy is to be read together with Terms and Conditions us and forms part of the service agreement between you and haha69.

02 Personal Data We Collect

Haha69 collects your personal data through several means — directly from you during registration or platform use, automatically via tracking technologies, and in certain cases from legitimate third-party sources.

Data you provide directly:

• Full name, date of birth, gender and national identification number (MyKad) or passport.
• Email address, mobile number and residential address.
• Bank account details, e-wallet account numbers (Touch 'n Go, DuitNow) and payment card details.
• Identity verification documents for the KYC process such as copies of MyKad, utility bills or bank statements.
• Any information you share when contacting our customer support team.

Data collected automatically:

• IP address, browser type and device operating system.
• Game session data including games played, bets placed and results.
• Login data, transaction records and account activity history.
• Cookie and similar tracking technology information.
• Approximate location data based on your IP address.

03 How We Use Your Personal Data

Haha69 only uses your personal data for purposes that are lawful, relevant, and proportionate to actual needs. The following are the primary purposes for which your data is used:

• Account Management: Creating, verifying and managing your member account, including the login process and account security.
• Transaction Processing: Processing deposits, withdrawals and any financial transactions you carry out on the platform.
• Legal Compliance: Meeting KYC requirements, anti-money laundering (AML) obligations and reporting to relevant authorities as required under Malaysian law.
• Platform Security: Detecting and preventing fraud, account abuse, bot activity and other security threats.
• Customer Support: Handling enquiries, complaints and assistance requests you submit to our support team.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and offering appropriate control tools.
• Service Communications: Sending important notifications related to your account, transactions and policy updates.
• Platform Improvements: Analysing aggregated usage data to improve the platform's functionality, design and user experience.

04 Sharing & Disclosing Information

Haha69 does not sell your personal data. We only share your information in limited and specific situations as follows:

• Trusted Service Providers: We share necessary data with payment providers, licensed game providers and technology service providers that assist us in operating the platform. All such third parties are bound by strict confidentiality agreements.
• Legal Requirements: We will disclose your data to government authorities, law enforcement agencies or regulatory bodies when required by law or a valid court order.
• Rights Protection: We may disclose information as necessary to protect the rights, property or safety of haha69, our members or the public from serious threats.
• With Your Consent: In situations other than those stated above, we will only share your data with your explicit consent.

05 Data Storage & Security Measures

The security of your personal data is haha69's highest priority. We implement a range of technical and organisational security measures to protect your information from unauthorised access, loss or damage.

Technical security measures we employ:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Password storage using irreversible one-way hashing methods.
• Multi-layer firewall system and intrusion detection system (IDS).
• Internal network segmentation and role-based access control (RBAC) for staff.
• Regular security audits by independent third parties and penetration testing.
• Two-factor authentication (2FA) is available for all member accounts.

Data Retention Period:

Haha69 retains your personal data for as long as necessary to fulfil the purposes stated in this Policy or as required by Malaysian law. Generally, transaction and account records are kept for a minimum of 7 years to meet AML compliance and tax law requirements. Once the retention period expires, your data will be securely deleted or anonymised.

06 Cookies & Tracking Technologies

Haha69 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device by your web browser.

Types of cookies we use:

• Essential Cookies: Required for basic platform functions such as login, session security and navigation. These cookies cannot be disabled as the platform will not function without them.
• Performance Cookies: Collecting information about how you use our platform (e.g. most frequently visited pages) to help us improve it. This data is collected in aggregate and anonymised form.
• Functional Cookies: Remembering your preferences such as language, display settings and login details to deliver a more personalised experience.
• Security Cookies: Helping detect and prevent fraudulent activity and protecting your account from unauthorised access.

You may manage or delete cookies through your browser settings at any time. However, disabling certain cookies may affect the functionality of our platform.

07 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data that haha69 is committed to respecting.

To exercise any of the rights above, please contact our support team via live chat or official email. We will process your request within 21 business days. In more complex cases, this period may be extended up to 60 days with written notice to you.

08 Children's Data & Protection of Young Users

The haha69 platform is strictly for individuals aged 18 and above only. We do not knowingly collect personal data from children or minors under the age of 18.

If you believe your child or someone under the age of 18 has provided personal data to haha69, please contact our support team immediately. We will take the appropriate steps to delete such information and close the associated account promptly.

09 Links to Third-Party Sites & Services

The haha69 platform may contain links or integrations with third-party services such as game providers and payment gateways. This Privacy Policy applies solely to the haha69 platform and does not cover the privacy practices of those third parties.

Haha69 is not responsible for the privacy practices or content of any third-party websites or services. We encourage you to read the privacy policy of each third party you interact with through our platform.

All third-party service providers we work with are carefully selected and contractually required to comply with the security and privacy standards set by haha69.

10 Changes to This Privacy Policy

Haha69 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or service improvements. The "Updated" date at the top of this document will always indicate the latest version.

For significant changes, we will notify you via in-platform notifications or email at least 14 days before the changes take effect. Your continued use of the haha69 platform after any policy changes take effect constitutes your acceptance of those changes.

We encourage you to review this page from time to time to ensure you are always informed about how we protect your personal data.

11 Contact Us Regarding Privacy

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, please contact us through the following channels:

You may also visit the FAQ us for answers to frequently asked questions about privacy and account security. For more information on responsible gaming, please visit the Responsible Gaming us.