Privacy Policy

01 Introduction

This Privacy Policy ("Policy") describes how Helo88 ("we", "us", "our", "Helo88") collects, uses, stores, discloses and protects personal information provided by users ("you", "User", "Player") who access or register on the platform located at https://helo88.casa and any associated subdomains or applications (the "Platform").

Helo88 takes your privacy seriously. We recognise that Malaysian users, whether in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya or Shah Alam, trust us with sensitive personal and financial information when they create an account and transact on the Platform. This Policy explains how that trust is honoured.

By registering an account, depositing funds or otherwise using the Platform, you confirm that you have read and understood this Policy and that you consent to the collection and processing of your personal information as described herein. If you do not agree to this Policy, please do not use the Platform.

This Policy should be read alongside the Helo88 Terms and Conditions and the Responsible Gambling Policy, both of which form part of the overall agreement governing your use of the Platform.

02 Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable individual, including name, contact details, identification numbers, financial data and online identifiers.
• "Processing" — any operation performed on Personal Data, including collection, recording, organisation, storage, retrieval, use, disclosure, erasure or destruction.
• "Data Controller" — Helo88, which determines the purposes and means by which Personal Data is processed.
• "Data Processor" — any third party that processes Personal Data on behalf of Helo88 under a contractual arrangement.
• "KYC" — Know Your Customer; the identity and age verification process applied to all Helo88 account holders.
• "Cookies" — small data files stored on your device when you access the Platform, used to enable functionality, measure performance and maintain security.
• "Consent" — a freely given, specific, informed and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose.

03 Data We Collect

Helo88 collects Personal Data through several channels during the course of your relationship with the Platform. The categories of data we may collect include:

04 Legal Basis for Processing

Helo88 relies on one or more of the following legal bases when processing your Personal Data:

05 How We Use Your Data

Helo88 uses the Personal Data we collect for the following purposes:

• To create, verify and maintain your account on the Platform.
• To process deposits and withdrawals through your selected payment method, which may include Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, or cryptocurrency wallets.
• To verify your identity and age (21+) as required under our licensing obligations and AML compliance programme.
• To personalise your experience on the Platform, including presenting content, promotions and loyalty rewards relevant to your activity profile.
• To monitor gameplay for signs of problem gambling behaviour and, where appropriate, to contact you with responsible gambling information or to apply protective restrictions.
• To detect, investigate and prevent fraudulent activity, collusion, bonus abuse, chargebacks and other prohibited conduct described in our Terms and Conditions.
• To send you transactional communications, including deposit confirmations, withdrawal notifications and account security alerts.
• To send you optional marketing communications about promotions, bonus offers and platform updates, where you have provided consent — you may withdraw consent at any time.
• To comply with applicable legal, regulatory and licensing obligations, including obligations to respond to lawful requests from regulatory or law enforcement authorities.
• To improve the Platform's performance, usability and security through aggregate analytical data.

06 Data Sharing and Disclosure

Helo88 does not sell, rent or trade your Personal Data to third parties for commercial marketing purposes. We may share your Personal Data with the following categories of recipients strictly to the extent necessary:

07 Cookies and Tracking Technologies

The Helo88 Platform uses cookies and similar tracking technologies to deliver core functionality, maintain session security and analyse aggregate usage patterns. The categories of cookies we use are:

• Strictly Necessary Cookies: Essential for the Platform to function. These cannot be disabled. They include session tokens, CSRF protection and login state management.
• Analytical / Performance Cookies: Used to measure how Users interact with the Platform in aggregate, helping us identify usability issues and improve the experience. Data collected is anonymised where technically feasible.
• Functional Cookies: Remember your preferences such as language choice, currency display and responsible gambling tool settings so that you do not need to re-enter them on each visit.
• Security Cookies: Support fraud detection by identifying unusual device fingerprints or access patterns that deviate from your established account behaviour.

You can manage or block non-essential cookies through your browser settings. Blocking strictly necessary cookies may impair the functionality of the Platform. Helo88 does not use third-party advertising cookies or retargeting pixel technologies on the Platform.

08 International Data Transfers

Helo88 operates under an international online gaming licence and may store and process your Personal Data on servers located outside Malaysia. Where Personal Data is transferred to a country that does not provide the same level of data protection as Malaysia, Helo88 will ensure that appropriate safeguards are in place, which may include:

• Standard contractual clauses approved by the relevant licensing authority;
• Binding corporate rules applicable to group entities;
• Adequacy decisions or equivalent international data transfer frameworks;
• Other legally recognised transfer mechanisms under applicable data protection law.

By using the Platform, you acknowledge that your data may be transferred to and processed in jurisdictions outside of Malaysia and that such transfers are governed by the safeguards described above.

09 Data Retention

Helo88 retains Personal Data only for as long as is necessary for the purpose for which it was collected, unless a longer retention period is required or permitted by applicable law or regulatory obligation. Indicative retention periods are as follows:

Upon expiry of the applicable retention period, Personal Data will be securely deleted, anonymised or pseudonymised in accordance with Helo88's internal data destruction procedures.

10 Security Measures

Helo88 implements technical and organisational measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction or disclosure. Our security controls include, but are not limited to:

• TLS / SSL Encryption: All data transmitted between your browser and our servers is encrypted using industry-standard TLS protocols. Look for the padlock icon in your browser address bar.
• Access Controls: Access to Personal Data within Helo88 is restricted on a need-to-know basis. Staff with access to sensitive data undergo training and are subject to confidentiality obligations.
• Password Hashing: Account passwords are stored using one-way cryptographic hashing. Helo88 staff cannot view your plaintext password.
• Two-Factor Authentication (2FA): You are strongly encouraged to enable 2FA on your account for an additional layer of security.
• Fraud Detection Systems: Automated systems monitor account activity for suspicious patterns, including unusual login locations, abnormal transaction volumes and device anomalies.
• Regular Security Reviews: Our Platform and infrastructure undergoes periodic security assessments by both internal and external reviewers.

While we take all reasonable steps to protect your data, no internet-based service can guarantee absolute security. You are also responsible for maintaining the confidentiality of your own login credentials. If you suspect that your account has been compromised, contact our support team immediately.

11 Your Rights

Subject to applicable data protection law and our legitimate interests (including compliance and fraud prevention obligations), you have the following rights in relation to your Personal Data held by Helo88:

• Right of Access: You may request a copy of the Personal Data we hold about you, together with information about how it is being processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data we hold. You may also update certain account details directly through your account profile settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where consent has been withdrawn and no other legal basis applies, or where the data has been processed unlawfully. Note that certain data must be retained for legal and regulatory compliance purposes even after a deletion request.
• Right to Restrict Processing: You may request that we temporarily restrict processing of your Personal Data while a correction or objection request is being assessed.
• Right to Data Portability: Where processing is based on consent or contract and is carried out by automated means, you may request a copy of your Personal Data in a structured, commonly used and machine-readable format.
• Right to Object: You may object to processing based on our legitimate interests, including profiling for direct marketing purposes. Where such an objection is made for marketing, we will cease processing for that purpose immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please contact us at [email protected] (plain text — not a clickable link) or via live chat. We will respond within 30 calendar days of receiving a verifiable request. We may ask you to confirm your identity before processing a request.

12 Children and Minors

The Helo88 Platform is strictly for individuals aged 21 years and above. We do not knowingly collect or process Personal Data from persons under the age of 21. If we become aware that an account has been registered by a minor, we will immediately close the account, forfeit any associated balance in accordance with our Terms and Conditions, and delete the Personal Data associated with that account as soon as practicable.

Parents and guardians are encouraged to maintain appropriate controls on devices and internet access to prevent minors from accessing gambling services. If you believe a minor has accessed the Platform using your account or a separate account, please contact our support team immediately.

13 Third-Party Links and Services

The Platform may contain references to payment methods and service providers (such as Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow and FPX) that are operated by independent third parties. While Helo88 takes care in selecting service providers, we are not responsible for the privacy practices or content of those third parties.

When you interact with a third-party payment provider's interface (for example, when authenticating a Touch 'n Go eWallet transaction), that interaction is governed by the privacy policy of the respective provider. Helo88 recommends that you review the privacy policies of all third-party services you engage with in connection with your use of the Platform.

14 Amendments to This Policy

Helo88 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements or Platform functionality. Where a material change is made, we will notify registered Users via the email address associated with their account or through a prominent notice on the Platform.

The date at the top of this Policy indicates when it was last revised. Your continued use of the Platform after the effective date of any amended Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you must stop using the Platform.

The current version of this Policy will always be accessible at https://helo88.casa/privacy-policy. We recommend reviewing this page periodically.

15 Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the way Helo88 processes your Personal Data, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the Platform interface. This is the fastest way to reach us.
• Email: [email protected] — please include "Privacy Request" in the subject line of your message. Displayed as plain text only.
• Languages: Support is available in English, Bahasa Melayu and Mandarin Chinese (中文).

We aim to acknowledge all privacy-related enquiries within 5 business days and to provide a substantive response within 30 calendar days. Complex requests involving data subject rights may require identity verification before we can proceed.