hpm99 Privacy Policy

hpm99 (referred to herein as "hpm99", "we", "us", or "our") operates the online casino and sports betting platform accessible at https://hpm99.cam. We are committed to protecting the privacy and personal data of all individuals who interact with our Platform, including registered players, prospective users, and visitors.

This Privacy Policy (hereinafter "Policy") describes in detail how hpm99 collects, uses, stores, shares, and protects personal information in connection with the operation of the Platform and the provision of our services. It applies to all personal data processed by hpm99 in connection with your use of the Platform, regardless of how you access it — whether via desktop browser, mobile browser, or any other device.

hpm99 primarily serves players based in Malaysia, including those located in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and across the country. We process personal data in connection with Malaysian Ringgit (MYR) transactions and the local payment methods we support, including Touch 'n Go eWallet, DuitNow, FPX, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong Bank. This Policy governs all such data processing activities.

By registering an account with hpm99, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you should discontinue use of the Platform immediately.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including names, identity numbers, contact details, financial information, and online identifiers such as IP addresses.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, or deletion.
• "Data Controller" means hpm99, the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Subject" means any individual whose Personal Data is processed by hpm99 — in practice, this means registered players and Platform visitors.
• "Platform" means the hpm99 website at https://hpm99.cam, including all associated pages, services, and features.
• "KYC" means Know Your Customer — the identity and age verification process applied to all registered accounts.
• "Cookies" means small data files placed on your device by the Platform for the purposes of session management, analytics, and functionality.
• "Third Party" means any natural or legal person, other than hpm99 and the Data Subject, who processes Personal Data on behalf of or in connection with hpm99.

hpm99 collects Personal Data through several channels in the course of providing the Platform and its services. The categories of data we collect, and the circumstances in which we collect them, are set out below.

3.1 — Data You Provide Directly

When you register an account, use our services, or contact our support team, you may provide us with the following:

3.2 — Data Collected Automatically

When you access the Platform, we automatically collect certain technical data including:

• IP address and approximate geographic location derived therefrom.
• Device type, operating system, and browser type and version.
• Pages visited, session duration, clickstream data, and referring URLs.
• Wagering activity including games played, bet amounts, win/loss records, and session timestamps.
• Login timestamps, account activity logs, and security event records.

3.3 — Data from Third Parties

We may receive Personal Data about you from third-party payment processors (e.g., confirmation of DuitNow or FPX transaction status from your bank), identity verification service providers used during KYC, and fraud detection and anti-money laundering screening services. Such data is used solely for the purposes described in this Policy.

hpm99 uses the Personal Data we collect for the following purposes:

• Account Management: To create, maintain, and administer your player account, including processing registrations and managing account settings.
• Service Delivery: To provide access to casino games, sports betting markets, live dealer tables, and all other features of the Platform.
• Payment Processing: To process deposits and withdrawals via your chosen payment method, including Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, and other supported channels.
• Identity & Age Verification (KYC): To verify that you meet the minimum age requirement of 21 years and to confirm your identity in accordance with our obligations and responsible gambling commitments.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, money laundering, account takeover, and other Prohibited Activities as defined in our Terms and Conditions.
• Legal & Regulatory Compliance: To comply with applicable legal obligations, respond to lawful requests from authorities, and maintain records as required.
• Customer Support: To respond to your queries, process complaints, and provide assistance via live chat or email.
• Platform Improvement: To analyse usage patterns, identify technical issues, and improve the features, performance, and design of the Platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates by email, where you have consented to receive such communications. You may withdraw this consent at any time by contacting our support team.
• Responsible Gambling: To monitor wagering activity for signs of problem gambling, enforce deposit limits, and apply self-exclusion measures where requested or required.

hpm99 processes Personal Data only where a valid legal basis exists for doing so. The primary legal bases on which we rely are as follows:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and hpm99 (i.e., our Terms and Conditions). This covers account creation, payment processing, and service delivery.
• Legal Obligation: Processing is necessary to comply with applicable legal and regulatory requirements, including KYC/AML obligations, financial record-keeping requirements, and responses to lawful authority requests.
• Legitimate Interests: Processing is necessary for the legitimate interests of hpm99, provided those interests are not overridden by your rights and interests. This covers fraud prevention, security monitoring, platform analytics, and responsible gambling monitoring.
• Consent: For processing activities that are not covered by the above bases — in particular, the sending of direct marketing communications — we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

hpm99 does not sell, rent, or trade your Personal Data to any third party for their own commercial purposes. We may share your data only in the following limited circumstances:

6.1 — Service Providers

We engage third-party service providers who process Personal Data on our behalf and under our instruction for specific operational purposes. These include payment processors (such as banks and e-wallet operators facilitating DuitNow, FPX, Touch 'n Go, Maybank, CIMB, and Public Bank transactions), identity verification and KYC service providers, anti-fraud and AML screening providers, cloud infrastructure and data hosting providers, and customer support technology providers. All such providers are bound by contractual obligations to handle your data securely and only for the purposes we specify.

6.2 — Legal & Regulatory Disclosure

hpm99 may disclose your Personal Data to law enforcement agencies, regulatory authorities, courts, or other competent governmental bodies where we are required or permitted to do so by applicable law, or where such disclosure is necessary to protect the rights, property, or safety of hpm99, our players, or the public.

6.3 — Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or a portion of hpm99's assets, your Personal Data may be transferred as part of that transaction. We will provide reasonable notice of any such transfer and the privacy protections applicable to your data will remain consistent with this Policy.

hpm99 uses cookies and similar tracking technologies on the Platform to enhance your experience, maintain session integrity, and collect usage analytics. The following categories of cookies may be set when you access the Platform:

You may configure your browser to refuse or delete cookies at any time. However, disabling strictly necessary cookies will impair your ability to log in and use core features of the Platform. Analytics and functional cookies can be disabled without affecting core functionality.

hpm99 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention period required or permitted by applicable law or regulation. Our general retention principles are as follows:

• Active Accounts: Personal Data associated with an active player account is retained for the duration that the account remains open and active.
• Closed Accounts: Following account closure, hpm99 retains core account data (identity, contact, and transaction records) for a minimum period as required by applicable financial regulations and AML obligations. This period is typically five (5) to seven (7) years from the date of account closure.
• KYC Documents: Identity documents and verification records are retained for a minimum of five (5) years from the date of collection or the date of the last transaction, whichever is later.
• Transaction Records: Financial transaction records including deposit and withdrawal history are retained for regulatory purposes for a minimum of five (5) years.
• Support Communications: Customer support records and live chat transcripts are retained for a period of three (3) years from the date of the interaction.
• Marketing Consent Records: Records of marketing consent are retained for as long as necessary to demonstrate compliance and for a reasonable period thereafter.

Upon expiry of the applicable retention period, hpm99 will securely delete or anonymise the relevant Personal Data in accordance with our internal data governance procedures.

hpm99 implements a comprehensive set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes the following measures:

• Encryption: All data transmitted between your browser and the Platform is encrypted using 256-bit SSL/TLS protocols. Sensitive data at rest, including financial information and identity documents, is stored using industry-standard encryption.
• Access Controls: Access to Personal Data is restricted on a need-to-know basis. Staff with access to player data are subject to confidentiality obligations and receive data protection training.
• Two-Factor Authentication: Players are encouraged to enable two-factor authentication (2FA) on their accounts to prevent unauthorised access.
• Security Audits: hpm99 conducts periodic security audits and vulnerability assessments of the Platform infrastructure.
• Incident Response: hpm99 maintains an internal data breach response procedure. In the event of a personal data breach that is likely to result in a high risk to your rights, we will notify you as required by applicable law.

You have the following rights in relation to the Personal Data hpm99 holds about you. To exercise any of these rights, please contact our support team using the details in Section 14 below. We will respond to all verified requests within a reasonable timeframe in accordance with applicable data protection law.

The hpm99 Platform is strictly intended for persons aged 21 years and above. hpm99 does not knowingly collect, process, or store the Personal Data of individuals under the age of 21. Our KYC verification process is specifically designed to confirm the age eligibility of all registered players.

If we become aware that Personal Data has been collected from an individual who is under the age of 21, we will take immediate steps to delete that data and close the associated account. Any deposits made by an underage account holder will be returned after deduction of any bonus credits.

The hpm99 Platform does not include links to third-party websites, social media platforms, or external services that could collect Personal Data independently. All content on the Platform is hosted and controlled by hpm99. If the Platform is ever updated to include links to third-party sites for reference purposes, this Policy will be updated accordingly and users will be made aware that hpm99 is not responsible for the privacy practices of any third-party website.

Third-party payment processors (such as banks processing DuitNow or FPX transactions, or e-wallet operators such as Touch 'n Go eWallet, Boost, and GrabPay) operate under their own privacy policies. hpm99 shares only the data necessary to process your payment with such processors and is not responsible for the independent data practices of those providers.

hpm99 reserves the right to update or modify this Privacy Policy at any time in response to changes in applicable law, our data processing practices, or the features and services offered on the Platform. When material changes are made, we will provide reasonable advance notice by posting a prominent notice on the Platform and, where practicable, sending a notification to the email address associated with your account.

The "Last Updated" date at the top of this Policy will be revised each time it is amended. Your continued use of the Platform following the publication of an updated Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically to remain informed about how we protect your data.

The current version of this Privacy Policy is always available at https://hpm99.cam/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your Personal Data by hpm99, please contact our Data Protection team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week on the Platform. Our support agents can handle general privacy queries and direct complex data rights requests to the appropriate team.
• Email: [email protected] — For formal data rights requests, please use the subject line "Data Rights Request". We aim to acknowledge all privacy-related emails within 5 business days.

hpm99 serves players across Malaysia including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and nationwide. Our support team is available in English at all times. For questions about our Terms of Service, please visit our Terms & Conditions page.