Privacy Policy

This Privacy Policy ("Policy") is issued by Hongbet ("Hongbet", "we", "us", "our") and applies to all personal data collected, processed, and stored in connection with your use of the Hongbet platform accessible at hongbet.cam, including all associated services, account features, games, sports betting markets, and customer support channels.

Hongbet is committed to protecting the privacy and personal data of all users, with particular regard to the expectations and regulatory environment applicable to Malaysian players. This Policy describes our data processing practices in plain, accessible language — not to obscure our obligations, but to make them genuinely understandable.

By registering an account on the Hongbet platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy forms part of and should be read alongside Hongbet's Terms & Conditions.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, telephone number, identification document number, IP address, and payment details.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, transfer, or deletion.
• "Data Controller" means Hongbet, as the entity that determines the purposes and means of processing your personal data.
• "Data Processor" means any third-party service provider that processes personal data on behalf of Hongbet, under contractual instruction.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for a stated purpose.
• "User" / "Player" / "you" means any individual who registers for or uses a Hongbet account.
• "KYC" means Know Your Customer — the identity and age verification process conducted prior to processing withdrawals or where otherwise required by Hongbet's licensing obligations.
• "Cookies" means small text files placed on your device by the Hongbet platform to facilitate session management, analytics, and personalisation.

Hongbet collects personal data across several categories, depending on how you interact with our platform. The table below summarises the primary data types collected and their associated purposes.

Hongbet does not collect sensitive categories of personal data (such as health information, political opinions, or racial/ethnic origin) except where strictly necessary for responsible gambling monitoring purposes and where you have provided explicit consent or it is required by our duty-of-care obligations.

Hongbet collects personal data through the following channels and mechanisms:

4.1 Direct Collection

• Information you provide when registering your Hongbet account, including name, date of birth, email address, and Malaysian mobile number.
• Identity documents, selfie images, and address verification documents submitted during the KYC process.
• Payment details entered when making deposits via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, RHB, or cryptocurrency channels.
• Communications you initiate with Hongbet's customer support team via Live Chat, email, or WhatsApp.
• Responses to surveys, promotions, or feedback forms where you choose to participate.

4.2 Automated Collection

• Technical and usage data collected automatically when you access and use the Hongbet platform, including IP address, device identifiers, browser information, session duration, and in-platform navigation patterns.
• Betting and gaming activity data generated as a result of your use of the sports betting, live dealer, slot, and other gaming services.
• Cookie and similar tracking technology data as described in Section 8 of this Policy.

4.3 Third-Party Sources

• Identity verification data from third-party KYC service providers used to validate documents and confirm identity against authoritative databases.
• Fraud screening signals from third-party anti-fraud and AML compliance services.
• Public records and sanction screening databases as part of our regulatory compliance obligations.

Hongbet processes personal data only where a valid legal basis exists. The applicable legal bases for our data processing activities are as follows:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions you agree to when creating a Hongbet account — including account management, payment processing, bet settlement, and customer support.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC identity verification, AML screening, age verification, and regulatory reporting obligations.
• Legitimate Interests: Processing conducted for purposes that serve Hongbet's or our players' legitimate interests, where those interests are not overridden by your fundamental rights and freedoms — including fraud prevention, platform security, responsible gambling monitoring, and business analytics for service improvement.
• Consent: Processing for purposes where you have provided specific, informed consent — including receiving promotional communications and participating in optional features. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Hongbet uses the personal data we collect for the following purposes:

• Account Management: Creating, maintaining, and administering your Hongbet account, including processing logins, managing account settings, and maintaining your account balance and transaction history.
• Payment Processing: Processing deposits and withdrawals through Malaysian payment channels including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and direct bank transfers with Maybank, CIMB, Public Bank, Hong Leong, and RHB.
• Identity & Age Verification: Conducting KYC checks to verify your identity, confirm you are aged 21 or above, and confirm your eligibility to use the Hongbet platform.
• Fraud Prevention & Security: Detecting and preventing unauthorised account access, suspicious transactions, bonus abuse, multi-accounting, and other forms of fraud or platform manipulation.
• Regulatory Compliance: Meeting our obligations under applicable licensing conditions, including AML screening, sanctions checking, and regulatory reporting.
• Responsible Gambling: Monitoring player activity for indicators of problem gambling behaviour and, where appropriate, intervening through our responsible gambling tools and support processes.
• Customer Support: Responding to support enquiries, resolving account issues, processing complaints, and maintaining records of support interactions for quality assurance purposes.
• Platform Improvement: Analysing aggregated usage data to improve platform performance, game selection, payment processing efficiency, and overall user experience.
• Promotional Communications: Where you have opted in, sending you relevant promotional offers, bonus notifications, and Hongbet news via email or messaging channels.
• VIP & Loyalty Programme: Calculating your monthly turnover for the purpose of VIP tier qualification and administering associated tier benefits, including cashback, birthday bonuses, and account manager assignments.

Hongbet does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the following circumstances, and only to the extent necessary for each purpose:

7.1 Payment Processors

Transaction data is shared with Malaysian payment service providers — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow operators, FPX-connected banking institutions (Maybank, CIMB, Public Bank, Hong Leong Bank, RHB), and cryptocurrency exchange facilitators — solely for the purpose of processing your deposits and withdrawals.

7.2 KYC & Identity Verification Providers

Identity documents and verification data are shared with licensed third-party KYC service providers under contractual data processing agreements. These providers are engaged solely for the purpose of identity verification and are prohibited from using your data for any other purpose.

7.3 Fraud & AML Screening Providers

Certain transactional and identity data may be processed by anti-fraud and AML compliance screening services to fulfil our regulatory obligations. These services operate under strict data processor agreements and access only the minimum data necessary for their specific screening function.

7.4 Regulatory Authorities

Hongbet may be required to disclose personal data to licensing regulators, law enforcement agencies, financial intelligence units, or other competent authorities where required by law, court order, or applicable regulatory obligation. Such disclosures are made only to the extent required by the specific legal obligation.

7.5 Business Transfers

In the event that Hongbet undergoes a business sale, merger, acquisition, or restructuring, personal data held in connection with player accounts may form part of the transferred assets, subject to appropriate confidentiality protections and notification to affected players where required.

Hongbet uses cookies and similar tracking technologies to operate the platform effectively, maintain your login session, remember your preferences, and analyse how players use the platform so we can continue improving it.

8.1 Types of Cookies Used

• Essential Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your visit. These cannot be disabled without affecting core platform functionality.
• Functional Cookies: Remember your settings and preferences — such as language selection and display preferences — to personalise your experience across sessions.
• Analytics Cookies: Collect aggregated, anonymised data about how players navigate and use the platform, helping us identify areas for improvement. These do not identify you individually.
• Security Cookies: Support fraud detection and account security functions, including identifying unusual login patterns or suspicious session behaviour.

8.2 Managing Cookies

You may manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling essential cookies will impair your ability to use the Hongbet platform, including maintaining your login session. Disabling analytics or functional cookies will not affect your access to the platform's core features.

Hongbet retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account Data: Retained for the duration of your active account relationship with Hongbet, plus a minimum of 5 years following account closure to meet licensing and AML regulatory retention requirements.
• KYC Documentation: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later, in compliance with applicable AML obligations.
• Transaction Records: Retained for a minimum of 5 years from the transaction date, or longer where required by applicable financial regulation.
• Customer Support Communications: Retained for a minimum of 3 years from the date of the interaction, or longer where the communication relates to an unresolved dispute or ongoing investigation.
• Marketing Preferences: Retained until you withdraw consent or request deletion, subject to any overriding retention obligations.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identified individual. Anonymised, aggregated data may be retained indefinitely for statistical analysis and platform improvement purposes.

Hongbet implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit TLS/SSL encryption for all data transmitted between your device and Hongbet's servers;
• Encryption of sensitive data fields at rest in our database infrastructure;
• Access controls limiting employee access to personal data on a strict need-to-know basis, with all access logged and audited;
• Regular security assessments and penetration testing of platform infrastructure;
• Two-factor authentication options for player accounts;
• Automated anomaly detection systems monitoring for unusual login activity or suspicious account behaviour;
• Data processor agreements with all third-party service providers requiring equivalent security standards.

While Hongbet takes these precautions seriously, no digital platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying Hongbet immediately if you suspect unauthorised access to your account.

As a data subject, you hold the following rights in respect of your personal data held by Hongbet. To exercise any of these rights, please contact our support team using the details provided in Section 15. We will acknowledge all data subject requests within 7 business days and provide a substantive response within 30 days, unless the complexity of the request requires an extension (which will be communicated to you).

• Right of Access: You have the right to request confirmation of whether Hongbet holds personal data about you, and to receive a copy of that data in a readable format (a "Subject Access Request").
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data held about you. You may update certain account information directly through your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where consent has been withdrawn, or where processing was unlawful. This right is subject to overriding legal retention obligations (see Section 9).
• Right to Restrict Processing: You may request that Hongbet restricts the processing of your data in certain circumstances — for example, while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
• Right to Object: You have the right to object to processing based on legitimate interests, including for direct marketing purposes. Where you object to marketing, processing for that purpose will cease immediately.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

The Hongbet platform is strictly intended for individuals aged 21 years and above. Hongbet does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the KYC process for all accounts prior to withdrawal processing, and Hongbet may require age verification at registration where there is reasonable basis to do so.

If Hongbet discovers or is notified that an account has been registered by a person under the age of 21, the account will be immediately suspended, all winnings will be voided, and any deposited funds will be returned to the originating payment method. Personal data collected in connection with that account will be deleted except where retention is required for legal or regulatory purposes.

Parents and guardians who become aware that a minor has registered a Hongbet account should contact our support team immediately at [email protected] so that the account can be investigated and closed without delay.

In the ordinary course of operating the Hongbet platform, some personal data may be transferred to, stored in, or processed in countries outside Malaysia — for example, where third-party KYC verification, fraud screening, or cloud infrastructure providers are located in other jurisdictions.

Hongbet ensures that all international transfers of personal data are subject to appropriate safeguards, including:

• Transferring data only to countries or territories that provide an adequate level of data protection;
• Where data is transferred to a country without a recognised adequacy determination, requiring the recipient to execute appropriate data transfer agreements incorporating standard contractual clauses or equivalent protective mechanisms;
• Limiting the scope of any international transfer to the minimum personal data necessary for the specific processing purpose.

You may request further information about the safeguards applicable to any specific international transfer of your personal data by contacting our support team.

Hongbet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or regulatory requirements. When material changes are made, we will provide reasonable notice by publishing a notice on the platform or notifying you via the email address registered to your account prior to the changes taking effect.

The date of the most recent revision to this Policy is displayed at the top of this page. We encourage you to review this Policy periodically. Your continued use of the Hongbet platform following any amendment constitutes your acknowledgement of the updated Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact Hongbet's data management team through the following channels:

• Email: [email protected] — please use the subject line "Privacy Request" or "Data Subject Request" for faster routing
• Live Chat: Available 24/7 via the Hongbet platform interface — ask to be connected to the Data Management team
• WhatsApp: Available via the platform's designated support channel
• Response Time: Acknowledgement within 7 business days; substantive response within 30 days (extensions communicated where required)

Complaints

If you are not satisfied with how Hongbet has handled your personal data or responded to a data subject request, you have the right to raise a complaint with Hongbet's internal data protection contact in the first instance. If your complaint remains unresolved, you may escalate the matter to the applicable supervisory or regulatory authority in accordance with the laws of the relevant jurisdiction.