Privacy Policy heet28 —
Protection of Your Personal Data

Heet28 (hereinafter referred to as "we", "the platform", or "heet28") greatly values the trust you place in us. This Privacy Policy is designed to provide full transparency on how we handle the personal information of every player using the heet28.pro platform.

This document applies to all users who access or use the heet28 platform, whether via desktop web browser, mobile version, or the downloadable heet28 app. This policy covers all processes related to the collection, storage, use, sharing, and deletion of personal data.

Heet28 operates in accordance with strict data protection principles and complies with applicable privacy legal requirements. We only collect data that is genuinely necessary and always prioritize the security of your information above all else. Your trust is our most valuable asset and we do not take this responsibility lightly.

This policy is to be read together with Terms and Conditions and Responsible Gaming Policy heet28 which forms the entire agreement between you and our platform.

Heet28 collects your personal information through several means: directly when you register an account, automatically while you use the platform, and from trusted third parties for identity verification purposes.

All data collected is for legitimate purposes, and we do not collect any sensitive information unrelated to platform operations, such as medical data, religious beliefs, or political views.

The personal data we collect is used responsibly for the following purposes only. heet28 does not use your data for any purpose not stated in this policy without obtaining your prior consent.

• Account Management: Creating, verifying and managing your player account including the login process and password resets.
• Transaction Processing: Processing deposits, withdrawals and all financial transactions securely via supported payment methods including FPX, DuitNow and TNG eWallet.
• Legal Compliance: Meeting legal requirements including Anti-Money Laundering (AML), Know Your Customer (KYC) and reporting obligations to relevant authorities.
• Platform Security: Detecting and preventing fraud, money laundering, account breaches and other illegal activities that threaten platform security and other players.
• Service Improvement: Analyzing usage patterns to improve the user experience, enhance platform performance and develop better new features for Malaysian players.
• Important Communications: Sending account-related notifications, terms updates, security alerts and promotional information to players who have consented to receive them.
• Responsible Gaming: Monitoring gaming patterns to identify players who may need assistance and providing appropriate responsible gaming tools.

Heet28 will not use your data to make automated decisions that have legal or significant effects on you without appropriate human review.

Heet28 does not sell, rent, or disclose your personal data to third parties for marketing or commercial purposes. However, there are certain circumstances in which we need to share your data with trusted parties, namely:

• Payment Providers: Required transaction information is shared with payment processors such as FPX, DuitNow and registered e-wallet providers to enable deposits and withdrawals to be processed securely.
• Technical Service Providers: Companies that assist us in operating the platform, including cloud computing, analytics, and IT support services, are bound by strict confidentiality agreements.
• Identity Verification Providers: Third parties that assist with the KYC process and document verification to ensure compliance with legal requirements.
• Legal Authorities: When required by law, court order, or directive from a competent authority, we will disclose the necessary information.
• Fraud Prevention: Certain information may be shared with anti-fraud agencies or industry bodies to protect the online gaming ecosystem.

Heet28 invests seriously in cybersecurity infrastructure to ensure your personal data is protected at every stage — whether in transit, during processing, or in storage.

• 256-bit SSL/TLS Encryption: All communications between your device and heet28 servers are encrypted using the latest SSL/TLS protocols, making your data unreadable to any unauthorized party.
• Stored Data Encryption: Sensitive data stored in our databases is encrypted using AES-256 encryption, an industry-leading standard.
• Strict Access Control: Only specifically authorised heet28 staff may access players' personal data, and every access is recorded in a strict audit log.
• Two-Factor Authentication: heet28's internal systems require multi-factor authentication to prevent unauthorized access even in the event of a compromised password.
• Regular Security Audits: Our platform undergoes periodic independent security audits by external cybersecurity experts to identify and address any vulnerabilities.
• 24/7 Monitoring: Our automated monitoring system operates around the clock to detect and respond to any security threats in real time.

While we take all reasonable steps to protect your data, no system is 100% breach-proof. We therefore encourage you to also safeguard your account by using a strong password and not sharing your login credentials.

Heet28 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and analyze platform usage patterns. Cookies are small data files stored on your device when you visit heet28.pro.

• Essential Cookies: Required for core platform functions such as maintaining your login session and remembering language preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting information about how you use the platform to help us improve performance and the user experience. This data is aggregated and cannot identify individuals.
• Functional Cookies: Allowing the platform to remember your preferences such as currency, language and display settings to deliver a more personalized experience.
• Security Cookies: Helping detect and prevent fraudulent activity and protecting your account from unauthorized access.

You can manage cookie settings through your web browser preferences. However, disabling certain cookies may affect the functionality and security of your experience on the heet28 platform. Continued use of our platform constitutes consent to the use of cookies as described.

Heet28 fully recognizes your rights over your personal data. The following are the rights you hold and how to exercise them:

To exercise any of the above rights, please contact the heet28 support team via live chat or email at [email protected]. We will process your request within 30 business days.

Heet28 retains your personal data only for as long as necessary to fulfill the purpose of collection or to comply with legal requirements. Retention periods vary by data type:

• Active Account Data: Retained for the duration your account is active and used to manage your services.
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date in line with financial and AML legal requirements.
• KYC Documents: Retained for a minimum of 5 years after account closure in accordance with legal compliance requirements.
• Security Logs: Retained for 2 years for security investigation and fraud prevention purposes.
• Communication Data: Customer support correspondence records are retained for 3 years.

When the retention period expires or upon a valid deletion request, heet28 will securely delete or anonymise your data using methods that ensure it cannot be recovered. The deletion process is carried out in accordance with strict internal security procedures.

Heet28 takes child protection extremely seriously. Our registration process includes strict age verification through KYC. Should we find that personal data of a child under 18 has been inadvertently collected, we will immediately take action to delete that data and close the account in question.

If you believe your child or any minor has registered an account on our platform, please contact us immediately at [email protected] so that prompt action can be taken.

Heet28 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, new technological requirements, or changes in applicable law. All amendments will be published on this page with the latest update date clearly displayed at the top of the document.

For significant amendments that materially affect how we use your data, heet28 will notify you via an in-platform notification or your registered email at least 7 days before the amendment takes effect. Your continued use of the heet28 platform after the effective date of any amendment constitutes your acceptance of the updated terms.

You are encouraged to review this page periodically. The latest version of this Privacy Policy is always accessible at heet28.pro/privacy-policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, the heet28 team is ready to assist through the following channels:

• Live Chat: Available 24/7 directly within the heet28 platform — the fastest way to get an immediate response from our support team.
• Privacy Email: [email protected] — for written inquiries regarding personal data, data access requests, or formal privacy complaints requiring a written record.
• FAQ Page: Visit heet28 FAQ page for answers to frequently asked questions including those related to privacy and data security.

Heet28 is committed to responding to all privacy-related inquiries within 5 business days. For more complex requests such as data access or data deletion requests requiring in-depth investigation, the processing period is up to 30 business days.