Halo88 Privacy Policy – Data Protection & Information Security

Halo88 ("we", "Platform", "halo88.ml") values the privacy of every individual who uses our services. This Privacy Policy clearly and transparently explains how we handle your personal information from the moment you first browse our website through to becoming an active platform member.

This policy applies to all users of the halo88 platform, including website visitors, new account applicants, and registered members. It covers all ways in which you interact with us – whether through the official website, the halo88 mobile app, or customer support channels.

This Privacy Policy is drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and its subsidiary regulations. We are committed to ensuring full compliance with applicable data protection laws in Malaysia.

We only collect information that is strictly necessary to provide a secure, fair, and compliant service. The following are the categories of data we collect:

We do not collect special category data such as health information, biometric data, criminal records, or religious and belief information, unless required by applicable law.

Halo88 collects your personal information through several transparent and legitimate channels:

• Account Registration: When you register as a new member, you are required to provide identity and contact information for account verification.
• KYC (Know Your Customer) Process: As part of our anti-money laundering and platform security procedures, we require identity verification documents such as a copy of your ID card or passport.
• Financial Transactions: Financial information is collected automatically when you make a deposit or request a fund withdrawal through the platform.
• Platform Usage: Technical and usage data is collected automatically when you browse the website or use the halo88 app via cookies, server logs, and similar tracking technologies.
• Support Interactions: When you contact our customer support team via live chat or email, we retain records of those communications for service quality purposes.
• Third-Party Sources: In certain cases, we may receive your information from legitimate identity verification service providers, or from fraud prevention agencies we work with.

Halo88 uses your personal data solely for legitimate and necessary purposes. The following are the primary purposes for which your data is used:

• Identity Verification & KYC: To verify that you are a legitimate user and meet the minimum age requirement of 18 years before being permitted to play on our platform.
• Account Management: To create, maintain, and manage your account, including security settings, gaming limits, and communication preferences.
• Financial Transaction Processing: To accurately and securely process deposits, withdrawals, bonus payments, and all other financial transactions related to your account.
• Security & Fraud Prevention: To detect and prevent fraudulent activity, money laundering, bonus abuse, and unauthorised access to your account.
• Customer Support: To provide effective assistance when you contact our support team, including resolving complaints and account-related enquiries.
• Service Communications: To send you important notices regarding your account, changes to terms, security updates, and transaction information.
• Platform Improvements: To analyse usage patterns for the purpose of improving the functionality, design, and overall experience of the halo88 platform.
• Legal Compliance: To fulfil legal obligations, anti-money laundering (AML) regulations, and reporting requirements to the relevant authorities.

Halo88 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. However, in certain legitimate circumstances, we may need to share your information:

• Payment Service Providers: Transaction information is shared with payment processors, banks, and eWallet providers required to complete your financial transactions. All such partners are bound by strict confidentiality agreements.
• Game Software Providers: Game usage data is shared with our game software providers for the purpose of verifying game results and ensuring technical compliance. Data shared is limited to technical requirements only.
• Identity Verification Agency: Identity information may be shared with accredited KYC and document verification service providers for authentication purposes.
• Statutory Authority: halo88 will disclose required information to government authorities, law enforcement, or regulatory bodies when mandated by Malaysian law or a valid court order.
• Business Transfers: In the event of a company merger, acquisition, or asset transfer, user data may be transferred as part of the business assets, subject to prior notice to users.

The security of your data is a responsibility we take extremely seriously. halo88 implements multiple layers of technical and organisational security to protect your personal information from unauthorised access, disclosure, alteration, or destruction:

• Data in Transit Encryption: All communication between your browser or app and halo88 servers is secured using TLS 1.3 protocol with AES-256-bit encryption – the same security standard used by global financial institutions.
• Data Encryption at Rest: Sensitive information such as passwords and financial details is stored in encrypted form using irreversible one-way hashing algorithms.
• Internal Access Controls: Access to users' personal data within halo88 staff is restricted on a need-to-know basis only. All access is logged and monitored on a regular basis.
• Two-Factor Authentication (2FA): halo88's internal systems storing user data are protected with multi-factor authentication to prevent unauthorised access.
• Continuous Security Monitoring: Our security team monitors the platform 24 hours a day using advanced threat detection systems to identify and respond to any suspicious activity.
• Regular Penetration Testing: We conduct regular security testing and system audits by independent third parties to ensure there are no exploitable vulnerabilities.

Halo88 does not retain your personal data longer than necessary. Retention periods depend on the type of data and applicable legal requirements:

• Active Account Data: For as long as your account remains active and you continue using the halo88 platform.
• Data After Account Closure: A minimum of five years after account closure to meet financial record-keeping and audit requirements under Malaysian law.
• Financial Transaction Records: Seven years in accordance with the requirements of the Companies Act and applicable anti-money laundering regulations (AMLA).
• KYC Records and Verification Documents: Five years after the date of verification or account closure, whichever is later.
• Support Communication Records: Two years from the date of last communication, unless that communication relates to an active complaint or dispute.
• Cookie and Technical Log Data: Between 30 days and 24 months depending on the type of cookie, as described in the cookies section below.

Once the specified retention period has ended and there is no legal requirement for extended storage, your data will be securely deleted or permanently anonymised.

Under Malaysia's Personal Data Protection Act 2010 and international privacy best practices, you have the following rights regarding your personal data that we hold:

To exercise any of the above rights, please contact our privacy team via email at [email protected] or via live chat. We will process your request within 30 working days. In complex cases, this period may be extended to up to 60 days with notice to you.

Halo88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

You can manage or disable cookies through your browser settings at any time. However, disabling essential cookies may affect platform functionality and your gaming experience. We do not use third-party cookies for advertising purposes.

The halo88 platform may contain links to third-party websites or services such as payment providers or game software suppliers. This Privacy Policy applies solely to the halo88 platform.

We have no control over the content, privacy policies, or security practices of those third-party websites. We recommend reading the privacy policy of any third-party website before providing them with personal information. Halo88 is not responsible for any damage or loss arising from the use of third-party websites.

The halo88 platform is a service exclusively for adults aged 18 and above. We do not intentionally collect, store, or process personal data from individuals under the age of 18.

If we find that we have inadvertently collected information from minors, we will take immediate steps to delete that information and close the relevant account. If you believe your child has registered an account on our platform, please contact us immediately so we can take the appropriate action.

Halo88 reserves the right to modify this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or service improvements. Each update will be accompanied by a new effective date at the top of this document.

When significant changes occur, we will notify you through:

• A clear notice on the platform's main page when changes take effect
• Notification email to the address registered with your account
• A pop-up notice will appear at your next login after any changes are published

We encourage you to review this Privacy Policy periodically. Your continued use of the halo88 platform after any changes are published constitutes your acceptance of the updated terms.

If you have any questions, concerns, or wish to exercise your personal data rights, the halo88 privacy team is ready to assist:

For enquiries related to data access, correction, or deletion, please state the type of request and your account number (if applicable) in your message. We are committed to responding to all privacy enquiries within 72 working hours.