H2m takes the responsibility of protecting players' personal data seriously. This document clearly and transparently explains how we collect, use, store, and protect your personal information when you use our platform.
H2m's privacy policy is built on six core principles that ensure your personal data remains secure and managed ethically at all times.
All data transmitted between your device and h2m servers is protected with 256-bit SSL encryption — the same technology used by Malaysia's leading banks. Your sensitive information is never transmitted in plain text.
H2m only collects data that is genuinely necessary to provide its services. We do not collect irrelevant or excessive information — every piece of data requested has a clear and legitimate purpose.
H2m will not sell, rent, or trade players' personal data to any third party for marketing purposes. Your data is used solely for the purposes stated in this policy and nothing beyond that.
You have the right to access, correct, transfer, or request deletion of your personal data at any time via your account settings or by contacting h2m customer support.
Personal data is stored on servers protected with strict access controls, continuous monitoring, and regular backups. Access to player data at h2m is restricted to only those staff who genuinely require it.
H2m complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards. This compliance is not optional — it is central to how we operate.
H2m ("ours", "Platform" or "h2m") is committed to protecting the privacy of all users who access and use our services at h2m.one. This Privacy Policy is formulated in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards.
This document clearly outlines the types of data we collect, why it is needed, how it is used, who may access it, how long it is retained, and what rights you hold as the data owner. We believe transparency is the foundation of trust, and this policy reflects that commitment.
Any changes to this Privacy Policy will be communicated to you via in-platform notifications or the email registered to your account. We encourage you to review this policy from time to time.
H2m collects personal data in the following categories. Each category is accompanied by an explanation of why it is required:
| Data Categories | Example Information | Requirements |
|---|---|---|
| Identity | Full name, IC / passport number, date of birth | Required (KYC) |
| Contact | Email address, phone number | Required |
| Financial | Bank account number, account holder name, transaction records | Required (Payment) |
| Technical | IP address, browser type, operating system, device ID | Automatic |
| Behaviour | Game records, betting, wins, active sessions | Automatic |
| Communication | Support chat records, player feedback | Optional |
The majority of data we collect is provided directly by you during the account registration process, identity verification (KYC), making deposits or withdrawals, completing your account profile, contacting customer support, and when responding to optional surveys or feedback forms.
Some data is collected automatically when you use the h2m platform. This includes server log records capturing IP addresses and access times, platform usage analytics (pages visited, session duration), cookie data and similar tracking technologies, as well as device information such as browser type, screen resolution, and operating system. This technical data is used to detect technical issues, prevent fraud, and improve the user experience.
In the context of identity verification and fraud prevention, h2m may receive relevant data from licensed third-party KYC service providers, approved payment service providers, and regulatory authorities when required by law. All such third parties are bound by strict data confidentiality agreements.
Personal data collected by h2m is used for the following purposes:
H2m does not sell, rent, or trade players' personal data to third parties for any commercial purpose. This is an absolute and unchanging commitment.
Your personal data may be shared with the following limited parties, to the extent necessary and with appropriate safeguards in place:
In cases where data needs to be processed outside Malaysia by international cloud or technical service providers, h2m ensures that data protection standards equal to or higher than Malaysia's PDPA are upheld. Appropriate data transfer agreements will be implemented in all such cases.
H2m implements multiple layers of technical and organisational security measures to protect players' personal data from unauthorised access, alteration, disclosure, or destruction:
Cookies are small text files stored in your browser when you visit a website. h2m uses cookies and similar technologies to enhance platform functionality and user experience.
You can manage or delete cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the h2m platform, particularly essential cookies required for login and session security.
Under Malaysia's Personal Data Protection Act 2010 and international data protection standards, you have the following rights regarding your personal data held by h2m:
You may request a copy of the personal data we hold about you at any time. Requests will be processed within 30 business days.
If the data we hold is inaccurate or outdated, you have the right to request a correction. This can be done directly through your account settings.
In certain circumstances, you may request the deletion of your personal data. This right is subject to legal obligations that may require us to retain certain data.
You may request that we restrict the processing of your data under certain circumstances, such as during a dispute regarding data accuracy.
You have the right to receive a copy of your data in a machine-readable format for transfer to another service provider where applicable.
You may object to the processing of your data for direct marketing purposes at any time via the notification settings in your account.
H2m retains personal data only for as long as necessary for the purposes stated in this policy, or as required by applicable law:
Once the relevant retention period has expired, data will be securely deleted or anonymised in accordance with established procedures.
H2m reserves the right to modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. When material changes occur, we will:
Continued use of the h2m platform after the effective date of any changes constitutes acceptance of the updated policy.
If you have any questions, concerns, or wish to exercise your rights regarding personal data, the h2m privacy team is here to help. You can reach us via:
We are committed to responding to all privacy-related inquiries within a reasonable timeframe. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant Malaysia Personal Data Protection Department.
You now know how h2m protects your privacy. Join hundreds of thousands of Malaysian players who already trust h2m and enjoy your online entertainment experience with complete confidence.