Six Principles heet28 Data Protection
Every decision we make regarding user data is guided by these six core principles. These are not merely promises — they are how we operate every day.
End-to-End Encryption
All personal data transmitted between your device and heet28's servers is protected by 256-bit SSL encryption — the same standard used by banking institutions. Your data cannot be intercepted in transit.
Never Sold to Third Parties
Your personal data has never been and will never be sold, rented, or shared with advertisers or third parties for marketing purposes. Your information belongs entirely to you.
Minimum Data Collection
Heet28 only collects data that is genuinely necessary to deliver services, verify identity, and meet legal requirements. We do not collect irrelevant information.
Full Control in Your Hands
You may request access to, correction of, or deletion of your personal data at any time. We respect your rights as a data owner and will process every request promptly.
Defined Retention Periods
Your data is retained only for as long as necessary for the stated purpose. After that period, data is securely deleted in accordance with industry-standard procedures.
Timely Breach Notification
In the event of any security incident involving user data, heet28 is committed to providing notification within the timeframe stipulated by applicable data protection laws.
1 Introduction & Scope of This Policy
This Privacy Policy explains how heet28 ("we", "Platform") collects, uses, stores, and protects your personal information when you use the heet28.org website, the heet28 mobile app, or any services we provide.
This policy applies to all heet28 platform users regardless of how you access our services – whether via web browser, Android app, or iOS app. By using the heet28 platform, you agree to the collection and use of information as described in this policy.
We are committed to complying with all applicable data protection laws and upholding industry best practices in handling your personal information. This policy is updated periodically to reflect changes in our practices or legal requirements.
2 Types of Personal Data We Collect
Heet28 collects various types of personal information depending on how you interact with our platform. Below is a detailed table of the data collected:
| Data Category | Example Information | Purpose |
|---|---|---|
| Account Information | Full name, date of birth, MyKad/passport number, email address, phone number | Account registration, identity verification (KYC) |
| Financial Information | Bank account number, bank name, transaction records, deposit and withdrawal history | Payment processing, fraud prevention |
| Usage Data | Game history, bets placed, wins and losses, login sessions | Platform improvement, legal compliance |
| Technical Data | IP address, device type, operating system, web browser, cookies | Security, fraud detection, analytics |
| Communications | Support chat records, emails sent, user feedback | Customer support, service improvement |
Some information is collected directly when you fill in a registration form or contact customer support. Other information is collected automatically as you use the platform through cookies and equivalent tracking technologies.
3 How We Use Your Data
Heet28 uses the personal data collected for legitimate and transparent purposes. Every use of data has a solid legal basis, whether grounded in your consent, contractual necessity, or the platform's legitimate interests.
- Operating and managing your account and providing access to all platform services
- Processing deposits and fund withdrawals securely and in a timely manner
- Implementing KYC (Know Your Customer) procedures to meet legal compliance requirements
- Detecting and preventing fraud, money laundering, and other illegal activities
- Providing effective customer support and resolving disputes
- Sending account-related communications, including security notices and important updates
- Analysing usage patterns to improve platform performance and user experience
- Complying with reporting requirements to the relevant authorities as required by law
4 Data Sharing with Third Parties
Heet28 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. However, there are limited situations where we need to share data for legitimate purposes:
- Service Providers: Third-party companies that assist us in running operations — such as payment processors, identity verification providers, and cloud infrastructure providers — are all bound by strict confidentiality agreements
- Legal Requirements: When required by a court, law enforcement body, or legitimate regulatory authority
- Fraud Prevention: With verification service providers who help us detect and prevent fraudulent activity
- Business Transfer: In the event of a merger, acquisition, or asset sale, data will be transferred to the new party bound by an equivalent privacy policy
We conduct thorough due diligence on all third-party service providers to ensure they adhere to data protection standards equivalent to those of heet28. Every data-sharing agreement includes binding protection clauses.
5 Data Security Measures
Heet28 continually invests in the latest security technologies and procedures to ensure your personal data is always protected. Our security approach is multi-layered to maximise protection.
- 256-bit SSL/TLS encryption for all data transferred between you and our servers
- Encryption of stored data (data at rest) using AES-256 for sensitive database files
- Two-factor authentication (2FA) is available and recommended for all accounts
- 24/7 system monitoring to detect any unauthorised access attempts
- Regular independent security audits to identify and patch vulnerabilities
- Strict internal access controls – staff may only access data necessary for their role
- Regular cybersecurity training for all staff who handle user data
6 Use of Cookies and Tracking Technologies
Heet28 uses cookies and similar tracking technologies to enhance the user experience, analyse platform traffic, and ensure account security. Cookies are small text files stored on your device when you visit our platform.
Types of cookies we use:
- Essential Cookies: Required for core platform functions such as login, session security, and account management. These cookies cannot be disabled
- Performance Cookies: Help us understand how users interact with the platform so we can improve it
- Functional Cookies: Storing your preferences such as language and display settings for a more personalised experience
- Analytics Cookies: Used to analyse usage patterns in aggregate, anonymised form for improvement purposes
You can manage or disable non-essential cookies through your web browser settings. Please note that disabling essential cookies may affect platform functionality.
7 Your Rights as a Data Owner
Heet28 recognises and respects your rights as the owner of your personal data. You may exercise these rights at any time by contacting our support team via Live Chat or the official heet28 email.
Right of Access
Request a copy of all personal data we hold about you.
Right to Rectification
Request correction of inaccurate or incomplete data.
Right to Erasure
Request deletion of your data when there is no longer a valid reason to retain it.
Right to Restriction
Request that processing of your data be restricted under certain circumstances.
Right to Portability
Receive your data in a machine-readable format for transfer to another platform.
Right to Object
Object to the processing of your data for specific purposes based on legitimate interests.
8 Protection of Children's Data
The heet28 platform is exclusively for users aged 18 and above. We do not knowingly collect or store any personal data from individuals under the age of 18.
Should we discover that we have inadvertently collected personal data from someone under the age of 18, we will immediately take the following steps:
- Immediately closing and terminating the relevant account
- Deleting all personal data relating to that individual from our systems
- Returning any funds in that account to the original source
If you believe a minor has registered a heet28 account without authorisation, please contact our support team immediately so we can act swiftly.
9 International Data Transfer
In the course of its operations, heet28 may transfer your personal data to servers or service providers located outside Malaysia. Such transfers are only carried out where adequate safeguards are in place to ensure your data remains secure.
Steps we take to protect data during international transfers:
- Ensuring the recipient country maintains an equivalent or higher level of data protection
- Implementing internationally recognised Standard Contractual Clauses
- Conducting a data transfer risk assessment before any transfer is approved
- Ensuring all data transfers are recorded and auditable
10 Contact Us Regarding Privacy
If you have any questions, concerns, or wish to exercise your privacy rights, our team is ready to assist. You can reach the heet28 Data Protection Officer through the following channels:
- Live Chat: Available 24/7 directly from the heet28 platform or app
- Email: [email protected] (response within 3 business days)
- In-Platform Support: Via the "Contact Us" section in your account settings
We are committed to responding to all privacy-related enquiries within 30 days of receipt. For more complex cases, we will keep you informed of the progress of our investigation on a regular basis.