Privacy Policy HappyHappy88 – Malaysian User Data Protection

This Privacy Policy is issued by HappyHappy88 ("we", "our platform") and applies to all users who register an account or access our platform at happyhappy88.xyz. This document sets out in detail how we collect, process, store, and protect your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection best practices.

By registering an account with happyhappy88 or continuing to use our platform, you agree to the terms set out in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact us to close your account.

HappyHappy88 is the data controller for all personal information you provide to us. This means we are responsible for ensuring your data is processed in accordance with applicable laws and the data protection principles we uphold.

HappyHappy88 collects various categories of personal data depending on how you interact with our platform. Below is a full breakdown of the data we collect and its sources:

2.1 Data You Provide Directly

• Full name as stated on your Malaysian identity card
• National identity card number (MyKad) or passport number
• An active Malaysian mobile phone number
• A valid email address
• Date of birth (for age verification)
• Residential address in Malaysia
• Payment method information – Touch 'n Go eWallet account number, DuitNow ID, or other registered e-wallet details
• Copy of identity verification document when requested

2.2 Automatically Collected Data

• IP address and approximate location based on IP
• Your device's browser type and operating system
• Session data – pages visited, time spent, and navigation patterns
• Game activity logs – games played, bet amounts, session duration
• Transaction history – deposits, withdrawals, and winnings
• Cookie data and similar tracking technologies

2.3 Data from Third Parties

• Identity verification information from the KYC (Know Your Customer) service providers we engage
• Compliance data from anti-money laundering (AML) service providers
• Information shared by our game providers for game activity records

2.4 Summary of Data Types, Purposes & Legal Basis for Processing

HappyHappy88 uses your personal data for the following purposes, all of which are necessary to provide a safe, high-quality Malaysia online casino platform:

Account Operations & Services

• Registering and maintaining your happyhappy88 account
• Process deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX Maybank2u and CIMB Clicks
• Processing withdrawal requests to your registered payment method
• Managing the VIP Rewards programme, including rebate and points calculations
• Providing effective 24/7 customer support

Security & Compliance

• Verifying your identity and confirming that you meet the minimum age requirement of 18 years
• Detecting and preventing fraud, money laundering, and other unlawful activities
• Monitoring account activity to identify suspicious patterns
• Comply with legal obligations, including reporting requirements under applicable Malaysian law
• Maintaining financial transaction records for audit purposes

Platform Improvements & Communications

• Analysing usage patterns to improve the happyhappy88 platform's interface and overall user experience
• Sending important account notifications such as transaction confirmations and security alerts
• Sending relevant promotional information and offers – provided you have given consent to receive marketing communications
• Running usage analytics to better understand the needs of our Malaysian players

HappyHappy88 processes your personal data on valid legal bases under Malaysia's Personal Data Protection Act 2010. The bases we rely on are:

• Contract: Processing necessary to fulfil the contract between you and happyhappy88 – for example, processing deposits and withdrawals, maintaining your account, and providing access to games.
• Legal Obligation: Processing required to comply with applicable Malaysian law, including KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements under the Anti-Money Laundering Act 2001.
• Legitimate Interest: Processing necessary for happyhappy88's legitimate interests that does not override your fundamental rights – including fraud detection, platform security, analytics for service improvement, and necessary service communications.
• Consent: For certain processing activities such as marketing communications and non-essential cookies, we require your express consent. You may withdraw this consent at any time without affecting the validity of any processing carried out prior to the withdrawal.

HappyHappy88 does not sell or rent your personal data to any third party for their own marketing purposes. However, we do share data with selected categories of third parties where it is necessary to provide our services:

• Game Providers: Software providers for slots, live casino, and table games partnered with happyhappy88 receive the session data required to run the games. This data is limited to session details and does not include your full financial information.
• Payment Processors: Payment service providers such as Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX receive the data necessary to process your financial transactions. They are subject to their own privacy and data protection policies.
• KYC/AML Providers: The identity verification and anti-money laundering compliance services we use receive the identity data required to carry out legally mandated checks.
• Technical Infrastructure Providers: Hosting service providers, CDN providers, and other technical service providers that support the operation of the happyhappy88 platform. All such providers are bound by strict data processing agreements.
• Authority: We may disclose data to Malaysian authorities, including Bank Negara Malaysia, the police, or a tribunal, when required by law or a valid court order.

The security of your personal data is an absolute priority for happyhappy88. We implement multiple layers of technical and organisational protection to keep your data safe:

Technical Security Measures

• 256-bit SSL/TLS Encryption: All data transmitted between your device and happyhappy88's servers is encrypted using 256-bit SSL/TLS protocols – the same security standard used by Malaysia's major banking institutions.
• Data-at-Rest Encryption: All sensitive data stored in our databases is encrypted using AES-256 algorithms, including identity information and financial details.
• Two-Factor Authentication (2FA): 2FA is available for all happyhappy88 accounts and is strongly recommended as an added layer of protection.
• 24/7 Monitoring: Intrusion detection systems (IDS) and security monitoring operate around the clock to detect and respond to any threats.
• Regular Security Testing: We conduct regular penetration testing and independent security audits to identify and address vulnerabilities.

Organisational Measures

• Access to users' personal data is restricted on a need-to-know basis – only staff who require access to data in order to carry out their duties are granted authorisation.
• All staff who handle user data undergo data protection training and are bound by strict confidentiality agreements.
• Detailed security incident response procedures are in place to ensure any data breach is addressed promptly and effectively.

HappyHappy88 uses cookies and similar tracking technologies to enhance your experience on our platform. The categories of cookies we use are as follows:

• Essential Cookies: Required for core platform functionality – login session management, security, and bet slip operations. These cookies cannot be disabled as they are essential to the platform's operation.
• Preference Cookies: Saves your preferences such as language and display settings. Helps us remember your choices from one session to the next.
• Analytics Cookies: Collecting information on how you use the happyhappy88 platform – most frequently visited pages, time spent, and navigation paths. This data is used in aggregated form to improve our platform.
• Marketing Cookies: Used to display more relevant promotional content based on your interests. These cookies are only activated with your express consent.

You can manage your cookie settings through your browser preferences. Disabling certain cookies may affect the functionality of some areas of the happyhappy88 platform. For more information on managing cookies in your browser, refer to your browser's documentation.

In the course of operating our online casino platform, some of your personal data may be transferred to, and processed in, countries outside Malaysia. This occurs in situations such as the use of cloud servers or game software providers based outside Malaysia.

Where international data transfers occur, happyhappy88 ensures adequate protections are in place through:

• Contractually binding data processing agreements requiring recipients to protect data to a standard equivalent to Malaysia's PDPA
• Ensuring that the recipient country maintains an adequate level of data protection
• Use of recognised standard contractual clauses for data protection

HappyHappy88 only retains your personal data for as long as it is needed for the stated purposes or as required by Malaysian law. Our data retention guidelines are as follows:

• Active Account Information: Retained for the duration your account is active, plus any additional period required by law.
• Financial Transaction Records: Retained for a minimum of 7 years after the transaction date, in accordance with Malaysian financial and tax legal requirements.
• KYC / Identity Verification Records: Retained for a minimum of 5 years after account closure or the final transaction date, in line with Malaysia's AML requirements.
• Support Communication Logs: Retained for 3 years for reference and dispute resolution purposes.
• Analytics & Session Data: Aggregated, non-identifiable data may be retained for longer periods for platform trend analysis purposes.
• Inactive Accounts: Account data that has been inactive for more than 5 years will be deleted or anonymised, subject to any outstanding legal retention obligations that remain in force.

Once the retention period expires, your personal data will be securely deleted or anonymised so that it can no longer be linked back to you.

As a happyhappy88 user based in Malaysia, you have the following rights regarding the personal data we hold about you:

• Right to Access: You have the right to obtain a copy of the personal data we process about you. Data access requests will be processed within 14 business days.
• Right to Rectification: If any of your personal data is inaccurate or incomplete, you have the right to request a correction. You may also update certain information directly through your account settings.
• Right to Erasure: In certain situations, you have the right to request the deletion of your personal data – known as the "right to be forgotten". This does not apply to data we are legally required to retain.
• Right to Restrict Processing: Under certain circumstances, you may request that we restrict how we process your data while a dispute is being resolved.
• Right to Data Portability: You have the right to receive a copy of your personal data in a machine-readable format for transfer to another service provider.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of any processing carried out prior to withdrawal.

To exercise any of the rights above, please contact us by email at support@happyhappy88.xyz or via the in-platform live chat. Please include your full name, account number, and a clear description of your request. We will verify your identity before processing any data-related request.

The happyhappy88 platform is exclusively for users aged 18 years and above. We do not knowingly collect any personal data from individuals under the age of 18.

Every account registration on happyhappy88 requires age verification via Malaysian identity card number. Should we discover that we have collected personal data from an individual under the age of 18, we will immediately take the following steps:

• Closing the account in question immediately
• Permanently deletes all associated data from our systems
• Returning any available balance via an appropriate method

If you have reason to believe that someone under the age of 18 has registered an account on happyhappy88, please contact us immediately at support@happyhappy88.xyz so we can take the appropriate action.

HappyHappy88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technological developments, or new legal requirements.

When we make material changes to this policy, we will provide notice via:

• To the email address registered to your account, at least 7 days before the changes take effect
• In-platform notifications on happyhappy88 when you log in
• Update the "Last Updated" date at the top of this page

Continued use of the happyhappy88 platform after the effective date of any changes will be deemed acceptance of the updated policy. If you do not agree with the changes made, you have the right to close your account and request deletion of your data before the effective date.

The last updated date of this document is January 2026. For any enquiries regarding this Privacy Policy or to exercise your privacy rights, please contact us at support@happyhappy88.xyz. We are committed to responding to all privacy-related enquiries within 5 business days.