Privacy Policy

This Privacy Policy (hereinafter "Policy") is issued by h3bet (the "Company", "we", "our", or "us"), the operator of the online gaming and sports betting platform accessible at h3bet.casa. This Policy governs the collection, processing, storage, disclosure, and protection of personal data relating to users ("you", "your", or "Data Subject") of the h3bet platform and all associated services.

h3bet is committed to handling your personal information responsibly, transparently, and in compliance with applicable data protection standards. We recognise that privacy is a fundamental right, and this Policy reflects our commitment to earning and maintaining the trust of every Malaysian player on our platform.

By registering an account, making a deposit, or otherwise using any service provided through h3bet, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree to the terms of this Policy, you must not use the h3bet platform.

This Policy should be read in conjunction with our Terms & Conditions and our Responsible Gambling Policy, both of which form part of the overall framework governing your use of h3bet.

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

h3bet collects Personal Data across several categories, each serving a specific and defined operational or regulatory purpose. The categories of Personal Data we collect are set out below:

h3bet collects Personal Data through the following mechanisms:

• Direct submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting our support team, or responding to a promotional offer.
• Automated technical collection: Data collected automatically as you navigate the h3bet platform, including IP address, device identifiers, session data, and browser characteristics, via server logs, cookies, and analytics tools.
• Payment processors: Transaction confirmation data and partial payment credentials shared by our authorised payment service providers, including FPX, DuitNow, and authorised e-wallet operators, in connection with deposit and withdrawal processing.
• Identity verification providers: Where h3bet uses a third-party KYC verification service to authenticate your identity documents, that service may return verification results and flags to h3bet for compliance purposes.
• Fraud and AML monitoring systems: Automated systems that analyse transaction patterns and gameplay behaviour to detect potential fraud, money laundering activity, or terms violations may generate derived data points associated with your account.

h3bet processes your Personal Data for the following specific purposes:

1. Account Management: Creating, maintaining, and administering your h3bet Account, including verification of your identity and eligibility to use the platform.
2. Service Delivery: Processing deposits and withdrawals, settling bets and game outcomes, issuing bonuses and promotional credits, and providing live chat and email support in English, Bahasa Melayu, and Mandarin.
3. Regulatory Compliance: Meeting our obligations under applicable anti-money laundering (AML) legislation, Know Your Customer (KYC) requirements, and gaming compliance frameworks, including the filing of any statutory reports required by law.
4. Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, bonus abuse, money laundering, and other prohibited conduct as defined in our Terms & Conditions.
5. Responsible Gambling: Monitoring gameplay patterns to identify potential signs of problem gambling behaviour, administering self-exclusion requests, and applying player protection measures including deposit limits and session reminders.
6. Communications: Sending transactional notifications (deposit confirmations, withdrawal updates, security alerts) and, where you have opted in, promotional communications about h3bet offers and products.
7. Platform Improvement: Analysing aggregated and anonymised usage data to improve the functionality, performance, and user experience of the h3bet platform.

h3bet processes Personal Data only where a valid legal basis exists. The primary legal bases upon which we rely are set out below, mapped to the corresponding processing activities:

Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw consent for marketing communications, please contact our support team or use the unsubscribe mechanism in any promotional email we send.

h3bet does not sell your Personal Data. We share Personal Data with third parties only to the extent necessary and only with partners who are bound by contractual data protection obligations. Categories of third parties with whom we may share your data include:

• Payment Service Providers: Authorised providers including FPX banking partners (Maybank, CIMB, Public Bank, Hong Leong, and others), DuitNow operators, Touch 'n Go eWallet, Boost, GrabPay, and card scheme processors — for the sole purpose of processing deposit and withdrawal transactions.
• Identity Verification Providers: Third-party KYC technology providers used to authenticate identity documents submitted during the account verification process.
• Game Content Providers: Licensed international game studios that supply the live dealer, slots, and instant game content available on h3bet. Game session data may be shared with providers for game integrity and RNG audit purposes.
• Cloud Infrastructure & Security Providers: Third-party cloud hosting and cybersecurity service providers who process data on our behalf under binding data processing agreements and are prohibited from using data for any purpose beyond providing the contracted services.
• Legal and Regulatory Authorities: Where required by applicable law, court order, or regulatory direction, h3bet may disclose your Personal Data to law enforcement agencies, financial intelligence units, or other competent authorities without prior notice to you.

h3bet uses cookies and similar tracking technologies to operate the platform, maintain session continuity, recall your preferences, and support security and analytics functions. The types of cookies we use are categorised as follows:

• Strictly Necessary Cookies: Essential for the platform to function. These cookies maintain your login session, remember your language and currency preferences, and support security features including CSRF token management. These cookies cannot be disabled without impairing platform functionality.
• Functional Cookies: Remember your personalisation choices such as preferred game categories, deposit method, and display settings, allowing us to deliver a more tailored experience on return visits.
• Analytics Cookies: Collect anonymised and aggregated data about how users navigate the h3bet platform — including pages visited, session duration, and feature usage — to help us identify performance issues and prioritise platform improvements. These cookies do not track individual identity.
• Security Cookies: Support our fraud detection systems by flagging unusual patterns of device and browser behaviour that may indicate account takeover attempts or coordinated fraudulent activity.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect your ability to log in and use the platform. You may withdraw consent to optional cookies at any time by adjusting your browser preferences; this will not affect any processing already carried out on the basis of your prior consent.

h3bet retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law, whichever is the longer period. Our key retention periods are as follows:

• Account and Identity Data: Retained for a minimum of five (5) years following account closure, to comply with AML and KYC regulatory record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of seven (7) years from the date of the transaction, in accordance with standard financial record-keeping obligations.
• KYC Documentation: Retained for the duration of the account relationship and for a minimum of five (5) years post-closure.
• Communications Records: Support interactions retained for three (3) years to support dispute resolution and quality assurance.
• Gameplay and Betting Records: Retained for five (5) years for regulatory audit purposes and dispute resolution.
• Technical and Log Data: Server logs and IP records retained for twelve (12) months for security monitoring and incident investigation purposes.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised such that it can no longer be attributed to an identified or identifiable individual.

h3bet employs a comprehensive suite of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. Key measures include:

• Encryption in Transit: All communications between your browser or device and h3bet servers are protected using TLS 1.2 or higher, with 256-bit SSL certificates.
• Encryption at Rest: Sensitive data stored on h3bet servers — including KYC documents and financial information — is encrypted at rest using AES-256 encryption.
• Access Controls: Personal Data is accessible only to h3bet personnel who require it to perform their specific job functions. All access is logged, and privileged access is subject to multi-factor authentication requirements.
• Regular Security Audits: h3bet conducts regular penetration testing and vulnerability assessments of its platform infrastructure to identify and remediate security weaknesses proactively.
• Incident Response: h3bet maintains a documented security incident response programme. In the event of a breach that poses a material risk to your rights, we will notify affected users promptly and take immediate steps to contain and investigate the incident.

As a Data Subject, you have the following rights in relation to your Personal Data held by h3bet. To exercise any of these rights, please submit a written request to our Data Protection contact (details in Section 14). We aim to respond to all data rights requests within 30 calendar days.

The h3bet platform is strictly intended for adults aged 21 years and above. We do not knowingly collect Personal Data from individuals under the age of 21 and we do not permit persons under 21 to register accounts or use our services under any circumstances.

Age verification is a mandatory step in the h3bet registration and KYC process. Where we have reasonable grounds to believe that Personal Data has been submitted by a person under the age of 21, we will take immediate steps to close the relevant account, delete the associated Personal Data, and — where applicable — return any funds deposited to the payment method of origin.

If you believe that a minor has submitted Personal Data to h3bet, please contact our support team immediately at [email protected] so that we can take prompt remedial action.

h3bet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. When material changes are made, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered Account Holders via their registered email address.

Your continued use of the h3bet platform following the publication of an updated version of this Privacy Policy constitutes your acceptance of the revised Policy. We encourage you to review this page periodically to remain informed of how we protect your Personal Data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by h3bet, please contact us through the following channels:

• Data Rights Requests: Submit via our live chat support team, available 24/7 in English, Bahasa Melayu, and Mandarin. Please identify your request as a "Data Rights Request" to ensure it is routed to our data protection team.
• Privacy Enquiries by Email: [email protected] — Subject line: "Privacy Enquiry — [Your Account Username]"
• WhatsApp Support: Available 24/7 for urgent account-related data concerns.

We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response to formal data rights requests within 30 calendar days. Where a request is complex or involves a large volume of data, we may extend the response period by a further 30 days, in which case we will notify you of the extension and the reason for it.