Hijau44 Privacy Policy — Malaysia Member Data Protection

1 Introduction

Hijau44 ("Platform", "we") values the privacy of every member who uses our services. This Privacy Policy is crafted to transparently explain how we collect, use, store, and protect your personal information when you register and use the hijau44 platform — whether through our website at hijau44.vu or our mobile app.

We comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards. Every data-related decision we make is guided by the principles of necessity, fairness, and transparency — not merely to meet legal requirements, but because we genuinely value the trust you place in us.

2 Data Collected

Hijau44 collects personal data necessary to provide members with a safe, compliant, and high-quality service. The types of data we collect include:

We only collect data that is genuinely necessary. You are not required to provide information that is unrelated to the service you are requesting.

3 How We Use Your Data

The personal data we collect is used solely for legitimate and transparent purposes. The following are the primary ways we use your information:

• Account Management: Registering and managing your member account, including identity verification and profile maintenance.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions securely and accurately.
• Security & Fraud Prevention: Detecting and investigating suspicious activity to protect your account from unauthorized access.
• Legal Compliance: Meeting KYC, AML (Anti-Money Laundering), and reporting obligations to the relevant authorities.
• Service Communications: Sending important notifications related to your account, transactions, and platform policy updates.
• Marketing (with consent): Delivering relevant promotional offers and bonuses — only if you have consented to receive them.
• Responsible Gambling: Monitoring gameplay patterns to identify early signs of problem gambling and offer appropriate support.
• Platform Improvements: Analyzing aggregated usage data to improve the platform's design, performance, and overall experience.

4 Data Sharing

Hijau44 does not sell members' personal data to any external parties. However, in certain situations we may share data with a limited number of third parties, solely to enable the smooth operation of the platform:

• Payment Providers: Financial institutions and payment processors used to handle deposits and withdrawals — including FPX, Touch 'n Go, GrabPay, MAE, and local banks.
• Technical Service Providers: Cloud infrastructure partners, cybersecurity services, and analytics providers that help us operate the platform.
• Authorities & Regulatory Bodies: When required by law, court order, or law enforcement investigation.
• Identity Verification Providers: Trusted third-party KYC services to help verify member identities securely.

All third parties we engage are bound by strict confidentiality agreements and data protection obligations. They are only permitted to use your data for the purposes we specify.

5 Data Security

We implement comprehensive technical and organisational security layers to protect your personal data from unauthorised access, loss, misuse, or disclosure:

• Transit Encryption: All communications between your device and hijau44 servers are secured with TLS 1.3 / SSL 256-bit encryption.
• Storage Encryption: Sensitive data such as passwords and financial information is stored in encrypted format using irreversible one-way hashing algorithms.
• Two-Factor Authentication (2FA): An additional layer of protection for account login that every member can enable.
• 24/7 Monitoring: A round-the-clock threat detection system to identify and respond to unusual activity.
• Internal Access Controls: Only specifically authorised personnel may access members' personal data, and every access is logged for audit purposes.
• Regular Security Testing: Our platform undergoes regular penetration testing and security audits by independent third parties.

While we take all reasonable measures, no system is completely immune to cyber threats. We encourage you to play your part by using strong passwords, not sharing your login credentials, and promptly reporting any suspicious activity to us.

6 Cookies & Tracking Technologies

Hijau44 uses cookies and similar tracking technologies to enhance your browsing experience, analyse platform performance, and ensure security features function properly. There are several types of cookies we use:

• Essential Cookies: Required for core platform functions such as login sessions, security, and language preferences. These cookies cannot be disabled.
• Analytics Cookies: Helping us understand how members use the platform, which pages are visited most, and time spent in each section.
• Functional Cookies: Saving your preferences such as preferred language, display mode, and other personal settings.
• Performance Cookies: Monitoring page load speeds and technical issues to help us continuously improve platform performance.

You can manage your cookie settings through your web browser settings. Please note that disabling certain cookies may affect the functionality or user experience of the platform.

7 Data Storage & Deletion

Hijau44 retains your personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable law:

• Active Account Data: Retained for as long as your account remains active on the hijau44 platform.
• KYC and Transaction Data: Retained for a minimum of 7 years after account closure, in accordance with Malaysia's anti-money laundering legal requirements.
• Technical Logs: Retained for 90 days for security and technical troubleshooting purposes.
• Communication Records: Retained for 2 years for complaint reference and customer support purposes.

When data is no longer needed and there is no legal obligation to retain it, we will securely delete or anonymise it using industry-approved methods.

8 Your Rights

As a hijau44 member and data subject under Malaysia's PDPA, you have the following rights regarding your personal data:

To exercise any of the above rights, contact our privacy team via email [email protected]. We will respond to your request within 30 business days.

9 Children's Privacy

The hijau44 platform is exclusively for users aged 18 and above only. We do not knowingly collect, store, or process the personal data of any individual under the age of 18.

If we discover that data belonging to a person under 18 years of age has been collected without our knowledge, the account in question will be closed immediately and all related data will be deleted from our systems. If you believe a minor has registered an account on our platform, please notify us immediately.

10 Policy Amendments

Hijau44 reserves the right to amend this Privacy Policy at any time. Members will be notified of any material changes through:

• In-account notifications upon login after an update is published.
• Notification email sent to the address registered on your account.
• Updates the "Updated" date at the top of this document.

Continued use of the hijau44 platform after any amendments are published will be deemed full acceptance of the updated policy. We encourage you to review this page from time to time.

11 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way we handle your personal data, please contact us through the following channels:

• Privacy Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 via the support icon within the platform
• FAQ: Visit page FAQ for instant answers

All privacy-related inquiries will be responded to within 3 business days. For formal complaints, please use our privacy email address and include "Privacy Complaint" in the subject line of your message.