Privacy Policy
998hihi is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, and the rights you hold as a Member of our platform.
How We Treat Your Data
These six principles shape every data handling decision at 998hihi. The full policy text below provides complete legal detail — these cards offer a plain-language summary.
Minimal Collection
We collect only the personal data that is strictly necessary for account operation, identity verification, payment processing, and regulatory compliance. We do not collect data speculatively or for purposes we cannot justify.
Secure Storage
All personal data held by 998hihi is stored with industry-standard encryption at rest and in transit. Access to personal data within our organisation is restricted on a strict need-to-know basis with access logging in place.
No Sale of Personal Data
998hihi does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Your data belongs to you — we use it only to operate and improve the services you signed up for.
Full Transparency
We document every category of data we collect and the lawful basis for processing it. This policy is written in plain, accessible English so that you always understand exactly what is happening with your information.
Your Rights Are Respected
You have the right to access, correct, delete, and export your personal data. You may also restrict or object to certain types of processing. We provide a clear process for exercising all of these rights — see Section 9 below.
Defined Retention Periods
We do not retain personal data indefinitely. Retention periods are set according to the purpose of the data and applicable regulatory requirements. When data is no longer needed, it is securely deleted or anonymised.
Table of Contents
- 1. Introduction
- 2. Definitions
- 3. Data We Collect
- 4. How We Collect Data
- 5. Purposes of Processing
- 6. Legal Basis for Processing
- 7. Data Sharing
- 8. Data Retention
- 9. Your Rights
- 10. Cookies & Tracking
- 11. Data Security
- 12. International Transfers
- 13. Children's Privacy
- 14. Third-Party Services
- 15. Policy Changes
- 16. Contact & Complaints
Introduction
This Privacy Policy ("Policy") describes how 998hihi ("the Company", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("you", "the User", "Member") who access or use the 998hihi platform, including all related websites and services available at https://998hihi.cam and associated subdomains.
998hihi operates an online entertainment platform providing live casino games, sports betting, and related gaming services, designed specifically for users in Malaysia. The platform is maintained and communicated in the English language.
We are committed to protecting your privacy and handling your personal data with transparency, care, and respect. This Policy is intended to give you a clear and honest account of our data practices so that you can make informed decisions about your engagement with 998hihi.
By registering an account or continuing to use the 998hihi Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.
This Policy should be read alongside our Terms and Conditions, which govern the overall relationship between 998hihi and its Members. In the event of any conflict between this Policy and the Terms, the Terms shall prevail except in matters relating specifically to data protection.
Definitions
The following terms carry the meanings set out below throughout this Policy:
- "Personal Data" — Any information that relates to an identified or identifiable natural person, including name, email address, date of birth, device identifiers, and financial information.
- "Processing" — Any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
- "Data Controller" — 998hihi, which determines the purposes and means of processing personal data collected through the Platform.
- "Data Processor" — Any third party that processes personal data on behalf of 998hihi under a binding data processing agreement.
- "KYC Data" — Identity verification documents and information collected as part of the Know Your Customer process, including government-issued ID, proof of address, and verification selfies.
- "Cookies" — Small text files placed on your device by the Platform to enable functionality, analytics, and session management.
- "Member" — A registered user of the 998hihi Platform who has created an account in accordance with the Terms and Conditions.
Data We Collect
998hihi collects personal data across several categories, as described in the table below. We collect only what is necessary for the stated purpose.
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, gender | At registration and KYC verification |
| Contact Data | Email address, phone number, residential address (including city — Kuala Lumpur, Penang, etc.) | At registration and during account updates |
| KYC Documents | MyKad (NRIC), passport, driver's licence, proof of address, verification selfie | Before first withdrawal or upon request |
| Financial Data | Deposit and withdrawal history, payment method identifiers (e.g., last four digits), transaction amounts in MYR | During deposit and withdrawal transactions |
| Technical Data | IP address, browser type, device type, operating system, session duration | Automatically during Platform use |
| Behavioural Data | Game history, betting patterns, login timestamps, page navigation | Automatically during Platform use |
| Communication Data | Live chat transcripts, email correspondence, support ticket content | During interactions with support team |
| Preferences Data | Responsible gambling limit settings, notification preferences, language settings | When set by the Member in account settings |
How We Collect Data
4.1 Directly from You
The majority of personal data we hold is provided directly by you when you: register an account; complete identity verification; make a deposit or withdrawal using Malaysian payment methods such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, or FPX; contact our support team via live chat or email; or update your account settings.
4.2 Automatically
We automatically collect technical and behavioural data as you interact with the Platform. This includes data collected via cookies, server logs, and analytics tools embedded in the Platform. This data helps us maintain platform security, optimise performance, detect fraud, and improve the user experience.
4.3 From Third Parties
In limited circumstances, we may receive personal data from third-party sources. These include: payment processors and e-wallet operators (to confirm transaction status); identity verification service providers engaged to assist with KYC; and fraud prevention databases used to identify suspicious activity patterns. Data received from third parties is handled with the same standards as data collected directly.
Purposes of Processing
998hihi processes personal data for the following defined purposes only:
- Account management: Creating, maintaining, and administering your 998hihi Member account, including authentication and account security.
- Identity and age verification (KYC): Verifying that you are who you claim to be and confirming that you meet the 21+ age requirement before processing withdrawals.
- Payment processing: Facilitating deposits and withdrawals through supported Malaysian payment channels, including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and cryptocurrency networks.
- Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, account abuse, money laundering, and other illegal activities.
- Regulatory compliance: Fulfilling obligations under applicable anti-money laundering (AML), counter-terrorism financing (CTF), and data protection requirements.
- Customer support: Responding to your enquiries, resolving disputes, and managing complaints.
- Responsible gambling: Monitoring gambling behaviour to identify signs of problem gambling and to enforce self-exclusion, deposit limit, and time-out requests made by Members.
- Platform improvement: Analysing aggregated, anonymised usage data to improve our games, features, and user experience.
- Marketing communications: Sending you promotional offers and platform updates where you have opted in to receive such communications. You may opt out at any time.
998hihi does not use personal data for automated decision-making that produces significant legal effects on Members without human oversight. Our fraud and responsible gambling systems may flag accounts for review, but all resulting actions are subject to human assessment.
Legal Basis for Processing
998hihi processes personal data on one or more of the following legal bases:
- Contractual necessity: Processing required to fulfil our obligations to you under the Terms and Conditions — including account management, payment processing, and KYC verification.
- Legal obligation: Processing required to comply with applicable AML, CTF, age verification, and data protection regulations.
- Legitimate interests: Processing carried out for 998hihi's legitimate business interests, such as fraud prevention, platform security, and service improvement, where these interests are not overridden by your rights.
- Consent: Processing for which you have given explicit consent, such as receiving marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.
Data Sharing
7.1 Third-Party Service Providers
998hihi shares personal data with carefully selected third-party service providers who process data on our behalf under binding data processing agreements. These providers include: payment processors and e-wallet operators (including those facilitating Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and cryptocurrency transactions); identity verification and KYC service providers; cloud infrastructure and data hosting providers; fraud detection and analytics technology providers; and customer support platform operators.
All third-party processors are contractually required to process personal data only in accordance with our instructions, to maintain appropriate security standards, and to not use the data for their own purposes.
7.2 Legal and Regulatory Disclosure
998hihi may disclose personal data to law enforcement agencies, regulatory bodies, financial intelligence units, or courts where required to do so by law or in response to a valid legal order. We will, where permitted by law, notify the affected Member of such a request.
7.3 What We Never Do
998hihi does not sell, rent, or trade personal data to third parties for their own marketing or commercial purposes. We do not share personal data with data brokers or advertising networks for targeted advertising purposes.
Data Retention
998hihi retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any longer retention periods required by applicable law or regulation. The following general retention principles apply:
- Active account data: Retained for the duration of your membership and for a minimum period of 5 years following account closure, to satisfy AML and regulatory record-keeping requirements.
- KYC documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later, in accordance with standard AML compliance requirements.
- Transaction records: Retained for a minimum of 5 years following each transaction, in accordance with financial record-keeping obligations.
- Support communications: Retained for 3 years following resolution of the relevant issue, or longer where the communication relates to an ongoing dispute or regulatory matter.
- Technical and log data: Retained for up to 12 months for security monitoring purposes, after which it is anonymised or deleted.
- Marketing consent records: Retained for the duration of your membership and for 3 years following account closure as evidence of consent management.
When personal data is no longer required, it is securely deleted or irreversibly anonymised so that it can no longer be associated with you as an individual.
Your Rights
As a data subject, you hold the following rights with respect to your personal data held by 998hihi. To exercise any of these rights, please contact our support team as described in Section 16.
Right of Access
Request a copy of all personal data we hold about you, along with information about how it is being used.
Right to Rectification
Request correction of any inaccurate or incomplete personal data we hold about you.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for its original purpose and no overriding legal obligation requires retention.
Right to Restriction
Request that we restrict processing of your personal data in certain circumstances, such as while a rectification request is being assessed.
Right to Portability
Request a structured, machine-readable copy of personal data you have provided to us, for transfer to another service provider.
Right to Object
Object to processing carried out on the basis of legitimate interests, including profiling for fraud detection purposes, subject to overriding legal grounds.
Right to Withdraw Consent
Withdraw consent for processing activities based on consent (e.g., marketing emails) at any time, without affecting prior processing.
Right to Complain
Lodge a complaint with a relevant data protection authority if you believe your personal data has been handled unlawfully.
We will respond to all data rights requests within 30 calendar days. Where a request is complex or numerous, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for the delay within the initial 30-day period.
Cookies & Tracking Technologies
10.1 What We Use
The 998hihi Platform uses cookies and similar tracking technologies to enable essential platform functionality, maintain your session state, prevent fraud, and collect anonymous analytics data that helps us improve the service.
10.2 Types of Cookies
- Strictly necessary cookies: Required for the Platform to function. These enable login session management, security token handling, and load balancing. These cannot be disabled without impairing your ability to use the Platform.
- Functional cookies: Remember your preferences — such as display settings and responsible gambling limit configurations — to personalise your experience across sessions.
- Analytics cookies: Collect anonymised data on how Members use the Platform, including page navigation patterns and game session durations. This data is used internally to improve the Platform and is not shared with advertising networks.
- Security cookies: Used to detect and prevent fraudulent activity, including detection of unusual login patterns and bot activity.
10.3 Managing Cookies
You may configure your browser to refuse or delete cookies. However, disabling strictly necessary cookies will impair your ability to log in and use core Platform features. Analytics and functional cookies can be disabled without affecting core functionality. Please refer to your browser's help documentation for instructions on managing cookie settings.
Data Security
998hihi implements a comprehensive set of technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
- 256-bit SSL/TLS encryption on all data transmitted between your device and the 998hihi Platform.
- Encryption at rest for all personal data and KYC documents stored on our servers.
- Role-based access controls limiting internal access to personal data to authorised personnel with a documented business need.
- Access logging and audit trails to detect and investigate any unauthorised internal access to personal data.
- Two-factor authentication available to Members for their accounts, and required for all internal staff access to systems holding personal data.
- Regular security assessments including vulnerability scanning and penetration testing of Platform infrastructure.
- Incident response procedures that include Member notification in the event of a personal data breach that is likely to result in risk to your rights and freedoms.
While 998hihi takes all reasonable technical and organisational measures to protect your data, no method of electronic transmission or storage is completely secure. You are responsible for keeping your account credentials confidential and should contact support immediately if you believe your account has been compromised.
International Data Transfers
998hihi operates in an international digital environment. Some of our third-party service providers — including cloud infrastructure providers and KYC verification services — may process personal data in countries outside Malaysia. Where such international transfers occur, 998hihi ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required within Malaysia. These safeguards include contractual data protection clauses, binding corporate rules where applicable, and assessment of the recipient country's data protection framework.
Personal data transferred internationally remains subject to this Privacy Policy and the protections described herein.
Children's Privacy
The 998hihi Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account.
If you are a parent or guardian and believe that a minor has registered on the 998hihi Platform, please contact our support team immediately using the contact details in Section 16.
Third-Party Services
The 998hihi Platform integrates with third-party services necessary for its operation, including payment processors for Malaysian e-wallets (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong) and cryptocurrency networks (BTC, ETH, USDT, BNB), live game streaming platforms, and identity verification services.
When you interact with these third-party services — for example, when completing a payment via Touch 'n Go eWallet or DuitNow — the relevant third party's own privacy policy applies to the data they collect directly. 998hihi does not control the data practices of third-party platforms and recommends that you review their respective privacy policies.
998hihi does not embed third-party advertising networks, social media tracking pixels, or external analytics services that would transmit your personal data to parties outside the scope described in this Policy.
Changes to This Privacy Policy
998hihi reserves the right to update or revise this Privacy Policy at any time. When material changes are made — such as changes to the categories of data we collect, the purposes for which we use it, or the rights available to you — we will notify registered Members via in-platform notification or email at least 14 days before the changes take effect, where practicable.
The revised Policy will be published on this page with an updated "Effective Date". Your continued use of the Platform after the effective date of the revised Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not agree with the revised Policy, you should cease using the Platform and contact us to close your account.
We encourage you to review this page periodically to stay informed about how 998hihi protects your personal data.
Contact Us & Complaints
If you have questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how your personal data has been handled, please contact the 998hihi data protection team through the following channels:
- Live Chat: Available 24 hours a day, 7 days a week via the Platform. Average first-response time under 90 seconds. For data rights requests, please indicate "Data Rights Request" at the start of your message.
- Email (plain text — not a clickable link): [email protected] — please write "Privacy Enquiry" in the subject line. Allow up to 4 hours for a first response; data rights requests will receive a substantive response within 30 calendar days.
Where you are not satisfied with our response to a data rights request or complaint, you have the right to escalate the matter to a relevant data protection supervisory authority in your jurisdiction.
This Privacy Policy was last reviewed and updated on 1 January 2026. It supersedes all prior versions of the 998hihi Privacy Policy. A record of prior versions is maintained internally and is available on request.
Questions About Your Privacy?
Our support team is available around the clock to answer questions about your data, help you exercise your rights, or explain any part of this Policy in plain language.
For players aged 21 and above only. Gambling involves financial risk. Please play responsibly.