Privacy Policy hengheng2 — Member Personal Data Protection

1Introduction

This Privacy Policy explains how hengheng2 ("we", "Platform") collects, processes, stores, and protects the personal information you provide when registering and using our services. It applies to all members using the hengheng2 website and our official mobile app.

By registering or using the hengheng2 platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact us to close your account.

We encourage you to read this policy in full and review it from time to time, as we may update it to reflect changes in our privacy practices or applicable legal requirements.

2Personal Data We Collect

The types of data we collect depend on how you interact with the hengheng2 platform. Generally, the data collected can be grouped into several main categories:

We do not collect sensitive data such as health information, religious beliefs or political views unless you choose to share it voluntarily in a customer support context.

• All data is collected solely for the purposes stated in this policy — no excessive collection.
• Data from children under 18 is not knowingly collected. If we discover that an account has been registered by a minor, that account will be closed immediately.
• A selfie or identity document may be requested during the KYC process for verification purposes only.

3How We Collect Data

Hengheng2 collects your personal data through several different channels:

• Account registration: When you complete the registration form with your name, email, phone number, and other basic information.
• Identity verification (KYC): When you submit an identity document or selfie to verify your account or process a withdrawal exceeding certain limits.
• Financial transactions: When you make a deposit or withdrawal, your bank account or digital wallet information is recorded for processing and audit purposes.
• Platform usage: Technical data such as IP addresses, device types, and activity logs are collected automatically when you use our website or app.
• Support interactions: When you contact our support team via Live Chat or email, the conversation records are retained for quality assurance and reference purposes.
• Cookies and tracking technologies: Our website uses cookies and similar technologies to enhance user experience and analyse website traffic.

4Personal Data Usage Purposes

Every piece of data we collect is used for a clear and legitimate purpose. Below is the complete list of how hengheng2 uses your data:

• Account management: Create, verify and manage your member account, including the login process, password recovery and two-factor authentication.
• Transaction processing: Process deposits, withdrawals and other financial transactions accurately and securely. Your bank data is used solely for fund transfer purposes.
• Fraud prevention & security: Detect suspicious activity, prevent money laundering (AML), verify member identities and protect the integrity of the platform.
• Regulatory compliance: Fulfil legal obligations including KYC requirements, financial reporting and cooperation with relevant authorities when required by law.
• Customer support: Resolve complaints, respond to enquiries and provide technical assistance based on your account records and past interactions.
• Platform enhancement: Analyse usage patterns in aggregate (not individually) to improve the platform's design, performance and features.
• Service communications: Send important account-related notifications, promotions you have opted in to receive and relevant system updates.

5Data Sharing with Third Parties

Hengheng2 does not sell, rent, or share members' personal data with third parties for marketing purposes. However, in certain limited circumstances, data may be shared with the following parties:

• Payment providers: Information required to process deposits and withdrawals is shared with banks, digital wallet providers (Touch 'n Go, GrabPay, Boost) and the payment gateways used. They are bound by their own privacy policies.
• Game providers: Casino software and game providers may receive the minimum technical data required to run game sessions securely.
• Analytics services: We use reputable third-party analytics tools to understand website usage patterns in aggregate. This data is anonymised and cannot be traced to any individual.
• Authority: If required by law, court order, or a lawful authority, we may need to disclose certain information. We will notify you in advance where the law permits us to do so.
• Business acquisition: In the event of a merger or acquisition, data may be transferred to the new entity provided that equivalent privacy protections are maintained.

All third parties working with hengheng2 are required to comply with strict data protection standards. We do not permit them to use your data for any purpose other than what has been specified.

6Data Security & Encryption

The security of your personal data is hengheng2's top priority. We implement multiple layers of technical and organisational protection to keep your data safe at all times:

• Transit encryption: All communication between your device and our servers is secured with TLS 1.3 protocol — the highest encryption standard currently available.
• Storage encryption: Sensitive data including passwords is stored using one-way hashing with a unique salt. Your password is never stored in plain text.
• Two-factor authentication (2FA): An additional security layer is available and strongly recommended for all accounts to prevent unauthorised access even if your password is compromised.
• 24-hour monitoring: Our systems are continuously monitored to detect suspicious activity, intrusion attempts, or unusual traffic anomalies.
• Internal access controls: hengheng2 staff may only access member data necessary to perform their duties. Access is governed by a least-privilege policy.
• Regular security testing: Our platform undergoes regular security assessments and penetration testing by qualified independent parties.

7Data Retention Period

Hengheng2 retains your personal data for as long as necessary to fulfill the purposes stated in this policy, or as required by applicable legal obligations.

• Active account data: Retained for the duration your account is active and for an additional period after account closure to fulfil legal obligations.
• Financial transaction records: Retained for a minimum of 7 years as required by financial regulations and anti-money laundering (AMLA) laws.
• Technical activity logs: Typically retained for 12 months, then deleted or anonymised unless required for an ongoing security investigation.
• Customer support records: Retained for 3 years after the last interaction to enable effective historical reference.
• KYC documents: Retained for the period specified by compliance requirements, typically 5 to 7 years.

Once the retention period has ended, data will be securely deleted or fully anonymized so that it can no longer be linked to any individual.

8Your Rights as a Member

As a hengheng2 member, you have certain rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:

To exercise any of the rights above, please contact our support team via 24/7 Live Chat. We will process your request within 14 business days. Please note that some requests may be subject to legal restrictions or compliance requirements that prevent us from fulfilling them in full.

9Cookies & Tracking Technologies

Hengheng2 uses cookies and similar tracking technologies on our website and app. Cookies are small text files stored on your device to enhance your browsing experience and enable certain features to function correctly.

Types of cookies we use:

• Essential cookies: Required for core platform functions such as login authentication, session security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Collect information on how visitors use our website in aggregate and anonymously to help us improve performance and design.
• Functional cookies: Remember your preferences such as language, currency denomination and display settings to deliver a more personalised experience.
• Analytics cookies: Helps us understand which pages are most visited, navigation paths and session duration for continuous improvement purposes.

You can control and manage cookies through your browser settings. However, disabling certain cookies may affect the functionality and your experience on the hengheng2 platform. To learn how to manage cookies on popular browsers, refer to your browser's help documentation.

10Third-Party Links

The hengheng2 platform may contain links to third-party websites or services in certain contexts, such as payment providers or game providers. This Privacy Policy applies to the hengheng2 platform only.

We are not responsible for the privacy practices or content of third-party websites. We encourage you to read the privacy policy of every website you visit before providing any personal information. The presence of a link to a third-party website does not mean hengheng2 endorses or validates their content or privacy practices.

11Changes to Privacy Policy

Hengheng2 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements, or platform improvements. The "Updated" date at the top of this page will be revised each time a change is made.

For significant changes that directly affect your privacy rights, we will endeavor to provide reasonable notice via email or in-platform notification before the changes take effect. Continued use of the hengheng2 platform after such changes are published constitutes your acceptance of the updated Privacy Policy.

12Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, we are ready to assist through the following channels:

• Live Chat 24/7: The fastest way to get an immediate response from our support team.
• Email: [email protected] — for written inquiries requiring documentation or attachments.
• FAQ: Visit page FAQ us for answers to the most frequently asked privacy questions.

Our team will endeavour to respond to privacy-related enquiries within 3 business days. For formal data rights requests, the processing period is up to 14 business days depending on the complexity of the request.