Privacy Policy hengheng2 – Data Protection & Information Security

1 Introduction

Hengheng2 takes the privacy and personal data protection of every member seriously. This Privacy Policy is drawn up in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data management.

When you register and use the hengheng2 platform — whether via the website hengheng2.app or our mobile app — you agree to the collection and use of your personal information as described in this document. We are committed to being fully transparent about how we handle your data.

2 Information We Collect

Hengheng2 collects various types of information depending on how you interact with our platform. Below is a summary of the categories of information we collect:

We only collect information that is strictly necessary to provide our services safely and efficiently. We never collect sensitive information such as your biometric data or health information.

3 How We Use Your Data

The information we collect is used for legitimate and specific purposes. hengheng2 uses your data to:

• Process account registration and verify your identity through the KYC process
• Process deposit and withdrawal transactions securely and accurately
• Provide responsive and effective customer support
• Send important notifications related to your account, bonuses, and promotions
• Detect and prevent fraudulent activity, money laundering, or abuse
• Comply with applicable legal and regulatory obligations
• Analyse usage patterns to improve the platform and user experience
• Personalise content and promotional offers relevant to your interests
• Ensure the security of your account and the platform as a whole

4 Sharing Information with Third Parties

Hengheng2 does not sell or rent your personal data to any third party. However, there are limited situations where we need to share your information with trusted parties to operate the platform:

• Payment Processors: Transaction information is shared with licensed payment processors such as FPX and eWallet providers to process your deposits and withdrawals.
• KYC Verification Providers: Identity documents are shared with approved third-party identity verification services to ensure legal compliance.
• Technology Service Providers: Server infrastructure and cybersecurity providers that help us maintain platform stability and security.
• Law Enforcement Authorities: If required by a court order or a lawful request from an enforcement agency, we may be required to disclose certain information.
• Analytics Partners: Aggregated data without personal identifiers is shared with analytics providers to understand overall platform usage patterns.

All third parties we engage are bound by strict confidentiality agreements and are not permitted to use your data for any purpose other than those specified in the respective agreements.

5 Data Encryption & Security

The security of your data is a responsibility we take extremely seriously. hengheng2 implements multiple layers of technical and organisational security controls to protect your personal information from unauthorised access, loss, or misuse.

• All communications between your device and hengheng2 servers are protected by 256-bit SSL/TLS encryption
• Sensitive data such as financial information is stored in encrypted format on secure servers
• Our platform infrastructure is protected by intrusion detection systems (IDS) and next-generation firewalls
• Internal access to member data is restricted to authorised personnel only and is fully logged
• Security penetration testing is conducted periodically by independent experts
• Two-factor authentication (2FA) is available and encouraged for all member accounts
• 24/7 monitoring to detect and respond to any security threats

6 Cookies & Tracking Technologies

Hengheng2 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions smoothly. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login verification and session security. Cannot be disabled.
• Performance Cookies: Collect information on how visitors use our website to help us improve the user experience.
• Functional Cookies: Allow the platform to remember your preferences such as language, currency, and display settings.
• Analytics Cookies: Used to understand aggregated traffic patterns and user behaviour for platform improvement purposes.

You can manage your cookie settings through your web browser at any time. Please note that disabling essential cookies may affect certain features of the hengheng2 platform.

7 Your Rights as a Member

As a hengheng2 member and an individual whose personal data we hold, you have the following rights under Malaysia's Personal Data Protection Act 2010:

• Right to Access: You may request a copy of all personal data we hold about you at any time
• Right to Rectification: You have the right to correct any inaccurate or outdated personal information
• Right to Erasure: You may request deletion of your data subject to legal record-keeping obligations
• Right to Restriction: You may request that we restrict the processing of your data under certain circumstances
• Right to Object: You may object to the use of your data for direct marketing purposes
• Right to Portability: You may request your data in a structured, machine-readable format

To exercise any of the above rights, please contact our support team via live chat or email. We will process your request within 30 working days from the date of receipt.

8 Data Retention Period

Hengheng2 retains your personal data only for as long as necessary to fulfil the purpose of collection or as required by applicable Malaysian law.

• Active account data is retained for the duration your account is active and for 2 years after account closure
• Financial transaction records are retained for a minimum of 7 years as required by tax and audit laws
• KYC documents are retained for 5 years after the business relationship ends
• Security logs and account activity are retained for 5 years
• Marketing and communications data is retained for 3 years or until you withdraw your consent

Upon expiry of the retention period, your data will be securely deleted or anonymised in accordance with our established internal procedures.

9 Child Protection

The hengheng2 platform is strictly limited to individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18.

If we discover that personal data of a minor has been collected without our knowledge, we will take immediate steps to delete that information and close the account in question.

10 Privacy Policy Amendments

Hengheng2 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or platform service improvements.

For material amendments, we will notify you via an in-account notice or your registered email at least 14 days before the changes take effect. The last updated date will always be displayed at the top of this page for your reference.

Continued use of the hengheng2 platform after the effective date of any amendment constitutes your acceptance of the updated policy.

11 Contact Us

If you have any questions, concerns, or wish to exercise your privacy rights, we are ready to assist through the following channels:

• 24/7 live chat in the hengheng2 app or website for immediate assistance
• Privacy email: [email protected]
• General support email: [email protected]
• Reference FAQ section us for instant answers to frequently asked questions about privacy

Our Data Protection Officer (DPO) team will respond to all privacy-related enquiries within 5 working days. For formal complaints, we are committed to providing a full response within 30 days.