Introduction
hehe555 ("we", "us", "our") operates the online casino and sports betting platform accessible at hehe555.cam (the "Platform"). We are fully committed to safeguarding the personal data of all individuals who interact with our Platform, including registered players, visitors, and prospective users.
This Privacy Policy ("Policy") sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by hehe555. It covers the types of data we collect, the purposes for which we use that data, the circumstances in which it may be disclosed to third parties, the security measures we apply to protect it, and the rights available to you in relation to your personal data.
This Policy applies to all personal data processed by hehe555 in connection with the operation of the Platform, including data collected through the website, mobile interfaces, customer support communications, and payment processing systems. It should be read alongside our Terms & Conditions and our Responsible Gambling Policy.
hehe555 takes its obligations under applicable data protection legislation seriously. Where our processing activities involve players based in Malaysia, we are guided by the principles of Malaysia's Personal Data Protection Act 2010 (PDPA) and any relevant subsidiary regulations or guidelines issued thereunder.
Definitions
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or can be used to identify you as a natural person, directly or indirectly. Examples include your full name, email address, date of birth, Malaysian IC number, and IP address. |
| "Processing" | Any operation performed on Personal Data, including collection, storage, use, disclosure, retrieval, correction, and deletion. |
| "Data Controller" | hehe555, the entity that determines the purposes and means of processing your Personal Data. |
| "Data Processor" | A third party that processes Personal Data on behalf of hehe555, such as a payment service provider or KYC verification partner. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose. |
| "KYC" | Know Your Customer — the identity and age verification process mandated for regulated gaming platforms. |
| "User" / "You" | Any individual who accesses the hehe555 Platform, whether as a registered player or an unregistered visitor. |
Data We Collect
hehe555 collects personal data that is necessary to provide our services, comply with legal obligations, and maintain the integrity and security of the Platform. We do not collect data beyond what is reasonably required for these purposes.
- Full legal name Required
- Date of birth (used for 21+ age verification) Required
- Email address Required
- Mobile phone number Required
- Residential address (including city — e.g., Kuala Lumpur, Petaling Jaya, Johor Bahru) Required
- Username and encrypted password Required
- Preferred currency (MYR) and language Optional
- Copy of valid Malaysian government-issued photo ID (MyKad, passport, or driver's licence) Required for withdrawal
- Proof of address document (e.g., TNB or Indah Water utility bill, bank statement — dated within three months) Required for withdrawal
- Selfie holding the submitted identity document Required for withdrawal
- Source of funds documentation (requested in specific high-value transaction scenarios) Conditional
- Payment method details (e.g., masked card numbers, e-wallet account identifiers for Touch 'n Go, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Connect) Required
- Transaction history — deposits, withdrawals, bonuses, and bet records Automatic
- Cryptocurrency wallet addresses (USDT TRC20 where applicable) Where used
- IP address and approximate geolocation Automatic
- Device type, operating system, and browser information Automatic
- Session logs including login times, pages visited, and gameplay activity Automatic
- Cookies and tracking technology data (see Section 10) Automatic
- Customer support chat transcripts and email correspondence
- Feedback, complaints, and dispute records
- Responses to surveys or promotional campaigns where voluntarily provided
How Data Is Collected
hehe555 collects personal data through the following channels and mechanisms:
| Collection Method | Description |
|---|---|
| Direct Submission | Data you provide when registering an account, submitting KYC documents, making a deposit or withdrawal request, contacting support, or participating in a promotion. |
| Automated Platform Collection | Technical data collected automatically when you access the Platform, including device identifiers, IP address, browser data, and session activity logs. |
| Payment Providers | Transaction data received from Malaysian payment processors including Touch 'n Go, DuitNow, FPX, and participating banks (Maybank, CIMB, Public Bank, Hong Leong) in connection with deposit and withdrawal processing. |
| KYC Verification Partners | Identity verification outcomes and risk scoring from third-party KYC service providers engaged to perform document validation and anti-fraud checks. |
| Cookies & Analytics | Behavioural and preference data collected through cookies, local storage, and similar tracking technologies in accordance with Section 10 of this Policy. |
Purposes of Processing
hehe555 processes your personal data for the following defined purposes. We do not use your data for purposes incompatible with those listed below without obtaining your prior consent or where otherwise permitted by applicable law.
- Account Creation and Management: To register, authenticate, and maintain your hehe555 player account, including verifying your identity, processing password resets, and managing account preferences.
- Age and Identity Verification (KYC): To confirm that you meet the minimum age requirement of 21 years and to comply with our anti-money laundering and know-your-customer obligations.
- Payment Processing: To process deposits via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and Malaysian bank transfers, and to execute withdrawal requests to your nominated payment account.
- Service Delivery: To provide access to games, sports betting markets (including Liga Super Malaysia, EPL, UFC), live casino, and all other Platform features.
- Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, multi-accounting, money laundering, and other prohibited activities as defined in our Terms and Conditions.
- Responsible Gambling Compliance: To monitor gaming activity for indicators of problem gambling, enforce deposit limits and self-exclusion requests, and comply with responsible gaming obligations.
- Legal and Regulatory Compliance: To fulfil obligations under applicable laws and regulations, including responding to lawful requests from regulatory authorities or law enforcement agencies.
- Customer Support: To investigate and resolve queries, complaints, and disputes submitted through our 24/7 live chat or email support channels.
- Platform Improvement: To analyse usage patterns, troubleshoot technical issues, and improve the features, performance, and security of the Platform.
- Promotional Communications: To send you information about bonuses, VIP rewards, and platform updates where you have consented to receive such communications, or where we have a legitimate interest in doing so.
Legal Basis for Processing
hehe555 processes personal data on one or more of the following legal bases, in accordance with applicable data protection principles:
- Contractual Necessity: Processing required to perform the contract between you and hehe555 — primarily your account registration, payment processing, and game access.
- Legal Obligation: Processing required to comply with our legal and regulatory obligations, including KYC verification, anti-money laundering record-keeping, and responding to lawful authority requests.
- Legitimate Interests: Processing necessary for our legitimate business interests, including fraud prevention, security monitoring, responsible gambling supervision, and platform improvement — where such interests are not overridden by your data protection rights.
- Consent: Processing carried out on the basis of your explicit consent, including promotional email communications. You may withdraw consent at any time by contacting our support team or adjusting your communication preferences in your account settings.
Data Sharing & Disclosure
hehe555 does not sell, rent, or trade your personal data to third parties for commercial marketing purposes. We may share your data with third parties only in the circumstances described below, and only to the extent necessary for the specified purpose.
We engage third-party service providers to assist in operating the Platform. These include:
- Payment processors — including operators of Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Connect, Boost, GrabPay, and cryptocurrency networks — for the sole purpose of processing your transactions.
- KYC and identity verification providers — to perform identity document validation and age verification.
- Fraud detection and risk management partners — to analyse transaction patterns and identify suspicious activity.
- Cloud infrastructure and hosting providers — to store and process data securely on enterprise-grade servers.
- Customer support platform providers — to facilitate live chat and email support communications.
All third-party service providers engaged by hehe555 are contractually required to process personal data only on our instructions and to maintain appropriate technical and organisational security measures.
hehe555 may disclose personal data to competent authorities, regulators, or law enforcement agencies where required or permitted by law — for example, in response to a valid court order, regulatory investigation, or statutory reporting obligation related to anti-money laundering or counter-terrorism financing.
In the event of a merger, acquisition, corporate restructuring, or sale of all or part of hehe555's business, personal data held by us may be transferred to the relevant successor entity. We will notify affected users of any such transfer and the applicable privacy terms before data is shared.
Data Retention
hehe555 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. Our general retention standards are as follows:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account Registration Data | Duration of account + 5 years after closure | Legal obligation / Contractual |
| KYC Identity Documents | 5 years from account closure or last transaction | Anti-money laundering regulation |
| Financial Transaction Records | 7 years from transaction date | Financial recordkeeping requirements |
| Customer Support Communications | 3 years from date of communication | Legitimate interest / Dispute resolution |
| Technical and Usage Logs | Up to 24 months | Security monitoring / Platform improvement |
| Marketing Consent Records | Until consent is withdrawn + 1 year | Consent compliance evidence |
Upon expiry of the applicable retention period, personal data is securely deleted, anonymised, or archived in accordance with our data lifecycle management procedures.
Data Security
hehe555 implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data we process. Our security programme includes, but is not limited to, the following safeguards:
- Encryption in Transit: All data transmitted between your device and the hehe555 Platform is encrypted using TLS 1.2 or higher (HTTPS). Look for the padlock icon in your browser address bar.
- Encryption at Rest: Sensitive data stored on our servers, including identity documents and payment information, is encrypted using AES-256 or equivalent standards.
- Access Controls: Access to personal data within hehe555 is restricted on a strict need-to-know basis. Employees and contractors with data access undergo regular training and are bound by confidentiality obligations.
- Two-Factor Authentication: Available to all registered players for additional account-level protection.
- Penetration Testing and Security Audits: Regular third-party security assessments are conducted to identify and address potential vulnerabilities.
- Incident Response: hehe555 maintains a documented data breach response procedure. In the event of a significant data breach affecting your personal data, we will notify affected users and relevant authorities in accordance with applicable obligations.
Cookies & Tracking Technologies
hehe555 uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, and analyse usage patterns. The following types of cookies may be used:
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Essential for Platform functionality — session management, authentication, security tokens. The Platform cannot function without these. | No |
| Functional | Remember your preferences such as language settings, last-used payment method, and display options. | Yes |
| Analytics | Help us understand how players navigate the Platform — pages visited, features used, session duration. Data is aggregated and anonymised where possible. | Yes |
| Security & Fraud Detection | Identify unusual behaviour patterns and support our fraud prevention systems. | No |
You may adjust your browser settings to block or delete certain types of cookies. Note that disabling non-essential cookies may affect the functionality or performance of some Platform features. Where required by applicable law, we will obtain your consent before placing non-essential cookies on your device.
Your Rights
Subject to applicable data protection law, you have the following rights in respect of your personal data held by hehe555. To exercise any of these rights, please contact us using the details in Section 15.
Request a copy of the personal data hehe555 holds about you. We will provide this in a clear, structured format within a reasonable timeframe.
Request correction of inaccurate or incomplete personal data. Account details can often be updated directly within your account settings.
Request deletion of your personal data where it is no longer necessary for the purpose it was collected, or where you withdraw consent, subject to our legal retention obligations.
Request that we limit the processing of your data in certain circumstances — for example, while you contest the accuracy of data we hold about you.
Where processing is based on your consent or contractual necessity, request your data in a structured, commonly used, machine-readable format.
Where processing is based on your consent (e.g., marketing communications), withdraw that consent at any time. Withdrawal does not affect processing that occurred prior to withdrawal.
Children & Minors
If you are a parent or guardian and believe that a person under 21 in your care has accessed or registered on the hehe555 Platform, please contact our support team immediately at [email protected]. We will investigate and take appropriate action without delay.
Age verification is a mandatory step before any deposits or bets are placed on the Platform. Players are required to submit valid government-issued photo ID confirming they meet the minimum age requirement before withdrawal access is granted.
Third-Party Services
The hehe555 Platform may integrate with or link to third-party services — including payment platforms such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and participating Malaysian banks — for the purposes of transaction processing. When you interact with these services, you are subject to their own privacy policies in addition to this Policy.
hehe555 also uses third-party game providers to deliver casino games and sports betting content on the Platform. These providers may process certain technical identifiers (such as session tokens) in connection with delivering game content. They are contractually prohibited from using this data for any purpose other than service delivery.
hehe555 is not responsible for the privacy practices of any third-party services that are not directly under our control. We encourage you to review the privacy policies of any third-party platforms you interact with in connection with your use of the hehe555 Platform.
Changes to This Policy
hehe555 may update this Privacy Policy from time to time to reflect changes in our data processing activities, applicable law, regulatory guidance, or industry best practice. The effective date of the current version is displayed at the top of this page.
When we make material changes to this Policy — for example, changes that affect the categories of data we collect, the purposes for which we use it, or the third parties with whom it may be shared — we will notify registered players via in-platform notification or by email to the address held on their account. Where required by applicable law, we will seek your consent to any significant new processing activities.
Your continued use of the hehe555 Platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree to the updated Policy, you should cease using the Platform and contact us to request account closure.
Contact & Data Requests
For all privacy-related enquiries, data access requests, correction requests, erasure requests, or concerns regarding our data processing practices, please contact the hehe555 Data Privacy team through the following channels:
Send your request to:
[email protected]
(Plain text — not a clickable link)
Subject line: "Data Privacy Request — [Your Full Name]"
Include your registered email address and a clear description of your request. We acknowledge within 5 business days.
Available 24/7 via the in-platform live chat widget. For privacy requests, please ask to be connected to the Data Privacy team. Our support team can initiate formal data requests on your behalf.
Response time: Most queries acknowledged within minutes.
Response Timeframes: We aim to respond to all data rights requests within 30 calendar days of receipt. For complex requests, this period may be extended by an additional 60 days where permitted by law, in which case we will notify you of the extension and the reasons for it.