heng29 is committed to protecting the personal data of every Malaysian player who interacts with our platform. This Privacy Policy explains what data we collect, why we collect it, how we use and protect it, and the rights you hold as a data subject.
heng29 ("heng29", "we", "us", "our") operates the online gaming and sports betting platform at heng29.cam. We take the privacy and security of your personal data extremely seriously. This Privacy Policy ("Policy") describes how we collect, process, store, use, and protect personal data obtained from players, visitors, and users ("you", "your") of the heng29 platform and any associated services.
This Policy applies to all Malaysian players and any other individuals who access heng29.cam, register an Account, use our services, contact our support team, or otherwise interact with heng29 in any capacity. It covers all personal data collected through our website, live chat, email communications, and any other digital channels operated by heng29.
By creating an Account with heng29, making a deposit, or continuing to use our platform following any update to this Policy, you acknowledge that you have read and understood how we process your personal data as described herein. If you do not agree with any aspect of this Policy, please discontinue use of the platform and contact our support team to close your Account.
Our Commitment: heng29 will never sell, rent, or trade your personal data to third parties for their own marketing purposes. Your data exists to enable us to provide you with a safe, personalised, and legally compliant gaming experience — nothing more.
For the purposes of this Privacy Policy, the following definitions apply:
Any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, IP address, location data, or any other identifier that, alone or in combination, can identify an individual.
heng29, being the entity that determines the purposes and means of processing personal data collected through the heng29 platform.
Any third party engaged by heng29 to process personal data on its behalf under appropriate data processing agreements, including payment service providers, KYC verification partners, and IT infrastructure providers.
The individual whose personal data is being processed — in the context of heng29, this refers to registered players, account applicants, or any visitor who submits personal data through the platform.
Any operation or set of operations performed on personal data, including but not limited to collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, erasure, or destruction.
A freely given, specific, informed, and unambiguous indication by you of agreement to the processing of your personal data, provided through a clear affirmative action such as ticking a checkbox or clicking an acceptance button during registration.
Identity and address verification documentation submitted by a player, including government-issued identification (e.g., Malaysian NRIC, Passport, Driver's Licence), utility bills, and selfie photographs, for the purpose of verifying account ownership and age.
heng29 collects the minimum personal data necessary to provide our services, meet legal and regulatory obligations, and maintain the security and integrity of the platform. The categories of personal data we may collect include:
| Category | Examples of Data Collected | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, NRIC/Passport number | Account registration, KYC verification, age confirmation |
| Contact Data | Email address, phone number, residential address | Account communication, support, verification |
| Financial Data | Payment method details, deposit/withdrawal history, transaction records | Payment processing, fraud prevention, AML compliance |
| Technical Data | IP address, device type, browser, operating system, session data | Platform security, fraud detection, service optimisation |
| Usage Data | Game history, betting activity, pages visited, session duration | Service improvement, responsible gambling monitoring, personalisation |
| Communications Data | Support chat transcripts, email correspondence content | Customer service, dispute resolution, quality assurance |
| KYC Documents | NRIC/Passport scans, utility bills, selfie photographs | Mandatory identity verification, withdrawal processing |
| Marketing Preferences | Opt-in/opt-out status for promotional communications | Sending relevant promotions where consent is given |
Special Category Data: heng29 does not intentionally collect special category data (e.g., health data, religious beliefs, political opinions). If any such data is incidentally disclosed in customer communications, it will not be used for any processing purpose and will be deleted as soon as practicable.
heng29 collects personal data through the following means:
heng29 processes your personal data for the following specific purposes. We only process data for purposes that are legitimate, necessary, and proportionate:
heng29 processes your personal data only where we have a valid legal basis to do so. The applicable legal bases for our processing activities are:
heng29 does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes. We may share your personal data with third parties only in the following circumstances and only to the extent strictly necessary:
We engage trusted third-party service providers to assist in delivering our services, including payment processors (e.g., DuitNow, FPX operator banks, Touch 'n Go, GrabPay, cryptocurrency network processors), KYC verification partners, IT hosting and infrastructure providers, customer support platform providers, and fraud detection services. All such providers are bound by written data processing agreements and are prohibited from using your data for any purpose other than delivering the contracted service.
heng29 may disclose personal data to law enforcement authorities, regulatory bodies, or courts of competent jurisdiction where required to do so by applicable law, court order, or regulatory direction — including in connection with AML, CTF, or fraud investigations.
In the event of a merger, acquisition, restructuring, or sale of all or substantially all of heng29's assets, personal data held by heng29 may be transferred to the successor entity. Affected players will be notified of any such transfer and the new data controller's privacy practices.
No Sale of Data: heng29 will never sell your personal data to advertisers, data brokers, or any other third party for commercial gain. Any data sharing that occurs is strictly limited to the operational purposes described in this Section.
heng29 uses cookies and similar tracking technologies on heng29.cam to enable essential site functionality, improve your browsing experience, and — with your consent — deliver personalised content and analyse Platform usage.
You may manage your cookie preferences at any time through your browser settings or our on-site cookie preferences panel. Note that disabling strictly necessary cookies will impair your ability to use the Platform. Consent-based cookies are only activated after you provide explicit permission.
heng29 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures. Where anonymisation is applied, the resulting aggregated data does not constitute personal data and may be retained indefinitely for statistical or analytical purposes.
heng29 implements robust technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, disclosure, or alteration. Our security measures include, but are not limited to:
Your Responsibilities: While heng29 takes extensive measures to protect your data on our end, account security also depends on you. Please use a strong, unique password for your heng29 Account, enable two-factor authentication, and never share your login credentials with anyone. Notify our support team immediately if you suspect any unauthorised access to your Account.
As a data subject, you hold the following rights with respect to the personal data heng29 holds about you. To exercise any of these rights, please contact our Data Protection team at the details provided in Section 15.
We will respond to all valid data rights requests within 30 calendar days of receipt, or notify you if an extension is required. We may need to verify your identity before processing any request. Note that certain rights are subject to limitations where processing is required to meet legal obligations or to protect the rights of other individuals.
To exercise any of your data rights, please contact our support team via live chat or by email at [email protected] with the subject line "Data Rights Request". Please include your full name, registered email address, and the nature of your request. We do not charge any fee for exercising your data rights in standard circumstances.
heng29 enforces a strict minimum age requirement of 21 years for all registered players. Our platform is not directed at, and we do not knowingly collect personal data from, any individual under the age of 21. Access by minors is actively prevented through our registration process and KYC verification procedures.
If heng29 discovers or is notified that personal data has been collected from a person below the age of 21, we will take immediate steps to close the affected Account, forfeit any associated funds in accordance with our Terms & Conditions, and delete all personal data associated with the Account as promptly as possible.
Parents and guardians who become aware that a minor may have accessed or registered on the heng29 platform should contact our support team immediately at [email protected].
In the course of providing our services, your personal data may be transferred to and processed in countries outside of Malaysia, including for the purposes of cloud storage, payment processing, and KYC verification. Where such transfers occur, heng29 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under applicable data protection laws.
Safeguards for international transfers include: contractual data processing agreements with standard clauses incorporating adequate data protection obligations, and selection of service providers operating in jurisdictions recognised as providing adequate data protection standards.
heng29 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. The effective date at the top of this document will be updated upon any revision.
Where changes are material — meaning they substantively affect how we collect, use, or share your personal data — heng29 will notify registered Members by email or via a prominent notice on the Platform prior to the changes taking effect. We encourage you to review this Policy periodically to remain informed about our current practices.
Your continued use of the Platform following the effective date of any amended Privacy Policy constitutes your acceptance of the revised terms. If you disagree with any update to this Policy, you have the right to close your Account and request deletion of your personal data subject to applicable retention obligations.
If you have any questions, concerns, or requests relating to this Privacy Policy or heng29's processing of your personal data, please contact our Data Protection team using the details below. We are committed to addressing all data privacy enquiries promptly and transparently.
For full information about how we handle your Account and the broader terms of use, please also review our Terms & Conditions and Responsible Gambling Policy.
Every data protection measure at heng29 is designed with one goal: keeping your personal information safe and your gaming experience private.
All data transmitted between your device and heng29.cam is secured with 256-bit SSL encryption — the same standard used by Malaysia's leading banks, including Maybank and CIMB. Your personal and financial data travels encrypted, always.
heng29 has a strict, unconditional policy against selling, renting, or trading your personal data to advertisers or data brokers. Your information is used exclusively to provide and improve our gaming services to you.
Access, rectify, export, or delete your personal data at any time. Our support team processes all data rights requests within 30 days. You remain in control of your data throughout your heng29 membership.
KYC documents are stored encrypted at rest, accessible only by authorised compliance personnel on a strict need-to-know basis. Documents are never shared outside of mandatory regulatory contexts.
heng29 actively prevents collection of data from anyone under 21. Any data inadvertently collected from a minor is immediately deleted and the associated Account is permanently closed. No exceptions.
We do not keep your data indefinitely. Clear retention schedules govern every category of personal data, after which data is securely deleted or anonymised. Legal retention obligations are met exactly — not exceeded.
Have questions about how we handle your data, or want to exercise your privacy rights? Our support team is available 24/7. You can also explore our full FAQ or return to the homepage.
21+ only | Play responsibly | heng29.cam