Official Documents

Privacy Policy Heng29 — Our Commitment to Your Data Security

Heng29 takes its responsibility to protect your personal information seriously. This document clearly explains how we collect, use, store, and protect your data as one of our valued players.

Effective Date: 1 January 2026
Updated: 1 July 2026
256-bit SSL Encryption
This Privacy Policy is effective from 1 January 2026 and applies to all registered heng29 users. Continued use of our platform constitutes your agreement to the policy stated here.

At heng29, your trust is our most valued asset. Every time you register an account, make a deposit, or simply browse our platform, you are entrusting us with some of your personal information. We take that responsibility very seriously. This Privacy Policy is written in plain, easy-to-understand language — not confusing legal jargon — so you truly know what happens with your data.

We fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA). This means you have the right to know, access, correct, and in certain circumstances request the deletion of your personal data that we hold. We do not sell your information to anyone, without exception.

Section 1
Information We Collect

Heng29 collects information in two main categories — information you provide directly when interacting with our platform, and information collected automatically when you use our services. Both categories are collected solely for legitimate platform operational purposes and no more than is necessary.

Type of Information Data Examples Collection Method Required?
Personal Identity Full name, date of birth, MyKad number Registration & KYC Yes
Contact Information Email address, phone number Registration Yes
Financial Information Bank name, account number (partial), transaction history Deposit & Withdrawal Yes
Technical Data IP address, device type, web browser Automatic Auto
Usage Data Games played, session duration, login frequency Automatic Auto
KYC Documents MyKad copy, bank statement, utility bill Player uploads Withdrawal
  • We only collect information that is strictly necessary to operate our services safely and comply with the law.
  • Full bank account numbers are not stored on our servers — only the last digits for withdrawal verification purposes.
  • We do not collect health, religious, political, or other sensitive information unrelated to gaming services.
Note: Information provided during registration must be accurate and up to date. Providing false information not only violates our Terms and Conditions but may also result in withdrawal delays until identity verification is confirmed.
Section 2
How We Use Your Data

Every piece of data we collect has a clear purpose. We will not use your information for any other purpose without obtaining your consent first. Below is a complete list of how we use the data we collect from you.

  • Identity Verification (KYC): Verifying that players are aged 18 and above and preventing money laundering in compliance with Malaysian law.
  • Transaction Processing: Processing your deposits and withdrawals accurately and securely to the correct account.
  • Customer Support: Verifying your identity when you contact us regarding any account-related issues.
  • Account Security: Detecting suspicious login attempts and protecting your account from unauthorised access.
  • Legal Compliance: Complying with reporting and record-keeping requirements mandated by Malaysian law.
  • Platform Improvement: Analysing usage patterns in aggregate (not individually) to improve the gaming experience.
  • Service Communications: Sending you important notices about your account, transactions, and policy changes via email.
  • Personalised Promotions (with consent): Sending relevant bonus offers and promotions — you may unsubscribe at any time.
Our Commitment: Your data will not be used for any third-party advertising purposes, will not be sold to other companies, and will not be used to profile you for purposes unrelated to heng29 services.
Section 3
Data Retention & Security Measures

Your data security is more than words — it is a technical investment we make every day. All heng29 player personal data is stored in data centers protected by multiple layers of physical and digital security. We use the latest encryption technology to ensure your information cannot be accessed by unauthorized parties.

256-bit SSL Encryption
All data is transmitted via encrypted HTTPS connections. No sensitive data is sent in plain text.
Secure Data Centre
Our servers are protected by multi-layered firewalls, intrusion detection systems, and strict physical access controls.
Internal Access Control
Only authorised personnel may access player data, and every access is recorded in an audit log.
Regular Backups
Data is automatically backed up daily to separate locations to ensure service continuity.

Your personal data will be retained for as long as your account is active. After account closure, we retain necessary records for 7 years to comply with Malaysian legal requirements relating to financial institutions and gambling. After this period, data will be securely deleted.

Data Breach Incidents: In the event of any security breach affecting your data, heng29 is committed to notifying you within 72 hours of becoming aware, in line with international data protection best practices.
Section 4
Data Sharing with Third Parties

We understand you want to know who your information may be shared with. The short answer: we does not sell your data. However, there are limited situations where we need to share certain information with specific parties to enable our platform to function properly and securely.

  • Payment Providers (FPX, DuitNow, TnG, GrabPay): Required transaction information is shared with payment processors to complete your deposits and withdrawals. These providers maintain their own privacy policies.
  • Game Providers: Minimum account information required for game access is shared with our game software providers. This does not include your financial information.
  • Identity Verification Services: Your KYC documents may be processed by recognised third-party verification service providers who comply with strict data protection standards.
  • Malaysian Authorities: We will disclose information to authorities when required by court order, law, or a valid criminal investigation.
  • Third-Party Advertisers: We do not share your personal data with any external advertisers or third-party marketing networks.
  • Data Sales: Your data has never been and will never be sold to any party under any circumstances.
Cross-Border Transfers: If any of our service providers operate outside Malaysia, we ensure that adequate data protection agreements are in place before any data transfer is made, in compliance with the requirements of PDPA 2010.
Section 5
Cookies and Tracking Technologies

The heng29 website and mobile app use cookies and similar tracking technologies to enhance your experience. Cookies are small text files stored in your browser or device. They help us recognise you on return visits and ensure the platform runs smoothly.

Cookie Types Purpose Duration
Essential Cookies Keeping the platform running — login sessions, security, language preferences Until session ends
Preference Cookies Remembering your personal settings such as favourite games and display theme 30 days
Analytics Cookies Understanding how players use our platform (aggregate data, not individual) 90 days
Security Cookies Detecting suspicious activity and protecting your account from unauthorised access 7 days

You can manage or delete cookies through your browser settings. Keep in mind that deleting essential cookies may affect platform functionality — for example, you may need to log in again each time you visit. Analytics cookies can be disabled without affecting your gaming experience.

Section 6
Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010, you have certain rights regarding the personal data we hold about you. heng29 fully respects these rights and will process any requests from you within a reasonable timeframe.

Right of Access
Request a copy of all personal data we hold about you at any time.
Right to Rectification
Correct any inaccurate or incomplete information in your records.
Right to Erasure
Request data deletion in certain circumstances — subject to legal requirements.
Right to Object
Object to the processing of your data for marketing or profiling purposes at any time.
Right to Restriction
Request that we restrict the processing of your data during an investigation or dispute.
Right to Portability
Receive your data in a structured, machine-readable format for transfer to another platform.

To exercise any of the above rights, contact our privacy team via Live Chat or support email. We will process your request within 14 business days. In more complex cases, this period may be extended up to 30 days with notice to you.

Section 7
Contact Us About Privacy

If you have any questions, concerns, or complaints regarding how we handle your personal data, we encourage you to contact us directly. Our privacy team is ready to assist and committed to resolving any issues promptly and fairly.

  • Live Chat: The fastest way to get an immediate response — available 24 hours a day, 7 days a week in the heng29 app.
  • Privacy Email: [email protected] — for written enquiries requiring an official record.
  • Response Time: We strive to respond to all privacy-related inquiries within 3 business days.

If you are not satisfied with how we handled your complaint, you have the right to refer the matter to Department of Personal Data Protection (JPDP) Malaysia which is the regulatory body under the Ministry of Communications and Digital.

Why Malaysian Players Trust heng29

Data protection is more than a promise — it is a system we built from the ground up to safeguard every player.

Bank-Level Encryption
The same 256-bit SSL technology used by Malaysia's leading banks protects every transaction and data communication on the heng29 platform.
Full PDPA Compliance
We fully comply with Malaysia's Personal Data Protection Act 2010, giving you clear legal rights over your personal data.
No Data Selling
Our strongest commitment — your personal information will never be sold, rented, or shared with advertisers without your consent.
Full Account Control
You can access, correct, or request deletion of your data at any time through your account settings or by contacting our team.
Flexible Communication Preferences
Choose the types of notifications you want to receive — promotions, account updates, or security alerts only. Unsubscribe at any time without any hassle.
Full Audit Log
Every access to your data by our staff is recorded in tamper-proof audit logs, ensuring accountability at every level.

Privacy FAQs

Answers to the most frequently asked questions about data protection at heng29.

Yes, absolutely safe. heng29 does not store your full bank account number — we only retain the last few digits for withdrawal verification purposes. All financial information is transmitted via 256-bit SSL encryption and processed directly by recognised payment providers such as FPX and DuitNow. Our internal team does not have access to your full bank account details at any time.

You have the right to request deletion of your personal data. However, there are some important exceptions — Malaysian law requires us to retain financial transaction records for 7 years after account closure. Data subject to this legal requirement cannot be deleted before that period ends. All other data not subject to legal obligations will be deleted within 30 days of your request being approved.

We may use your data to send promotions and bonus offers directly related to heng29 services — but only if you have consented to receive marketing communications during registration or later through your account settings. We do not share your data with third-party advertisers, and you may opt out of marketing communications at any time via your account settings or by contacting our support team.

When your account is closed, access to the platform will be disabled immediately. Your personal data and transaction records will be retained for 7 years to comply with Malaysian legal requirements for financial records. After this period, all data will be securely deleted using industry-recognised data disposal methods. You may request a full report of the data we hold at any time during this retention period.

You can disable analytics cookies in two ways: first, through your web browser settings by blocking or deleting cookies from the heng29.app domain; second, by contacting our support team and requesting to withdraw your analytics cookie consent. Disabling analytics cookies will not affect your gaming experience — all core platform functions will continue to work as normal. Only essential cookies required for basic platform operations will remain active.

In the event of any security incident affecting your personal data, heng29 has a clear incident response protocol in place. We will notify you via your registered email within 72 hours of the incident being confirmed, explaining the type of data involved, potential risks, and steps taken. We will also report the incident to Malaysia's Department of Personal Data Protection in accordance with legal requirements. Immediate remediation measures will be taken to prevent any further misuse.
🔒

Play with Peace of Mind — Your Data is Always Protected

Heng29 ensures every Malaysian player enjoys a safe, transparent, and responsible gaming experience. Register a free account today and discover the difference of a platform that truly puts you first.

Bahasa Melayu