Data Protection

Heet28 Privacy Policy – Malaysian Player Data Security

At heet28, your privacy is more than a legal obligation — it is our responsibility. This policy clearly sets out how we collect, use and protect every piece of information you share with us.

Updated: 1 January 2026
256-bit SSL
Full Encryption
No Data Sales
To Third Parties
User Rights
Access & Delete Data
Secure Servers
Controlled Storage
Personal Data Protection

Heet28 protects all your personal information using 256-bit SSL encryption technology — the same security standard used by leading banking institutions in Malaysia.

No Data Sales

Heet28 has never and will never sell, rent, or share your personal data with any third party for commercial marketing purposes without your explicit consent.

Full Control in Your Hands

You have the right to access, correct, or delete your personal data at any time. Submit a request to our team and we will respond within 7 business days.

heet28's Privacy Commitment: This Privacy Policy explains how heet28 ("we", "the platform") collects, uses, stores and protects your personal data ("user", "player") when you access our website and services. By registering or using heet28, you agree to the practices described in this Privacy Policy.

1 Introduction

Heet28 is an online casino platform operating for Malaysian players. We understand that your trust is our most valuable asset, and protecting your personal data is a top priority in every operational decision we make.

This Privacy Policy is drafted in accordance with international data protection principles and is intended to ensure you always know what information we hold about you, why we need it, and how you can control it. We encourage you to read this document carefully and to contact us if you have any questions.

Scope of Application: This policy applies to all heet28 users, including website visitors, registered players and former users whose data we continue to hold in accordance with legal requirements.

2 Data We Collect

Heet28 only collects data that is strictly necessary to provide a safe and quality service. The types of data we may collect are as follows:

Data Categories Examples of Information Collection Method
Personal Identity Full name, date of birth, identification card number Registration forms, KYC verification
Contact Information Email address, phone number, residential address Registration forms, account profile
Financial Data Payment methods, deposit & withdrawal records in MYR Transactions via Touch 'n Go, DuitNow, FPX, and more
Usage Data Gaming history, login activity, platform preferences Automated platform systems
Technical Data IP address, browser type, operating system, device ID Server logs, cookies
Communication Live chat records, support emails, feedback Interactions with the support team
Note: heet28 does not collect sensitive information such as biometric data, medical records, or religious information unless specifically required for identity verification or legal compliance purposes.

3 How We Use Your Data

Every piece of data we collect is used for a clear and legitimate purpose. heet28 uses your personal data to:

  • Account Management: Registering, verifying and maintaining your account on the heet28 platform
  • Transaction Processing: Processing deposits and withdrawals in Malaysian Ringgit (RM) via methods such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX
  • Identity Verification (KYC): Verifying that you meet the age requirement (18+) and preventing fraud or money laundering
  • Service Provision: Providing access to slots, Live Casino, table games, football betting, badminton, e-sports and more
  • Service Communications: Sending important notifications related to your account, transactions, or policy changes
  • Marketing (with consent): Sending promotional information, bonuses and exclusive offers where you have given your consent
  • Platform Enhancements: Analysing usage patterns to improve the player experience and heet28 platform performance
  • Legal Compliance: Fulfilling reporting and audit obligations as required by the relevant authorities

4 Legal Basis for Data Processing

Heet28 only processes your personal data where a valid legal basis exists. These bases include:

  • Contract Performance: Processing data necessary to deliver the services you request, including account registration, payment processing, and game management
  • Legitimate Interests: Processing for fraud prevention, platform security and service improvement purposes — provided it does not unfairly prejudice your rights
  • Consent: For optional marketing communications and non-essential cookies, we will obtain your explicit consent beforehand
  • Legal Obligations: Processing required to comply with applicable laws, regulations or directions from the relevant authorities

You have the right to withdraw your consent at any time without affecting the validity of any processing carried out prior to that withdrawal. To withdraw your consent, please contact us at support@heet28.net.

5 Sharing Data with Third Parties

Heet28 does not sell, rent or trade your personal data to any third party for marketing purposes. However, we may share your data in limited circumstances, including the following:

  • Payment Service Providers: Providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow and banks supporting FPX (Maybank2u, CIMB Clicks, RHB Now and others) for processing your transactions
  • Game Providers: Licensed gaming software companies that provide slots, live casino, table games and sports betting platforms to heet28
  • Identity Verification Services: Third-party KYC providers who assist us in securely verifying player identities
  • Regulatory Authority: Law enforcement agencies or regulatory bodies when we are legally required to do so
  • Business Transfer: Should heet28 be involved in a merger, acquisition or asset sale, user data may be transferred as part of that transaction, with appropriate notice provided to affected users
Our Commitment: All third parties with whom we share data are bound by strict confidentiality agreements and are required to handle your data to a protection standard equal to or higher than that of heet28.

6 Cookies & Tracking Technologies

Heet28 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Cookie Type Purpose Duration
Essential Cookies Required for core platform functionality — login, session security, and language preferences Session / 30 days
Performance Cookies Analysing how users interact with the platform for improvement purposes Up to 2 years
Functional Cookies Remembering your preferences and settings for a more personalised experience Up to 1 year
Marketing Cookies Used only with your consent to display relevant promotional content Up to 90 days

You can manage your cookie settings through your web browser. Please note that disabling essential cookies may affect the functionality of the heet28 platform.

7 Data Storage & Security

The security of your personal data is heet28's top priority. We implement comprehensive technical and organisational measures to protect your data against unauthorised access, disclosure, alteration, or destruction.

  • 256-bit SSL Encryption: All data transmitted between your device and heet28's servers is protected with the highest level of encryption
  • Secure Servers: Data is stored on servers protected by firewalls, multi-layered access controls and 24/7 monitoring
  • Internal Access Controls: Only heet28 staff who require access to carry out specific duties are authorised to access user data
  • Regular Security Audits: heet28 conducts regular security reviews and testing to identify and address any system vulnerabilities

Data Retention Period:

  • Active account data: Retained for as long as your account remains active
  • Closed accounts: Retained for a minimum of 5 years for legal compliance and audit purposes
  • Financial transaction data: Retained for a minimum of 7 years in accordance with legal requirements
  • Support communication logs: Retained for 3 years

Once the defined retention period has elapsed, your data will be securely deleted or anonymised in accordance with heet28's internal procedures.

8 Your Rights as a User

As a heet28 user, you have the following rights regarding your personal data:

Right to Access

You have the right to know what personal data we hold about you and to obtain a copy of it. Requests will be processed within 14 business days.

Right to Rectification

If your data is inaccurate or out of date, you have the right to request a correction. You can also update your profile information directly within your account.

Right to Erasure ("Right to be Forgotten")

You may request the deletion of your personal data. Such requests are subject to our legal obligations to retain certain records for specified periods.

Right to Object to Processing

You may opt out of having your data used for direct marketing purposes at any time. Contact us or click the "unsubscribe" link in any of our marketing emails.

Data Portability

You have the right to receive your personal data in a machine-readable format (such as CSV) so it can be transferred to another service provider if needed.

Right to Restrict Processing

In certain circumstances, you may request that we temporarily restrict the processing of your data — for example, while we are investigating a dispute relating to that data.

How to Submit a Request: Send an email to support@heet28.net with the subject line "Privacy Rights Request", along with your full name, account username and details of your request. We will respond within 7 business days.

9 Children's Data

Heet28 is a platform intended exclusively for individuals aged 18 years and above. We do not knowingly collect or process personal data from minors. Should we discover that a child's data has been collected without our knowledge, we will take immediate action to delete that data and close the relevant account.

If you suspect that a minor has registered for or is using the heet28 platform, please contact us immediately at support@heet28.net so we can take the appropriate action.

10 Links to Third-Party Websites

The heet28 platform may from time to time contain links to third-party websites or services. Please note that this Privacy Policy applies solely to the heet28 platform. heet28 is not responsible for the privacy practices of any third-party websites, and we encourage you to read their respective privacy policies before providing any personal information.

11 Changes to This Privacy Policy

Heet28 reserves the right to update or modify this Privacy Policy at any time. Any significant changes will be communicated to you via your registered email or an in-platform notification at least 14 days before they take effect.

The date of the most recent update will always be displayed at the top of this page. Continued use of the heet28 platform after any changes take effect constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, please discontinue use and close your account.

12 Contact Us for Privacy Enquiries

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact us through the following channels:

  • Privacy Email: support@heet28.net
  • Live Chat: Available 24 hours a day, 7 days a week via the heet28 platform
  • FAQs: Refer to the Frequently Asked Questions for answers to frequently asked questions

Our team communicates in both Malay and English. We are committed to responding to all privacy-related enquiries within 3 business days. For formal data rights requests, please state the nature of your request clearly in your email so we can process it efficiently.

Complaints: If you are not satisfied with how we handle your privacy complaint, you have the right to lodge a report with the Malaysian Communications and Multimedia Commission (MCMC) or the relevant data protection authority.

Why Malaysian Players Trust heet28

Security and privacy are not just promises — they are how we operate every single day.


Full Compliance

Heet28 operates in accordance with international data protection standards and complies with all applicable legal requirements.

Secure Database

All data is stored on servers protected by at-rest data encryption and strict multi-layered access controls.

No Spam

Heet28 only sends you marketing communications if you have given your explicit consent. Unsubscribing is easy and available at any time.

Quick Response

All privacy and data requests are handled by our dedicated team within 3–7 business days.

Your Data Is Safe. Our Platform Is Trusted.

Register your heet28 account today and play with peace of mind — we protect your privacy the same way we look after our games. Over 500,000 Malaysian players already trust heet28.

Bahasa Melayu