Official Documents

Privacy Policy heng29 – Your Personal Data Protection

Heng29 takes member privacy very seriously. This policy explains in detail how we collect, use, store, and protect your personal data in accordance with Malaysia's Personal Data Protection Act 2010.

Last Updated: 1 January 2026
SSL 256-bit
Full encryption
PDPA 2010
Full compliance
No Data Sales
To third parties
Secure Data
Protected servers
heng29 Privacy Commitment

Six core principles that underpin our approach to protecting your data

Advanced Encryption

All data transmitted between your device and heng29 servers is protected by SSL 256-bit encryption — the same security standard used by leading banking institutions. Your login credentials, payment details, and personal data cannot be intercepted by third parties.

Malaysia PDPA Compliance

Heng29 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We only collect data that is strictly necessary to provide our services, and all data processing is carried out for legitimate and transparent purposes.

Full Control in Your Hands

As a heng29 member, you have the full right to access, correct, update, or request deletion of your personal data at any time. We respect your rights and process every request promptly and transparently.

No Data Sharing Without Consent

Heng29 never sells, rents, or shares your personal data with any third party for marketing purposes without your prior consent. Your data belongs to you — we are only its responsible custodians.

Secure Data Storage

Heng29 member personal data is stored on servers protected by multiple layers of physical and digital security. Access to this data is restricted solely to personnel who genuinely require it to perform their duties.

Immediate Breach Notification

In the event of any security incident involving member data, heng29 is committed to notifying affected members within the timeframe required by law, along with the steps taken to resolve the matter.

01 Personal Information We Collect

When you register and use the heng29 platform, we collect various types of information to ensure services are delivered safely, efficiently, and in accordance with applicable legal requirements in Malaysia.

The following table outlines the categories of data we collect and their purposes:

Data Category Examples of Information Requirements
Identity Full name, identity card number, date of birth Mandatory – KYC verification
Contact Email address, phone number Mandatory – Account communications
Finance Bank account number, transaction records Mandatory – Payment processing
Technical IP address, device type, web browser Automatic – System security
Usage Betting history, games accessed, session duration Automatic – Service improvement
Preferences Language settings, notification preferences Preferences – Personal experience

We do not collect sensitive data such as health information, religious beliefs, or political views unless you voluntarily share such information through our customer support channels.

02 How We Use Your Data

Every piece of information collected by heng29 is used for specific and legitimate purposes. We do not process your data for any other purpose without first obtaining your consent.

  • Account management: Create, verify and manage your heng29 account, including the secure login process
  • Transaction processing: Process deposits, withdrawals and all financial activity on the platform quickly and accurately
  • KYC identity verification: Meet anti-money laundering (AML) legal requirements and verify member identity before the first withdrawal
  • Security & Fraud Prevention: Detect and prevent fraudulent activity, account misuse and unauthorised access attempts
  • Service improvement: Analyse usage patterns to improve the interface, platform performance and overall member experience
  • Service communications: Send important notifications relating to your account, security and policy changes
  • Marketing communications: Send promotional information and special offers — only to members who have given their consent
  • Legal compliance: Fulfil reporting and compliance obligations to relevant authorities under applicable Malaysian law

You may withdraw consent to receive marketing communications at any time by contacting the heng29 support team or through your account settings. Withdrawing this consent does not affect the processing of data based on other legal grounds.

03 Legal Basis for Data Processing

Heng29 processes your personal data based on one or more legal bases recognised under Malaysia's Personal Data Protection Act 2010:

  • Contract fulfilment: Processing necessary to provide the wagering services you requested under your heng29 account agreement
  • Legal Obligations: Processing required to comply with Malaysian law including AML, KYC and tax reporting requirements
  • Legitimate interests: Processing for platform security, fraud prevention and service improvement purposes that does not affect your fundamental rights
  • Consent: Processing for marketing and promotional communications purposes that requires your explicit consent

Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

04 Data Sharing with Third Parties

Heng29 does not sell or rent your personal data to any third party. However, in certain limited situations, we may share your data with the following parties:

  • Payment service providers: DuitNow, FPX, Touch 'n Go, GrabPay, and banking institutions that process your transactions — only data necessary to complete the transaction is shared
  • Technical service providers: Companies providing cloud computing, analytics, and cybersecurity services that help operate the heng29 platform — bound by strict confidentiality agreements
  • Game providers: Game software development companies that require minimal data to deliver a smooth gaming experience
  • Legal authority: Law enforcement agencies, tribunals, or regulatory bodies when required by law or a valid court order

All third parties we work with are bound by data protection agreements that require them to handle your information to a security standard equal to or higher than heng29's own standards.

Note: heng29 is not responsible for the privacy practices of third-party websites or services you may access via links outside the heng29 platform. Please review their respective privacy policies before using any external services.

05 Data Security Measures

Heng29 implements multiple layers of technical and organisational security to protect your personal data from unauthorised access, loss, damage, or accidental disclosure.

  • Transit encryption: All communications between your device and heng29 servers are secured by TLS 1.3 protocol with SSL 256-bit encryption
  • Storage encryption: Sensitive data stored in our databases uses AES-256 encryption at the storage level
  • Strict access controls: Access to member personal data is restricted to authorized personnel only through a role-based access control system
  • Continuous monitoring: Intrusion detection systems (IDS) and round-the-clock security monitoring operate continuously to detect any suspicious activity
  • Regular security audits: Penetration testing and independent security audits are conducted regularly by accredited third parties
  • Two-factor authentication: 2FA is available for all member accounts to add an extra layer of protection against unauthorized access

While we implement comprehensive security measures, no system can guarantee absolute security. We encourage members to also take responsibility for their own account security by using strong passwords and not sharing their login credentials.

06 Data Retention Period

Heng29 retains your personal data only for as long as necessary to fulfil the original purpose of collection and applicable legal requirements. The following are our data retention guidelines:

  • Active account data: Retained for the duration your account is active and for a period of 7 years after account closure to comply with Malaysia's AML legal requirements
  • Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's accounting and tax legal requirements
  • Security & access logs: Retained for 12 months for security investigation and fraud prevention purposes
  • Support communication data: Retained for 3 years after case resolution for reference and service improvement
  • Marketing data: Retained until you withdraw consent or request deletion

When the retention period expires and there is no legal requirement to retain the data, heng29 will securely delete or anonymize your data in accordance with established data deletion procedures.

07 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by heng29:

Right to Access

Request a copy of the personal data we currently hold and process about you.

Right to Rectification

Request correction of inaccurate or incomplete data in our records.

Right to Erasure

Request deletion of your data when there is no longer a legitimate reason to retain it.

Right to Object

Object to the processing of your data for direct marketing purposes at any time.

Right to Restriction

Request restriction of data processing in certain circumstances during an investigation or dispute.

Right to Data Portability

Receive your data in a structured, machine-readable format for portability.

To exercise any of the above rights, please contact the heng29 privacy team via Live Chat or email at [email protected]. We will process your request within 30 business days. In complex cases, this period may be extended up to 60 days with prior notification to you.

08 Cookies, Tracking & Similar Technologies

The heng29 platform uses cookies and similar tracking technologies to ensure core platform functions run smoothly and to enhance your user experience.

Types of cookies we use:

  • Essential cookies: Required for core platform functions such as login authentication, session security, and language preferences — cannot be disabled
  • Performance cookies: Collect information on how you use the platform to help us identify and fix performance issues
  • Functional cookies: Remember your preferences such as display settings and game choices to make your experience smoother
  • Analytics cookies: Help us understand traffic patterns and platform usage in aggregate, anonymised form for improvement purposes

You can manage cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the heng29 platform and your ability to login or complete transactions.

heng29 does not use third-party cookies for external advertising purposes. All analytics data collected is used solely for heng29's internal use to improve our service quality.

09 Privacy Policy Amendments

Heng29 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or member feedback. The "Last Updated" date at the top of this page will always reflect the most recent amendment.

For material or significant changes that affect how we handle your data, heng29 will provide advance notification via:

  • In-platform notification on heng29 upon your next login
  • Email to the address registered with your account
  • A link to the updated Privacy Policy prominently displayed on the home page

Your continued use of the heng29 platform after the effective date of any amendments constitutes your acceptance of the updated Privacy Policy. If you do not agree, you have the right to close your account before the amendments take effect.

10 Contact Our Privacy Officer

If you have any questions, concerns, or complaints regarding how heng29 handles your personal data, or wish to exercise any of the rights set out in this policy, please contact us through the following channels:

  • Live Chat: Available directly within the heng29 platform — responses typically within 2 minutes, 24/7
  • Privacy Email: [email protected] — please state "Privacy Inquiry" in your email subject line
  • Response time: We are committed to responding to all privacy-related enquiries within 5 business days

For more information on platform usage rules, please refer to Terms and Conditions us. For responsible gaming guidelines, visit the Responsible Gaming. Frequently asked questions about your account and services can be found on the FAQ us.

All privacy-related inquiries are handled in both Malay and English. If you are not satisfied with our response, you have the right to file a complaint with Malaysia's Personal Data Protection Department (PDPDM).

Join heng29 with Full Confidence

Your personal data is fully protected. Register your heng29 account today and enjoy a safe, private, and exciting online betting experience alongside hundreds of thousands of members across Malaysia.

Your data is protected by 256-bit SSL encryption and managed in accordance with Malaysia's PDPA 2010.

Bahasa Melayu