henyai20 Privacy Policy

This Privacy Policy ("Policy") issued by henyai20 ("the Company", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at henyai20.cam ("the Platform"). It sets out the basis on which we collect, process, store, and disclose personal data relating to individuals ("Users", "Members", "Players") who access or use the Platform.

henyai20 is committed to protecting the privacy and personal data of all Members, including those located in Malaysia — our primary market, serving players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and beyond. We take our data protection responsibilities seriously and operate in accordance with applicable data protection laws and international best-practice privacy standards.

By registering an account, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and that you consent to the processing of your personal data as described herein. If you do not agree to this Policy, you must not use the Platform.

For the purposes of this Policy, the following terms have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact information, location data, financial information, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, organisation, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means henyai20, the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means any third-party service provider that processes Personal Data on behalf of henyai20 under a contractual data processing agreement.
• "KYC Data" means identity verification documentation including government-issued identification, proof of address, and selfie images submitted during the Know Your Customer verification process.
• "Cookies" means small data files placed on your device by the Platform to facilitate functionality, personalisation, session management, and analytics.
• "Sensitive Personal Data" means a subset of Personal Data warranting heightened protection, including financial account details, identity document numbers, and biometric data submitted for verification purposes.

henyai20 collects the following categories of Personal Data from Members and Platform visitors. We collect only what is necessary for the purposes described in this Policy.

henyai20 processes Personal Data on the following lawful bases, depending on the purpose for which the data is used:

• Performance of a Contract: Processing necessary to provide you with the Platform services you have registered for, including account management, payment processing, game delivery, and withdrawal execution.
• Legal Obligation: Processing required to comply with applicable laws and regulatory obligations, including anti-money laundering (AML) requirements, Know Your Customer (KYC) verification mandates, and data retention requirements under applicable gaming regulations.
• Legitimate Interests: Processing carried out in pursuit of our legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, and service improvement — provided these interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — principally in relation to direct marketing communications and non-essential cookies. You may withdraw consent at any time by contacting our support team or adjusting your account preferences.

henyai20 uses the Personal Data we collect for the following purposes:

5.1 Account Management & Service Delivery. To create, maintain, and administer your account; to authenticate your identity on login; to process deposits and withdrawals via your chosen payment method (including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and cryptocurrency channels); to provide access to casino games and sportsbook features; and to deliver customer support in English, Bahasa Melayu, and Mandarin.

5.2 Identity Verification & Compliance. To fulfil our Know Your Customer (KYC) obligations; to conduct anti-money laundering (AML) screening; to verify your age (21+ requirement) and residency status; and to comply with reporting obligations under applicable gaming and financial regulations.

5.3 Fraud Prevention & Security. To detect, investigate, and prevent fraudulent transactions, account takeovers, identity theft, bonus abuse, money laundering, and other prohibited activities. This includes automated risk-scoring based on transaction patterns, IP analysis, and device fingerprinting.

5.4 Responsible Gambling. To monitor gaming activity for indicators of problem gambling behaviour; to enforce self-exclusion requests, cooling-off periods, and deposit limits; and to contact Members where we have reasonable concern about their gambling patterns — consistent with our responsible gambling obligations.

5.5 Platform Improvement & Analytics. To analyse aggregated usage data to understand how Members interact with the Platform; to identify and resolve technical issues; to optimise game performance and cashier functionality; and to develop new features based on observed user behaviour.

5.6 Marketing Communications. To send promotional offers, bonus notifications, and platform updates to Members who have opted in to receive such communications. All marketing messages include a clear opt-out mechanism. We do not send unsolicited marketing communications to Members who have not explicitly consented.

henyai20 does not sell, rent, or trade Personal Data to third parties for commercial purposes. We share Personal Data only in the following limited circumstances:

6.1 Service Providers and Data Processors. We engage veted third-party service providers to perform specific functions on our behalf. These providers are permitted to process Personal Data only as directed by henyai20 under a written data processing agreement, and they are prohibited from using the data for any other purpose. Categories of service providers include:

• Payment processors and e-wallet providers (including those facilitating Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX transactions, and cryptocurrency networks);
• KYC and identity verification technology providers;
• Cloud hosting and infrastructure providers;
• Customer support software platforms;
• Fraud detection and AML screening services; and
• Analytics and platform performance monitoring tools.

6.2 Legal and Regulatory Obligations. We may disclose Personal Data to law enforcement authorities, regulatory bodies, courts, or other public authorities where we are required to do so by applicable law, court order, or regulatory instruction — including in connection with gaming licence compliance requirements, AML investigations, or criminal proceedings.

6.3 Corporate Transactions. In the event of a merger, acquisition, restructuring, or sale of henyai20 or substantially all of its assets, Personal Data held by the Company may be transferred to the acquiring entity as part of that transaction, subject to the same privacy protections described in this Policy.

henyai20 retains Personal Data for no longer than is necessary for the purpose for which it was collected, subject to the following minimum retention periods imposed by applicable law and regulatory obligations:

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised in accordance with our internal data destruction procedures.

henyai20 implements a comprehensive range of technical and organisational security measures to protect Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and henyai20 servers is protected by 256-bit SSL/TLS encryption. The Platform enforces HTTPS on all pages.
• Encryption at Rest: Sensitive data stored in our databases — including financial account references and KYC documentation — is encrypted at rest using AES-256 or equivalent standards.
• Password Hashing: User passwords are never stored in plain text. All passwords are processed using modern cryptographic hashing algorithms (bcrypt or equivalent) with per-user salting.
• Access Controls: Internal access to Personal Data is restricted on a need-to-know basis. Administrative access to production systems requires multi-factor authentication and is subject to audit logging.
• Infrastructure Security: Platform infrastructure is hosted certified data centres with physical access controls, redundant power, and environmental monitoring. We conduct regular penetration testing and vulnerability assessments.
• Incident Response: henyai20 maintains a documented data breach incident response procedure. In the event of a breach that is likely to result in a high risk to your rights and freedoms, we will notify affected Members without undue delay.

henyai20 uses cookies and similar tracking technologies (including local storage, session tokens, and web beacons) to provide and improve the Platform experience. We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for Platform functionality, including session authentication, cashier operations, and security functions. These cookies cannot be disabled without impairing your ability to use the Platform.
• Performance & Analytics Cookies: Used to collect anonymised data about how Members interact with the Platform — including pages visited, session duration, and error occurrences. This data is used to improve Platform performance and identify technical issues.
• Functionality Cookies: Used to remember your preferences, including language settings (English / Bahasa Melayu / Mandarin), preferred payment method, and display preferences.
• Marketing & Targeting Cookies: Used to deliver relevant promotional content to Members who have consented to receive personalised marketing. These cookies may be placed by our trusted marketing technology partners.

You may manage non-essential cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of specific Platform features. Most modern browsers allow you to block, delete, or restrict cookies via the browser privacy settings menu.

henyai20 operates infrastructure hosted across multiple jurisdictions in order to deliver a reliable, low-latency service to Members across Malaysia, including those in Kuala Lumpur, Penang, Johor Bahru, and other regions. As a result, your Personal Data may be transferred to and processed in countries outside of Malaysia.

Where Personal Data is transferred to a country that does not provide a level of data protection equivalent to that applicable in Malaysia, henyai20 will implement appropriate safeguards to ensure that your data remains protected to a standard consistent with this Policy. Such safeguards may include data processing agreements incorporating standard contractual clauses or equivalent binding transfer mechanisms.

By using the Platform, you acknowledge and consent to the transfer of your Personal Data to countries outside Malaysia as described in this clause, subject to the protections described herein.

Subject to applicable law and the limitations described below, you have the following rights in relation to the Personal Data that henyai20 holds about you. To exercise any of these rights, please contact our Data Protection team via the contact details in Clause 14.

We will respond to all verified data rights requests within 30 calendar days of receipt. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it. We may require you to verify your identity before processing a data rights request.

The henyai20 Platform is strictly intended for adults aged21 years and above. We do not knowingly collect Personal Data from individuals under the age of 21. All accounts are subject to mandatory KYC identity verification which includes age verification as a core component.

If we become aware that Personal Data has been collected from an individual under the age of 21, we will take immediate steps to permanently close the account, void any balance associated with that account, and securely delete the collected Personal Data in accordance with our data destruction procedures.

If you believe that a minor has registered an account on henyai20 or that Personal Data relating to a minor is being held by us, please notify our support team immediately via live chat or by emailing [email protected] (plain text — not a link).

henyai20 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or Platform operations. When material changes are made, we will notify registered Members by displaying a prominent notice on the Platform or by sending an email notification to the address associated with your account prior to the change taking effect.

The "Last Updated" date displayed at the top of this Policy reflects the most recent revision date. We encourage you to review this Policy periodically. Your continued use of the Platform following publication of an updated Policy constitutes your acknowledgement of the changes and your consent to the updated processing terms where consent is the applicable lawful basis.

If you wish to request a copy of a previous version of this Policy, please contact our support team at the details provided in Clause 14.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by henyai20, please contact using the following details. For data rights requests, please clearly state your full name, registered email address, and the specific right you wish to exercise.

For responsible gambling support, self-exclusion requests, or deposit limit adjustments, please visit our Responsible Gambling page for specific guidance and direct contact options.

For enquiries related to the platform's general rules of use, bonus terms, and account eligibility, please refer to our Terms & Conditions.

We aim to respond to all privacy-related written enquiries within 10 business days. For urgent data security matters — such as suspected unauthorised access to your account — please contact us via live chat for immediate assistance.