Privacy Policy

hgo909 (referred to in this document as "hgo909", "the Platform", "we", "us", or "our") is an internationally licensed online gaming platform that serves players across Malaysia and other permitted jurisdictions. We operate the Platform accessible at hgo909.casa and all associated mobile interfaces and services.

We recognise that privacy is a fundamental right. This Privacy Policy ("Policy") has been prepared in accordance with our international licensing obligations and applicable data protection principles. It sets out, in plain and transparent terms, how hgo909 collects, processes, stores, shares, and protects the personal data of our users, visitors, and registered players.

By accessing the Platform, registering an Account, making a deposit, or otherwise using any feature of hgo909, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. This Policy should be read alongside our Terms & Conditions.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial data, and device identifiers.
• "Data Controller" means hgo909, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of hgo909 under a contractual arrangement.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, modification, or deletion.
• "KYC Data" means identity and address verification documents submitted by a Player for Know Your Customer compliance purposes.
• "Device Data" means technical information automatically collected from a Player's device, including IP address, browser type, operating system, and session duration.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement to the processing of Personal Data for one or more specific purposes.
• "Player" / "User" means any natural person who has registered an Account on, or otherwise accessed, the hgo909 Platform.

hgo909 collects the following categories of Personal Data from Players and Platform visitors:

3.1 Registration & Account Data

• Full legal name, date of birth, and gender;
• Email address and contact telephone number;
• Residential address (including city, state, and postcode);
• Username and encrypted account password;
• Preferred language and communication preferences.

3.2 Identity Verification (KYC) Data

• Scanned or photographed copies of government-issued photo ID (Malaysian MyKad, Passport, or Driver's Licence);
• Proof of residential address documents (utility bills, bank statements, or government correspondence issued within three months);
• Selfie photographs submitted as part of the identity verification process;
• Payment method ownership documentation where required.

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method references;
• Masked payment method identifiers (e.g., last four digits of bank account, e-wallet account reference);
• Currency conversion records for cryptocurrency transactions;
• Bonus and promotional credit history.

3.4 Gameplay & Behavioural Data

• Game session records, bet histories, win/loss data, and wagering patterns;
• Sports betting selections and odds accepted;
• Responsible gambling tool usage (deposit limits set, self-exclusion requests);
• Platform navigation behaviour and feature usage patterns.

3.5 Device & Technical Data

• IP address and geolocation data (country and city level);
• Device type, browser type, and operating system version;
• Session timestamps, login frequency, and session duration;
• Referral source and landing page data.

3.6 Communication Data

• Records of live chat and email correspondence with our support team;
• Feedback, complaint submissions, and dispute correspondence;
• Marketing communication preference settings.

hgo909 collects Personal Data through the following mechanisms:

hgo909 processes Personal Data for the following purposes:

5.1 Account Management & Platform Operation

We use registration data and Account Data to create and maintain Player Accounts, authenticate logins, process transactions, and deliver the full range of Platform features — including casino games, sports betting markets covering the English Premier League, Liga Super Malaysia, UFC, and other events, live dealer tables, and responsible gambling tools.

5.2 Identity Verification & Fraud Prevention

KYC Data is processed to verify Player identities, confirm age eligibility (21 years and above), prevent the creation of duplicate accounts, detect and investigate fraudulent or suspicious activity, and comply with our anti-money laundering (AML) obligations under our international gaming licence. hgo909 employs automated screening tools supplemented by manual review for high-risk cases.

5.3 Financial Processing

Transaction Data is processed to execute deposits and withdrawals through Malaysian payment channels including Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Boost, GrabPay, and cryptocurrency networks (BTC, ETH, USDT). All financial transactions are denominated in Malaysian Ringgit (MYR) or MYR-equivalent.

5.4 Legal & Regulatory Compliance

We are required to retain certain categories of Personal Data and transaction records to satisfy the compliance obligations arising from our international gaming licence and applicable financial crime prevention regulations. Such data is retained only for the minimum period required by law.

5.5 Responsible Gambling Monitoring

Gameplay Data and behavioural patterns are analysed to identify signs of problem gambling behaviour. Where such patterns are detected, hgo909 may proactively contact the Player to offer responsible gambling support tools, in accordance with our Responsible Gambling Policy.

5.6 Platform Improvement & Analytics

Aggregated and anonymised Device Data and Gameplay Data are used to improve Platform performance, identify technical issues, optimise game recommendations, and inform product development decisions. No individually identifiable data is used for these analytical purposes.

5.7 Marketing Communications

Where a Player has provided explicit consent, we may use contact information to send promotional communications regarding bonuses, new game launches, and platform updates. Players may withdraw consent for marketing communications at any time by updating preferences within their Account settings or by contacting our support team.

hgo909 processes Personal Data on the following legal bases:

• Contract Performance: Processing necessary to fulfil the contractual relationship established when a Player creates an Account, including Account management, transaction processing, and Platform access;
• Legal Obligation: Processing required to comply with our international licensing obligations, including KYC verification, AML screening, and financial record retention;
• Legitimate Interests: Processing for fraud prevention, platform security, abuse detection, and aggregate analytics where such processing does not override individual privacy rights;
• Consent: Processing for optional marketing communications and certain analytics activities, where explicit consent has been obtained and may be withdrawn at any time.

hgo909 does not sell, rent, or trade Personal Data to any third party for commercial purposes. Personal Data is disclosed only in the following limited circumstances:

7.1 Payment Service Providers

Transaction Data is shared with licensed payment processors — including the operators of Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, Boost, and GrabPay — solely to the extent necessary to process deposits and withdrawals. Each payment provider operates under its own data protection framework and contractual obligations to hgo909.

7.2 Identity Verification Service Providers

KYC Data may be processed by third-party identity verification specialists engaged by hgo909 under contractual data processing agreements. These providers are prohibited from using Player data for any purpose other than the performance of verification services on hgo909's behalf.

7.3 Game Technology Partners

Pseudonymised gameplay identifiers may be shared with licensed game studio partners for the purposes of game round verification, jackpot pool management, and RNG audit compliance. No directly identifiable Personal Data is shared with game studios.

7.4 Regulatory Authorities & Law Enforcement

hgo909 may be legally obligated to disclose Personal Data to competent regulatory authorities, law enforcement agencies, or judicial bodies where required by applicable law, court order, or regulatory direction. Such disclosures are made only to the extent strictly required and are not subject to Player consent.

7.5 Corporate Transactions

In the event of a merger, acquisition, or material restructuring of hgo909's business operations, Personal Data held by hgo909 may be transferred to a successor entity, subject to that entity providing equivalent or superior data protection commitments.

The hgo909 Platform uses cookies and similar tracking technologies to enhance functionality, maintain session state, analyse Platform usage, and support fraud prevention measures. The following categories of cookies are deployed:

Essential and security cookies are deployed without the requirement for express consent, as they are strictly necessary for the operation of the Platform. Analytics and preference cookies may be disabled by adjusting your browser settings, though doing so may affect certain Platform functionality. hgo909 does not deploy third-party advertising or behavioural tracking cookies.

hgo909 retains Personal Data for the minimum period necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention principles apply:

• Active Account Data: Retained for the duration of the Account's active status and for a period of five (5) years following Account closure, to satisfy AML and licensing audit obligations;
• KYC Documents: Retained for a minimum of five (5) years from the date of submission, in accordance with standard international gaming licence requirements;
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction;
• Gameplay Records: Retained for a minimum of three (3) years for dispute resolution and audit purposes;
• Customer Support Correspondence: Retained for two (2) years from the date of the most recent interaction;
• Marketing Consent Records: Retained for the duration of the consent and for one (1) year following withdrawal of consent.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or irreversibly anonymised. Players may request early deletion of non-mandatory data categories by exercising their rights under Section 11 of this Policy, subject to any overriding legal retention obligations.

hgo909 implements and maintains a comprehensive set of technical and organisational security measures to protect Personal Data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• Transport Encryption: All data transmitted between Players' devices and our servers is protected by industry-standard TLS/SSL encryption (minimum TLS 1.2);
• Data-at-Rest Encryption: Sensitive data categories, including KYC documents and financial records, are encrypted at rest using AES-256 encryption;
• Access Controls: Access to Personal Data systems is restricted to authorised personnel on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication;
• Network Security: Platform infrastructure is protected by firewalls, intrusion detection systems, and continuous monitoring for anomalous activity;
• Regular Security Audits: Our security posture is regularly reviewed by independent security professionals, and any identified vulnerabilities are remediated on a prioritised basis;
• Employee Training: All personnel with access to Personal Data undergo mandatory data protection and security awareness training.

In the event of a data security incident that is likely to result in a high risk to affected Players' rights and freedoms, hgo909 will notify affected individuals without undue delay, in accordance with our notification obligations under applicable data protection frameworks.

Players have the following rights in relation to their Personal Data held by hgo909. To exercise any of these rights, Players should contact our support team at the address provided in Section 15.

hgo909 will respond to all valid rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days, with prior written notice provided to the requesting Player. We may require identity verification before processing any rights request.

Age verification is an integral part of our Account registration and KYC processes. Any Account found to be held by a person under 21 years of age will be immediately suspended, all associated funds will be withheld pending investigation, and any Personal Data collected from the minor will be securely deleted to the extent permitted by applicable legal obligations.

If a parent or guardian believes that a minor has accessed the Platform or provided Personal Data to hgo909 without their consent, they should contact us immediately at the address set out in Section 15 and we will take prompt remedial action.

hgo909 operates under international licensing and may store or process Personal Data on servers located in jurisdictions outside Malaysia. Where Personal Data is transferred outside of Malaysia to a jurisdiction that does not provide an equivalent level of data protection, hgo909 ensures that appropriate safeguards are in place, including:

• Contractual data protection clauses incorporated into agreements with Data Processors in those jurisdictions;
• Transfers only to jurisdictions or entities that maintain adequate technical and organisational security measures;
• Transfers limited to data categories strictly necessary for the purposes described in this Policy.

Players who wish to obtain further information about the safeguards in place for international transfers of their Personal Data may contact hgo909 at the address provided in Section 15.

hgo909 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, Platform features, applicable laws, or regulatory requirements. Material changes will be communicated to registered Players via email or through a prominent in-Platform notification, with a minimum of seven days' notice prior to the updated Policy taking effect.

The "Last updated" date shown at the top of this Policy reflects the date of the most recent revision. We encourage all Players to review this Policy periodically. Continued use of the Platform following notification of an updated Policy constitutes acceptance of the revised terms.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by hgo909, please contact our Data Protection team through any of the following channels: