H2m takes your privacy seriously. This Privacy Policy clearly explains what data we collect, how we use it, who can access it, and what rights you have as a player to control your own personal information.
H2m's Privacy Commitment
For h2m, privacy is more than a legal obligation — it is a core value that shapes how we build and operate every part of our platform.
Every transaction, login session, and data exchange between your device and h2m's servers is protected by 256-bit SSL encryption — the same level of security used by Malaysia's leading banks such as Maybank and CIMB.
H2m never sells, rents, or discloses your personal information to advertisers or commercial third parties without your written consent. Your data belongs to you — it is not a commodity for our business.
H2m operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). All collection and handling of members' personal data is carried out in accordance with the guidelines set by the Department of Personal Data Protection Malaysia.
You may access, update, or request deletion of your personal data at any time through your h2m account settings or by contacting our support team. h2m will process your request within 14 business days.
Your personal data is stored on servers protected by strict access controls, layered firewalls, and regular security audits. h2m retains only the data that is required, for the periods specified under legal and operational requirements.
Welcome to the h2m Privacy Policy. This document ("Privacy Policy") explains how h2m ("Platform", "We") collects, uses, stores, discloses, and protects your personal information when you use h2m's website and services accessible at https://h2m.run.
This Privacy Policy applies to all h2m platform users — including unregistered visitors, active registered members, and former members who have closed their accounts. By using the h2m platform in any capacity, you agree to the collection and use of your personal information as described in this Privacy Policy.
This Privacy Policy should be read together with Terms & Conditions h2m and Responsible Gaming Policy us. If you have any questions about how h2m handles your personal data, please contact us at support@h2m.run at any time.
H2m collects your personal data through several means — directly from you during registration and platform use, automatically through tracking technologies, and in limited cases, from legitimate third parties. The categories of data we collect are as follows:
H2m uses your personal data solely for legitimate purposes that are necessary to operate the platform and deliver the best possible service to you. The primary purposes for which your data is used are as follows:
| Purpose of Use | Legal Basis |
|---|---|
| Member identity verification and KYC process | Legal obligations |
| Processing deposits and withdrawals via Malaysia eWallet | Contractual requirements |
| Account management and customer service | Contractual requirements |
| Fraud detection and account security | H2m's legitimate interests |
| Anti-money laundering (AML) compliance | Legal obligations |
| Platform improvement and user experience | H2m's legitimate interests |
| Marketing communications and promotions (with consent) | Your consent |
| Responsible gaming tools and limit monitoring | Legal obligations & public interest |
H2m does not use your personal data to make automated decisions that have a significant negative impact on you without human involvement. All key decisions affecting your account — such as fraud reviews, KYC verification, and dispute resolution — involve review by qualified h2m staff.
For marketing communications, you may opt out of receiving promotional emails or notifications at any time by clicking the "unsubscribe" link in any h2m marketing email, or by updating your notification preferences in your account settings. Withdrawing consent for marketing communications will not affect your account's services or functionality.
H2m does not sell or rent your personal data to any third party for their own commercial purposes. Your data may be shared only in the following limited and legitimate circumstances:
H2m works with a select group of third-party service providers to operate the platform, including:
All third-party service providers engaged by h2m are required to sign strict data protection agreements and are not permitted to use your data for any purpose other than delivering specific services to h2m.
H2m may be required to disclose your personal data to relevant authorities if mandated by Malaysian law, a court order, or a directive from a legitimate enforcement agency. In such circumstances, h2m will endeavour to notify you of the disclosure as promptly as permitted by law.
H2m continuously invests in security infrastructure and industry best practices to ensure your personal data is protected at all times. The key security measures we have implemented are as follows:
While h2m takes every reasonable step to protect your data, no security system is completely foolproof. We therefore encourage you to use a strong password, enable two-factor authentication where available, and stay alert to phishing attempts that may impersonate h2m.
The h2m platform uses cookies and similar tracking technologies to enhance your experience, ensure the platform functions correctly, and analyse how the platform is used. The following are the types of cookies we use:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential Cookies | Required for core platform functionality — login authentication, session security, and language preferences. Cannot be disabled. | Session / 30 days |
| Performance Cookies | Helps h2m understand how players use the platform so we can improve the user experience. Data is collected anonymously. | Up to 2 years |
| Functional Cookies | Saves your preferences such as favourite sports, display settings, and notification choices for a more convenient experience when you return to the platform. | Up to 1 year |
| Security Cookies | Helps detect suspicious activity, prevent unauthorised access, and protect your account from fraud. | Session |
You can manage or delete cookies through your browser settings. However, disabling essential cookies may affect the functionality of the h2m platform — for example, you may be required to log in again on each visit. For guidance on managing cookies in different browsers, please refer to your browser's help documentation.
H2m does not use third-party targeted advertising or allow ad networks to collect your personal data while you are on our platform. We do not use social media "pixel tracking" technology that would allow these platforms to build user profiles based on your activity on h2m.
Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data h2m holds about you. h2m is committed to making it easy for you to exercise these rights:
You have the right to request and receive a copy of the personal data h2m holds about you. h2m will provide a data report within 14 working days from the date your request is received.
You have the right to request the correction of any inaccurate or incomplete personal data. You can update most profile information directly from your h2m account settings.
You may request deletion of your personal data when it is no longer required. Such requests are subject to statutory data retention obligations (typically 7 years for financial records).
You may object to the processing of your personal data for direct marketing purposes at any time. Your objection will take effect within 5 business days.
You have the right to receive your personal data in a machine-readable format (CSV or JSON) for transfer to another platform, subject to applicable technical and legal limitations.
You may request h2m to restrict the processing of your data under certain circumstances — for example, while you are disputing the accuracy of your data or while we are evaluating your objection.
To exercise any of the rights above, please contact h2m's Data Protection team by email at support@h2m.run with the subject line "Personal Data Rights Request". Please include your account username and the details of your request. h2m will verify your identity before processing the request and will respond within 14 business days.
H2m retains your personal data only for as long as necessary to fulfil the original purpose of collection or to comply with applicable legal obligations. The retention periods for key data categories are as follows:
| Data Category | Retention Period | Reason |
|---|---|---|
| Financial transaction records (deposits, withdrawals) | 7 years after the transaction | Financial & tax legal obligations |
| Betting records and game history | 5 years after the date of play | Audit requirements & dispute resolution |
| KYC documents (copies of MyKad, etc.) | 5 years after account closure | AML obligations & legal requirements |
| Account profile information | Until account closure + 3 years | Resolution of any outstanding claims |
| Customer support communication records | 3 years | Service reference & dispute resolution |
| Technical and security log data | 90 days | Fraud detection & security monitoring |
Once the applicable retention period expires, your personal data will be securely deleted or irreversibly anonymised in accordance with h2m's established data deletion procedures. Anonymised data can no longer be linked to you as an individual and may be retained for aggregate analytics purposes.
In circumstances where there is an unresolved dispute, an ongoing investigation, or other legal requirements, h2m reserves the right to retain relevant data beyond the standard retention period until the matter is fully resolved.
If you have any questions, concerns, or complaints regarding how h2m handles your personal data, we encourage you to reach out to us directly. h2m is committed to addressing every privacy enquiry seriously and within a reasonable timeframe.
Contact channels for privacy and data protection inquiries:
If you are not satisfied with h2m's response to your privacy complaint after using the internal channels above, you have the right to refer your complaint to the Department of Personal Data Protection Malaysia (JPDP), which oversees PDPA compliance in Malaysia.
H2m regards your trust as our most valuable asset. Every decision we make regarding the handling of your personal data takes your interests as a player into account. For more information about your rights as a player, please refer to Terms & Conditions and Responsible Gaming us.
Frequently Asked Questions
Secure Payment Methods
All payment methods below are processed through encrypted channels. h2m does not store your sensitive payment details — transactions are handled directly by trusted payment providers.
256-bit SSL on all transactions · PDPA Malaysia compliance · No full card details stored
Play Safe & Secure
With 256-bit SSL data protection, Malaysia PDPA compliance, and h2m's commitment to never sharing your data with advertisers, you can enjoy your sports betting and casino experience with complete peace of mind.