Privacy Policy

Hanabi88 ("the Company", "we", "us", "our") is the operator of the online gaming platform accessible at hanabi88.cam ("the Platform"). We are committed to safeguarding the privacy and personal data of every individual who accesses or uses the Platform, including registered players, prospective players, and visitors to our website.

This Privacy Policy ("Policy") describes how Hanabi88 collects, uses, stores, shares, and protects personal data in connection with your use of the Platform. It also sets out the rights available to you as a data subject and explains how to exercise those rights.

By registering an Account, depositing funds, or otherwise using the Platform, you acknowledge that you have read, understood, and consent to the data practices described in this Policy. If you do not agree with any part of this Policy, you should not use the Platform and should contact our support team to arrange closure of any existing Account.

This Policy should be read alongside our Terms and Conditions and our Responsible Gambling Policy, both of which form part of the overall agreement governing your relationship with Hanabi88.

For the purposes of this Policy, the following definitions apply:

Hanabi88 collects the following categories of Personal Data in connection with your use of the Platform:

Full legal name, date of birth, gender, nationality, and copies of identity documents including Malaysian Identity Card (MyKad), Passport data page, or Driver's Licence, as provided during the account registration and KYC verification process.

Email address, mobile phone number, and residential address, including postcode. For Malaysian players, this includes city-level data (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam) and state-level information where provided.

Payment method details associated with your account, including e-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay), bank account details used for DuitNow, FPX, Maybank2u, CIMB Clicks, and Public Bank transactions, and cryptocurrency wallet addresses (USDT TRC20) where applicable. Full payment card numbers are not stored by Hanabi88 — card processing is handled directly by our certified payment gateway partners.

Records of all deposits, withdrawals, bonus credits, and wager transactions associated with your Account, including amounts in MYR, timestamps, payment method used, and transaction reference numbers.

IP address, device type and operating system, browser type and version, time zone setting, geolocation data (country/region level), login and session timestamps, and Platform usage logs.

Game history, wagering patterns, bet amounts, session duration, game preferences, and responsible gambling tool usage (e.g., deposit limits set, self-exclusion requests). This data is used for responsible gambling monitoring, fraud detection, and service improvement.

Records of communications between you and our support team, including Live Chat transcripts, email correspondence, and any feedback or dispute submissions.

We collect Personal Data through the following methods:

• Direct provision: Data you provide directly when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or completing any form on the Platform.
• Automated collection: Technical data collected automatically when you access the Platform, including IP address, device information, and session activity via server logs and cookies.
• Third-party providers: Data received from payment processing partners (e.g., DuitNow gateway providers, e-wallet processors) confirming transaction status; identity verification services used during KYC processing; and fraud detection service providers.
• Gaming activity: Data generated automatically as a result of your gameplay activity, including wager history, game results, and session statistics.

Hanabi88 processes Personal Data only where a valid lawful basis exists under applicable data protection law. The primary lawful bases on which we rely are as follows:

Hanabi88 uses the Personal Data we collect for the following purposes:

• Account management: Creating and maintaining your registered Account, authenticating your identity at login, and processing Account updates.
• Payment processing: Executing deposits and withdrawals via your chosen payment method, including confirmation with payment gateway providers such as DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, and USDT TRC20 processors.
• KYC and regulatory compliance: Verifying your identity and age (21 years minimum), screening against AML and sanctions watchlists, and fulfilling gaming licence obligations.
• Fraud prevention and platform security: Detecting, investigating, and preventing fraudulent transactions, account takeovers, bonus abuse, collusion, and other prohibited activities.
• Responsible gambling: Monitoring wagering activity for signs of problem gambling, enforcing deposit limits and self-exclusion tools, and providing intervention where indicated.
• Customer support: Responding to queries, resolving disputes, and processing feedback received through our support channels.
• Platform improvement: Analysing usage patterns, game preferences, and technical performance data to enhance the Platform's functionality, stability, and content offering.
• Legal and regulatory reporting: Preparing reports and records required by our gaming regulator, responding to lawful requests from public authorities, and maintaining records required by law.
• Marketing communications (with consent only): Sending promotional emails, bonus notifications, and Platform updates to players who have opted in to receive marketing communications. You may withdraw this consent at any time.

Hanabi88 does not sell, rent, or trade your Personal Data. We may share your data only in the following circumstances and with the following categories of recipients:

We engage third-party service providers to support the operation of the Platform, including payment processing partners (e-wallet processors, bank gateway providers, cryptocurrency settlement services), identity verification providers, fraud detection services, cloud hosting infrastructure providers, and customer support platform operators. All such providers are bound by contractual data protection agreements and are permitted to process your data only as instructed by Hanabi88.

We may disclose Personal Data to our gaming regulator, financial intelligence authorities, or law enforcement agencies where we are legally required to do so, including in connection with AML reporting obligations, gaming licence compliance audits, court orders, or lawful investigative requests.

In the event of a merger, acquisition, restructuring, or sale of all or part of the Hanabi88 business, Personal Data may be transferred to the acquiring or successor entity, subject to equivalent data protection obligations. Players will be notified of any such transfer that materially affects the processing of their data.

The Hanabi88 Platform uses cookies and similar tracking technologies to ensure the Platform functions correctly, to secure your session, and to analyse usage patterns for performance improvement purposes.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary or security cookies may impair your ability to use the Platform correctly.

Hanabi88 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following retention periods apply as a general guideline:

• Account data (identity, contact, KYC documents): Retained for the duration of your Account plus a minimum of 5 years following account closure, in accordance with AML and gaming regulatory requirements.
• Transaction and wagering records: Retained for a minimum of 5 years from the date of each transaction, as required by financial record-keeping obligations under our gaming licence.
• Communications data (support records, dispute files): Retained for a minimum of 3 years from the date of the last interaction, or longer where an active dispute or regulatory matter is pending.
• Technical and log data: Retained for up to 12 months for security monitoring and fraud detection purposes, after which it is anonymised or deleted.
• Marketing consent records: Retained from the date of consent until withdrawal of consent plus 2 years for compliance documentation purposes.

Upon expiry of applicable retention periods, Personal Data is securely deleted or anonymised in accordance with our data destruction procedures.

As an internationally licensed gaming operator serving players in Malaysia, Hanabi88 may transfer Personal Data to servers, processors, or service providers located in countries outside Malaysia. Such transfers may occur in connection with cloud hosting, payment processing, fraud detection, or KYC verification services.

Where Personal Data is transferred internationally, Hanabi88 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections afforded within Malaysia. These safeguards may include contractual data protection clauses with recipient entities, or reliance on the recipient country's recognised adequacy status under applicable data protection frameworks.

Players may request further information about the specific safeguards applicable to any international transfer of their data by contacting our Data Protection contact at [email protected].

Hanabi88 implements a comprehensive suite of technical and organisational security measures to protect Personal Data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmissions between your device and the Platform;
• Encrypted data storage for all sensitive personal and financial data at rest on our servers;
• Role-based access controls restricting employee access to Personal Data to those with a specific operational need;
• Regular security audits and penetration testing conducted by qualified independent security professionals;
• Multi-factor authentication options available for player accounts to provide an additional layer of account protection;
• Incident response procedures in place to detect, investigate, and respond to data security incidents within regulatory notification timeframes.

While Hanabi88 takes all reasonable precautions to protect your data, no method of electronic transmission or storage is completely secure. If you have reason to believe that your account has been compromised, please contact our support team immediately via Live Chat or email.

As a data subject, you hold the following rights with respect to your Personal Data processed by Hanabi88. To exercise any of these rights, please contact us via the details in Section 16. We will respond to all valid requests within 30 calendar days of receipt.

Please note that certain rights may be limited or restricted where we are required by law to retain your data, where your data is necessary to fulfil a contract with you, or where our legitimate interests in preventing fraud or fulfilling regulatory obligations override your request.

The Hanabi88 Platform is strictly for adults aged 21 years and above. We do not knowingly collect Personal Data from individuals under the age of 21. If you are under 21 years of age, you must not use the Platform or provide any Personal Data to Hanabi88.

If we become aware that we have inadvertently collected Personal Data from an individual under 21 years of age, we will take immediate steps to delete that data and close the associated Account in accordance with our Terms and Conditions.

Parents, guardians, and household members are encouraged to use parental control tools and software to prevent underage individuals from accessing online gambling platforms. If you believe a minor may have accessed the Platform, please contact us immediately.

The Hanabi88 Platform may contain references or links to third-party websites, services, or content (for example, payment gateway landing pages operated by Touch 'n Go eWallet, Boost, GrabPay, or bank online banking portals). This Policy applies solely to data collected and processed by Hanabi88. It does not govern the privacy practices of any third-party website or service.

We strongly encourage you to review the privacy policies of any third-party service you access in connection with the Platform, particularly payment and banking platforms, to understand how those services handle your Personal Data.

Hanabi88 has no control over the content, privacy policies, or data practices of third-party websites and is not responsible for any collection, use, or disclosure of your data by such third parties.

Hanabi88 reserves the right to update, amend, or replace this Privacy Policy at any time. The date of the most recent revision is displayed at the top of this document. Material changes to this Policy will be communicated to registered players via email notification and/or a prominent notice on the Platform prior to the change taking effect.

Your continued use of the Platform following notification of any material amendment constitutes your acceptance of the updated Policy. If you do not agree with the amended Policy, you must cease using the Platform and contact our support team to request Account closure.

For non-material changes — such as editorial corrections, formatting updates, or clarifications that do not affect your rights — we may update this Policy without specific prior notice. We recommend reviewing this page periodically to stay informed of the current version.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your Personal Data by Hanabi88, please contact us using the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the Platform. Average response time under 90 seconds. Suitable for general queries and urgent data concerns.
• Email: [email protected] — for formal data rights requests (Subject Access Requests, erasure requests, etc.), please submit via email with the subject line "Data Rights Request — [Your Full Name]". We respond within 30 calendar days.

For Subject Access Requests and other formal data rights submissions, please include your full name, registered email address, and a description of the request. We may require you to verify your identity before processing certain requests.