Official Documents Updated: January 2026

Privacy Policy hari2menang – Personal Data Protection for Malaysian Members

Your privacy is not something we take lightly. At hari2menang, every system design decision and data handling process is made with one guiding principle: protecting your information the same way we would want our own protected. Read this policy to fully understand how we manage your personal data.

Effective: 1 January 2026 Bahasa Melayu (ms-MY)
12 Key Sections
Full coverage of how hari2menang handles your data
Data Collected
How We Use Your Data
Third-Party Sharing
Your Rights as a Member
Security & Encryption
hari2menang's Data Protection Commitment

The six core principles that shape hari2menang's approach to privacy and personal data protection for every member in Malaysia.

256-bit SSL Encryption

All data transmitted between your device and hari2menang's servers is protected with 256-bit SSL encryption — the same technology used by Maybank and CIMB to secure online banking transactions in Malaysia.

Banking Security
No Sale of Data to Third Parties

Hari2menang never sells, rents, or transfers your personal data to any third party for marketing purposes. Your information remains strictly between you and hari2menang.

Data Not Sold
Data Minimisation

We only collect data that is genuinely necessary to deliver our services. No excess data is gathered, and every data point we retain has a clear and legitimate purpose.

Data Minimisation Principle
Data Access & Deletion Rights

Every member has the right to request a copy of their personal data, request correction of inaccurate information, or apply for data deletion under the circumstances provided by law.

Member Rights
Secure & Protected Servers

Hari2menang data is stored in data centres that comply with international security standards, equipped with strict physical and digital access controls as well as regular backups to prevent data loss.

Secure Infrastructure
Policy Change Notifications

Whenever there are material changes to this Privacy Policy, hari2menang will notify all members via their registered email address or an in-platform notification at least 14 days before the changes take effect.

Full Transparency
Plain-Language Summary

This Privacy Policy explains how hari2menang collects, uses, stores, and protects your personal data. We have written this document in plain, accessible language so that every Malaysian member can make informed decisions about their privacy. If you have any questions after reading it, contact us at support@hari2menang.xyz.

1

Introduction & Scope of This Policy

hari2menang ("we", "our platform") is the data controller responsible for personal data collected through the hari2menang.xyz website and all related services. This Privacy Policy sets out in detail our commitment to protecting the privacy and personal data of every individual who interacts with our platform.

This policy applies to all registered members, guest users, and anyone who accesses or uses any part of the hari2menang, including our website, mobile app (where available), and any of our official communication channels such as email support, live chat, and WhatsApp.

By registering an account or using the services of hari2menang, you confirm that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our platform. This Privacy Policy should be read together with Terms & Conditions of ours, which constitutes the entire agreement between you and hari2menang.

Applicability to Minors

The hari2menang platform is intended solely for individuals aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. Should we discover that such data has been collected inadvertently, it will be deleted immediately.

2

Personal Data We Collect

hari2menang collects various types of personal data depending on how you interact with our platform. Below is a full breakdown of the data categories we collect:

Data Category Sample Information Mandatory / Optional
Identity Data Full name, date of birth, gender, MyKad or passport number Mandatory (KYC)
Contact Data Malaysian phone number, email address, mailing address Mandatory
Financial Data Bank account number for withdrawals, account holder name, deposit and withdrawal transaction records in MYR Mandatory
Account Data Username, password (encrypted), login history, preference settings Mandatory
Betting Data Betting history, bet types (football, badminton, slots, etc.), amounts in RM, outcomes Automatic
Technical Data IP address, device type, operating system, web browser, session data, access logs Automatic
Usage Data Pages visited, games played, time spent on the platform, clicks and interactions Automatic
Communication Data Live chat transcripts, support emails, complaints and feedback Where applicable

We do not collect special categories of sensitive data — such as health information, religious beliefs, or political views — except in very limited circumstances and only with your explicit prior consent.

3

How We Collect Your Data

hari2menang collects data through several primary channels:

  • Directly from you – When you register an account, fill in a form, contact customer support, or make a deposit or withdrawal via DuitNow, FPX (Maybank2u, CIMB Clicks), Touch 'n Go eWallet, GrabPay, Boost, or ShopeePay.
  • Automatically during use – When you browse the hari2menang platform, our systems automatically record technical data such as your IP address, device type, and usage patterns via cookie technology and server logging.
  • Through the KYC process – When you submit identity verification documents such as a copy of your MyKad or Malaysian passport for account verification and anti-money laundering (AML) compliance purposes.
  • Through payment providers – Financial transaction information shared by registered payment platforms such as DuitNow and the FPX network to verify and process your transactions.
  • From legitimate third-party sources – In limited cases, we may receive information from licensing bodies, fraud prevention agencies, or law enforcement agencies for verification or regulatory compliance purposes.
4

How Your Personal Data Is Used

hari2menang uses your personal data exclusively for the following legitimate purposes, each directly related to the services you have chosen to use:

  • Account management – Creating, managing, and maintaining your account, including login details, preference settings, and activity history.
  • Financial transaction processing – Processing MYR deposits via DuitNow, FPX, and Malaysian e-wallets, as well as withdrawals of winnings to your bank account or e-wallet.
  • Identity verification (KYC) – To meet legal requirements for verifying member identities in order to prevent fraud, money laundering, and other unlawful activities.
  • Betting and gaming services – Providing access to Sports Betting products (badminton, Malaysia Super League football, EPL, e-sports), slots, live casino, jackpot, and the popular games you request.
  • Customer Support – To respond to enquiries, resolve issues, and handle complaints via live chat, email, and WhatsApp in Bahasa Melayu.
  • Security and fraud prevention – Detecting and preventing unauthorised use, fraud, multiple account ownership, bonus abuse, and other suspicious activity.
  • Marketing communications – To send information about promotions, bonuses, and special offers that you have agreed to receive. You may unsubscribe at any time.
  • Platform improvements – To analyse usage patterns and understand how members interact with hari2menang, enabling us to make ongoing improvements to the user experience.
  • Legal compliance – To fulfil legal and regulatory obligations, including maintaining transaction records and responding to requests from lawful authorities.
5

Legal Basis for Data Processing

Every data processing activity at hari2menang is based on at least one valid legal ground. The primary bases we rely on are:

  • Contract performance – Processing required to fulfil the Terms & Conditions you have agreed to, including account management, bet processing, and winnings payouts.
  • Compliance with legal obligations – Processing required to comply with legal obligations relating to anti-money laundering (AML), know-your-customer (KYC), and financial reporting.
  • Legitimate interest – Processing for the purposes of fraud prevention, platform security, and usage analytics for service improvement, where these interests do not override your fundamental rights.
  • Consent – For marketing communications and non-essential cookies, we will obtain your explicit consent beforehand, and you may withdraw that consent at any time.
6

Data Sharing with Third Parties

hari2menang does not sell your personal data to any third party. However, in the course of our business operations, we may share your data with the following categories of third parties, subject to strict confidentiality and data protection agreements:

  • Technology service providers – Companies that provide server infrastructure, cybersecurity, analytics, and other technical services that enable hari2menang to operate. They are only permitted to use your data for purposes we specify and may not use it for their own ends.
  • Payment providers – The DuitNow platform, FPX network, Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay, which process your financial transactions. Data shared with these parties is limited strictly to what is required to complete each transaction.
  • Game providers – Companies such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and Playtech, which supply games to the hari2menang platform. Only the minimal technical data required for game functionality is shared.
  • Fraud prevention agency – Independent bodies and industry databases that assist us in identifying and preventing fraud, money laundering, and multiple account ownership.
  • Legal authorities – Law enforcement agencies, courts, or regulatory bodies where we are required to do so by law or a valid court order. We will notify you of any such disclosure where permitted by law.
Data Processing Agreement

All third parties with access to hari2menang members' personal data are required to sign a Data Processing Agreement that binds them to the same data protection standards we uphold ourselves.

7

International Data Transfers

In certain circumstances, your personal data may need to be transferred to or processed in countries outside Malaysia, particularly in the context of cloud server services, international game providers, or licensing bodies operating across multiple jurisdictions.

hari2menang ensuring that all international data transfers are carried out with adequate safeguards, including:

  • Applying approved contractual standards to ensure data protection equivalent to Malaysian requirements.
  • Data is only transferred to countries or entities that maintain adequate data protection standards.
  • Limiting the scope of data transferred to the minimum necessary for legitimate purposes only.
  • Ensuring all data transfers are encrypted in transit using the latest SSL/TLS protocols.
8

Data Retention Period

hari2menang retains your personal data only for as long as necessary for the purposes set out in this Privacy Policy, or as required by law. The following are the retention period guidelines for key data categories:

  • Active account data – For the duration your hari2menang account remains active, plus 5 years after account closure for legal compliance purposes.
  • Financial transaction records – Minimum 7 years from the transaction date, in line with Malaysia's anti-money laundering and tax legislation.
  • KYC and identity verification records – 5 years after account closure or termination by either party.
  • Customer support communication logs – 3 years from the date of interaction, for reference and dispute resolution purposes.
  • Technical data and server logs – Typically 12 months for security and technical debugging purposes.
  • Marketing data – Until you withdraw your consent or submit a deletion request, whichever comes first.

When data is no longer required, it will be securely deleted or anonymised so that it can no longer be linked back to you as an individual.

9

Data Security Measures

hari2menang invests seriously in data security. The following are the layers of protection we apply to safeguard your personal data:

  • Data encryption in transit – All communications between your device and hari2menang's servers are encrypted with TLS 1.3 / SSL 256-bit. Our platform URL begins with "https://", indicating a secure connection.
  • Data encryption at rest – Sensitive data such as passwords (hashed using strong algorithms) and financial information is encrypted at rest within our databases.
  • Role-based access control – hari2menang staff only have access to the data necessary to perform their duties. Access to sensitive member data is restricted and audited on a regular basis.
  • Regular security testing – The hari2menang platform undergoes regular penetration testing and security vulnerability assessments conducted by independent cybersecurity experts.
  • Real-time threat monitoring – A 24/7 monitoring system that automatically detects and responds to suspicious activity, intrusion attempts, and security anomalies.
  • Incident response procedure – hari2menang maintains a detailed security incident response plan. In the event of a data breach affecting members, we will notify affected individuals within the timeframe required by law.

While we take all reasonable steps to protect your data, no security system is completely foolproof. You also play an important role in keeping your account safe – use a strong password, never share your login credentials, and make sure the devices you use to access hari2menang are secure and up to date.

10

Cookies & Tracking Technologies

hari2menang uses cookies and similar tracking technologies to enhance the user experience and understand how our platform is used. The following are the types of cookies we use:

  • Essential cookies (required) – These cookies are necessary for the platform's core functions, such as maintaining your login session, remembering your bet slip contents, and ensuring session security. The platform will not function properly without them.
  • Performance & analytics cookies – To gather information on how visitors use hari2menang (most-visited pages, time spent, errors encountered) and help us improve the platform. This data is collected in aggregate form and does not personally identify individuals.
  • Functional cookies – To allow the platform to remember your preferences, such as your selected language, preferred display layout, and notification settings, for a more personalised experience.
  • Marketing cookies (with your consent) – Used to display promotional content relevant to your interests within the hari2menang platform, only where you have given your consent.

You can manage and control cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the hari2menang platform. For more information on how to manage cookies in your browser, refer to your browser's help documentation.

11

Your Rights as a Data Subject

As a member hari2menang and data subjects, you hold the following rights in relation to your personal data. All requests may be submitted to us at support@hari2menang.xyz:

Right of Access

You have the right to request and receive a copy of all personal data we hold about you in a readable format. We will respond within 30 days.

Right to Rectification

If you find that personal data we hold about you is inaccurate or outdated, you have the right to request a correction. We will process such requests within 14 days.

Right to Erasure

In certain circumstances (such as withdrawal of consent or where data is no longer required), you may request the deletion of your data, subject to any applicable legal retention requirements.

Right to Restrict Processing

You may request that we restrict the processing of your data in certain circumstances, such as when you are disputing the accuracy of your data or objecting to processing based on our legitimate interests.

Data Portability Rights

You have the right to receive your personal data in a structured, machine-readable format (such as CSV or JSON) for transfer to another service of your choosing.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time. You may also object to processing based on legitimate interest in certain circumstances.

To exercise any of these rights, please submit a written request to support@hari2menang.xyz by stating the right you wish to exercise along with sufficient information to verify your identity. We may require additional identity verification before processing sensitive requests. We will respond to all valid requests within 30 days of receipt.

Limitations on the Right to Erasure

The right to erasure may not be fully fulfilled in all circumstances. We are legally required under Malaysian law to retain certain financial and KYC records for prescribed periods. Where this applies, we will inform you of the data that cannot be deleted and the reasons why.

12

Contact Us & Policy Updates

If you have any questions, concerns, or complaints regarding how hari2menang handling your personal data, please contact us:

  • Email: support@hari2menang.xyz – please mark the email subject as "Privacy Policy" to help expedite processing.
  • Live Chat: Available on the hari2menang platform 24 hours a day, 7 days a week, including public holidays.
  • WhatsApp Support: Log in to your hari2menang account to get our support WhatsApp number.

hari2menang reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Material changes will be communicated to members via their registered email or an in-platform notification at least 14 days before the effective date. Continued use of the platform after the effective date of any changes constitutes your acceptance of the updated policy.

For the latest version of this Privacy Policy, please visit this page periodically. The "Updated" date at the top of this page always reflects when the current version was last revised.

FAQ – hari2menang Privacy Policy

Answers to the most frequently asked questions by Malaysian members about how hari2menang protects and manages their personal data.

Absolutely not. hari2menang does not sell, rent, or transfer members' personal data to any advertising companies, data brokers, or external marketing parties. This is one of our core privacy commitments and has never been compromised. Any marketing communications you receive come solely from hari2menang itself, and only in relation to promotions on our platform. You may opt out of these marketing communications at any time by updating your communication preferences in your account settings or by contacting our support team.

When you close your hari2menang account, your data is not deleted immediately. This is because Malaysian law requires us to retain certain financial and KYC records for a specified period — typically 5 to 7 years depending on the type of data. This data is stored securely under restricted access and is only used when necessary for legal purposes or dispute resolution. Data that is no longer required by law will be securely deleted or anonymised. If you would like to know exactly what data we retain about you after account closure, you may submit a data access request to support@hari2menang.xyz.

hari2menang does not directly store your bank card details, card numbers, or e-wallet passwords in our systems. All payments made via DuitNow, FPX (Maybank2u, CIMB Clicks), Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay are processed exclusively through certified third-party payment gateways that comply with PCI-DSS (Payment Card Industry Data Security Standard). This means your sensitive financial information never passes through hari2menang's servers — it is processed directly by the payment platform of your choice. We only receive a transaction confirmation and reference number once a payment has been successfully processed, not your actual payment details.

Yes, you have the right to request deletion of your personal data from hari2menang. However, this right is not absolute and may not be fully fulfilled in all circumstances. There are situations where we are legally required to retain certain data even after a deletion request — for example, financial transaction records must be kept for a minimum of 7 years under Malaysian financial legislation, and KYC records must be retained for at least 5 years after account closure under anti-money laundering laws. Where this applies, we will clearly inform you of which data cannot be deleted, the reason why, and the expected date on which it will be automatically removed once the mandatory retention period expires. Data not subject to any legal retention requirement will be deleted within 30 days of your request.

Yes, hari2menang has both a legal obligation and an ethical commitment to notify affected members in the event of a material data breach. Our procedure is as follows: Once we have confirmed a breach affecting members' personal data, our security team will take immediate steps to contain it and assess the extent of the damage. We will notify affected members via their registered email address within the timeframe required by applicable law. The notification will describe the type of data involved, the potential impact, and the steps we are taking to address the situation. We will also provide guidance on actions you can take to protect yourself, such as changing your password or monitoring your financial accounts.
Related Policy Documents

This Privacy Policy forms part of hari2menang's comprehensive protection framework. We encourage you to read our other policy documents, which together make up the full agreement between you and the platform.

Terms & Conditions

The overarching agreement between you and hari2menang, covering membership eligibility, deposits, withdrawals, wagering, bonuses, and the rights and responsibilities of both parties.

Read Terms & Conditions
Responsible Gaming

Guides and responsible gambling tools to ensure a healthy, safe, and enjoyable playing experience. Includes deposit limits, loss limits, and self-exclusion options.

Read This Policy
About Us

Get to know hari2menang — our vision, mission, platform history, commitment to security, and why over 100,000 Malaysian players trust us.

About hari2menang

Privacy & Security Are Our Priority at hari2menang

256-bit SSL at All Times

Every interaction you have with hari2menang is fully encrypted without exception, from login through to the withdrawal of your winnings.

Data Not Sold

We have never sold, and will never sell, members' personal data to any third party for commercial or marketing purposes.

KYC for Your Protection

The identity verification process protects you from account misuse and ensures your winnings go to the right person.

Contact Us Anytime

Our team will respond to your privacy enquiries at support@hari2menang.xyz within 48 business hours.

Join hari2menang with Complete Confidence

Your personal data is protected to the highest security standards at hari2menang. Register for free today and enjoy over 1,000 games, Sports Betting on badminton & football, with complete peace of mind that your privacy is always safeguarded.

DuitNow FPX Touch 'n Go GrabPay Boost ShopeePay
Bahasa Melayu