At heng36, your privacy is more than a legal obligation — it is a commitment we take seriously every day. This Privacy Policy clearly and honestly explains what information we collect, how it is used, who can access it, and what rights you have as a Malaysian player over your own personal data. We have written this in plain language, not convoluted legal jargon.
This is the foundation of how heng36 handles every Malaysian player's personal data responsibly.
All data transmitted between your device and heng36's servers is protected by 256-bit SSL encryption — the same level of protection used by Maybank2u and CIMB Clicks. No one can intercept or read your information in transit.
Heng36 has never sold, rented, or traded players' personal data to any advertising company, data broker, or third party for profit. Your data is used solely for the purposes described in this Privacy Policy — nothing more.
Heng36 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). This means you have legally protected rights to access, correct, and in certain circumstances, delete the personal data that heng36 holds about you.
Your personal data is stored on servers protected by layered firewalls, intrusion detection systems, and strict access controls. Only heng36 staff who require access to carry out their duties are permitted to view your data, and every access is logged for audit purposes.
Heng36 gives you real control over your personal data — you may request a copy of the data we hold, correct any inaccurate information, or request deletion of your data under certain circumstances. All such requests are processed within 30 business days.
In the highly unlikely event of a security breach affecting your personal data, heng36 is committed to notifying you within the timeframe stipulated by the PDPA 2010 and to taking immediate action to limit any potential damage.
Heng36 ("we", "the platform", "the Company") takes our responsibility to protect the privacy of every Malaysian player who uses our services seriously. This Privacy Policy sets out in detail how heng36 collects, processes, stores, protects, and in certain circumstances discloses your personal information.
This policy applies to all information collected through the heng36-bangla.com website, any future heng36 mobile applications, email and live chat communications between you and the heng36 team, and all financial transactions carried out on our platform via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, FPX, Maybank2u, and CIMB Clicks.
Heng36 operates as a data controller under Malaysia's Personal Data Protection Act 2010 (PDPA). This means we are fully accountable for how your personal data is handled, and we are required to comply with all principles set out in the PDPA 2010 at all times.
During registration and use of the heng36 platform, you may provide us with the following information:
When you use the heng36 platform, our systems automatically collect the following technical information for security, troubleshooting, and service improvement purposes:
To process deposits and withdrawals, heng36 records transaction details including the amount, payment method, date and time, and transaction status. Full bank account numbers and credit card numbers are not stored on heng36 servers — sensitive payment information is handled directly by licensed payment providers such as DuitNow and Touch 'n Go eWallet using their own security infrastructure.
Heng36 records your gaming activity history — including games played, amounts wagered and won, session times, and overall activity patterns. This data is used to maintain accurate account records, identify potential problem gambling, and meet legal compliance requirements. Your gaming activity data also enables heng36 to deliver a better experience and more relevant promotions to you.
Heng36 uses the personal data it collects solely for the following purposes:
| Purpose of Use | Data Used | Legal Basis |
|---|---|---|
| Account registration & verification | Name, email, phone number, date of birth | Contract |
| Processing deposits & withdrawals | Payment method details, transaction history | Contract |
| AML & KYC Compliance | Identity verification, source of funds | Legal obligation |
| Account security & fraud detection | IP address, login patterns, account activity | Legitimate interest |
| Customer Support | Communication records, account information | Contract |
| Responsible Gaming | Gaming activity patterns, limits set | Legal obligation |
| Marketing communications (with consent) | Email, phone number, game preferences | Consent |
| Platform improvement & analytics | Anonymised technical data, usage patterns | Legitimate interest |
Heng36 will not use your personal data for any purpose beyond those stated in the table above without first obtaining your additional consent.
If you have given your consent, heng36 may send you promotional content such as bonus offers, lottery draw notifications, Malaysian festive promotions (Hari Raya, Chinese New Year, Deepavali, Hari Merdeka), and platform updates via email or SMS. You may withdraw this consent at any time by contacting heng36 support or through your account settings — and unsubscription requests will be processed within 7 business days.
Heng36 has never sold, rented, or traded your personal data to any third party for their commercial gain. Your data belongs to you, and we only manage it on your behalf.
In operating the heng36 platform, we may share limited personal data with the following third parties, who are contractually bound to protect your data:
Heng36 may be required to disclose your personal data to the relevant Malaysian authorities if mandated by law or a valid court order, including for the purposes of criminal investigation, anti-money laundering (AML), or Malaysian tax law compliance. In such cases, heng36 will disclose only the minimum information necessary and, where permitted by law, will notify you of the disclosure.
Cookies are small text files stored on your device when you browse the heng36 website. They allow the platform to remember your preferences, maintain your login session, and gather analytics data that helps us improve the user experience.
You can manage and delete cookies through your web browser settings. Most modern browsers allow you to block or delete cookies; however, please note that disabling essential cookies may significantly affect the functionality of the heng36 platform — including the ability to log in or carry out transactions.
Heng36 invests seriously in cybersecurity infrastructure to protect our players' personal data. The following are the key security layers we employ:
All data communications between your device and heng36 servers are encrypted using the latest TLS 1.3 standard.
Heng36 servers are protected by multiple layers of firewall that block unauthorised access from the internet.
A 24/7 IDS/IPS (Intrusion Detection/Prevention System) continuously monitors for suspicious activity.
Access to player data is restricted to staff who require it to perform their duties, with a full audit log maintained.
Critical data is backed up regularly to separate secure locations to ensure recovery in the event of a system failure.
Two-factor authentication (2FA) is available to all heng36 players — an extra layer of security that is strongly recommended.
Heng36 retains your personal data for as long as necessary to fulfil the purposes described in this Privacy Policy, or for as long as required by Malaysian law. The following are general guidelines on retention periods:
When your personal data is no longer needed for its stated purpose and there is no legal obligation to retain it, heng36 will securely delete or anonymise the data (by removing all personal identifiers) so that it can no longer be linked to you. The deletion process uses industry-recognised methods that ensure the data cannot be recovered.
As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by heng36:
You have the right to request a copy of the personal data we hold about you. heng36 will provide this information in a readable format within 30 business days of receiving a valid request.
If you find that the personal data we hold about you is inaccurate or incomplete, you have the right to request a correction. Basic account information can be updated directly through your heng36 account settings.
In certain circumstances, you have the right to object to heng36's processing of your personal data, particularly for direct marketing purposes. You may withdraw your consent to marketing communications at any time.
Under certain circumstances, you may request that heng36 delete your personal data. However, this right has limitations — we may be unable to delete data required for compliance with Malaysian law or data related to contracts still in force.
You have the right to receive the personal data you have provided to heng36 in a structured, machine-readable format, and in certain circumstances, to transfer it to another data controller.
To submit any request relating to the rights above, contact the heng36 privacy team by email at support@heng36-bangla.com with the subject line "PDPA Request". We will verify your identity before processing the request and will respond within 30 business days.
The heng36 platform is strictly for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. Should we discover that we have inadvertently collected data from an underage player, we will take immediate steps to delete that data and close the account in question.
If you are a parent or guardian and believe your child has registered for or used the heng36 platform without your knowledge, please contact us immediately at support@heng36-bangla.com so we can take appropriate action promptly. Child protection is an absolute priority at heng36.
In operating the heng36 platform, your personal data may be processed or stored on servers located outside Malaysia — for example, cloud infrastructure used by international technology providers. Any such cross-border data transfers are carried out in compliance with Malaysia's PDPA 2010.
Heng36 ensures that all international data transfers are covered by appropriate data processing agreements, using recognised standard contractual clauses, or are directed to countries that Malaysian authorities consider to have adequate data protection standards. All third-party providers that receive data belonging to Malaysian players are contractually bound to protect that data to a standard at least equivalent to the PDPA 2010.
Heng36 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or changes to the services we offer. The "Updated" date shown at the top of this page indicates when the latest version of this Policy took effect.
For material changes — meaning changes that significantly affect how we collect, use, or disclose your personal data — heng36 will notify you by email or in-platform notification at least 14 days before those changes take effect. This gives you sufficient time to review the changes and make an informed decision about your continued use of the heng36 platform.
Your continued use of the heng36 platform after the effective date of any changes will be considered your acceptance of the updated Privacy Policy. If you do not agree with the changes made, please discontinue use of the platform and contact us to close your account.
If you have any questions, concerns, or requests regarding this Privacy Policy or how heng36 handles your personal data, we encourage you to reach out to us through the following channels:
If you are not satisfied with our response to your privacy enquiry, you have the right to lodge a complaint with the relevant data protection authority in Malaysia, which is the Department of Personal Data Protection under the Ministry of Communications and Digital.
Our investment in data security reflects how seriously heng36 takes the privacy of Malaysian players.
* Based on heng36 internal data and compliance records 2026–2026.
Heng36 does not sell your personal data. All transactions are protected by 256-bit SSL. We fully comply with Malaysia's PDPA 2010. All payment methods — DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, FPX, Maybank2u, and CIMB Clicks — are licensed, secure channels. For full details on your rights and responsibilities, please read Terms & Conditions us. Play responsibly — information on the Responsible Gaming us.
Now that you know how heng36 protects your privacy, register with confidence. Sign-up is free and takes less than 2 minutes. Deposit from as little as RM10 via DuitNow or Touch 'n Go eWallet and access over 500 games on one safe, transparent platform.