Privacy Policy Heylink –
Our Commitment to Protecting Your Data

1. Introduction and Scope of This Policy

This Privacy Policy ("Policy") describes how heylink ("we", "Platform") collects, uses, stores, and protects your personal information when you use the heylink.vu website, the heylink mobile app, or any related services we offer.

We understand that privacy is a fundamental right of every individual. Your trust is our most valuable asset, and we take this responsibility seriously. This Policy is drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and the highest international standards in user data management.

By using the heylink platform, you agree to the data collection and usage practices described in this Policy. If you do not agree with any part of this Policy, please discontinue use of the platform and contact us for further assistance.

2. Types of Personal Data We Collect

Heylink collects various types of information depending on how you interact with our platform. Below is a full breakdown of the data collected:

2.1 Information You Provide Directly

• Identity information: Full name, date of birth, national identity card number or passport number.
• Contact information: Email address, mobile number, residential address.
• Financial information: Bank account number, bank name, and e-wallet details for deposit and withdrawal purposes.
• Verification documents: Copies of identity documents, bank statements, or other documents requested during the KYC process.

2.2 Information Collected Automatically

• Technical data: IP address, device type, operating system, browser version.
• Usage data: Pages visited, session duration, games played, time and date of activity.
• Location data: Approximate location based on IP address for legal compliance purposes.
• Cookie data: Session information, user preferences, secure authentication tokens.

3. How We Use Your Data

Heylink uses your personal data only for legitimate and necessary purposes. We do not use your data for any other purpose without first obtaining your consent. The primary purposes for which your data is used are as follows:

• Account management: Creating, verifying, and securely managing your heylink account.
• Transaction processing: Processing deposits, withdrawals, and any financial activity within the platform.
• Legal compliance: Meeting KYC requirements, anti-money laundering (AML) obligations, and reporting duties to relevant authorities.
• Platform security: Detecting and preventing fraud, unauthorised access, and suspicious activity.
• Customer Support: Providing technical assistance and effectively resolving your enquiries or complaints.
• Service improvement: Analysing usage patterns to improve the platform's interface, performance, and overall experience.
• Important communications: Sending account-related notifications, terms updates, security alerts, and promotional information you have opted in to receive.

4. Data Sharing and Disclosure

Heylink does not sell, rent, or transfer your personal data to third parties for their own commercial purposes. However, there are limited situations where we need to share your data with certain parties to ensure our services operate properly and remain legally compliant:

4.1 Trusted Service Providers

We work with trusted third-party companies to provide specific services such as payment processing, identity verification, cloud services, and technical support. All such service providers are bound by strict confidentiality agreements and are only permitted to use your data for the specific purposes agreed upon.

4.2 Legal Requirements

Heylink may disclose your information to government authorities or law enforcement agencies when required to do so by Malaysian law or a valid court order. In such circumstances, we will disclose only the minimum information necessary.

4.3 Intra-Group Transfers

In the context of business operations, user data may be shared with related entities within the heylink group, all subject to the same level of data protection as outlined in this Policy.

5. Data Security and Protection Measures

Heylink invests seriously in security infrastructure to ensure your data is always protected. Key security measures we have implemented include:

• End-to-end encryption: All data in transit is protected with TLS 1.3 and 256-bit SSL encryption.
• Role-based access control: Only staff with specific authorisation may access sensitive user data.
• Regular security audits: Our systems undergo regular penetration testing and security audits by independent third parties.
• Two-factor authentication: All user accounts are protected with two-factor authentication (2FA) for an additional layer of security.
• 24/7 monitoring: A real-time threat detection system monitors all activity for suspicious behaviour around the clock.
• Secure data backup: Data is regularly backed up to separate locations also protected with full encryption.

While we take all reasonable precautions, no system in the world can be guaranteed 100% free from cyber threats. We therefore encourage you to also take personal protective measures, such as using a strong password, not sharing your login credentials, and contacting us immediately if you suspect any unusual activity on your account.

6. Use of Cookies and Tracking Technologies

Heylink uses cookies and similar technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. The types of cookies we use are as follows:

• Essential cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
• Performance cookies: Gathering information on how users use the platform to help us improve performance and usability.
• Functional cookies: Remembering your preferences such as language, time zone, and display settings to deliver a more personalised experience.
• Analytics cookies: Helps us understand platform traffic and usage patterns on an aggregated and anonymised basis.

You can manage cookie settings through your browser. However, disabling certain cookies may affect the functionality of some parts of the heylink platform.

7. Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 and heylink's internal policies, you have the following rights regarding your personal data:

• Right of access: You may request a copy of all personal data we hold about you.
• Right to rectification: You may request that we correct any inaccurate or incomplete data.
• Right to erasure: In certain circumstances, you may request that we delete your personal data, subject to our legal obligations.
• Right to restriction of processing: You may request that we restrict how we use your data under certain circumstances.
• Right to object: You may object to the use of your data for direct marketing purposes at any time.
• Right to data portability: You may request your data in a machine-readable format for transfer to another platform.

To exercise any of the above rights, please contact the heylink support team with a written request. We will process your request within 14 business days and may require identity verification before processing any request involving sensitive data.

8. Data Retention and Deletion

Heylink retains your personal data only for as long as it is needed for the purposes stated in this Policy or as required by law. Retention periods vary by data type:

• Active account data is retained for the lifetime of your account with heylink.
• Financial transaction records are retained for a minimum of 7 years after the last transaction, in compliance with accounting and anti-money laundering legal requirements.
• Customer support communication logs are retained for 3 years for reference and dispute resolution purposes.
• After an account is closed, data no longer required by law will be deleted or anonymised within 90 days.

9. Changes to This Privacy Policy

Heylink reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform enhancements. Any significant changes will be communicated to you via in-platform notifications or your registered email at least 14 days before taking effect.

The "Updated" date at the top of this page will always reflect the latest version of the Privacy Policy. We encourage you to review this page periodically. Continued use of the platform after any changes take effect will be considered your acceptance of the updated policy.

10. Contact Us Regarding Privacy

If you have any questions, concerns, or wish to exercise your privacy rights, the heylink Data Protection Officer team is ready to assist you:

For more information on platform usage rules, please refer to Terms and Conditions us. For responsible gaming guidance, visit the Responsible Gaming us.