Personal Data Protection

Privacy Policy HeyLink — Your Data, Our Responsibility

HeyLink takes every aspect of member privacy and personal data protection seriously. This document transparently explains how we collect, use, store, and protect your information.

Updated: 1 January 2026  |  Language: Bahasa Malaysia

Our Commitment to Your Privacy

Six key pillars of personal data protection on the heylink platform

Bank-Grade Encryption

All data transmitted between your device and heylink's servers is protected by 256-bit SSL encryption — the same technology used by leading banking institutions in Malaysia. No third party can intercept your information.

Secure Data Storage

Your personal data is stored on servers protected by multi-layered firewalls, strict access controls, and 24-hour security monitoring. Only specifically authorised personnel may access your data.

Responsible KYC

Our identity verification (KYC) process is conducted in accordance with international standards. Documents you submit are processed securely and are not shared with any third party without your consent or a legal obligation.

No Data Selling

HeyLink has never and will never sell member personal information to advertisers or third parties for commercial purposes. Your data is used solely to enable us to provide you with a better service.

Data Control in Your Hands

You have the right to access, correct, or request deletion of your personal data at any time. Contact our support team and your request will be processed within 14 business days.

Full PDPA Compliance

HeyLink's Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We continually review and update our data protection practices to align with the latest legal requirements.

Quick Summary: HeyLink only collects data that is strictly necessary to provide you with our services. We do not sell your data. You may request access to or deletion of your data at any time. The security of your information is our priority.

1 Introduction

HeyLink ("we", "Platform") is committed to protecting the privacy of every individual who uses our online gaming platform at heylink.vin. This Privacy Policy clearly and transparently explains how we handle your personal information from the moment you register until you stop using our platform.

This document is drafted in accordance with the provisions of Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in the online gaming industry. By registering for or using HeyLink, you acknowledge that you have read and understood this Privacy Policy.

If you have any questions about how we manage your personal data, our support team is available via the platform's Live Chat or through our official email.

2 Information We Collect

HeyLink only collects information necessary to provide a safe, compliant, and high-quality service. There are two main categories of data we collect:

Information You Provide Directly:

  • Full name, date of birth, and identity card or passport number (for KYC purposes).
  • Registered email address and mobile phone number.
  • Current residential address.
  • Payment method information, including bank account or digital wallet details.
  • Account username and password (stored in hashed form).

Information Collected Automatically:

  • IP address and IP-based geographic location information.
  • Device type, operating system, and web browser version used.
  • Game session records, including start time, end time, game type, and total wagering amount.
  • Complete financial transaction records including deposits and withdrawals.
  • Platform interaction data, including pages visited and features used.

We never store credit or debit card numbers directly. All payments are processed through third-party payment providers that comply with PCI-DSS security standards.

Data Type Purpose of Collection Retention Period
Identity information (KYC) Age verification & fraud prevention Duration of active account + 5 years
Transaction Records Legal compliance & financial audits Minimum 7 years
Game Records Dispute Resolution & Game Fairness 3 years after session ends
Login & Session Data Account security & fraud detection 12 months
Cookies & analytics data Platform experience improvements Up to 24 months

3 How We Use Your Data

Every piece of data we collect has a clear and legitimate purpose. heylink uses your personal information for the following purposes:

  • Account Management: Create, verify, and securely manage your member account.
  • Transaction Processing: Process deposits and withdrawals accurately and promptly.
  • Platform Security: Detect and prevent fraud, money laundering, and suspicious activity.
  • Legal Compliance: Fulfil our obligations under applicable laws and regulatory requirements.
  • Service Communications: Send important notifications related to your account, transactions, and platform updates.
  • Customer Support: Resolve enquiries, complaints, and disputes submitted by members.
  • Platform Improvements: Analyse usage patterns to enhance your gaming experience.
  • Responsible Gaming: Monitor gameplay patterns to identify signs of problem gambling and offer assistance.

We only use your data for the purposes stated above. If we need to use your data for a new purpose, we will inform you in advance and obtain your consent where required.

4 Sharing Information with Third Parties

HeyLink does not sell, rent, or trade member personal data to any third party for marketing or commercial purposes. However, there are certain situations where we need to share information with specific parties:

  • Payment Providers: Transaction information required to process deposits and withdrawals is shared with our appointed payment service providers. All such providers comply with PCI-DSS security standards.
  • Technology Partners: Game software providers and technical infrastructure partners may access certain data to ensure the platform operates smoothly. They are bound by strict confidentiality agreements.
  • Regulatory Body: We may be required by law to disclose certain information to regulatory authorities, law enforcement bodies, or courts.
  • KYC Services: Trusted third-party identity verification service providers are used to securely process KYC documents.

All third parties we work with are bound by strict data protection agreements and are only permitted to use your data for mutually agreed purposes. We carefully select our partners based on their security track record and compliance standards.

5 Cookies & Tracking Technologies

HeyLink uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

We use the following types of cookies:

  • Essential Cookies: Required for core platform functions such as login verification and session security. These cookies cannot be disabled.
  • Performance Cookies: Help us understand how members interact with the platform for improvement purposes.
  • Preference Cookies: Save your personal settings such as preferred language and display preferences.
  • Analytics Cookies: Collect anonymous statistical information on platform traffic and usage patterns.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect platform functionality.

6 Data Security

We implement comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, misuse, or accidental disclosure.

  • Data encryption in transit using TLS 1.3 and 256-bit SSL protocols.
  • Data encryption at rest for sensitive information such as personal identification details.
  • Role-based access control (RBAC) ensuring only authorised staff can access specific data.
  • Regular security audits by independent third parties.
  • Continuous 24/7 system monitoring to detect suspicious activity.
  • A comprehensive incident response plan in the event of any data breach.
  • Regular security awareness training for all heylink staff.

In the event of any data breach that may affect your rights, heylink will notify you and the relevant authorities within the timeframe required by applicable law.

7 Your Rights as a Data Owner

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold:

Right to Access

You may request a copy of the personal data we hold about you at any time.

Right to Rectification

You may request that we correct any inaccurate or incomplete personal data.

Right to Deletion

You may request deletion of your personal data, subject to our legal obligations.

Right to Object

You may object to the processing of your personal data for direct marketing purposes.

Right to Data Portability

You may request your data in a machine-readable format for transfer to another platform.

Right to Restrict Processing

You may request that we restrict the processing of your data in certain circumstances.

To exercise any of the above rights, contact our support team via Live Chat or submit a written request to our official email. We will process your request within 14 business days.

8 Data Retention & Deletion

HeyLink retains your personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by applicable law.

Data retention periods depend on the type of information and legal requirements:

  • KYC and identity verification data is retained for a minimum of 5 years after account closure in accordance with anti-money laundering legal requirements.
  • Financial transaction records are retained for a minimum of 7 years for audit and tax compliance purposes.
  • Customer support communication logs are retained for 3 years.
  • Anonymous analytics data is retained for a maximum of 2 years.

When your data is no longer needed and there is no legal obligation to retain it, we will securely delete it using industry-recognised deletion methods.

9 Third-Party Links & Services

The heylink platform may contain links to third-party websites or services in certain contexts. Please note that our Privacy Policy does not apply to those third-party websites or applications.

We encourage you to read and understand the privacy policy of every platform you visit. heylink is not responsible for the privacy practices or content of any third-party websites.

Third-party game software providers integrated with the heylink platform are also bound by data protection agreements. They are only permitted to process data necessary to deliver gaming services.

10 Children & Minors

HeyLink is a gaming platform intended exclusively for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21.

If we determine that we have collected data from an individual who does not meet the age requirement, we will immediately take the following steps:

  • Close the relevant account immediately.
  • Delete all personal data associated with the account.
  • Return any account balance in accordance with established procedures.

If you believe a minor under your care or guardianship has registered an account at heylink, please contact us immediately so we can take the appropriate action.

11 Changes to This Privacy Policy

HeyLink reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments.

When there are significant changes to this Privacy Policy, we will:

  • Display the updated version on this page with a new effective date.
  • Send notifications to all registered members via email at least 7 days before changes take effect.
  • Display in-platform notices during login.

Continued use of the heylink platform after the effective date of any changes indicates your acceptance of the updated Privacy Policy. If you do not agree with the changes, please contact us to close your account.

12 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we manage your personal data, please contact our Data Protection Officer (DPO) team through the following channels:

  • Live Chat: Available 24 hours a day, 7 days a week within the heylink platform.
  • Email: [email protected]
  • FAQ: Visit the FAQ us for answers to common questions.

We are committed to responding to all privacy-related enquiries within 14 business days. For urgent data security issues, our team will prioritise a response within 72 hours.

Secure & Trusted Platform

Your Data is Safe. Your Experience, Worry-Free.

Join over 500,000 HeyLink members who play with peace of mind knowing their personal data is fully protected. Register today and experience the difference.

256-bit SSL PDPA Compliance No Data Selling 24/7 Support
Bahasa Melayu