Privacy Policy
HGold Malaysia, operated by Hibiscus Bullion Trading (SSM 003839546-H). Last updated 16 June 2026.
1. Introduction
This policy explains what personal data we collect through the HGold Malaysia website and mobile app (the “Service”), how we use and share it, and the choices you have. By using the Service you agree to this policy.
2. Information we collect
- Account & identity: name, username, email address, phone number, and identification (IC) number.
- Banking details: bank name, account number, and account holder name, used to pay out your earnings and withdrawals.
- Transaction data: your gold stakes/contracts, gram balances, passive earnings, network bonuses, referral relationships, and withdrawals.
- Uploaded content: photos of physical gold, certificates, payment receipts, and delivery confirmations — captured via your device camera or chosen from your gallery.
- Device data: a push-notification token and basic device/app information, used to deliver notifications and operate the app.
- Usage & log data: standard technical logs (e.g. IP address, timestamps) for security and reliability.
3. How we use your information
- Operate the gold-savings and affiliate platform and your account.
- Process deposits, verify physical gold, calculate passive earnings and rank bonuses, and execute payouts and withdrawals.
- Send transactional emails and push notifications about your account and activity.
- Prevent fraud, secure the Service, and meet legal, tax, and regulatory obligations.
4. How we share information
We do not sell your personal data. We share it only with service providers that process data on our behalf, and where required by law:
- Supabase — database, authentication, and secure file storage.
- Vercel — application hosting and delivery.
- Google Firebase Cloud Messaging — delivery of push notifications.
- Resend — sending transactional and account emails.
- Banks and payment partners, to execute transfers you request.
- Regulators, auditors, or law enforcement, where legally required.
5. Camera & photos
The app may request camera and photo access only so you can upload images of your gold, certificates, receipts, or delivery confirmations. Images are stored securely and used solely to verify and service your account. Access is requested at the moment you choose to upload.
6. Push notifications
With your permission, we send notifications about deposits, payouts, bonuses, withdrawals, and delivery updates. You can turn notifications off at any time in your device settings.
7. Data storage & security
Data is stored on our providers’ managed infrastructure with access controls and encryption in transit. We restrict access to personal data to authorised personnel. No system is perfectly secure, but we take reasonable measures to protect your information.
8. Data retention
We keep your data for as long as your account is active and as needed to provide the Service. Transaction, financial, and identity records may be retained longer where required by law (e.g. tax, anti-money-laundering, and audit obligations).
9. Your rights
You may request access to, correction of, or deletion of your personal data, subject to legal retention requirements. To make a request, contact us using the details below.
10. Children
The Service is intended for users aged 18 and above. We do not knowingly collect data from children.
11. Changes to this policy
We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above and, where appropriate, communicated in the app.
12. Contact us
Hibiscus Bullion Trading (SSM 003839546-H)
Email: support@hgold.co
Email: support@hgold.co