Hfive5 Privacy Policy – Our Commitment to Protecting the Personal Data of Malaysian Members

Hfive5 understands that your trust is the foundation of our relationship. When you sign up as an hfive5 member, make a deposit via Touch 'n Go or GrabPay, place a bet on a Malaysia Super League match, or take a seat at our live baccarat table, you are entrusting us with your personal information. That trust is something we never take lightly.

This Privacy Policy clearly and honestly explains how hfive5 manages your personal data. It covers the types of data we collect, why we need it, how we store and protect it, who may access it, and what choices and rights you have regarding that data. We believe you deserve to know all of this — not just because it is required by law, but because it is the right thing to do.

By using any hfive5 service — including registering an account, making any financial transaction, or using platform features — you agree to the terms of this Privacy Policy. If you do not agree with any part of this policy, please discontinue your use of the hfive5 platform.

Hfive5 only collects data necessary for legitimate platform operations. Below is a full overview of the data we may collect from you:

Hfive5 does not directly collect your credit or debit card numbers. All payments are processed through registered and licensed third-party payment providers, including eWallet providers such as Touch 'n Go and GrabPay, as well as FPX banking channels. Your payment card information never passes through or is stored on hfive5 servers.

Every piece of data we collect has a specific and legitimate purpose. hfive5 uses your personal data for the following purposes:

• Account Management: Creating and maintaining your hfive5 account, verifying your identity at login, processing password changes, and keeping your account secure on an ongoing basis.
• Financial Transaction Processing: Processing your deposits via Touch 'n Go, GrabPay, DuitNow, FPX Maybank2u, CIMB Clicks, or any other Malaysian payment method you choose, as well as processing withdrawals to your account securely and accurately.
• Platform Service Provision: Enables you to access all hfive5 features, including Sports Betting on Malaysia Super League and EPL football, BWF badminton, e-sports, live casino, blackjack, table games, and all other available services.
• Legal Compliance and Regulatory Obligations: Fulfilling our obligations under applicable Malaysian laws, including Anti-Money Laundering (AML) requirements and Know Your Customer (KYC) verification.
• Platform Security: Detecting and preventing fraud, unauthorised access, bonus abuse, use of automated software, and other suspicious activities that could compromise the integrity of the hfive5 platform and the security of other members.
• Customer Support: Enabling the hfive5 support team to help you resolve issues, answer enquiries, and address any account-related concerns effectively and accurately.
• Responsible Gaming: Monitoring betting activity patterns to identify signs of problem gambling and, where necessary, reaching out to members who may benefit from assistance or information about the responsible gaming tools available.
• Service Communications: Sending important notifications related to your account, transactions, policy changes, and security updates that you need to be aware of. This is distinct from marketing communications – service communications are essential and cannot be fully unsubscribed from.
• Platform Improvements: Analysing aggregated, anonymised usage patterns to understand how members use the hfive5 platform and identify opportunities to improve the user experience.

Hfive5 will not use your data for any purpose beyond those stated above without first obtaining your separate consent.

Hfive5 does not sell, rent, or share your personal data with third parties for their own marketing purposes. This is a commitment we hold firmly. However, in the course of running a secure and effective platform, there are limited situations where your data may need to be shared:

• Payment Providers: Transaction information required for processing is shared with authorised payment providers — including eWallet processors (Touch 'n Go, GrabPay, Boost, ShopeePay) and the FPX network (Maybank2u, CIMB Clicks) — solely for the purpose of completing your transactions. These providers maintain their own privacy policies and are subject to stringent security standards.
• Game Providers: Required game session data is shared with our live casino and game providers — such as Evolution Gaming, Pragmatic Play Live, and SA Gaming — to enable gameplay and resolve any technical disputes. These providers are bound by strict confidentiality agreements with hfive5.
• Technical Service Providers: Technical infrastructure providers – such as cloud hosting and cybersecurity services used by hfive5 – may have limited access to data for technical operational purposes only. All such providers are bound by strict data processing agreements.
• Legal Requirements: hfive5 may be required to disclose member data when compelled by a valid court order, a request from Malaysian law enforcement authorities, or applicable legal and regulatory compliance obligations.
• Fraud Prevention: In cases suspected to involve fraud, money laundering, or serious threats to the security of the platform or other members, hfive5 may share necessary information with the relevant authorities for investigation purposes.

Hfive5 continuously invests in data security to keep your information protected at all times. The technical and organizational measures we have in place include:

• 256-bit SSL Encryption: All communications between your browser or mobile app and the hfive5 server are encrypted using the latest TLS protocol with 256-bit keys. This ensures that no one can read your data in transit, even if they manage to intercept the network traffic.
• Data-at-Rest Encryption: Sensitive data stored in the hfive5 database – including passwords, identity information, and financial details – is encrypted using industry-approved algorithms while at rest.
• Internal Access Controls: Access to member data within the hfive5 organisation is restricted to staff with a legitimate need, based on the principle of least privilege. All access to sensitive data is logged and monitored.
• Continuous Security Monitoring: hfive5's security monitoring system operates 24 hours a day, 7 days a week to detect and respond to security threats, intrusion attempts, and suspicious activity in real time.
• Regular Security Testing: hfive5 conducts regular penetration testing and security audits by independent experts to identify and address vulnerabilities before they can be exploited.
• Incident Response Procedures: hfive5 has a clearly defined and tested incident response procedure for handling any data breach swiftly, including steps to notify affected members within a reasonable timeframe.

While we take all reasonable measures to protect your data, no security system can guarantee absolute 100% protection against all evolving cyber threats. We therefore encourage you to take responsibility for your own account security by using a strong, unique password for hfive5, enabling two-factor authentication where available, never sharing your login credentials with anyone, and reporting any suspicious activity to our support team promptly.

Hfive5 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your browser or on your device when you visit hfive5. The types of cookies we use are as follows:

• Essential Cookies: These are cookies required for the hfive5 platform to function correctly. They include session cookies that maintain your login status, security cookies that protect your account, and cookies that remember your language settings. These cookies cannot be disabled as they are essential to the platform's core operations.
• Functional Cookies: These cookies remember your preferences and settings on hfive5 — such as your favorite games, your usual betting limits, and your display settings. They help deliver a more personalized experience without requiring you to reconfigure everything each time you log in.
• Analytics Cookies: We use analytics data collected through cookies to understand how members use the hfive5 platform overall — which pages are visited most, where users encounter difficulties, and how the navigation flow can be improved. This data is collected in aggregate and anonymized form.
• Security Cookies: hfive5 uses cookies for fraud detection and security purposes, including identifying unusual access patterns that may indicate unauthorised attempts to access your account.

You can manage your cookie settings through your browser settings. However, disabling essential cookies may affect the functionality of the hfive5 platform and you may be unable to log in or use certain features properly. Please refer to your browser's help documentation for information on how to manage cookies.

Hfive5 retains your personal data for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required by applicable Malaysian law. The following is a general guide to our data retention periods:

• Active Account Data: For as long as your account remains active on hfive5, we retain all data associated with your account to ensure the platform functions properly and for ongoing security purposes.
• Closed Account Data: After an account is closed at your request, we retain data necessary for legal compliance and regulatory oversight for the minimum period required under applicable Malaysian law. Data that is no longer needed for any legitimate purpose will be securely deleted.
• Financial Transaction Records: Deposit and withdrawal transaction records are retained in accordance with Malaysian tax and financial regulatory requirements, which typically mandate record-keeping for seven years from the date of each transaction.
• KYC (Identity Verification) Data: Identity verification documents such as copies of your MyKad or passport are retained in accordance with the AML (Anti-Money Laundering) requirements prescribed by applicable Malaysian law.
• Communication Logs: Records of customer support conversations and live casino chat logs are retained for two years from the date of communication, for quality control, dispute resolution, and platform security purposes.

Once the applicable retention period expires, your data will be securely deleted or anonymised using industry-approved data disposal procedures, ensuring the deleted data cannot be recovered by any party.

As an hfive5 member and as an individual protected under Malaysian data protection law, you have the following rights regarding your personal data:

To submit any request relating to your personal data rights, please contact the hfive5 support team via live chat or email at support@hfive5.click stating the type of request and your account information for identity verification. hfive5 will respond to valid requests within 30 days of receipt.

Hfive5 is an exclusive platform for individuals aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. All registration applications go through an age verification process to ensure that only eligible adults may register as members.

If hfive5 discovers that we have inadvertently collected personal data from a minor, we will take immediate steps to delete that data, close the relevant account, and where applicable, refund any deposited funds to the minor's parent or legal guardian.

The hfive5 platform engages third-party services essential to its operations, including payment providers, live casino providers, and technical infrastructure providers. When you interact with these services through the hfive5 platform, each provider's own privacy policy also applies to any data they collect directly from you.

Hfive5 carefully vets all third-party services we work with to ensure they meet data protection standards comparable to our own. That said, hfive5 is not responsible for the privacy practices of third-party providers beyond the scope of our agreements with them. We encourage you to read the privacy policies of any payment providers you use — such as Touch 'n Go, GrabPay, and others — to understand how they handle your data.

Hfive5 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable data protection laws, or developments in how we operate the platform. When we make material amendments, we will:

• Updating the "Last Updated" date at the top of this document.
• Sending notifications via your registered email or in-platform alerts to inform you of those changes.
• In the event of significant amendments, a clear summary of changes will be provided so you can quickly understand what has changed without having to re-read the entire document.

Continued use of the hfive5 platform after a change notification has been sent will be considered acceptance of the updated Privacy Policy. If you do not agree with any changes, please close your account and contact us to settle any account balance eligible for withdrawal.

If you have any questions, concerns, or requests regarding this Privacy Policy or how hfive5 handles your personal data, our team is ready to assist. Here is how to reach us:

• Live Chat: The fastest way to get immediate assistance. Available 24/7 directly within the hfive5 platform. Our support agents are proficient in Bahasa Melayu and will be with you within minutes.
• Email: For more detailed or formal inquiries related to data privacy, send an email to support@hfive5.click. We will respond within 24 hours on business days and 48 hours on weekends and Malaysian public holidays.

When contacting us regarding data privacy, please provide your hfive5 account name and clearly state the nature of your request or enquiry so we can process it accurately and efficiently. For requests involving data access, correction, or deletion, we may need to verify your identity before proceeding, in order to safeguard your data and account security.