Hfive Privacy Policy – Malaysia Member Personal Data Protection

Hfive.onl (hereinafter referred to as "hfive", "we", or "Platform") takes personal data protection responsibilities very seriously. This Privacy Policy is drawn up in accordance with the Malaysia Personal Data Protection Act 2010 (PDPA) and describes our practices regarding the processing of members' personal data.

This policy applies to all information we collect from you when you register an account, use hfive services, make financial transactions, or interact with our platform via the website or mobile app. It also covers data we receive from trusted third parties in the context of the services we offer.

If you have any questions or concerns about how we handle your personal data, you may reach our privacy team via the contact details provided at the end of this document. We are committed to responding within 14 working days for every enquiry received.

Hfive collects your personal data through various means as you interact with our platform. The following are the categories of data we collect:

Data You Provide Directly:

• Identity Information: Full name, date of birth, identification card or passport number, gender and nationality.
• Contact Information: Email address, mobile phone number and current residential address.
• Financial Information: Bank account number, bank name, digital wallet details and deposit and withdrawal transaction records.
• Verification Documents: Copies of identity card, utility bills, or other KYC documents requested during the identity verification process.

Automatically Collected Data:

• Technical Data: IP address, browser type, operating system, screen resolution and device information.
• Usage Data: Pages visited, session duration, games played, login frequency and wagering patterns.
• Location Data: Approximate geographic location based on IP address for regional legal compliance purposes.
• Cookie Data: Information stored via cookies and other tracking technologies as described in Section 5.

Hfive uses collected personal data solely for legitimate and necessary purposes in order to provide you with the best service. We do not process your data beyond the requirements of the original purpose of collection.

• Account Management: Creating and managing your member account, processing registration and verifying identity through the standard KYC process.
• Transaction Processing: Processing deposits, withdrawals and all other financial transactions securely and accurately.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering and platform abuse in accordance with our legal obligations.
• Customer Support: Providing assistance and resolving any issues you encounter while using the hfive platform.
• Service Communications: Sending important notices related to your account, changes to terms, security updates and transaction information.
• Marketing (with consent): Sending promotional information, bonus offers and the latest news about hfive — only where you have consented to receive marketing communications.
• Continuous Improvement: Analysing usage patterns to improve platform design, user experience and the range of games offered.
• Legal Compliance: Fulfilling legal and regulatory obligations, including reporting to the relevant authorities when required.

Hfive does not sell, rent, or trade your personal data to any third party for their own marketing purposes. However, we may share your data in the following limited circumstances:

• Trusted Service Providers: Companies that help us operate the platform — such as payment service providers, gaming technology providers, and cloud server services — are all bound by strict confidentiality agreements.
• Regulatory Authority: We will disclose required information to regulatory authorities, law enforcement agencies or courts when mandated by Malaysian law.
• Anti-Money Laundering (AML): Information required to fulfil reporting obligations under the Anti-Money Laundering Act 2001 may be shared with the relevant parties.
• Business Transfer: In the event of a merger, acquisition or sale of hfive assets, personal data may be transferred to the new entity — with prior notice given to you.

Every third party we work with is required to comply with data protection standards equal to or exceeding hfive's own. We do not permit them to use your data for any purpose beyond what has been agreed.

Hfive uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication, session management and security. These cookies cannot be disabled.
• Performance Cookies: Collecting information on how you use the platform to help us improve website performance and usability.
• Functional Cookies: Saving your preferences such as language, region and display settings to deliver a more personalised experience.
• Analytics Cookies: Helps us understand platform traffic and usage patterns in an aggregated, anonymised form for service improvement purposes.

You can manage your cookie settings through your internet browser. However, disabling certain cookies may affect the functionality of the hfive platform. For more information on how to manage cookies, refer to your browser's help documentation.

Hfive implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, misuse, or unintended disclosure.

• Transit Encryption: All communications between your browser and hfive servers are encrypted using TLS 1.3 protocol with a 256-bit SSL certificate.
• Storage Encryption: Sensitive data such as passwords and financial information is stored in encrypted format using industry-standard encryption algorithms.
• Two-Factor Authentication: hfive supports two-factor authentication (2FA) for an additional layer of security on your account.
• Continuous Monitoring: Our systems are monitored 24/7 to detect any suspicious activity or unauthorised access attempts.
• Security Audit: Regular security audits are conducted by independent third parties to identify and address potential system vulnerabilities.
• Staff Training: All hfive staff who handle personal data receive comprehensive and regular data protection training.

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by hfive:

To exercise any of these rights, please contact the hfive privacy team via the email listed in our contact section. We will process your request within 14 working days and may require identity verification before any action is taken.

Hfive retains your personal data only for as long as necessary to fulfil the original purpose of collection or to comply with applicable legal obligations. Our data retention policy is as follows:

• Active Account Data: Retained for the duration your account is active and for a specified period after account termination for dispute resolution purposes.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's financial and anti-money laundering legal requirements.
• Security Log Data: Retained for 12 months for security incident investigation and fraud prevention purposes.
• Customer Support Communications: Retained for 3 years for reference and service improvement purposes.
• Marketing Data: Deleted when you withdraw your marketing consent or within 30 days of a deletion request.

Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be personally linked to you.

The hfive platform is strictly for individuals aged 18 and above. We do not intentionally collect or process personal data of children under the age of 18.

If you believe that a minor has registered an account or provided personal data to hfive without parental or guardian consent, please notify us immediately. We will take action to remove the information and close the account in question as soon as possible.

Hfive employs multiple age verification mechanisms, including a rigorous KYC process, to ensure only eligible individuals can fully access our platform.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how hfive handles your personal data, please contact our Data Protection Officer:

If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection under the Ministry of Communications and Digital Malaysia. hfive is always ready to cooperate with any investigation conducted by the relevant authorities.