Hfive Privacy Policy – Malaysian Member Personal Data Protection

1Introduction

Hfive takes the privacy protection of our members seriously. We understand that your trust in this platform depends not only on the quality of games or transaction speed – but also on your confidence that the personal information you share with us is in safe and responsible hands.

This Privacy Policy applies to all information you provide to us when registering an account, making deposits or withdrawals, contacting customer support, using the hfive mobile app, or interacting with any part of our platform – whether via the website at hfive.win or via our Android and iOS apps.

2Data We Collect

Hfive collects various types of information depending on how you interact with our platform. In general, the data we collect can be divided into three main categories:

Data is collected directly from you during registration, through your use of the platform, or automatically via technologies such as cookies and server logs. We only collect data that is strictly necessary for the stated purposes.

3How We Use Your Data

Hfive uses the information collected solely for legitimate and permitted purposes. The following are the primary purposes for which your data is used:

• Account Management: Creating and maintaining your member account, processing registrations, and securely managing your profile information.
• Transaction Processing: Processing all deposits, withdrawals, and other financial transactions you make on the hfive platform quickly and securely.
• Identity Verification (KYC): Verifying that member identities are legitimate, preventing fraud, and meeting financial compliance legal requirements including Anti-Money Laundering (AML) procedures.
• Service Communications: Sending important notifications related to transactions, account security updates, promotional alerts you have opted in to receive, and responses to customer support inquiries.
• Platform Security: Detecting and preventing fraud, unauthorized access, bonus system abuse, and activities that violate the platform's terms of use.
• Responsible Gaming: Monitoring gameplay patterns to identify members who may require additional support or protection through hfive's responsible gaming program.
• Service Improvement: Analyzing platform usage patterns in aggregate and anonymized form to improve the user experience, introduce new features, and optimize platform performance.
• Legal Compliance: Fulfilling applicable legal and regulatory obligations, including record-keeping requirements mandated by relevant authorities.

4Information Sharing with Third Parties

Hfive does not sell, rent or disclose members' personal information to any third party for marketing or commercial purposes. However, in operating the platform, we share only the necessary information with the following categories of third parties:

• Payment Service Providers: Legitimate financial institutions and payment processors such as licensed banks, FPX providers, and e-wallet platforms to process your financial transactions. They receive only the minimum information required for processing purposes.
• Game Software Providers: Licensed game developers that provide casino, slots, sports betting and fish shooting game content on the hfive platform. Data sharing is limited to the session information required to run the games.
• Identity Verification Providers: Licensed third-party KYC services used to verify member identities in compliance with legal requirements.
• Authorities and Regulatory Bodies: When required by law, court order, or a valid request from Malaysian government authorities – only the information specified in the official request will be shared.
• Technical Infrastructure Providers: Cloud service and server hosting providers that store hfive platform data, all subject to strict confidentiality agreements and international data security standards.

5Data Security

Protecting members' personal and financial information is hfive's highest technical priority. Our platform employs a multi-layered security architecture specifically designed to prevent unauthorized access and ensure the integrity of your data at all times.

• 256-bit SSL Encryption: All communications between your browser or app and hfive servers are secured with 256-bit SSL encryption – the same standard used by major banks in Malaysia.
• Stored Data Encryption: Sensitive information such as passwords and financial details are stored in encrypted format using one-way hashing algorithms. hfive staff cannot view your password in its original form.
• Two-Factor Authentication (2FA): Members are encouraged to enable 2FA, which adds an extra layer of security to the account login process.
• Real-Time Monitoring: Our automated monitoring system detects suspicious activity 24 hours a day and will freeze the account and notify the member if there are signs of unauthorised access.
• Internal Access Controls: Only authorized hfive staff with a specific business need may access member data, and all such access is logged and periodically audited.
• Regular Security Audits: The hfive platform undergoes regular penetration testing and security audits by independent third parties to ensure security systems remain up to date.

6Cookies & Tracking Technologies

Hfive uses cookies and similar tracking technologies to enhance the user experience, maintain session security and analyse platform usage patterns. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functionality, including login session verification and security. These cookies cannot be disabled without affecting your ability to use the platform.
• Performance Cookies: Collecting anonymous data on how members use the platform — such as the most frequently visited pages and time spent in each section. This data is used to improve the user experience.
• Functional Cookies: Remembering your preferences such as language, display settings, and login information to make using the platform more convenient.
• Analytics Cookies: Helping us understand how members interact with the platform as a whole. This data is processed in aggregate and is not used to identify individuals.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality of some sections of the hfive platform.

7Data Storage & Retention Period

Hfive retains your personal information for as long as necessary to fulfil the purposes stated in this privacy policy or for as long as required by applicable law.

• Active Account Data: Retained for the duration your account is active and for 5 years after account closure to meet legal compliance requirements.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian financial and tax legal requirements.
• KYC Records: Retained for a minimum of 5 years after the business relationship ends to meet AML and PDPA requirements.
• Technical Log Data: System and security logs are retained for 12 months for security analysis and technical troubleshooting purposes.
• Communication Records: Customer support correspondence is retained for 2 years for quality control purposes and historical dispute reference.

When the retention period expires, your data will be securely deleted or anonymized in accordance with hfive's established data deletion procedures.

8Your Rights as a Member

As an hfive member and a Malaysian citizen or resident, you have the following rights regarding your personal data under the Personal Data Protection Act 2010 (PDPA):

To exercise any of the above rights, please contact our data protection team via live chat or email at [email protected]. We will process your request within 14 business days.

9Changes to This Privacy Policy

Hfive reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements or improvements to our security procedures.

When there are significant changes, we will notify you via:

• In-app notification on the hfive mobile app upon next login
• Email notification to the address registered in your account
• Update of the "Updated" date displayed at the top of this page

Continued use of the hfive platform following any amendments to this Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically.

10Contact Us

If you have any questions, concerns or complaints regarding how hfive handles your personal data, please contact us through the following channels:

• 24/7 Live Chat: The fastest way to get help – available at the bottom right corner of the platform at all times
• Data Protection Email: [email protected] – please include "Privacy Enquiry" in the subject line of your message
• Frequently Asked Questions: Visit the page FAQ us for instant answers to frequently asked questions about privacy and account security

For data protection complaints that hfive is unable to resolve, you have the right to contact the Department of Personal Data Protection Malaysia (JPDP), the regulatory authority responsible under PDPA 2010.