Privacy Policy

1Introduction

h5aone ("Company", "we", "us", "our") operates the online gaming information and entertainment platform accessible at https://h5aone.cam (the "Platform"). This Privacy Policy ("Policy") describes the personal data we collect from users ("you", "User") of the Platform, how that data is processed, with whom it may be shared, how long it is retained and what rights you hold in relation to it.

This Policy applies to all visitors, registered account holders and any other individuals whose personal data is processed by h5aone in connection with the Platform. It should be read alongside our Terms & Conditions, which govern your use of the Platform and form part of the overall agreement between you and the Company.

By accessing the Platform, registering an account or submitting any personal data through the Platform, you confirm that you have read and understood this Policy and that you consent to the processing of your personal data as described herein. If you do not accept this Policy, you must not use the Platform.

2Definitions

The following terms carry the meanings assigned below throughout this Policy.

3Personal Data We Collect

The categories of personal data collected by h5aone depend on the nature of your interaction with the Platform. The table below sets out the main data categories and the context in which they arise.

Category	Examples	When Collected
Identity Data	Full name, date of birth, nationality, gender	Account registration and KYC verification
Contact Data	Email address, phone number, residential address	Account registration, support correspondence
Financial Data	Payment method details, transaction amounts in MYR, bank or e-wallet references	Deposit and withdrawal processing
KYC Documents	National identity card, passport, proof-of-address document	Identity verification prior to first withdrawal
Technical Data	IP address, device type, browser, operating system, session timestamps	Automatic collection on Platform access
Usage Data	Pages visited, games accessed, bet history, session duration	Automatic collection during Platform use
Correspondence Data	Support chat transcripts, email content, feedback submissions	When you contact our support team
Responsible Gambling Data	Deposit limit settings, self-exclusion requests, problem gambling risk indicators	When responsible gambling tools are used

We do not intentionally collect special category data (such as health, racial origin or political opinions) unless it is voluntarily provided by a User in the context of a responsible gambling support interaction. Such data is handled with heightened care and processed only where strictly necessary.

4How We Collect Personal Data

Personal data is collected through the following principal channels:

4.1 — Direct Submission

You provide personal data directly when you register an account, complete KYC verification, make a deposit or withdrawal using Malaysian payment methods such as Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, DuitNow or FPX, contact our support team, or submit any form on the Platform.

4.2 — Automated Technical Collection

When you visit the Platform, certain technical data is collected automatically through server logs, cookies and similar technologies. This includes your IP address, device identifiers, browser type and session activity. This data is used for security monitoring, fraud prevention and platform performance optimisation. Please see Clause 10 for our full Cookie Policy.

4.3 — Third-Party Sources

We may receive personal data about you from third-party identity verification providers used in our KYC process, fraud detection and anti-money laundering screening services, and payment gateway partners. All such third-party Data Processors are subject to contractual data protection obligations consistent with this Policy.

5Purposes of Data Processing

h5aone processes personal data only for the specific purposes described below. We do not process personal data for purposes that are incompatible with those originally disclosed at the point of collection.

• Account Management: Creating, maintaining and administering your Platform account, including authentication, password recovery and profile updates.
• Transaction Processing: Facilitating deposits and withdrawals in MYR through verified Malaysian payment channels, including reconciliation and dispute resolution.
• Identity Verification (KYC): Verifying your identity and age (21+) in accordance with applicable anti-money laundering, counter-terrorism financing and gaming regulatory obligations.
• Customer Support: Responding to your enquiries, resolving complaints and managing responsible gambling requests submitted to our support team.
• Security and Fraud Prevention: Detecting, investigating and preventing fraudulent transactions, bonus abuse, multi-accounting and other conduct that breaches our Terms & Conditions.
• Legal and Regulatory Compliance: Meeting obligations under applicable gaming licensing conditions, financial crime legislation and data protection law.
• Platform Improvement: Analysing usage patterns to improve navigation, game availability, payment method performance and overall user experience.
• Responsible Gambling Administration: Managing deposit limits, session limits, self-exclusion requests and related responsible gaming tools in accordance with regulatory requirements.
• Marketing Communications: Sending promotional content regarding bonuses and platform features where you have provided explicit consent to receive such communications. You may withdraw consent at any time.

6Legal Basis for Processing

Processing of personal data by h5aone is carried out on one or more of the following legal bases depending on the specific processing activity:

• Contractual Necessity: Processing is necessary to perform the contract constituted by the Terms & Conditions between you and h5aone, including account management and transaction processing.
• Legal Obligation: Processing is required to comply with applicable legal and regulatory obligations, including KYC, anti-money laundering screening and gaming licence conditions.
• Legitimate Interests: Processing is necessary for the Company's legitimate interests in fraud prevention, security monitoring, system performance and business analytics, where these interests are not overridden by your data protection rights.
• Consent: Where processing is based on your consent — in particular for marketing communications and non-essential cookies — you may withdraw that consent at any time without detriment to your account status.

7Data Sharing and Disclosure

h5aone does not sell, rent or trade personal data to third parties for commercial purposes. Data may be shared in the following circumstances only:

7.1 — Service Providers and Data Processors

We share personal data with third-party service providers acting as Data Processors under written agreements that require them to process data only on our documented instructions and to implement appropriate security measures. These include payment processing partners (such as those operating the FPX network, DuitNow infrastructure and e-wallet integrations), identity verification providers, cloud hosting services and customer support platform operators.

7.2 — Legal and Regulatory Authorities

We may disclose personal data to law enforcement agencies, regulatory authorities, licensing bodies or courts where required by applicable law, court order or regulatory instruction. We will notify affected Users of such disclosures where permitted by law.

7.3 — Business Transfers

In the event of a merger, acquisition, restructuring or sale of the Company or its assets, personal data held by h5aone may form part of the transferred assets. Affected Users will be notified by publication of a revised Privacy Policy prior to any such transfer taking effect.

8International Data Transfers

The Platform may be operated using infrastructure, hosting environments or service providers located outside Malaysia. Where personal data is transferred to countries that do not provide a level of data protection equivalent to the applicable standards in the User's home jurisdiction, h5aone implements appropriate safeguards such as standard contractual clauses or equivalent contractual mechanisms to protect transferred data.

Users with questions regarding the specific countries to which their data may be transferred are welcome to submit a written enquiry to our support team using the contact details in Clause 15.

9Data Retention

We retain personal data for as long as is necessary to fulfil the purpose for which it was collected, or for such longer periods as are required by applicable legal, regulatory, accounting or reporting obligations.

• Account and Identity Data: Retained for the duration of the account relationship and for a minimum of five (5) years after account closure, in line with anti-money laundering record-keeping obligations.
• Transaction and Financial Records: Retained for a minimum of seven (7) years from the date of each transaction to satisfy financial regulatory requirements.
• KYC Documents: Retained for the period required by the applicable gaming licence and financial crime legislation, typically five (5) years from the end of the business relationship.
• Support Correspondence: Retained for three (3) years from the date of the last interaction, unless the correspondence forms part of an ongoing dispute or investigation.
• Technical and Usage Data: Retained in identified form for up to twelve (12) months; may be retained in aggregated, anonymised form indefinitely for analytical purposes.
• Responsible Gambling Records: Self-exclusion and limit records are retained throughout the exclusion period and for five (5) years thereafter to prevent circumvention.

When personal data is no longer required for any of the above purposes, it is securely deleted or irreversibly anonymised.

10Cookies & Tracking Technologies

The Platform uses cookies and similar tracking technologies to deliver a functional, secure and personalised experience. The categories of cookies we deploy are as follows:

Strictly Necessary Cookies

These cookies are essential for the Platform to operate. They enable core functions such as session authentication, account login persistence, security token validation and load-balancing. They cannot be disabled without impairing Platform functionality. No consent is required for strictly necessary cookies.

Functional Cookies

These cookies remember your preferences, language settings and previously selected payment methods (such as your preferred Malaysian e-wallet or bank), providing a more convenient experience on return visits. They are enabled by default but may be managed through your browser settings.

Analytics Cookies

These cookies collect aggregated data about how visitors interact with the Platform, including pages viewed, time spent and navigation paths. This information helps us improve the Platform layout, game catalogue and payment flow. Analytics cookies are deployed only where you have provided consent.

Marketing Cookies

Marketing cookies may be used to present promotional content relevant to your interests, including bonus information and gaming category recommendations. These cookies are deployed only where explicit consent has been obtained. You may withdraw consent at any time by updating your browser cookie settings.

11User Rights

Subject to applicable data protection law and the Company's legitimate interests and legal obligations, you hold the following rights in relation to your personal data processed by h5aone. To exercise any of these rights, please contact us using the details in Clause 15.

We will respond to valid rights requests within thirty (30) calendar days of receipt. Where requests are complex or numerous, the response period may be extended by a further sixty (60) days, with prior notification to the requesting User.

12Security Measures

h5aone implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include, but are not limited to:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your browser or device and the Platform.
• Encryption of personal data and financial records in storage using current industry-standard cryptographic methods.
• Access controls ensuring that personal data is accessible only to authorised personnel and Data Processors on a strict need-to-know basis.
• Regular security audits, vulnerability assessments and penetration testing of Platform infrastructure.
• Incident response procedures to identify, contain and report data breaches in accordance with applicable regulatory timelines.

While h5aone takes all reasonable precautions, no data transmission over the internet or electronic storage system can be guaranteed as entirely secure. Users are reminded to protect their own account credentials, use strong unique passwords, and notify support immediately if they suspect unauthorised access to their account.

13Children's Privacy

The Platform is intended exclusively for adults aged twenty-one (21) and above. h5aone does not knowingly collect personal data from any person under the age of twenty-one (21). If we become aware that personal data has been collected from a minor without verifiable parental consent, we will take immediate steps to delete that data and close the associated account.

Parents or guardians who believe that a minor may have accessed the Platform or provided personal data to h5aone should contact us immediately using the details in Clause 15.

14Policy Amendments

h5aone reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, our data processing practices, or Platform functionality. When material changes are made, the revised Policy will be published on this page with an updated effective date.

Where changes materially affect the way in which we process your personal data or your rights in relation to it, we will provide advance notice through a prominent notice on the Platform or by direct communication to your registered account email address.

Your continued use of the Platform after the effective date of any amended Policy constitutes acceptance of the revised terms. We encourage all Users to review this page periodically.

15Contact Us

For any questions, concerns, complaints or requests relating to this Privacy Policy or the processing of your personal data by h5aone, please contact us using the following details. All privacy-related communications should be submitted in English to ensure accurate and timely handling.

• Support Email: [email protected] (displayed as plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week through the on-site chat feature
• Response Target: Within 5 minutes for live chat; within 30 calendar days for written privacy rights requests

When submitting a data rights request, please provide your registered email address and a clear description of the right you wish to exercise. We may require reasonable proof of identity before acting on your request.