Updated: 1 January 2026

Hfive5 Privacy Policy – Personal Data Protection for Malaysian Members

Hfive5 takes every member's privacy seriously. This Policy transparently explains how we collect, use, store, and protect your personal data when you use our platform.

Commitment Privacy hfive5

Six principles that guide how we handle your personal data every day

256-bit SSL Encryption
All data transmitted between your device and hfive5's servers is protected by 256-bit SSL encryption — the same technology used by major Malaysian banking institutions. Every login session, every transaction, and every detail you enter is fully secured from the very first transmission.
Full Encryption
Data Is Never Sold to Third Parties
hfive5 has never and will never sell, rent, or trade members' personal data to any third party for marketing or commercial purposes. Your information belongs to you — we use it only for purposes to which you have given explicit or implied consent.
Not Sold
Your Data, Your Control
As an hfive5 member, you have the full right to access, amend, transfer, or request the deletion of your personal data at any time. We provide a clear, straightforward process for exercising these rights — no complicated procedures required.
Your Full Rights
Secure & Protected Servers
hfive5 member personal data is stored on servers protected by a multi-layered security system — comprising role-based access controls, real-time monitoring, regular backups, and disaster recovery protocols. Access to sensitive member data is restricted to specifically authorised personnel only.
Secure Servers
Data Protection Law Compliance
hfive5 operates in compliance with applicable data protection legal requirements. Every data collection and processing activity is designed to uphold internationally recognised data protection principles, including purpose limitation, data minimisation, and transparency.
Legal Compliance
Data Breach Notification
In the unlikely event of a data security breach that may affect members, hfive5 is committed to notifying affected members within a reasonable timeframe and taking immediate remedial action to minimise any negative impact.
Incident Transparency

Important Note: This Privacy Policy outlines hfive5's practices regarding the collection and use of personal data. By using the hfive5 platform, you acknowledge that you have read and understood this policy. Any enquiries may be directed to us at support@hfive5.best at any time.

1
Information We Collect

Hfive5 collects your personal data from various sources as you interact with our platform. Below are the categories of data we collect and the circumstances in which they are collected:

Data You Provide Directly

Data TypeExamplePrimary Purpose
Identity informationFull name, identification card number, date of birthAccount verification & KYC
Contact informationEmail address, phone number, residential addressCommunications & prize delivery
Login credentialsUsername, password (encrypted)Account security
Financial dataE-wallet account information, transaction recordsPayment processing
Verification documentsMyKad copy, passport, proof of addressKYC/AML Compliance

Automatically Collected Data

  • Your IP address and approximate location information when you access the hfive5 platform.
  • Device type, operating system, browser type and version.
  • Platform activity data including pages visited, games played, and session duration.
  • Cookie data and related tracking technologies (see Section 5 for further details).
  • System logs and technical error data for platform improvement purposes.
Data Minimisation Principle: hfive5 only collects data that is strictly necessary for the stated purposes. We do not collect excessive or irrelevant data beyond what is required to operate the platform and deliver the services we offer you.
2
How We Use Your Data

The personal data we collect is used solely for the following purposes and for no other purpose without your consent:

  • Account management: Creating and managing your hfive5 account, processing registrations, verifying identity, and managing account settings.
  • Transaction processing: Processes deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, and handles withdrawals to the same payment methods.
  • KYC/AML Compliance: Meeting legal requirements related to identity verification (Know Your Customer) and anti-money laundering (Anti-Money Laundering) obligations.
  • Service delivery: Gives you access to all hfive5 games and services, including sports, cricket, live baccarat, lottery, and virtual sports.
  • VIP Programme: Managing eligibility and rewards within the hfive5 VIP Rewards programme based on your playing activity.
  • Service communications: Sending important notifications related to your account, transactions, promotions you have opted into, and policy updates.
  • Platform security: Detecting and preventing fraud, unauthorised access, multi-account usage, and other suspicious activities.
  • Service improvement: Analyses usage patterns to improve the interface, platform performance, and overall user experience.
  • Responsible gaming: Monitors betting patterns to identify members who may benefit from responsible gambling support.
Purpose Limit: hfive5 will not use your personal data for purposes unrelated to the services you registered for without first obtaining fresh consent from you.
3
Data Sharing with Third Parties

Hfive5 does not sell or rent your personal data to any third party. However, we may share your data in limited circumstances as follows:

Trusted Service Providers

We work with trusted third-party service providers to help us operate the platform, including:

  • Game providers: Evolution Gaming, Playtech Live, Pragmatic Play Live, and other providers that deliver live casino games. These providers receive the data necessary to deliver the gaming experience to you.
  • Payment processors: Malaysian payment platform providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and the FPX network, which process your financial transactions.
  • Identity verification services: KYC service providers who assist us in verifying member identities in accordance with compliance requirements.
  • Cloud services and infrastructure: Technology service providers that supply server infrastructure and data storage for the hfive5 platform.

All third-party providers we engage are bound by strict confidentiality agreements and are only permitted to use your data for the specific purposes we direct.

Legally Mandated Disclosures

Hfive5 may disclose your personal data to the relevant authorities where required by law, court order, or direction from a legitimate authority — including investigations into financial crime, money laundering, or fraud involving our platform.

Our Commitment: hfive5 will never share your personal data with third-party marketers, advertising networks, or data brokers for commercial purposes. Your data is not a product we trade.
4
Security & Data Protection

Hfive5 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

Technical Security Measures

  • 256-bit SSL/TLS encryption for all communications between your device and hfive5 servers.
  • Encryption at rest for all sensitive data stored in our databases.
  • Passwords are stored in hashed format using strong cryptographic algorithms — we never store passwords in plain text, and our team has no ability to read your password.
  • Two-factor authentication (2FA) is available to all member accounts as an additional layer of security.
  • Intrusion detection and real-time monitoring systems operating 24 hours a day.
  • Regular penetration testing by independent security experts to identify and address vulnerabilities before they can be exploited.

Organisational Security Measures

  • Role-based access control — only staff who require access to perform their duties are permitted to view sensitive member data.
  • All hfive5 staff undergo regular data security awareness training.
  • Binding confidentiality agreements are signed by all staff and contractors with access to member data.
  • A clear incident response procedure to address any security breaches swiftly and effectively.
Your Responsibilities: While we take all reasonable steps to protect your data, account security is a shared responsibility. Keep your password strong and unique, never share your login credentials, and log out when using shared devices.
5
Cookies & Tracking Technologies

Hfive5 uses cookies and related tracking technologies to enhance your experience on our platform. Below is an overview of the types of cookies we use:

Cookie TypesPurposeDuration
Essential CookiesRequired for core platform functions — login sessions, security, and language preferencesSession / 30 days
Performance CookiesCollecting data on how pages are used to help us improve the platformUp to 1 year
Functional CookiesRemembering your preferences such as display theme, game layout, and account settingsUp to 1 year

Managing Your Cookie Settings

You can manage and delete cookies through your browser settings at any time. Please note, however, that disabling essential cookies may affect the functionality of the hfive5 platform, and you may be unable to log in or access certain features properly.

Most modern web browsers offer the option to block third-party cookies while still allowing first-party cookies required for core platform functions. We recommend this setting as an optimal balance between privacy and functionality.

6
Data Storage & Retention Period

Hfive5 retains your personal data only for as long as necessary for the purposes stated in this policy and to meet applicable legal requirements.

Data CategoryRetention PeriodReason
Active account dataThroughout the active account periodOngoing service provision
Financial transaction records7 years after account closureAccounting & audit requirements
KYC documents / identity verification5 years after account closureAML & legal compliance
Support communication logs3 yearsDispute resolution
Platform activity log data1 yearSecurity & fraud detection
Marketing data (where consent has been given)Until consent is withdrawnPromotional communications

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised in accordance with hfive5's established data disposal procedures.

Storage Location: hfive5 member personal data is stored on secure servers. Where data needs to be transferred to another location for operational purposes, we ensure that equivalent or stronger protections are applied at the destination.
7
Your Rights as a Data Subject

As an hfive5 member and data subject, you hold the following rights with respect to the personal data we hold about you:

  • Right of Access: You may request a copy of all personal data we hold about you. We will respond within 30 days of receiving a complete request.
  • Right to Rectification: If you find that any personal data we hold about you is inaccurate or incomplete, you have the right to request an immediate correction.
  • Right to Erasure: You may request the deletion of your personal data, subject to any legal retention requirements we are obliged to comply with. Data required for legal purposes may not be immediately erasable.
  • Right to Data Portability: You may request your personal data in a machine-readable format for the purpose of transferring it to another service provider, where applicable.
  • Right to Withdraw Consent: For data processing that relies on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the validity of any processing carried out prior to withdrawal.
  • Right to Object to Processing: You may object to the processing of your data for specific purposes in circumstances provided for under applicable law.

To exercise any of the above rights, please contact us by email at support@hfive5.best, clearly stating the right you wish to exercise along with your account details for verification purposes. We may require additional identity verification before processing sensitive requests.

8
Children's Data & Protection of Vulnerable Individuals

The hfive5 platform is intended solely for individuals aged 18 years of age and above. We strictly prohibit use of the platform by minors or individuals below the stipulated age.

Hfive5 does not knowingly collect or store personal data from individuals under the age of 18. Our identity verification process is designed to detect and prevent registration by minors. Should we discover that we have inadvertently collected data from a minor, we will take immediate steps to delete that data and close the account in question.

To Parents & Guardians: If you believe that your child or dependent under the age of 18 has registered an account on hfive5, please contact us at support@hfive5.best immediately. We will investigate and take appropriate action within 48 hours of the report being received.
9
Changes to the Privacy Policy

Hfive5 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements in how we protect member data.

For significant changes that affect how we use your personal data, we will:

  • Displaying a prominent notice on the hfive5 platform homepage at least 14 days before the changes take effect.
  • Sending email notifications to all active members outlining the key changes made.
  • Displaying the latest "Updated" date at the top of this page so you can easily identify the current version of the policy.

For minor, non-material changes — such as language clarifications or typographical corrections — updates may take effect immediately without prior notice. We encourage you to review this page periodically to stay informed of the latest terms.

Your continued use of the hfive5 platform after the effective date of any Privacy Policy update constitutes your acceptance of the revised policy. If you do not agree with any changes, please discontinue use of the platform and contact us to proceed with account closure.

10
How to Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or hfive5's use of your personal data, you can reach us through the following channels:

  • Email: support@hfive5.best — for written enquiries that require an official record or a detailed response.
  • Live Chat: Available 24 hours a day, 7 days a week via the chat icon within the hfive5 platform — for urgent enquiries.

The hfive5 Privacy Team will respond to all privacy-related enquiries within 5 business days from the date the enquiry is received. For requests requiring more in-depth investigation, we will keep you informed of progress on a regular basis.

Language of Communication: We welcome privacy enquiries in both Bahasa Malaysia and English. All official privacy-related communications will be recorded for accountability and service improvement purposes.

Right You As an hfive5 Member

You are in control of your data — know the rights you can exercise at any time

Right to Access Data
Request a copy of all personal data we hold about you. We will respond within 30 days in a clear and accessible format.
Right to Rectification
If your personal data is inaccurate or incomplete, request a correction immediately. We will update your records within 48 hours of verification being received.
Right to Erasure
Request the deletion of your personal data, subject to legal retention requirements. We will inform you of what can and cannot be deleted, and the reasons why.
Right to Data Portability
Obtain your personal data in a machine-readable format for transfer to another service provider of your choice.
Right to Withdraw Consent
Withdraw consent for marketing communications at any time via your account settings or by contacting us — without affecting your core services.
Right to Object
Object to the processing of your data for specific purposes unrelated to the provision of core services, under circumstances provided for by law.

Why hfive5's Privacy Policy Is Different — More Than Just a Legal Document

Most privacy policies are written by lawyers for lawyers — packed with legal jargon that's nearly impossible for the average person to understand. They're then buried on a page that rarely gets visited and forgotten the moment the "I Agree" button is clicked. At hfive5, we believe a privacy policy should be a document you can genuinely read, understand, and hold as a real assurance of how your data is handled.

That is why we have written this Privacy Policy in plain language — with clear explanations of what we do, why we do it, and what your rights are throughout. This is not merely a matter of legal compliance; it is part of hfive5's commitment to full transparency across every aspect of our operations.

Your Data and the Trust You Place in hfive5

When you register an account with hfive5, you place your trust in us — trust that your personal information, transaction records, and playing habits will be kept safe and used only for purposes you understand and have agreed to. We do not take that trust lightly.

Every time you deposit via Touch 'n Go eWallet, GrabPay, or DuitNow, our system processes your transaction information with full end-to-end encryption. Your e-wallet account details are never stored in our system in a reusable format — only a unique token required to process withdrawals back to the same method is retained.

What Happens to Your Data When You Play

This is a question few people think to ask, but it's important to understand. When you play sports, cricket, or live baccarat on hfive5, our system records your betting activity — not to monitor your habits, but for very specific purposes:

  • Calculates the VIP points you accumulate based on your total wagering amount for the current month.
  • Processing your VIP weekly cashback with the precise amount based on your actual betting records.
  • Detecting any suspicious activity that may indicate unauthorised access to your account.
  • Monitoring betting patterns for our responsible gaming programme — not to judge you, but to offer support where it may be needed.

Financial Protection — Payment Security at hfive5

One of the most critical privacy considerations for any online betting platform is the security of financial information. When you use Boost, ShopeePay, or FPX via Maybank2u or CIMB Clicks to make deposits at hfive5, we never store your bank account credentials or card details directly in our systems.

All financial transactions are processed through PCI DSS-certified payment gateways — the highest security standard in the digital payments industry. This means that even in the unlikely event of a data breach, your sensitive financial information will not be exposed, as it is never stored in a form that could be exploited by unauthorised parties.

Marketing Communications — Your Choice

Hfive5 sends promotional communications, exclusive VIP offers, and platform updates only to members who have opted in to receive them. This isn't spam you're forced to accept as the "price" of using our platform — it's a choice you make, and one you can change at any time.

If you wish to stop receiving promotional emails from hfive5, you may unsubscribe via the link at the bottom of any promotional email, or through the notification settings in your account. Your preference will take effect within 48 hours. Note: Unsubscribing from marketing emails will not stop important transactional emails such as deposit or withdrawal confirmations, as these form part of the core service you signed up for.

Your Rights and How to Exercise Them

One of the most important sections of this Privacy Policy is the one concerning your rights as a data subject. hfive5 recognises that your personal data belongs to you — we only manage it with your permission and for the purposes stated. This means you have real, enforceable rights, not merely rights on paper.

If you'd like to know what data we hold about you, simply email support@hfive5.best with "Data Access Request" as the subject line. We'll provide a full report within 30 days. If you find any inaccuracies, we'll correct them promptly. If you wish to delete your account and all associated data, we'll process that request in full compliance with applicable legal requirements.

Hfive5 takes member privacy seriously — not because the law requires it, but because we believe that a lasting relationship between a platform and its members is built on trust, and that trust starts with respecting your privacy every day, in every interaction, without exception.

Question Common – Privacy Policy

Answers to the most frequently asked questions about privacy and data protection at hfive5

No, hfive5 has never sold, rented, or traded member personal data to any third party for marketing or commercial purposes, and never will. We only share the data necessary with service providers we use to operate the platform — such as game providers, Malaysian payment processors, and KYC service providers — and all such third parties are bound by strict confidentiality agreements.

hfive5 does not store your full bank account or e-wallet details directly in our systems. All financial transactions are processed through PCI DSS-certified payment gateways. For methods such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, we use secure unique tokens to process transactions without storing your account credentials. All communications between your platform and our servers are protected with 256-bit SSL encryption.

Yes, you may request the deletion of your personal data by contacting us at support@hfive5.best. Please note, however, that certain data may need to be retained for a specified period due to legal requirements — for example, financial transaction records must be kept for 7 years for audit and financial regulatory compliance purposes. We will clearly inform you which data can be deleted immediately and which must be retained, along with the applicable period and reason.

When you close your hfive5 account, your personal data is not deleted immediately, as legal requirements oblige us to retain certain records for specified periods. Financial transaction records are retained for 7 years, KYC documents for 5 years, and support communication logs for 3 years. Once the relevant retention period has elapsed, your data will be securely deleted or anonymised. Data not subject to legal retention requirements will be deleted within 30 days of the account closure date.

Yes, hfive5 does record your betting activity, but for limited and legitimate purposes — calculating your VIP points and weekly cashback, detecting suspicious activity that may indicate unauthorised access to your account, monitoring betting patterns for responsible gambling programmes, and meeting legal compliance requirements. This activity data is not shared with third parties for marketing purposes and is not used to build profiles that are sold to anyone. Platform activity records are retained for 1 year before being automatically deleted.
JOIN WITH CONFIDENCE

A Platform That Respects Your Privacy

Hfive5 takes the protection of your personal data seriously. Register a free account and enjoy a safe, transparent, and responsible online betting experience alongside more than 100,000 Malaysian members who already trust us.

Related Links: This Privacy Policy should be read in conjunction with Terms & Conditions hfive5, which constitutes the entire agreement between you and our platform. For information on responsible gaming, please visit the Responsible Gaming us. Any privacy-related enquiries can be directed to us at support@hfive5.best.

Bahasa Melayu