H5atas Privacy Policy – Our Commitment to Protecting the Personal Data of Malaysian Users

H5atas ("we", "our platform") is an online casino and Sports Betting platform operating in Malaysia. We understand that your personal data is a valuable trust, and we take our responsibility to protect it seriously.

This Privacy Policy clearly and transparently explains how h5atas collects, processes, uses, stores, protects, and in certain circumstances, shares your personal data when you use our platform — whether through the website https://h5atas.app, the mobile app, or any other official h5atas channel.

This policy is drawn up in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia's primary data protection legislation. We are committed to complying with all relevant legal provisions and will keep this policy updated in line with any changes in legislation or applicable industry practices.

H5atas collects various categories of personal data depending on how you interact with the platform. The table below summarises the types of data we collect:

H5atas collects your personal data through various channels:

3.1 Directly from You

• During the new account registration process.
• When you make a deposit using Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX (Maybank2u, CIMB Clicks).
• When you contact h5atas customer support via live chat, email, or WhatsApp.
• When you fill in a form to claim a bonus, promotion, or VIP programme.
• When you update your account profile information.

3.2 Automatically

• Technical data (IP address, device, browser) is collected automatically when you browse the h5atas platform.
• Cookies and similar web tracking technologies are used to record your session activity.
• Gaming history, slots betting, Live Casino, Sports Betting on football, badminton, and e-sports are recorded automatically.

3.3 From Third Parties

• Payment service providers may supply us with transaction verification information.
• Third-party identity verification agencies we engage to verify user identities for KYC (Know Your Customer) purposes.

H5atas uses your personal data solely for legitimate purposes directly related to the provision of our services. The primary purposes for which data is used are as follows:

• Account Management: Creating, verifying, and managing your h5atas account.
• Transaction Processing: Processing deposits, withdrawals, and other financial transactions related to your activity on the platform.
• Identity Verification (KYC): To fulfil legal requirements related to identity verification and anti-money laundering.
• Customer Support: To provide you with effective assistance and customer support.
• Security & Fraud Prevention: Detecting, preventing, and investigating fraudulent activity, misuse, and security threats.
• Service Improvement: Analysing usage patterns to improve the h5atas platform, games, and overall user experience.
• Service Communications: Sending important notices regarding your account, policy changes, and security information.
• Responsible Gaming: Monitoring gameplay patterns to identify and assist users who may be experiencing gambling-related issues.
• Marketing (with consent): Sending promotions, bonus offers, and relevant h5atas updates if you have provided your consent.
• Legal Compliance: To comply with legal and regulatory obligations applicable in Malaysia.

H5atas does not sell your personal data. However, under certain limited circumstances, we may share your personal data with the following third parties:

• Payment Providers: Required transaction information is shared with payment service providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX banks to process your transactions.
• Game Providers: Basic account information may be shared with game providers such as Evolution Gaming and Pragmatic Play for technical and game verification purposes.
• Legal Authorities: Where required by law, court order, or direction from a competent Malaysian authority.
• Professional Support Services: Lawyers, accountants, or audit firms bound by strict professional confidentiality obligations.

H5atas implements comprehensive technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS Encryption: All communications between your device and h5atas servers are encrypted using the latest SSL/TLS protocols.
• Encryption of Stored Data: Sensitive personal data stored in the h5atas database is encrypted using the AES-256 standard.
• Strict Access Controls: Only h5atas staff who require access to specific data in order to perform their duties are permitted to do so, and all access is logged and audited.
• Regular Security Audits: The h5atas platform undergoes regular penetration testing and vulnerability assessments by independent cybersecurity firms.
• 24/7 Monitoring: An automated monitoring system operates around the clock to detect and respond to security threats in real time.
• Two-Factor Authentication (2FA): Users are encouraged, and in certain situations required, to enable 2FA to add an extra layer of security to their accounts.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by h5atas:

H5atas uses cookies and similar web tracking technologies to enhance the user experience and analyse platform usage. The types of cookies used are:

You can manage your cookie preferences through your web browser settings. Please note that disabling certain cookies may affect the functionality of the h5atas platform.

H5atas retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required under Malaysian law.

• Active Account Data: Retained for the duration your account remains active, plus 7 years following account closure (in compliance with Malaysia's anti-money laundering legal requirements).
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date in accordance with Malaysian tax and financial legal requirements.
• Customer Support Data: Conversation records are retained for 2 years from the date of the last interaction.
• Technical & Log Data: System logs are retained for 90 days for security and troubleshooting purposes.
• Marketing Data: Retained until you withdraw your consent to receive marketing communications.

Once the retention period expires, your personal data will be securely deleted or fully anonymised.

The h5atas platform is strictly for individuals aged 18 years and above. h5atas does not knowingly collect personal data from individuals under the age of 18.

If we discover that we have collected personal data from individuals under the age of 18 without proper verification, we will take immediate steps to delete that data and close the account in question.

If you are a parent or guardian and believe that your child who is under the legal age has registered on the h5atas platform, please contact us immediately at privacy@h5atas.app so that we may take the appropriate action.

In the course of operating the h5atas platform, your personal data may be transferred to, or accessed from, countries outside Malaysia — for example, when data is processed by servers of international game providers such as Evolution Gaming or Pragmatic Play.

H5atas ensures that any transfer of personal data outside Malaysia takes place only when:

• The data recipient provides a level of data protection equivalent to Malaysia's standards and the PDPA 2010.
• Appropriate data transfer agreements have been finalised with the receiving parties.
• The transfer is necessary to fulfil the contract between you and h5atas.
• There is another valid legal basis for the transfer.

H5atas reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or the services we offer.

When there are material amendments, h5atas will:

• Displaying clear notices on the h5atas platform homepage.
• Sending email notifications to all registered members at least 7 days before the amendments take effect.
• Updating the "Last Updated" date at the top of this document.

Your continued use of the h5atas platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way h5atas handles your personal data, please contact our Privacy Officer: