Privacy Policy — h5f08

1.1   This Privacy Policy describes how h5f08 (accessible at https://h5f08.pro) collects, uses, discloses, and safeguards the personal information of individuals who access or use the h5f08 platform, including its website, mobile interfaces, gaming products, and associated customer support channels.

1.2   h5f08 is operated primarily for players based in Indonesia. Where this Policy references local context — such as Indonesian payment methods, identity documents, or regulatory frameworks — those references apply to Indonesian residents. Players accessing h5f08 from other jurisdictions are also bound by this Policy.

1.3   This Privacy Policy is incorporated by reference into the h5f08 Terms & Conditions. By registering an account or using any h5f08 service, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree, you must not use the h5f08 platform.

1.4   This Policy applies to all personal data processed by h5f08 regardless of the means by which it is collected — including data submitted during registration, data gathered automatically through your use of the platform, data obtained from third-party verification providers, and data you provide when contacting customer support.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

3.1   h5f08 acts as the Data Controller for all Personal Data collected through the Platform. As Data Controller, h5f08 is responsible for determining why and how your Personal Data is processed, and for ensuring that processing is carried out lawfully, fairly, and transparently.

3.2   h5f08 operates under an internationally recognised gaming licence. The platform is licensed and regulated by the relevant international authority under which h5f08 is registered. For enquiries specifically related to data protection and privacy, Players may contact h5f08 directly using the contact details provided in Clause 17 of this Policy.

3.3   Where h5f08 engages third-party Data Processors — such as payment gateway operators, KYC verification service providers, and analytics platforms — it does so through binding data-processing agreements that require those processors to handle your Personal Data only in accordance with h5f08's documented instructions and to maintain appropriate technical and organisational security measures.

4.1   h5f08 collects the minimum Personal Data necessary to provide its services securely and in compliance with applicable anti-money-laundering (AML) and responsible gaming obligations. The categories of data we collect are set out in the table below.

4.2   h5f08 does not collect or store full payment card numbers (PAN). Where card-based payment methods are made available, card data is tokenised by the payment processor and h5f08 retains only a masked card reference.

5.1   Directly from You. The majority of your Personal Data is collected directly from you when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, respond to a survey or promotion, or interact with any other feature of the h5f08 Platform.

5.2   Automatically through Platform Use. When you access the h5f08 Platform, our servers automatically log technical data including your IP address, browser fingerprint, device identifiers, and session activity. This data is collected via server logs, cookies, and similar tracking technologies described in Clause 12.

5.3   From Third-Party Verification Providers. To fulfil our KYC and AML obligations, h5f08 may share data with and receive data from independent identity-verification service providers. These providers cross-reference the documents you submit against government-held databases and fraud-screening systems to confirm your identity and age eligibility.

5.4   From Payment Processors. When you make a deposit or withdrawal via a supported Indonesian payment method (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, or LinkAja), the relevant payment processor may share transaction confirmation data with h5f08 to enable account crediting and withdrawal processing.

5.5   From Public Sources. In cases where enhanced due diligence is required, h5f08 may supplement Player information with data obtained from publicly available sources, such as company registry records or sanctions watchlists.

6.1   h5f08 uses your Personal Data for the following purposes:

• Account Management: To create, maintain, authenticate, and administer your h5f08 account, including password resets and account-security alerts.
• Service Delivery: To process deposits and withdrawals, settle bets and game rounds, credit bonuses, and deliver all gaming services — including slots, live casino, sportsbook, and togel (Indonesia's traditional numbers lottery).
• Identity Verification & Compliance: To complete KYC checks, verify your age (21+ requirement), screen against AML and sanctions watchlists, and comply with applicable international regulatory obligations.
• Responsible Gaming: To monitor gaming patterns for signs of problem gambling, enforce self-imposed limits and exclusion requests, and contact you if our responsible gaming systems flag potential harm indicators.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, account takeover attempts, bonus abuse, and any other activity that threatens the integrity of the h5f08 Platform or the interests of other Players.
• Customer Support: To respond to your enquiries, resolve disputes, and maintain a record of support interactions for quality assurance and training purposes.
• Marketing & Personalisation: With your consent, to send you promotional communications about new games, bonuses, and seasonal offers (such as BRI Liga 1 promotions, Idul Fitri specials, or Ramadhan campaigns) that are relevant to your gaming preferences and location. You may withdraw this consent at any time by contacting support or updating your communication preferences in your account dashboard.
• Platform Improvement: To analyse aggregated usage data, conduct A/B testing, and improve the user experience, game selection, and performance of the h5f08 Platform.
• Legal Obligations: To comply with any applicable legal or regulatory requirement, court order, or lawful request from a competent authority.

6.2   h5f08 will not use your Personal Data for any purpose that is incompatible with the purposes listed above without first notifying you and, where required by law, obtaining your consent.

7.1   h5f08 processes your Personal Data on the following legal bases:

8.1   h5f08 does not sell your Personal Data to third parties. We do not trade, rent, or monetise your information in any way. We share your data only in the limited circumstances described below.

8.2   Service Providers (Data Processors). h5f08 engages third-party service providers to support platform operations. These include:

• Payment processors operating the BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, and LinkAja integrations — who receive only the transaction data necessary to process your payment.
• KYC and identity verification providers — who receive the documents and biometric data you submit for verification, process them, and return a verification outcome to h5f08.
• Cloud hosting and infrastructure providers — who store Platform data on servers secured to international standards.
• Customer support platform providers — who host our live chat and ticketing systems and process communication data on our behalf.
• Analytics and fraud-prevention platforms — who receive pseudonymised behavioural and technical data to support platform security and performance analysis.
• Game studios and content providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe — who may receive session identifiers necessary to deliver and settle game rounds. Game studios do not receive your full Personal Data profile.

8.3   Regulatory and Legal Disclosures. h5f08 may disclose your Personal Data to competent authorities, regulators, law enforcement agencies, or courts where required by applicable law, a binding court order, or a lawful regulatory request. Where permitted, h5f08 will notify you of such a request before disclosing.

8.4   Business Transfers. In the event of a merger, acquisition, restructuring, or sale of all or part of h5f08's business, your Personal Data may be transferred to the acquiring entity as part of that transaction. You will be notified in advance of any such transfer and of any changes to this Privacy Policy that result from it.

8.5   With Your Consent. Outside the categories listed above, h5f08 will share your Personal Data with third parties only with your explicit prior consent.

9.1   h5f08 operates globally and may process or store your Personal Data on servers located outside Indonesia. Where Personal Data is transferred to a country that does not provide an equivalent level of data protection to that available in your home jurisdiction, h5f08 will implement appropriate safeguards to protect that data, including contractual clauses that bind the receiving entity to data-protection standards consistent with this Policy.

9.2   By using the h5f08 Platform, you acknowledge and consent to your Personal Data being transferred to, stored in, and processed in jurisdictions outside Indonesia where h5f08 or its service providers operate, subject to the safeguards described in this Clause.

9.3   If you wish to obtain further information about the specific safeguards applied to international transfers of your Personal Data, please contact h5f08 using the details in Clause 17.

10.1   h5f08 retains your Personal Data for no longer than is necessary for the purposes for which it was collected, subject to any longer retention period required by applicable law or regulatory obligation.

10.2   Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Anonymised data may be retained indefinitely for statistical and platform-improvement purposes.

11.1   h5f08 implements a layered set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and the h5f08 Platform is encrypted in transit using 256-bit SSL/TLS — the same standard applied by international banks and financial institutions.
• Password Hashing: Account passwords are stored exclusively as one-way cryptographic hashes using a modern, salted hashing algorithm. h5f08 staff cannot retrieve your plain-text password under any circumstances.
• Access Controls: Access to Personal Data within h5f08's internal systems is restricted to employees and contractors who require it to perform their assigned functions, and is enforced via role-based access control (RBAC) policies.
• Intrusion Detection & Monitoring: h5f08 operates continuous security monitoring on its platform infrastructure, including automated intrusion-detection systems, anomaly alerting, and regular penetration testing conducted by independent security specialists.
• Data Encryption at Rest: Sensitive data stored in h5f08 databases — including KYC documents and financial records — is encrypted at rest using AES-256 encryption.
• Vendor Security Standards: All third-party Data Processors engaged by h5f08 are contractually required to maintain security standards commensurate with those applied by h5f08 itself.

11.2   Despite these measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. h5f08 will notify affected Players and relevant authorities without undue delay in the event of a data breach that poses a risk to Players' rights and interests.

12.1   h5f08 uses cookies and similar tracking technologies (such as local storage objects and session tokens) to operate the Platform, remember your preferences, maintain your login session, prevent fraud, and analyse Platform performance.

12.2   The categories of cookies used by h5f08 are as follows:

12.3   You may manage your cookie preferences at any time through your browser settings. Please note that disabling strictly necessary cookies will prevent the Platform from functioning correctly. Withdrawing consent for analytics or marketing cookies will not affect your ability to use h5f08's core gaming services.

13.1   Subject to applicable law and h5f08's legal obligations (including AML retention requirements), you have the following rights in respect of your Personal Data held by h5f08:

• Right of Access: You may request a copy of the Personal Data h5f08 holds about you, along with information about how it is used and with whom it is shared.
• Right to Rectification: If any Personal Data h5f08 holds about you is inaccurate or incomplete, you may request that it be corrected or updated.
• Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no overriding legal basis applies. Note that h5f08 may be required to retain certain data (particularly KYC and transaction records) for AML compliance purposes even following an erasure request.
• Right to Restriction of Processing: You may request that h5f08 restrict processing of your Personal Data in certain circumstances — for example, while the accuracy of data you have contested is verified.
• Right to Data Portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you may request a copy of your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing of your Personal Data where h5f08 relies on legitimate interests as the legal basis, including profiling for responsible gaming monitoring. h5f08 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

13.2   To exercise any of the rights listed above, please contact h5f08 using the details in Clause 17. h5f08 will respond to all verified requests within 30 calendar days. In complex cases, h5f08 may extend this period by a further 30 days, notifying you within the initial 30-day window.

14.1   h5f08 enforces a strict 21+ age restriction across all products and services. The Platform is not intended for, directed at, or designed to be used by any person under the age of 21. h5f08 does not knowingly collect Personal Data from individuals under the age of 21.

14.2   During the registration process, h5f08 requires all applicants to declare that they are aged 21 or older. This declaration is followed by automated age-verification checks and, where required, manual KYC review of a government-issued identity document confirming date of birth.

14.3   If h5f08 discovers or has reasonable grounds to believe that an account is held by a person under the age of 21, h5f08 will immediately suspend that account, conduct a thorough review, and — where the underage status is confirmed — permanently close the account and return any deposited funds net of any bonuses applied, in accordance with the h5f08 Terms & Conditions.

14.4   If you are a parent or guardian and believe that a minor in your care has registered an account or provided Personal Data to h5f08 without your knowledge, please contact our support team immediately at [email protected]. h5f08 will investigate and take prompt corrective action, including deletion of any Personal Data collected from the minor.

15.1   The h5f08 Platform integrates services and content from third-party providers, including game studios, payment processors, and analytics platforms. When you interact with these integrated services, those providers may independently collect data about you in accordance with their own privacy policies.

15.2   Game content on h5f08 is supplied by studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe. These studios operate their game engines on their own infrastructure. While h5f08 transmits only the minimum session data necessary to launch and settle each game round, the studio's own data practices are governed by their respective privacy notices.

15.3   h5f08 is not responsible for the privacy practices of any third-party service provider beyond the contractual obligations h5f08 imposes on Data Processors as described in Clause 3.3. Players are encouraged to review the privacy policies of any third-party service they interact with directly.

15.4   The h5f08 Platform does not contain hyperlinks to external third-party websites. All navigation within h5f08 remains within the h5f08.pro domain. This Privacy Policy applies exclusively to data processing activities conducted by or on behalf of h5f08.

16.1   h5f08 reserves the right to amend this Privacy Policy at any time. Changes may be made to reflect updates in applicable law or regulation, changes in h5f08's data processing practices, improvements to Platform functionality, or feedback from Players and regulatory bodies.

16.2   When material changes are made to this Privacy Policy, h5f08 will provide notice to registered Players via the email address associated with their account and/or by displaying a prominent notice on the Platform. The updated Policy will also be published at https://h5f08.pro/privacy-policy with a revised "Last Updated" date at the top of the document.

16.3   Your continued use of the h5f08 Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you must cease using the Platform and may request account closure by contacting support.

16.4   Minor amendments — such as typographical corrections, formatting changes, or clarifications that do not affect the substance of h5f08's data processing practices — may be made without individual notification. The "Last Updated" date will always reflect the most recent revision regardless of its scope.

17.1   If you have any questions, concerns, or requests relating to this Privacy Policy or h5f08's handling of your Personal Data, please contact our team through any of the following channels:

17.2   For formal data rights requests (access, rectification, erasure, portability, restriction, objection, or consent withdrawal as described in Clause 13), please clearly mark your correspondence as "Data Rights Request — Privacy Policy" and direct it to [email protected]. h5f08 will acknowledge receipt within 72 hours and provide a full response within 30 calendar days.

17.3   For formal legal correspondence or regulatory notices relating to this Privacy Policy, please direct communications to the registered contact address associated with the h5f08 operating entity, available upon written request via the email address above.