Privacy Policy — h5h03

Throughout this Privacy Policy, the following terms carry the meanings defined below:

• "h5h03" / "the Company" / "we" / "us" / "our" — the operator of the h5h03 platform at https://h5h03.app, including its licensed affiliates and data processors acting on its behalf.
• "Platform" — the h5h03 website, mobile web application, and all associated services including the online casino, sportsbook, live dealer tables, and payment cashier.
• "Player" / "you" / "your" — any individual who visits, registers on, or otherwise interacts with the h5h03 Platform.
• "Personal Data" — any information that identifies or can reasonably identify a natural person, directly or indirectly, including name, identification number, location data, or online identifiers.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data. For the h5h03 Platform, this is h5h03 as described in clause 2.
• "Data Processor" — a third party that processes Personal Data on behalf of h5h03, strictly under written instruction and subject to confidentiality and security obligations.
• "KYC" — Know Your Customer; the identity and document verification process applied to Player Accounts in compliance with anti-money laundering (AML) obligations.
• "Cookies" — small text files stored on your device by the Platform for purposes including session management, analytics, and personalisation.

The Data Controller responsible for the Personal Data collected through the h5h03 Platform is the licensed operator of h5h03. For all privacy-related inquiries, requests, or complaints, you may contact us at:

• Platform: https://h5h03.app
• Email: [email protected] (plain text — not a clickable link)
• Data Protection Contact: [email protected] — subject line: "Privacy Request"

h5h03 holds a valid international gaming licence and complies with the data protection requirements of its licensing jurisdiction. Where players are located in Indonesia, h5h03 also applies the principles of Indonesia's Personal Data Protection Law (UU PDP) as a practical standard for the handling of Indonesian players' personal information.

h5h03 collects the minimum data necessary to operate the Platform lawfully, securely, and in compliance with applicable anti-money laundering and responsible gaming obligations. The categories of Personal Data we collect are set out in the table below:

h5h03 collects Personal Data through the following channels:

• Direct Provision: You provide data directly when you register an Account, complete KYC verification, make a deposit or withdrawal, contact our support team, or participate in a promotion. This is the primary source of Identity, Contact, Financial, and Identity Document Data.
• Automated Technical Collection: When you visit and interact with the Platform, our servers and analytics tools automatically collect Technical Data and Usage Data. This includes your IP address, browser fingerprint, device identifiers, and clickstream data.
• Payment Processors: When you initiate a deposit or withdrawal, our payment processing partners transmit confirmation data (e.g., transaction reference numbers, masked account identifiers) back to h5h03 to allow us to credit or debit your Account accurately. Full payment credentials are handled exclusively by our PCI-DSS-compliant processors and are not stored on h5h03's own servers.
• Cookies and Similar Technologies: The Platform uses cookies, web beacons, and local storage to maintain session state, remember your preferences, measure Platform performance, and support fraud detection. See clause 10 for full details.
• Third-Party KYC and AML Providers: h5h03 may use third-party identity verification and fraud-screening services that cross-reference the documents you provide against official databases to confirm authenticity and detect potential fraud or sanctions exposure.
• Game Studio Partners: Game studios (such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Pocket Games Soft, and Spribe) may transmit game-session metadata to h5h03 for the purpose of calculating payouts, resolving disputes, and maintaining game-integrity records.

h5h03 uses the Personal Data we collect for the following purposes:

• Account Management: To create, maintain, and administer your Player Account, including verifying your identity, processing your login credentials, and communicating account-related notifications.
• Payment Processing: To process deposits and withdrawals in Indonesian Rupiah (IDR) via your chosen bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), and to maintain accurate financial records of all transactions.
• KYC and AML Compliance: To verify your identity and age (21+), confirm the legitimacy of your payment methods, screen your details against sanctions and politically exposed persons (PEP) lists, and comply with anti-money laundering obligations applicable under our licensing jurisdiction.
• Platform Provision and Improvement: To operate, maintain, and continuously improve the h5h03 Platform, including diagnosing technical issues, optimising page load performance, and developing new features based on aggregated usage patterns.
• Responsible Gaming: To monitor gaming behaviour for signs of problem gambling, enforce deposit limits and self-exclusion orders you have set, and proactively intervene where patterns suggest a player may need support. Full details are available on our Responsible Gaming page.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, bonus abuse, multi-accounting, identity theft, and any other conduct that violates our Terms & Conditions.
• Customer Support: To respond to your inquiries, resolve complaints, and maintain records of our support interactions for quality assurance and regulatory compliance purposes.
• Marketing and Promotions: To send you information about h5h03 promotions, bonuses, and new game releases that we believe may be of interest to you, based on your gaming preferences and account activity — subject always to your right to opt out as described in clause 12.
• Legal and Regulatory Compliance: To comply with legal obligations including responding to lawful requests from regulatory authorities, law enforcement agencies, or courts of competent jurisdiction.

h5h03 processes Personal Data only where a valid legal basis exists. The following table maps our key processing activities to their respective legal bases:

h5h03 does not sell, rent, or trade your Personal Data to any third party for their own marketing or commercial purposes. We share your data only in the following limited circumstances, and only to the extent strictly necessary:

• Payment Processors: Your financial data (bank account or e-wallet identifiers) is shared with our payment processing partners solely for the purpose of executing deposits and withdrawals in IDR. All payment partners are contractually bound to PCI-DSS standards.
• KYC and Identity Verification Providers: Identity documents and biographic data are shared with licensed third-party KYC service providers for the purpose of verifying your identity and screening against AML/sanctions databases. These providers act as Data Processors under written agreement with h5h03.
• Game Studio Partners: Game session identifiers and relevant account parameters are shared with licensed game studios (including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft) solely for the purpose of delivering game content, calculating outcomes, and resolving game-integrity disputes.
• Analytics and Technology Providers: Aggregated or pseudonymised Technical Data and Usage Data may be processed by our technology infrastructure and analytics providers (e.g., cloud hosting, CDN, performance monitoring) under strict data processing agreements that prohibit any independent use of your data.
• Legal and Regulatory Authorities: h5h03 will disclose Personal Data to competent regulatory authorities, law enforcement agencies, or courts when required to do so by a lawful order, warrant, or regulatory directive. h5h03 will, where legally permissible, notify affected Players of any such disclosure.
• Fraud Prevention Networks: In cases of confirmed fraud, bonus abuse, or multi-accounting, h5h03 may share relevant identifiers with industry fraud-prevention networks to protect other operators and players from repeat offenders.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or substantially all of h5h03's assets, Personal Data held by h5h03 may be transferred to the acquiring entity, subject to the same privacy obligations described in this Policy. Affected Players will be notified in advance where reasonably practicable.

As an internationally licensed platform serving Indonesian players, h5h03 may transfer Personal Data to, and store it in, countries outside of Indonesia. These countries may include the jurisdiction in which h5h03 holds its primary gaming licence, as well as the locations of our game studio partners and cloud infrastructure providers.

When transferring Personal Data internationally, h5h03 applies appropriate safeguards to ensure that your data receives a standard of protection consistent with this Privacy Policy. These safeguards include:

• Executing Standard Contractual Clauses (SCCs) or equivalent contractual protections with all recipients of Personal Data in third countries;
• Transferring data only to recipients in jurisdictions that maintain an adequate level of data protection as assessed by our legal and compliance teams;
• Applying encryption in transit (256-bit TLS) and at rest to all transferred Personal Data;
• Restricting access to transferred data to only those individuals who require it to fulfil their contracted function.

h5h03 retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guideline:

When data is no longer required, h5h03 will securely delete or irreversibly anonymise it in accordance with our internal data lifecycle management procedures.

The h5h03 Platform uses cookies and similar tracking technologies to provide a functional, personalised, and secure experience. By continuing to use the Platform after being informed of our cookie use, you consent to the use of cookies in accordance with this clause.

The types of cookies we use are as follows:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They maintain your login session, store your language and currency preferences, and enable the secure operation of the cashier. You cannot opt out of these cookies without effectively disabling core Platform functionality.
• Performance and Analytics Cookies: These cookies collect anonymised or pseudonymised information about how visitors use the Platform — such as which pages are visited most often and whether users encounter error messages. This data is used exclusively for improving Platform performance. We do not use this data to identify individual users.
• Functionality Cookies: These cookies allow the Platform to remember choices you make (such as your preferred game lobby view or last-visited category) and provide enhanced personalised features. Disabling these cookies may reduce the quality of your experience.
• Fraud Detection and Security Cookies: These cookies support our fraud detection systems by identifying unusual patterns of activity that may indicate account compromise, bot activity, or multi-accounting. They are an essential component of our platform security infrastructure.

Most web browsers allow you to control cookie settings through the browser preferences menu. You may choose to block or delete cookies; however, doing so may impair the functionality of the Platform, including your ability to log in and access your Account. h5h03 does not currently respond to browser "Do Not Track" signals, as no universally accepted standard for such signals has been established.

h5h03 implements a comprehensive suite of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes:

• Encryption in Transit: All data exchanged between your browser or device and the h5h03 Platform is encrypted using 256-bit TLS (Transport Layer Security). Our SSL certificate is maintained at all times, and you should verify the padlock symbol in your browser address bar before entering any login credentials or financial information.
• Encryption at Rest: Sensitive Personal Data stored on our servers — including identity documents, KYC records, and financial data — is encrypted at rest using industry-standard AES-256 encryption.
• Password Security: Player passwords are hashed using a modern, computationally expensive one-way hashing algorithm (bcrypt or equivalent). h5h03 never stores plaintext passwords and cannot retrieve your original password. If you forget your password, it must be reset, not recovered.
• Access Controls: Access to Personal Data is restricted on a strict need-to-know basis. h5h03 employees, contractors, and service providers are granted access only to the minimum data required to perform their designated functions. All access is logged and subject to regular audit.
• PCI-DSS Compliance: Payment card and bank account data is processed exclusively through PCI-DSS Level 1 certified payment processors. h5h03 does not store full payment credentials on its own infrastructure.
• Intrusion Detection: h5h03 operates real-time intrusion detection and anomaly monitoring systems to identify and respond to potential security incidents promptly.
• Incident Response: In the event of a confirmed data breach that poses a risk to your rights and freedoms, h5h03 will notify affected Players without undue delay and will report the incident to applicable regulatory authorities within the timeframes required by law.

As a Player on the h5h03 Platform, you hold the following rights in relation to your Personal Data. To exercise any of these rights, contact us at [email protected] with the subject line "Privacy Request — [Right Name]". We will respond within 30 calendar days of receiving a verified request.

• Right of Access: You have the right to request a copy of all Personal Data that h5h03 holds about you, together with information about how it is used and with whom it has been shared. We will provide this in a clear, structured format.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. For Account details (name, address, date of birth), corrections may require submission of supporting documentation.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and no other legal basis applies. Please note that h5h03 is required to retain certain data (particularly KYC and financial records) for defined periods under AML and licensing regulations, and these legal obligations take precedence over erasure requests for the applicable retention periods.
• Right to Restriction of Processing: You may request that h5h03 temporarily suspend processing of your Personal Data in specific circumstances — for example, while the accuracy of data you have contested is being verified, or while an objection to processing is being assessed.
• Right to Data Portability: You have the right to receive a copy of the Personal Data you have directly provided to h5h03 in a structured, commonly used, machine-readable format (such as CSV or JSON), and to request that this data be transmitted directly to another controller where technically feasible.
• Right to Object: You have the right to object to processing of your Personal Data where it is carried out on the basis of legitimate interests, including profiling. Where the basis for processing is direct marketing, your objection will always be honoured without requiring any justification.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.
• Right to Lodge a Complaint: If you believe h5h03 has handled your Personal Data in a manner inconsistent with this Privacy Policy or applicable law, you have the right to lodge a complaint with the relevant supervisory authority or data protection regulator in the applicable jurisdiction.

The h5h03 Platform is strictly intended for adults aged 21 and over. h5h03 does not knowingly collect, process, or retain Personal Data from individuals under the age of 21. Our registration process requires players to declare their date of birth, and our KYC verification process confirms age through government-issued identity documents (KTP or passport).

If h5h03 discovers that Personal Data has been collected from a person under the age of 21, we will immediately close the associated Account, void any associated winnings, return any verified real-money deposits, and permanently delete the collected data in accordance with clause 9.

The h5h03 Platform may display references to third-party brands, game studios, or payment providers by name (e.g., Pragmatic Play, Evolution Gaming, BCA, OVO). The h5h03 website does not contain outbound hyperlinks to external third-party websites. However, to the extent that any third-party service is accessible through the Platform (for example, a game studio's content delivered within an embedded game frame), that third party may operate under its own privacy policy, which is independent of this document.

h5h03 is not responsible for the privacy practices of any third-party game studios, payment networks, or service providers. We recommend reviewing the privacy documentation of any third-party service you interact with directly.

h5h03 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data processing practices, or the services we offer. When we make material changes, we will notify registered Players by email to the address on file, or via a prominent notice displayed upon next login, at least 7 days before the changes take effect.

The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. Your continued use of the h5h03 Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you must cease using the Platform and may close your Account in accordance with the procedure described in our Terms & Conditions.

The current and all previous versions of this Privacy Policy are available upon request by contacting [email protected].

For any questions, concerns, or requests related to this Privacy Policy or to the processing of your Personal Data, please contact h5h03's privacy team through the following channel:

• Email: [email protected] — subject line: "Privacy Request"
• Live Chat: Available 24/7 within the h5h03 Platform after login, with Indonesian-speaking agents available across WIB (UTC+7), WITA (UTC+8), and WIT (UTC+9) time zones
• Response Time: We will acknowledge your request within 48 hours and provide a substantive response within 30 calendar days

If you are not satisfied with our response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction. h5h03 will cooperate fully with any such authority in relation to complaints concerning our data processing practices.