Privacy Policy h25

01 Introduction & Data Controller

H25 is an online casino and slot games platform operating for players in Malaysia. As the data controller, h25 takes full responsibility for processing all personal data collected through our platform, including the website, mobile app, and related communication channels.

This Privacy Policy applies to all users of the h25 platform, including visitors, registered players, and former members. We are committed to complying with the Malaysian Personal Data Protection Act 2010 (PDPA) and the best international standards in personal data protection.

02 Personal Data We Collect

H25 collects various types of data depending on how you interact with our platform. Below is a comprehensive overview of the data we process:

We only collect data that is genuinely necessary for the stated purposes. Irrelevant or excessive data will not be requested. You have the right to ask why certain information is required before providing it.

03 How We Use Your Data

The personal data collected is used responsibly for the following purposes:

• Account Management: Registering your account, verifying your identity and enabling secure access to the platform.
• Transaction Processing: Processing deposits, withdrawals and account balance management efficiently and securely.
• Platform Security: Detecting and preventing fraud, hacking, money laundering and other illicit activities.
• Legal Compliance: Meeting KYC, anti-money laundering (AML) obligations and regulatory reporting requirements.
• Customer Support: Responding to enquiries, resolving complaints and providing technical assistance.
• Responsible Gaming: Monitoring play habits to identify signs of problem gambling and offer appropriate support.
• Marketing (with consent): Sending promotional offers, bonuses and updates — only if you have consented to receive them.
• Platform Improvement: Analysing usage patterns to enhance your gaming experience and platform performance.

04 Legal Basis for Data Processing

H25 processes your personal data on valid legal grounds under Malaysia's PDPA 2010:

• Consent: You provide explicit consent during registration and for specific purposes such as marketing.
• Contract Performance: Processing required to provide you with the h25 platform services.
• Legal Obligation: Compliance with Malaysian laws including KYC and AML requirements as mandated by the authorities.
• Legitimate Interest: Genuine business needs such as fraud prevention and platform security, provided they do not override your fundamental rights.

05 Data Sharing & Disclosure

H25 does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. Your data is only shared in the following limited circumstances:

• Service Providers: Companies that assist us in our operations — such as payment processors (FPX, DuitNow), game software providers, and cloud services — are all bound by strict data protection agreements.
• Regulatory Authority: When required by Malaysian law or a valid court order, h25 will disclose the necessary information to the relevant authorities.
• Fraud Prevention: The minimum necessary information may be shared with industry bodies or authorities to prevent fraudulent activity affecting the platform.
• Business Transfer: Should h25 undergo a merger or acquisition, user data may be transferred as part of the business assets — with prior notice given to you.

06 Data Security & Technical Safeguards

H25 continuously invests in security infrastructure to keep your data protected at all times. The technical security measures we have implemented include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and h25 servers.
• Sensitive data within databases is encrypted using the AES-256 standard.
• Two-factor authentication (2FA) available to protect your account.
• Role-based access control — only authorised staff may access user data, and only for legitimate purposes.
• 24/7 system monitoring with real-time threat detection.
• Regular penetration testing conducted by independent security auditors.
• A clear incident response procedure ensures you are notified within 72 hours in the event of a serious data breach.

07 Data Retention Period

H25 retains your personal data for as long as your account is active and for any additional period required by Malaysian law. Our general data retention guidelines are as follows:

• Active Account Data: Retained for the duration your account remains active on the h25 platform.
• Financial Transaction Records: Minimum 7 years after the transaction, in line with Malaysia's accounting and AML legal requirements.
• KYC Data: Minimum 5 years after account closure or the date of the last business relationship.
• Customer Support Logs: 3 years from the date of last interaction.
• Technical Log Data: 12 months from the date of creation.

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked back to your identity.

08 Cookies & Tracking Technologies

H25 uses cookies and similar tracking technologies to enhance your experience and ensure platform security. The types of cookies we use:

• Essential Cookies: Required for core platform operations — login, session security, and essential functions. Cannot be disabled.
• Performance Cookies: Collecting data on how pages are used to help us improve platform speed and usability.
• Functional Cookies: Saving your preferences such as language, display settings and login details for your convenience.
• Analytics Cookies: Helping us understand aggregated, anonymised usage patterns for platform improvement purposes.

You may manage your cookie settings through your browser at any time. Please note that disabling essential cookies may affect the functionality of the h25 platform.

09 Your Rights Under the PDPA

As an h25 player based in Malaysia, you have the following rights regarding your personal data under PDPA 2010:

To exercise any of the above rights, contact the h25 privacy team via live chat or our official email. We will process your request within 30 business days.

10 Cross-Border Data Transfers

In certain cases, your personal data may be transferred to or stored on servers located outside Malaysia for technical operational purposes. When this occurs, h25 ensures that:

• The recipient country or region has an adequate level of data protection.
• Data transfers are protected by legally binding Data Processing Agreements.
• Technical safeguards such as end-to-end encryption are applied throughout all data transfers.

11 Child Protection

The h25 platform is intended for individuals aged 18 years and above only. We do not knowingly collect personal data from underage individuals. Should we discover that a minor's data has been collected without our knowledge, the account in question will be terminated immediately and all related data will be promptly deleted.

Parents or guardians who believe their child has registered on the h25 platform are encouraged to contact our support team without delay so that prompt action can be taken.

12 Contact Us & Privacy Complaints

If you have any questions, concerns, or wish to exercise your privacy rights, please contact the h25 Privacy team through the following methods:

• Live Chat: Available 24/7 on the h25 platform — the fastest way to get a response.
• Privacy Email: [email protected] — for official requests and written enquiries.
• Language: We handle enquiries in both Malay and English.

We are committed to responding to all privacy enquiries within 3 working days. For official requests such as data access or deletion, we aim to resolve them within 30 working days.