Updated: 1 January 2026
ℹ️
Important Note: This Privacy Policy clearly explains how h5 u9 collects, uses, stores, and protects your personal data. By using the h5 u9 platform, you agree to the privacy practices described in this document. Please read it in full and carefully — it is written in plain, straightforward language, not convoluted legal jargon.
1. Introduction – Who Is Responsible for Your Data?
H5 u9 is an online casino platform operating on the domain h5u9.my, catering exclusively to Malaysian players. As the data controller responsible for personal data collected through our platform, we take this obligation very seriously.
This Privacy Policy applies to all individuals who interact with the platform h5 u9 — whether you are simply browsing our site without registering, signing up for a new account, making a deposit via Touch 'n Go or DuitNow, playing slots such as Dragon Hatch or Cleopatra, or reaching out to our customer support team via live chat. Each of these interactions may involve the collection of certain data, which we will handle responsibly in accordance with the principles set out in this document.
We fully comply with Malaysia's Personal Data Protection Act (PDPA) 2010 and all relevant implementation regulations. If you have any questions about how h5 u9 handles your personal data, our privacy officer can be reached by email at [email protected] at any time.
2. Types of Personal Data We Collect
H5 u9 collects various types of personal data from our members depending on the context of the interaction. Below is a full explanation of the types of data collected and how they are obtained:
2.1 Data You Provide Directly
- Registration data: Full name, active Malaysian phone number, password (stored in encrypted form), date of birth (for age verification)
- Profile data: Additional information you choose to share on your h5 u9 account profile
- Identity verification (KYC) data: A copy of your MyKad or valid Malaysian passport when requested for identity verification purposes prior to withdrawal processing
- Financial data: Malaysian bank account or e-wallet details (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX) used for deposits and withdrawals
- Communication data: Any messages, enquiries, or feedback you send to the h5 u9 customer support team via live chat, WhatsApp, or email
2.2 Automatically Collected Data
- Log and technical data: IP address, web browser type, device operating system, date and time of access, pages visited within the h5 u9 platform
- Gaming data: Betting records, wins and losses, games played (Dragon Hatch, Fat Banker, Jacks or Better, and others), session duration
- Transaction data: A complete history of all deposits and withdrawals, payment methods used, and the status of each transaction
- Cookie data: Information stored by session cookies and analytics cookies while you use the h5 u9 platform (see Section 9 for more details)
| Data Category |
Specific Examples |
How It Is Collected |
Required? |
| Identity | Name, date of birth, MyKad | Registration form / KYC | Required |
| Contact | Phone number, email | Registration form | Required |
| Financial | Bank account, e-wallet | Payment processing | Required |
| Games | Betting records, sessions | Automatic during gameplay | Automatic |
| Technical | IP address, device type | Server logs | Automatic |
| Communications | Customer support messages | Live chat / email | Options |
3. How h5 u9 Uses Your Data
H5 u9 uses your personal data for legitimate and reasonable purposes that are directly related to the operation of our online casino platform. The following is a complete list of the purposes for which your data is used:
- Account management: Creating, verifying, and maintaining your h5 u9 account, including processing logins and ensuring account security
- Transaction processing: Securely and accurately processes all deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX, and withdrawals to Malaysian banks
- Identity verification (KYC): To verify that you are a legitimate individual, aged 18 or above, and entitled to use the h5 u9 platform in accordance with regulatory requirements
- Service maintenance: Ensuring the h5 u9 platform runs smoothly, detecting and resolving technical issues, and improving the overall user experience
- Customer support: To respond to enquiries and resolve issues you raise with the h5 u9 customer support team across all available channels
- Security and fraud prevention: To detect and prevent fraud, money laundering, the use of multiple accounts, and any other unlawful activity on the h5 u9 platform
- Legal compliance: To fulfil the legal and regulatory obligations applicable to h5 u9's operations as an online casino platform in Malaysia
- Responsible gaming: Monitoring playing habits to identify signs of problem gambling, and reaching out to members who may need support in a sensitive and compassionate manner
- Marketing communications: Sending information about h5 u9 promotions, new bonuses, and exclusive offers that you have opted in to receive (you may opt out at any time)
- Analytics and improvement: To understand how members use the h5 u9 platform, helping us make better decisions about new features and improvements we plan to implement
We will not use your personal data for any purpose beyond those stated above without first obtaining your explicit consent.
4. Legal Basis for Data Processing
Under Malaysia's PDPA 2010, h5 u9 is required to have a valid legal basis for every data processing activity we carry out. The legal bases we rely on are as follows:
- Contract performance: Data processing required to fulfil the membership agreement between you and h5 u9 — for example, processing your deposits and withdrawals in MYR (RM)
- Legal obligation: Data processing required to comply with applicable Malaysian law, including identity verification and financial record-keeping obligations
- Legitimate interests: Processing required for the legitimate interests of h5 u9 that do not override your rights and freedoms — for example, analytics for platform improvement and security monitoring
- Consent: For purposes such as marketing communications, we rely on the specific consent you provided during registration or through your account settings. You may withdraw this consent at any time.
5. Data Sharing with Third Parties
H5 u9 does not sell, rent, or disclose your personal data to third parties for their own commercial or advertising purposes. However, there are limited situations where we need to share your data with certain parties in order to operate our platform:
Parties That May Receive Your Data
- Game providers: Companies such as PG Soft (Dragon Hatch), Hacksaw Gaming (Fat Banker), and other providers that deliver games through the h5 u9 platform receive only the minimum data required for their operations. They are bound by strict data security agreements with h5 u9.
- Payment providers: Payment gateways that process your deposit and withdrawal transactions — including FPX, DuitNow, Touch 'n Go, GrabPay, Boost, and ShopeePay service providers — receive the financial data necessary to process your transactions. All of these providers are legitimate, regulated entities in Malaysia
- Technical service providers: Companies that provide infrastructure services such as server hosting, cybersecurity, and platform analytics. They are permitted to use your data solely to deliver services to h5 u9 and may not use it for any other purpose
- Legal authorities: Malaysian authorities such as the police, courts, or relevant regulatory bodies, where we receive a valid court order or are subject to a legal requirement mandating such disclosure
🔒
Our commitment: Every third party that receives your personal data from h5 u9 is bound by strict confidentiality and data security agreements. They are not permitted to use your data for any purpose other than what is specified in their agreement with h5 u9. We conduct regular compliance reviews of these third parties.
6. h5 u9 Data Security Measures
H5 u9 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or accidental destruction:
- Data encryption in transit: All communications between your device and h5 u9 servers are encrypted using 256-bit TLS/SSL protocol
- Data encryption at rest: Sensitive data such as passwords and financial information is stored in encrypted form within our databases using modern cryptographic algorithms
- Layered access controls: A role-based access control system ensures that h5 u9 staff can only access the data they need to perform their specific duties
- Real-time security monitoring: The h5 u9 cybersecurity team monitors all system activity in real time using advanced threat detection tools, 24 hours a day, 7 days a week.
- Regular security audits: Penetration testing and security audits are conducted regularly by independent security specialists to identify and address vulnerabilities before they can be exploited
- Staff training: All h5 u9 staff who handle personal data undergo comprehensive data protection training, which is updated on a regular basis.
- Incident response plan: h5 u9 has clear protocols for responding to any data security breaches, including procedures to notify affected members within 72 hours
While we take all reasonable steps to protect your data, no system in the world can guarantee 100% security under all circumstances. You also play an important role by keeping your h5 u9 account password confidential and not sharing your login credentials with anyone.
7. How Long We Retain Your Data
H5 u9 retains your personal data only for as long as necessary for the purposes set out in this Privacy Policy, or as required by applicable laws and regulatory obligations. The following is a guide to our data retention periods by category:
- Active account data: Retained for the duration your account remains active with h5 u9, plus an additional period as required for legal compliance
- Financial transaction records: Retained for a minimum of 7 years from the transaction date, in line with Malaysian financial and tax law requirements
- Gaming data: Retained for a minimum of 5 years for audit, dispute resolution, and regulatory compliance purposes
- KYC data (identity verification): Retained for the duration the account is active, plus a minimum of 5 years after account closure for anti-money laundering compliance
- Customer support communication logs: Retained for 3 years for reference and quality control purposes
- Technical log data: Retained for 12 months for security and technical troubleshooting purposes
Once the applicable retention period has elapsed, data will be securely deleted or anonymised using industry-recognised methods. Anonymised data is no longer linked to your identity and may be retained for analytical purposes without a time limit.
8. Your Rights Under Malaysia's PDPA
As a Malaysian, you have the following rights regarding your personal data held by h5 u9, in accordance with the provisions of Malaysia's PDPA 2010:
👁️
Right of Access
You have the right to request and receive a copy of all personal data we hold about you in a readable format. Requests will be processed within 30 business days. A reasonable administrative fee may be charged for unusually large requests.
✏️
Right to Rectification
If you find that the personal data we hold about you is inaccurate, incomplete, or outdated, you have the right to request a correction. We will update the relevant data within 14 business days from the date your request is received and verified.
🗑️
Right to Erasure
You may request the deletion of your personal data when you no longer wish to use the h5 u9 platform, subject to our legal data retention obligations. Financial records and compliance records may need to be retained for periods prescribed by Malaysian law, even after a deletion request is submitted.
🚫
Right to Object to Processing
You have the right to object to the processing of your personal data for specific purposes, particularly direct marketing communications. Every marketing email or message from h5 u9 includes an easily accessible "unsubscribe" link to opt out of such communications.
⏸️
Right to Restrict Processing
In certain circumstances — for example, when you dispute the accuracy of your data or object to its processing — you may request that we restrict processing while the matter is being resolved. During the restriction period, we will retain the data but will not process it for any other purpose.
📦
Right to Data Portability
You have the right to receive the personal data you have provided to h5 u9 in a structured, commonly used, machine-readable format (e.g. CSV or JSON), so that you may transfer it to another service provider should you wish to do so.
To exercise any of the rights above, please contact the h5 u9 privacy team by emailing [email protected], stating the right you wish to exercise, your account details (registered name and phone number), and the specifics of your request. We will acknowledge receipt of your request within 3 business days and resolve it within 30 business days.
9. Cookies & Tracking Technologies
The h5 u9 platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions correctly. Cookies are small text files stored in your web browser or on your device when you visit our platform.
Types of Cookies Used by h5 u9
Session Cookies (Required) – Keeping you logged in during your h5 u9 gaming sessionActive
Preference Cookies – Remembering your language and display preferencesActive
Security Cookies – Detecting suspicious login attempts to protect your accountActive
Analytics Cookies – Collecting anonymised usage data for platform improvementsActive
Third-Party Advertising Cookies – Ads from external advertisersNot used
Mandatory cookies (session and security) cannot be disabled as they are essential to the core functionality of the h5 u9 platform. Analytics cookies can be managed through your web browser settings, though doing so may affect your user experience. h5 u9 does not use third-party advertising cookies and we do not permit external advertisers to track your activity through our platform.
10. Protection of Children's Data
The h5 u9 platform is strictly intended for individuals who are aged 18 years and above. We do not knowingly collect, store, or process any personal data from individuals under the age of 18.
Should we discover that we have inadvertently collected data from an individual under the age of 18, we will take immediate steps to delete that data, close the relevant account, and refund any deposited funds through an appropriate method given the circumstances.
If you are a parent or guardian concerned that your child may have registered an h5 u9 account without permission, please contact us immediately at [email protected] and we will investigate and take appropriate action within 24 hours of receiving your report.
11. Changes to This Privacy Policy
H5 u9 may update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or relevant technological developments. The "updated" date at the top of this document indicates when the current version came into effect.
When we make material changes to this Privacy Policy — for example, changes that affect how we use your data or new rights that become available to you — we will notify you via:
- Email to the address registered to your h5 u9 account
- A notice prominently displayed on the h5 u9 platform homepage
- In-platform notification upon your next login
Your continued use of the h5 u9 platform after any changes take effect will be considered acceptance of the updated Privacy Policy. If you do not agree with any of the changes, you may close your account and request deletion of your personal data (subject to statutory retention requirements).
12. Contact h5 u9's Privacy Officer
For any questions, concerns, or requests regarding this Privacy Policy or how h5 u9 handles your personal data, please contact us through the following channels:
- Privacy Email: [email protected] (use the subject line "Data Privacy Enquiry" for priority processing)
- Live Chat: Available directly within the h5 u9 platform — responses typically within 2 minutes
- WhatsApp: Via the WhatsApp button available within the h5 u9 platform
The h5 u9 privacy team operates 24 hours a day, 7 days a week, including all Malaysian public holidays. All privacy-related enquiries are handled with the highest priority and in complete confidence. We are committed to providing a substantive response — not merely an acknowledgement of receipt — within 5 business days of receiving your enquiry.
⚖️
Complaints to Authorities: If you are not satisfied with how h5 u9 has handled your privacy complaint after contacting us, you have the right to lodge a formal complaint with Malaysia's Personal Data Protection Commissioner under PDPA 2010. We fully respect your right to do so.
Privacy FAQs h5 u9
Yes, but only the minimum data required for game operations. When you play Dragon Hatch by PG Soft or Fat Banker by Hacksaw Gaming on the h5 u9 platform, your betting and session data must be shared with the respective game provider to ensure the game functions correctly and to facilitate dispute resolution in the event of any technical issues. However, these game providers receive only the minimum data necessary — they do not receive your full identity details, payment information, or any other sensitive data. All game providers partnering with h5 u9 have signed strict data processing agreements and are subject to periodic compliance audits conducted by us.
Yes, you have the right to request deletion of your personal data under Malaysia's PDPA 2010. To do so, contact us at
[email protected] with the subject line "Data Deletion Request" along with your account details. We will process your request within 30 business days. Please note that certain data may need to be retained for specific periods under Malaysian law — for example, financial transaction records must be kept for a minimum of 7 years in accordance with Malaysian tax and financial regulations. In such cases, the relevant data will be isolated and used solely for legal compliance purposes, not for any operational or marketing activities by h5 u9.
Yes, completely safe. When you make a deposit using Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX at h5 u9, you are interacting directly with the respective payment provider's system through a secure interface. h5 u9 does not store your credit card numbers or e-wallet login credentials — we only receive confirmation that a transaction has been successfully processed. All communication during the payment process is encrypted with 256-bit SSL, and the payment providers we work with are fully licensed and regulated entities in Malaysia. Transaction records retained by h5 u9 contain only details such as amount, date, time, and payment method — not your sensitive account information.
No. h5 u9 does not use your personal data for third-party advertising, and we do not share your data with advertising companies or social media platforms for off-platform ad targeting. We do not use third-party advertising cookies such as Google Ads pixels or Facebook pixels that would allow external advertisers to track your activity. The only marketing communications you may receive from h5 u9 are emails or direct messages from us regarding promotions, bonuses, and exclusive h5 u9 platform offers — and you may opt out of these at any time via the unsubscribe link in each message or through your account settings.