Privacy Policy — How h5d06 Protects Your Data

The following capitalised terms carry the meanings below throughout this Policy:

This Policy applies to all Personal Data collected by h5d06 in connection with the operation of the Platform, including data collected from:

• Visitors who browse h5d06.bet without registering an account.
• Registered Users who have completed account creation.
• Users who contact h5d06 customer support via live chat or email.
• Individuals whose data is provided to h5d06 by third-party payment processors or identity verification services in connection with KYC procedures.

This Policy does not apply to third-party websites, applications, or services that may be referenced on the Platform. h5d06 has no control over and assumes no responsibility for the privacy practices of any third-party operator.

h5d06 collects the following categories of Personal Data, depending on the nature of your interaction with the Platform:

h5d06 does not collect or process sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or health data, except where age and identity verification incidentally discloses such information in the course of KYC.

h5d06 collects Personal Data through the following means:

• Direct collection: Data you actively provide by completing the h5d06 registration form, submitting KYC documents, initiating a deposit or withdrawal, or contacting customer support.
• Automated collection: Technical Data collected automatically when you access the Platform, via server logs, cookies, and similar tracking technologies described in Section 10.
• Third-party providers: Identity and age verification data from KYC service providers; transaction data from payment processors including bank transfer intermediaries and Indonesian e-wallet platforms; fraud-screening signals from security service providers.
• Publicly available sources: In limited circumstances, h5d06 may supplement its records with data from publicly available Indonesian government registers or business databases solely for the purpose of verifying the accuracy of information you have provided.

h5d06 processes your Personal Data for the following purposes:

h5d06 relies on one or more of the following legal bases to process your Personal Data:

• Contractual necessity: Processing that is necessary to perform the contract between you and h5d06 — specifically, to operate your Account, process transactions, and deliver the Platform's services.
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money laundering requirements and age verification obligations.
• Legitimate interests: Processing carried out for the legitimate interests of h5d06, including fraud detection, Platform security, and analytical improvement of the Platform, provided that such processing does not override your fundamental rights and freedoms.
• Consent: Processing for optional purposes — including marketing communications and certain cookie categories — where we have obtained your prior, freely given consent. You may withdraw consent at any time without detriment to your Account.

h5d06 does not sell, rent, or trade your Personal Data to any third party. We may share your data in the following limited circumstances only:

• Payment processors and banking partners: To process deposits and withdrawals, we share the minimum necessary financial data with Indonesian banking institutions (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and digital wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja). These entities act as independent data controllers for their own services and are governed by their own privacy policies.
• Identity verification providers: KYC and age verification documents may be shared with contracted third-party identity verification services that act as Processors under binding data processing agreements with h5d06.
• Game studios and content providers: Limited Technical Data and session identifiers may be shared with game providers (including Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Pocket Games Soft, and Spribe) solely to facilitate gameplay and settle game results.
• Fraud and security services: Transaction data and Technical Data may be shared with contracted fraud-screening and platform-security service providers for the purpose of detecting and preventing prohibited conduct.
• Legal and regulatory authorities: h5d06 may disclose Personal Data to competent governmental, regulatory, or law enforcement authorities where required by applicable law, court order, or legal process, or where disclosure is necessary to protect the rights, safety, or property of h5d06 or its users.
• Business transfers: In the event of a merger, acquisition, reorganisation, or sale of assets involving h5d06, your Personal Data may be transferred to the acquiring entity, subject to the acquiring entity being bound by equivalent data protection obligations.

All third-party service providers that access Personal Data on behalf of h5d06 are contractually required to implement appropriate technical and organisational security measures and to process data only in accordance with h5d06's written instructions.

h5d06 operates as an internationally hosted platform. As a result, Personal Data collected from Indonesian players may be transferred to, stored, and processed in jurisdictions outside of Indonesia — including server infrastructure hosted in other countries — in connection with the delivery of the Platform's services.

Where Personal Data is transferred internationally, h5d06 ensures that appropriate safeguards are in place, including:

• Contractual clauses with third-party Processors that impose data protection obligations equivalent to those described in this Policy.
• Transfer to jurisdictions that maintain an adequate level of data protection as assessed by h5d06 on a case-by-case basis.
• Encryption of Personal Data both in transit and at rest.

h5d06 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, and accounting obligations. The following general retention guidelines apply:

When Personal Data is no longer required, h5d06 will securely delete or anonymise it in accordance with its data lifecycle management procedures.

h5d06 uses cookies and similar tracking technologies to operate the Platform, analyse usage patterns, and — where consent is given — deliver personalised content. The following cookie categories are used:

• Strictly necessary cookies: Required for core Platform functionality including session authentication, security token management, and load balancing. These cookies cannot be disabled without impairing the Platform's operation.
• Functional cookies: Store your preferences — such as language settings, preferred payment method, and display preferences — to personalise your experience across sessions.
• Analytics cookies: Collect anonymised or aggregated data about how users navigate the Platform, which pages are visited most frequently, and where sessions end. This data informs product improvements.
• Marketing cookies: Used, with your consent, to deliver promotional content relevant to your interests and to measure the effectiveness of h5d06's marketing activities. These cookies may be set by contracted advertising partners.

You can manage cookie preferences through your browser settings. Disabling certain cookies may limit the functionality of the Platform. Strictly necessary cookies cannot be disabled without impacting your ability to use the Platform.

h5d06 implements a range of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in transit: All data transmitted between your device and h5d06 servers is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to login sessions, deposit and withdrawal flows, and all API calls.
• Encryption at rest: Sensitive Personal Data, including identity documents and financial account details, is encrypted at rest on h5d06's database infrastructure.
• Access controls: Internal access to Personal Data is governed by a role-based access control (RBAC) framework. Only authorised personnel with a legitimate operational need are permitted to access specific data categories.
• Password security: User passwords are stored as salted cryptographic hashes. h5d06 employees never have access to your plain-text password.
• Security monitoring: h5d06 maintains continuous intrusion detection and security monitoring systems. Regular penetration testing and vulnerability assessments are conducted on critical infrastructure.
• Incident response: h5d06 maintains a data breach response protocol. In the event of a security incident that materially affects your Personal Data, h5d06 will notify affected Users and take appropriate remedial action promptly.

While h5d06 takes all reasonable measures to protect your data, no system is completely immune to security risks. You are also responsible for maintaining the security of your Account credentials. If you suspect any unauthorised access to your Account, please contact [email protected] immediately.

Subject to applicable law and certain operational limitations, you have the following rights in respect of your Personal Data held by h5d06:

• Right of access: You may request a copy of the Personal Data h5d06 holds about you, along with information about how that data is processed.
• Right to rectification: You may request correction of inaccurate or incomplete Personal Data. You can update most of your Account information directly through your Account settings; for identity data, contact support.
• Right to erasure ("right to be forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where processing is unlawful. This right is subject to overriding legal obligations, including our AML retention requirements.
• Right to restriction of processing: You may request that h5d06 restricts the processing of your data in certain circumstances — for example, where you contest the accuracy of the data or object to processing based on legitimate interests.
• Right to data portability: Where processing is based on consent or contractual necessity, you may request a copy of your Personal Data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing based on legitimate interests, including direct marketing communications. Upon a valid objection to marketing, h5d06 will cease sending promotional messages promptly.
• Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

h5d06 is strictly an adults-only platform. The Platform is not directed at, and h5d06 does not knowingly collect Personal Data from, any individual under the age of 21. The 21+ age requirement is enforced at the point of registration and through ongoing KYC verification procedures.

If h5d06 becomes aware that Personal Data has been collected from an individual who does not meet the minimum age requirement, that data will be deleted promptly, the associated Account will be closed, and any deposited funds will be returned to their verified source. If you have reason to believe that a minor has registered an Account on h5d06, please contact [email protected] immediately.

The Platform may contain references to game studio brands, payment method providers, and sports leagues whose names or logos appear on h5d06.bet for informational and functional purposes. h5d06 does not embed outbound links to third-party websites within the Platform interface.

To the extent any third-party service is integrated into the Platform — such as a game provider's embedded game engine or a payment gateway's hosted payment form — that third party may collect Technical Data directly from your browser or device in connection with delivering their service. h5d06 is not responsible for the data collection or privacy practices of any such third-party service provider acting as an independent data controller. We encourage you to review the privacy policies of any third-party services you interact with.

h5d06 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. When material changes are made, h5d06 will:

• Update the "Last Updated" date at the top of this page.
• Post a prominent notice on the Platform informing Users of the change.
• Where the change materially affects the way we process your Personal Data, notify registered Users by email to the address held on their Account.

Your continued use of the Platform following the effective date of any amended Policy constitutes acceptance of the updated terms. If you do not agree with the amended Policy, you should cease using the Platform and may request Account closure by contacting [email protected].

For any questions, concerns, or requests relating to this Privacy Policy or the way h5d06 handles your Personal Data, please contact our support team using the details below:

• Email: [email protected] — please use the subject line "Privacy Enquiry" for data-related matters
• Live Chat: Available 24/7 directly on the Platform, with Indonesian-speaking agents available across WIB, WITA, and WIT time zones

h5d06 aims to acknowledge all privacy-related enquiries within 5 business days and to resolve them fully within 30 calendar days. Where a request is complex or involves a large volume of data, we will notify you of any extension to this timeline before the initial30-day period expires.

If you are not satisfied with h5d06's response to your privacy complaint, you may have the right to escalate the matter to a competent supervisory authority under applicable data protection law in your jurisdiction.