Hfive Privacy Policy – Member Personal Data Protection

Hfive values the privacy of every individual who uses our platform. This Privacy Policy is formulated to meet the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international standards for the responsible handling of personal data.

This document clearly explains what data we collect, why we need it, how it is used and protected, and the rights you hold as the data owner. We believe transparency is the foundation of trust, and your trust is something we will never take lightly.

This Privacy Policy covers all your interactions with hfive, including registering a new account, making deposits or withdrawals, contacting our support team, participating in promotions, and every time you browse or use any feature on our platform.

We only collect data that is strictly necessary to provide you with a safe, seamless, and responsible service. The following are the categories of data we collect:

Every piece of data we collect has a clear and legitimate purpose. We do not use your data for any purpose not stated in this Privacy Policy without your prior consent.

• Identity verification (KYC): Ensuring that every member is a real individual who meets the platform's age and eligibility requirements.
• Account management: Enabling you to log in, manage settings, make deposits, and process withdrawals smoothly.
• Security & fraud prevention: Detecting suspicious activity, protecting accounts from unauthorised access, and maintaining platform integrity.
• AML legal compliance: Meeting anti-money laundering (AML) requirements and reporting suspicious transactions to the authorities when required.
• Service communications: Sending important notifications related to accounts, transactions, security updates, and policy changes.
• Platform enhancement: Analysing aggregated usage patterns to improve features, performance, and the overall user experience.
• Customer support: Resolving complaints, responding to enquiries, and providing effective technical support.
• Applicable promotions: With your consent, to inform you of offers and promotions that may interest you based on your platform activity.

Hfive does not sell, rent, or trade member personal data to any third party for marketing purposes. Data sharing only occurs in limited and controlled situations as follows:

• Payment service providers: Transaction data is shared with approved payment processors (such as FPX gateways, DuitNow, and e-wallet providers) solely to complete your financial transactions.
• Cloud & hosting service providers: Data is stored on secure servers operated by certified infrastructure providers subject to strict confidentiality agreements.
• Regulatory bodies & legal authorities: hfive will disclose required data when mandated by law, court order, or direction from a legitimate regulatory authority.
• Identity verification services: KYC information is shared with approved third-party identity verification providers to facilitate the review process.

Protecting your data is our highest priority. hfive employs multiple layers of technical and organisational security to ensure your personal data remains safeguarded at all times.

• 256-bit SSL/TLS encryption: All data transmitted between your device and hfive's servers is protected with high-grade encryption that cannot be read by any third party.
• Hashed password storage: Your account password is never stored in plain text — it is processed using a secure one-way cryptographic hashing algorithm.
• Two-factor authentication (2FA): An additional security layer is available and strongly recommended for all members to prevent unauthorised access.
• 24/7 threat monitoring: Our threat detection system operates around the clock to identify and respond to any suspicious activity in real time.
• Regular security audits: The hfive platform undergoes regular independent penetration testing and security audits to ensure no vulnerabilities go unaddressed.
• Internal access controls: Only authorised staff with a legitimate job requirement may access members' personal data, and all access is recorded for audit purposes.

The hfive platform uses cookies and similar tracking technologies to enhance the user experience, ensure session security, and understand how our platform is used. The following are the types of cookies we use:

You can manage your cookie settings through your web browser at any time. Please note that disabling essential cookies may affect platform functionality and your user experience.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable privacy standards, you have the following rights regarding the personal data we hold:

Hfive does not retain your personal data longer than necessary for the stated purposes, or as required by law. The following are general data retention guidelines:

• Active account data: Retained for the duration your account is active plus 5 years after account closure for audit and AML compliance purposes.
• Financial transaction records: Retained for a minimum of 7 years as required by Malaysian financial legislation.
• Support communication logs: Retained for 2 years for reference and service improvement purposes.
• Technical data & security logs: Retained for 12 months to assist with security incident investigations if required.
• Marketing data (with consent): Retained until you withdraw your consent or close your account.

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to your identity.

Hfive reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Each new version will display the latest update date at the top of the document.

For significant changes that affect your privacy rights, we will provide at least 14 days' advance notice before the changes take effect, via your registered email or an in-platform notification. Your continued use of the hfive platform after the effective date of such changes constitutes your acceptance of the updated Privacy Policy.

You are encouraged to review this Privacy Policy periodically. Copies of all previous versions are available upon request.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, the hfive Data Protection Officer (DPO) team is ready to assist you.

• Live Chat: Available 24 hours a day, 7 days a week via the chat icon in the corner of the platform.
• Email: [email protected] — we aim to respond within 24 business hours.
• Official Complaint Form: For formal privacy matters, please include "Privacy Complaint" in your message subject line for priority processing.