Privacy Policy hugh5 – Member Data Protection & Privacy

Hugh5 is an online entertainment platform operating in Malaysia, offering a wide range of casino games, sports betting, and interactive entertainment to registered members. We take every member's privacy extremely seriously, as we understand how sensitive the personal information you entrust to us truly is.

This Privacy Policy covers all personal data Hugh5 collects from you across various touchpoints — from the initial registration process, in-platform activity, and financial transactions, through to customer support communications. It also outlines your rights as a data subject and how you may exercise them.

As a responsible data controller, hugh5 ensures that every piece of data collected has a clear purpose, is retained for an appropriate period, and is protected by strong technical and organisational security measures. We continuously strive to limit data collection to the minimum necessary to deliver the best service to you.

• Data Controller: hugh5 acts as the data controller for all personal information collected through the platform.
• Applicable Scope: This policy applies to all registered members, website visitors, and users of the Hugh5 mobile app.
• Applicable Laws: We comply with Malaysia's PDPA 2010 and relevant data protection regulations.
• Policy Updates: This policy will be updated from time to time. The latest update date is displayed at the top of this page.

Hugh5 collects various types of personal data to enable us to deliver a secure, personalised, and high-quality service. The data we collect is organised into several key categories as outlined in the table below:

Every piece of personal data collected by hugh5 is used for legitimate, pre-defined purposes. We do not use your data for any purpose other than those stated below without first obtaining your consent.

• Identity Verification & KYC: To verify your identity in compliance with Anti-Money Laundering (AML) and Know Your Customer (KYC) requirements set by the relevant authorities.
• Service Provision: To enable you to access all features of the hugh5 platform, including games, wagering, deposits, withdrawals, and the VIP programme.
• Transaction Processing: To process deposits, withdrawals, and all financial transactions you carry out on the platform securely and accurately.
• Service Communications: To send important notifications related to your account, transactions, platform updates, and security alerts.
• Platform Enhancements: To analyse aggregated usage patterns in order to improve the performance, usability, and overall quality of the hugh5 platform.
• Fraud Prevention: To detect and prevent fraudulent activity, money laundering, multiple account usage, and violations of our terms of use.
• Regulatory Compliance: To fulfil reporting obligations to the relevant authorities in accordance with applicable laws.
• Personalised Marketing: To send you relevant bonus offers, promotions, and the latest updates — only if you have given consent to receive marketing communications.

Hugh5 does not sell your personal data to any third party. However, in the course of operating a safe and legally compliant platform, there are limited situations where we may share your information with the following parties:

• Payment Service Providers: Banks, e-wallet companies, and payment processors used to handle your deposit and withdrawal transactions. They only receive the information needed to process the relevant transaction.
• Game Software Providers: Third-party game developers that supply game content for the hugh5 platform. Data shared is limited strictly to the information required to run the games.
• KYC Service Providers: Trusted third-party identity verification companies that assist us in conducting KYC verification in accordance with compliance requirements.
• Authorities: Government agencies, regulatory bodies, or law enforcement authorities when Hugh5 is legally required to disclose such information.
• Cloud Services & Infrastructure: Hosting service providers and technical infrastructure used to operate the hugh5 platform. All providers are bound by strict confidentiality agreements.

The security of your personal data is hugh5's top priority. We continuously invest in the latest security technologies and procedures to ensure your information is always protected from unauthorized access, loss, or misuse.

The hugh5 platform uses 256-bit SSL/TLS encryption for all communication between your device and our servers. This means every detail you submit — including passwords, bank account information, and personal data — is fully encrypted in transit. No one can intercept and read that data.

• End-to-End Encryption: All sensitive data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption.
• Strict Access Controls: Only authorized hugh5 staff may access members' personal data, and only to the extent necessary to perform their duties.
• 24/7 Monitoring: Our systems are monitored around the clock by a cybersecurity team to detect and respond to any threats or suspicious activity immediately.
• Regular Security Testing: hugh5 performs regular penetration testing and security audits by independent third parties to identify and remediate any vulnerabilities.
• Password Management: Member passwords are stored in hashed form using modern cryptographic algorithms. hugh5 does not store your password in plain text.
• Secure Data Centres: Your data is stored in data centres with multi-layered physical security, automated backup systems, and tested disaster recovery procedures.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and Hugh5's policies, you have certain rights regarding the personal data we hold about you. We are committed to making it easy for you to exercise these rights freely and without any pressure.

• Right of Access: You have the right to request a copy of all personal data Hugh5 holds about you. This request will be processed within 14 business days.
• Right to Rectification: If any information we hold about you is inaccurate or outdated, you have the right to request a correction promptly.
• Right to Erasure: Under certain circumstances, you have the right to request the deletion of your personal data from our systems, subject to data retention obligations required by law.
• Right to Object to Processing: You have the right to object to the processing of your personal data for direct marketing purposes at any time.
• Right to Data Portability: You have the right to receive your personal data in a machine-readable format for transfer to another service provider where applicable.
• Right to Withdraw Consent: Where the processing of your data is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

The hugh5 platform uses cookies and similar tracking technologies to enhance your experience, ensure smooth platform functionality, and understand how members interact with our platform. Cookies are small text files stored in your web browser when you visit our website.

• Essential Cookies: Required for core platform functions such as login, session security, and navigation. These cookies cannot be disabled as they are critical to platform operation.
• Performance Cookies: Collects information on how you use the platform to help us improve performance and user experience. This data is collected in an anonymised form.
• Functional Cookies: Allows the platform to remember your preferences such as language, display theme, and other settings to deliver a more personalised experience.
• Analytics Cookies: Used by Hugh5's internal analytics tools to understand usage patterns and continuously improve the platform's overall content strategy.

Hugh5 retains your personal data only for as long as necessary to fulfil the purposes stated in this policy, or as required by applicable Malaysian law. When data is no longer needed, we will securely delete or anonymise it.

Once the retention period expires, your data will be permanently deleted or converted into an anonymised format that cannot be linked back to you. The deletion process follows strict security procedures to ensure the data cannot be recovered.

If you have any questions, concerns, or complaints regarding the hugh5 Privacy Policy or how we handle your personal data, please do not hesitate to contact us. Our privacy team is ready to assist you at any time.