Privacy Policy —
h5rsn Data Protection

Throughout this Privacy Policy, the following terms carry the meanings set out below. These definitions align with those used in the h5rsn Terms & Conditions, which should be read alongside this document.

This Privacy Policy applies to all Personal Data collected by h5rsn in connection with your use of the Platform, including via the h5rsn website at https://h5rsn.net, any mobile-optimized interface, and any direct communications between you and h5rsn (including support correspondence via email, WhatsApp, or Live Chat).

This Policy applies to all registered players and to unregistered visitors who browse the h5rsn website. It covers data collected regardless of the device used — desktop, mobile, or tablet — and regardless of whether the visitor is located in Jakarta, Surabaya, Bandung, Bali, Medan, or any other location from which the Platform is accessed.

This Privacy Policy should be read alongside the h5rsn Terms & Conditions and Responsible Gaming policy, both of which form part of the contractual relationship between you and h5rsn. By registering an account or continuing to use the Platform after the effective date of this Policy, you acknowledge that you have read and understood these data practices.

h5rsn collects Personal Data across several categories depending on how you interact with the Platform. The table below summarizes each category, the specific data items collected, and the context in which collection occurs.

h5rsn uses the Personal Data it collects strictly for the purposes described below. We do not use your data for purposes that are incompatible with the original reason for which it was collected without first notifying you and, where required, obtaining your consent.

• Account Management: Creating, maintaining, and securing your h5rsn player account, including authenticating your identity at login.
• Transaction Processing: Processing IDR deposits via BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, GoPay, OVO, DANA, ShopeePay, or LinkAja, and handling withdrawal requests to your verified payment method.
• Identity Verification (KYC): Verifying your identity in compliance with anti-money laundering (AML) obligations and confirming you meet the 21+ age requirement.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent transactions, bonus abuse, multi-account violations, and other prohibited conduct described in our Terms & Conditions.
• Customer Support: Responding to your enquiries, resolving disputes, processing complaints, and maintaining a record of support interactions for quality assurance.
• Responsible Gaming: Monitoring gameplay patterns to identify potential problem gambling indicators; enforcing deposit limits, self-exclusion requests, and cooling-off periods you have set.
• Personalization: Tailoring your h5rsn experience — such as displaying relevant promotions for BRI Liga 1 matches, Champions League betting, or slot campaigns — based on your activity and preferences.
• Platform Improvement: Analyzing aggregated, anonymized behavioral data to improve site performance, game selection, navigation design, and the overall player experience.
• Legal & Regulatory Compliance: Maintaining records required by applicable law, responding to lawful requests from regulatory or law enforcement authorities, and fulfilling obligations under AML frameworks.
• Marketing Communications: Sending you promotional emails or notifications about bonuses, seasonal campaigns (such as Idul Fitri or BRI Liga 1 promotions), or new platform features — but only where you have opted in to receive such communications. You may opt out at any time.

h5rsn processes your Personal Data on the following legal bases, depending on the specific purpose for which the data is used:

• Contractual Necessity: Processing that is necessary to perform the contract between you and h5rsn — including account registration, transaction processing, and KYC verification — is carried out on the basis that it is required to deliver the services you have signed up for.
• Legitimate Interests: h5rsn processes certain data (such as technical logs, fraud detection signals, and platform analytics) on the basis of its legitimate interests in operating a secure, functional, and commercially viable platform. We apply a balancing test to ensure these interests do not override your fundamental privacy rights.
• Legal Obligation: Certain processing activities — particularly AML record-keeping, identity verification, and responding to lawful authority requests — are required by applicable law and are therefore carried out on a legal obligation basis.
• Consent: Where h5rsn processes data for optional purposes such as marketing communications or non-essential analytics cookies, we rely on your freely given, informed consent. You may withdraw this consent at any time without affecting the lawfulness of processing prior to withdrawal.

h5rsn uses cookies and similar tracking technologies on its website to deliver core platform functionality, improve performance, and — with your consent — analyze usage patterns. The following cookie categories are used:

You can manage your cookie preferences at any time through your browser settings. Most modern browsers allow you to view, block, or delete cookies. Please note that disabling strictly necessary cookies will impair your ability to log in to and use the h5rsn Platform.

h5rsn does not sell, rent, or trade your Personal Data to any third party for their own commercial purposes. Data is shared only in the limited circumstances described below, and only to the extent necessary for each specific purpose.

• Payment Processors: To process your IDR transactions, h5rsn shares your name and account details with relevant payment providers — including local banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallet platforms (GoPay, OVO, DANA, ShopeePay, LinkAja). These providers receive only the minimum data required to complete the transaction.
• KYC Verification Providers: h5rsn may engage specialist identity verification partners to cross-reference KTP data and perform liveness checks. These providers operate under strict data-processing agreements and are prohibited from using your data for any purpose other than the verification service.
• Technology & Infrastructure Providers: Hosting, cloud infrastructure, and security service providers that process data on h5rsn's behalf under documented contractual obligations. These providers do not have independent access rights to your data.
• Game Content Providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive limited session data to resolve technical disputes or verify game integrity. No financial or identity data is shared with game studios beyond what is technically necessary.
• Legal & Regulatory Authorities: h5rsn will disclose Personal Data to law enforcement or regulatory bodies where required by a lawful request, court order, or applicable legal obligation. h5rsn will notify you of such a disclosure where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of h5rsn's business assets, Personal Data held by h5rsn may be transferred to the acquiring entity. You will be notified in advance of any such transfer that materially changes how your data is used.

h5rsn retains Personal Data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention schedule applies to the primary data categories:

Upon expiry of the applicable retention period, data is either securely deleted from h5rsn's systems or irreversibly anonymized so that it can no longer be linked to any individual player. Anonymized, aggregated data may be retained indefinitely for statistical and research purposes.

h5rsn employs a multi-layered security architecture designed to protect your Personal Data against unauthorized access, disclosure, alteration, or destruction. Our core security measures include:

• Transport Encryption: All data transmitted between your browser and h5rsn servers is encrypted using TLS 1.3 with 256-bit AES encryption. The padlock icon in your browser confirms an active secure connection.
• At-Rest Encryption: Sensitive fields within h5rsn's database — including identity numbers, payment method details, and hashed passwords — are encrypted at rest using AES-256.
• Access Controls: Access to production systems containing Personal Data is restricted to authorized h5rsn personnel on a strict need-to-know basis. All access is logged and subject to regular audit review.
• Password Hashing: Player account passwords are never stored in plain text. h5rsn uses a strong, salted cryptographic hashing algorithm to store password credentials securely.
• Two-Factor Authentication: h5rsn strongly recommends enabling 2FA on your account. Where 2FA is active, a secondary verification code is required at each login, materially reducing the risk of unauthorized account access.
• DDoS & Intrusion Protection: h5rsn's infrastructure is protected by enterprise-grade DDoS mitigation and intrusion detection systems that monitor for anomalous traffic patterns 24/7.
• Regular Security Audits: h5rsn conducts periodic penetration testing and vulnerability assessments to identify and remediate potential security weaknesses before they can be exploited.

As a data subject, you hold the following rights in relation to your Personal Data held by h5rsn. h5rsn is committed to facilitating the exercise of these rights promptly and without unnecessary friction.

• Right of Access: You may request a copy of all Personal Data h5rsn holds about you, along with information on how it is being processed. h5rsn will provide this within 30 days of a verified request.
• Right to Rectification: If any Personal Data h5rsn holds about you is inaccurate or incomplete, you have the right to request correction. You may update most account information directly through your account settings; contact support for corrections to identity or KYC records.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no overriding legal basis applies. Note that h5rsn's AML obligations require retention of certain records for a minimum of 5 years after account closure, during which full erasure is not possible.
• Right to Restriction: In certain circumstances — for example, while a data accuracy dispute is being resolved — you may request that h5rsn restricts processing of your data to storage only.
• Right to Data Portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you may request your data in a structured, machine-readable format.
• Right to Object: You have the right to object to processing based on h5rsn's legitimate interests (including direct marketing). Upon receipt of a valid objection, h5rsn will cease that processing unless compelling legitimate grounds override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request" and include your registered account email address. h5rsn may request identity verification before actioning a data request to ensure we are responding to the legitimate account holder. Responses will be provided within 30 days; complex requests may require up to a further 30-day extension with notice.

The h5rsn Platform is strictly intended for adults aged 21 and over. h5rsn does not knowingly collect Personal Data from individuals under the age of 21. The 21+ age minimum is enforced at registration through KYC identity verification and date-of-birth validation.

If h5rsn becomes aware that Personal Data has been collected from an individual under the age of 21, that account will be suspended immediately, all associated data will be securely deleted, and any funds held will be handled in accordance with our Terms & Conditions underage gambling provisions.

The h5rsn Platform may contain references to third-party services — such as game studios (Pragmatic Play, Evolution Gaming, Spribe), sports data providers (BRI Liga 1, EPL, La Liga), or payment network information pages — where these are relevant to the gaming context. h5rsn does not include clickable external links in its platform for navigation purposes, but where informational references exist, the privacy practices of those third parties are entirely outside h5rsn's control.

h5rsn is not responsible for the privacy practices, content, or security of any third-party services. This Privacy Policy applies solely to data processing by h5rsn in connection with the h5rsn Platform. We recommend reviewing the privacy policies of any third-party service you access independently.

h5rsn reviews this Privacy Policy periodically and reserves the right to update it to reflect changes in our data practices, the services we offer, or applicable legal requirements . The "Last Updated" date at the top of this page reflects the most recent revision.

Where a policy update is material — meaning it substantially changes how h5rsn processes your Personal Data or materially affects your rights — h5rsn will notify registered players via email to the address on file and/or via a prominent notice on the Platform prior to the change taking effect. Minor updates (such as corrections to typographical errors, clarifications that do not alter substantive meaning, or additions of new data categories that are consistent with existing purposes) will take effect immediately upon publication without individual notification.

Your continued use of the h5rsn Platform after a revised Privacy Policy has been published constitutes your acknowledgment of the updated terms. If you disagree with any material change, you may close your account by contacting support at [email protected] before the effective date of the change.

If you have any questions, concerns, or requests relating to this Privacy Policy or h5rsn's data practices, please contact our support team using the details below. All data-related enquiries are handled by trained staff and escalated to our data protection function where appropriate.

• Email: [email protected] — use subject line "Privacy Enquiry" for fastest routing
• WhatsApp: +62 811-0000-5599 — available 24/7 for general account and support queries
• Live Chat: Available 24/7 directly through your h5rsn account dashboard for immediate assistance
• Response Time: h5rsn aims to respond to all privacy-related enquiries within 3 business days (WIB, UTC+7). Formal data rights requests will be actioned within 30 days as described in Clause 10.