Important Note: This Privacy Policy comprehensively outlines hit51's data protection practices. By using our platform, you agree to the processing of your personal information as described in this document. Please contact us if you have any questions.
Section 1
Privacy Policy Introduction and Scope
Hit51 ("we", "Platform") is fully committed to protecting the privacy and security of the personal information of all users accessing our online gaming platform. This Privacy Policy has been established in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection.
This policy applies to all personal information collected through the hit51 website, mobile app, email communications, live chat conversations, and all other customer service channels. It covers all registered users, casual visitors, and any individual who interacts with our platform in any way.
We review and update this Privacy Policy from time to time to ensure it remains relevant with changes in technology, legislation, and our operations. The latest update date will always be displayed at the top of this document for your reference.
hit51's Commitment: We do not sell, rent, or trade users' personal information to any third party for marketing purposes. Your data belongs entirely to you.
Section 2
Personal Information We Collect
When you use the hit51 platform, we collect several categories of personal information necessary to provide a secure, transparent, and high-quality service. The following are the types of data we collect:
Identity & Registration Information
Financial & Transaction Information
Technical & Usage Information
- IP address and general geolocation information
- Device type, operating system, and web browser version
- Access logs, session times and pages visited
- Cookie data and device identifiers
Data Collection Principles: hit51 only collects information that is strictly necessary for a specific purpose. We do not collect data that is excessive or irrelevant to the services we offer.
Section 3
How We Use Your Information
The personal information we collect is used responsibly and only for legitimate purposes. The following are the primary ways hit51 uses your data:
- Account Management: Create, verify and maintain your user account, including mandatory KYC and identity verification processes.
- Transaction Processing: Process deposits, withdrawals and all financial transactions securely and in a timely manner.
- Platform Security: Detect and prevent fraud, money laundering, unauthorised access and other suspicious activities.
- Legal Compliance: Meet legal obligations under Malaysia's Personal Data Protection Act (PDPA), anti-money laundering regulations and relevant regulatory body requirements.
- Service Improvements: Analyse usage patterns to improve platform functionality, user experience and game offerings.
- Service Communications: Send important notifications related to your account, transactions, security updates and changes to terms.
- Customer Support: Help resolve complaints, enquiries and technical issues you report to our team.
Marketing: We only send you promotional communications if you have given explicit consent. You may withdraw this consent at any time through your account settings.
Section 4
Sharing Information with Third Parties
Hit51 does not sell or rent users' personal information to any third party for marketing or commercial purposes. However, there are limited situations where we need to share your information with certain parties:
- Payment Processors: Required transaction information is shared with licensed payment processors such as FPX, Touch 'n Go, GrabPay and Boost solely to complete your financial transactions.
- Technical Service Providers: Companies providing server hosting, cybersecurity, and data analytics services act as data processors under strict confidentiality agreements.
- Regulatory Body & Law Enforcement: When required by law or a valid court order, we will disclose the necessary information to the relevant authorities.
- Fraud Investigators: In cases of suspected fraudulent activity, relevant information may be shared with authorised identity verification agencies and anti-fraud bodies.
All third parties that receive hit51 user data are bound by strict data processing agreements and must comply with security standards equivalent to or higher than our own.
We do NOT share your data with third-party advertisers, data brokers, social media platforms, or any other companies for marketing purposes without your explicit consent.
Section 5
Data Security Measures
Your personal data security is hit51's top priority. We implement multiple layers of technical and operational protection to ensure your information remains safe at all times:
- 256-bit SSL Encryption: All data transmitted between your device and our servers is encrypted using the latest TLS 1.3 protocol, ensuring no third party can intercept or read your data in transit.
- Database Encryption: Sensitive data such as identification card information and financial details are stored in encrypted form in our databases using AES-256 standards.
- Internal Access Controls: Only authorised personnel may access user data, and all access is logged and actively monitored.
- Two-Factor Authentication (2FA): Our internal systems require 2FA for all administrative access, and we encourage users to enable 2FA on their own accounts.
- 24/7 Security Monitoring: Our real-time threat detection system continuously monitors for signs of suspicious activity, intrusion attempts, or data breaches.
- Regular Penetration Testing: We conduct regular security audits and penetration testing by independent third parties to identify and address any vulnerabilities.
Incident Reporting: In the event of any data breach affecting your personal information, hit51 will notify you and the relevant authorities within the timeframe stipulated under Malaysia's PDPA.
Section 6
Cookies and Tracking Technologies
The hit51 platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions smoothly. The following are the types of cookies we use:
- Essential Cookies: Required for core platform operations such as login session management and security. These cookies cannot be disabled as they are critical to platform functionality.
- Preference Cookies: Store your preferences such as language, time zone and display settings for a smoother experience on return visits.
- Analytics Cookies: Help us understand how users interact with the platform so we can improve its design and functionality. This data is aggregated and not used to identify individuals.
- Security Cookies: Used to detect suspicious login attempts, fraud, and automated bot activity.
You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect platform functionality. For more information on managing cookies, refer to your web browser's help documentation.
Section 7
Your Rights as a Data Subject
Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal information held by hit51. We fully respect these rights and provide straightforward mechanisms for you to exercise them:
| Your Rights | Description | Status |
|---|---|---|
| Right to Access | Request a copy of all personal information we hold about you | Available |
| Right to Rectification | Correct any information that is inaccurate or incomplete | Available |
| Right to Erasure | Request the deletion of your personal data (subject to legal requirements) | Available |
| Right to Restrict Processing | Restrict how we process your information under certain circumstances | Available |
| Right to Portability | Receive your data in a machine-readable format | Available |
| Right to Object | Object to the processing of your data for direct marketing purposes | Available |
To exercise any of the above rights, please contact our Data Protection Officer team via email at [email protected]. We will process your request within 30 business days from the date of receipt.
Complaints to Authorities: If you believe your privacy rights have been violated and we are unable to resolve the matter to your satisfaction, you have the right to file a complaint with Malaysia's Personal Data Protection Department (JPDP).
Section 8
Data Retention Period
Hit51 retains your personal information only for as long as it is needed for the purposes stated in this Privacy Policy, or as required by applicable law. The following are our data retention guidelines:
- Active Account Data: Retained for the duration your account is active and for a minimum of 5 years after account closure, to comply with financial records and anti-money laundering requirements.
- Financial Transaction Records: Retained for 7 years in accordance with Malaysia's accounting and financial legal requirements.
- Security & Access Logs: Retained for 12 months for security incident investigation purposes if required.
- Support Communication Data: Customer support chat logs are retained for 2 years for quality assurance and compliance purposes.
- KYC Information: Identity verification documents are retained for the period stipulated by anti-money laundering laws, typically 5–7 years.
When the retention period expires or your data deletion request is approved, your information will be securely deleted or anonymised so it can no longer be linked to you personally.
Section 9
Changes to This Privacy Policy
Hit51 reserves the right to update or modify this Privacy Policy at any time. Any material changes will be communicated to registered users via:
- A notice displayed prominently on the platform's home page for a minimum of 14 days
- Notification via email to the address registered on your account
- In-app notification via the hit51 mobile app if you access the platform through the app
The "Updated" date at the top of this document will always reflect the date of the latest version of this Privacy Policy. Continued use of the platform after the effective date of any changes constitutes your acceptance of the latest version of this Privacy Policy.
For changes we consider non-material, we may update this document without a separate notification. We therefore encourage you to review this page periodically.
Section 10
Contact Our Data Protection Officer
If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal information, please contact our Data Protection Officer (DPO):
- Privacy Email: [email protected] — exclusively for data protection inquiries
- General Support: [email protected] — for general account-related inquiries
- Live Chat: Available 24/7 via the in-platform chat icon — for the fastest response
- Service Language: Bahasa Melayu and English
We aim to respond to all privacy-related enquiries within 2 business days. For more formal data access or deletion requests, please follow the written procedure via email by including your account number and a copy of your identification document for verification purposes.
Response Time: Privacy inquiries — 2 business days. Data access requests — 14 business days. Data deletion requests — 30 business days. Formal complaints — 30 business days.