1. Introduction
hura500 ("hura500", "we", "us", "our") operates the online casino and sports betting platform accessible at https://hura500.cam. We take the privacy of our players seriously and are committed to handling your personal data with transparency, integrity, and in accordance with applicable data protection principles.
This Privacy Policy ("Policy") sets out how hura500 collects, processes, stores, shares, and protects personal data provided by individuals ("you", "the User", "the Player") who access or use the hura500 platform. It applies to all interactions with our website, including account registration, payment processing, customer support communications, and browsing activity on the platform.
By registering an account on hura500 or by continuing to use the platform, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the platform immediately.
This Policy is published in English. In the event that any translated version conflicts with this English original, the English version shall prevail in all cases.
This Policy should be read together with our Terms & Conditions, which govern your use of the hura500 platform, and our Responsible Gambling policy. Together, these documents form the complete framework governing your relationship with hura500.
2. Definitions
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or could reasonably be used to identify a living individual, including name, email address, date of birth, financial information, and device identifiers. |
| "Data Subject" | The individual whose personal data is being collected or processed — in this context, any registered or prospective player on the hura500 platform. |
| "Data Controller" | hura500, the entity that determines the purposes and means by which personal data is processed on this platform. |
| "Data Processor" | Any third party engaged by hura500 to process personal data on our behalf and under our instructions, such as payment processors or IT infrastructure providers. |
| "Processing" | Any operation performed on personal data, including collection, storage, retrieval, use, disclosure, erasure, or destruction. |
| "Consent" | A freely given, specific, informed, and unambiguous indication by the data subject that they agree to the processing of their personal data for a stated purpose. |
| "Cookies" | Small text files placed on your device by the hura500 platform or its third-party service providers to recognise your browser, remember preferences, and deliver relevant content. |
| "KYC" | Know Your Customer — the mandatory identity verification process required by hura500 before a player may withdraw funds from their account. |
3. Data We Collect
hura500 collects personal data from players in several ways — directly through account registration and transaction activity, automatically through your use of the platform, and from third-party verification and payment partners. The categories of data we collect are set out below.
3.1 Registration & Account Data
- Full legal name
- Date of birth (for age verification — players must be 21 or above)
- Gender (where provided)
- Email address and Malaysian mobile number
- Residential address, including city (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam)
- Username and encrypted password
- Account preferences and communication settings
3.2 Identity Verification (KYC) Data
- Copy of valid Malaysian identity document (MyKad / NRIC, Driver's Licence, or Passport)
- Proof of address (utility bill, bank statement, or official document dated within 3 months)
- Selfie photograph holding the submitted identity document
- Documentation confirming ownership of payment method (where required)
3.3 Financial & Transaction Data
- Deposit and withdrawal history, including amounts in MYR
- Payment method details (e-wallet account numbers for Touch 'n Go eWallet, Boost, GrabPay, DuitNow; bank account details for Maybank, CIMB, Public Bank, Hong Leong, FPX)
- Cryptocurrency wallet addresses (BTC / USDT where applicable)
- Transaction timestamps and reference numbers
3.4 Gaming & Betting Activity Data
- Game history, wager amounts, and outcomes across slots, live casino, and sports betting markets
- Sports betting activity including Liga Super Malaysia, English Premier League (EPL), UFC, and live football markets
- Bonus usage and wagering progress
- Responsible gambling tool settings (deposit limits, self-exclusion periods)
3.5 Technical & Usage Data
- IP address and approximate geographic location
- Device type, operating system, and browser
- Session duration, page views, and navigation paths within the platform
- Cookies and similar tracking identifiers (see Section 7)
- Login timestamps and activity logs
3.6 Support & Communication Data
- Contents of live chat conversations, email correspondence, and support tickets submitted to [email protected]
- Feedback, complaints, and dispute records
Minimum Necessary: hura500 collects only the personal data that is genuinely necessary to provide our services, comply with our legal obligations, and protect both the platform and its players from fraud and misuse.
4. How We Use Your Data
hura500 processes your personal data for the following purposes:
| Purpose | Description |
|---|---|
| Account Management | Creating and maintaining your hura500 account, authenticating your identity on login, and updating your preferences. |
| Service Delivery | Enabling access to casino games, sports betting markets, live casino, and all platform features. |
| Payment Processing | Processing MYR deposits and withdrawals via Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, BTC, and USDT. |
| Identity Verification (KYC) | Verifying your age (21+ requirement), identity, and payment method ownership before enabling withdrawal features. |
| Fraud & AML Prevention | Detecting, investigating, and preventing fraudulent activity, money laundering, multiple account creation, and bonus abuse. |
| Regulatory Compliance | Meeting obligations under applicable anti-money laundering (AML), counter-terrorism financing (CTF), and data protection regulations. |
| Customer Support | Responding to enquiries, resolving disputes, and improving support quality based on interaction history. |
| Responsible Gambling | Monitoring gaming behaviour to identify potential signs of problem gambling and enforcing player-requested limits and exclusions. |
| Platform Improvement | Analysing usage patterns and technical performance data to enhance platform stability, speed, and user experience. |
| Marketing Communications | Sending promotional emails and platform notifications to players who have opted in to receive such communications. |
5. Legal Basis for Processing
hura500 processes your personal data on the following legal grounds, consistent with internationally recognised data protection frameworks including the General Data Protection Regulation (GDPR) as a point of reference for best practice:
- 5.1 Contractual Necessity: Processing is necessary for the performance of the contract between hura500 and the Player, including account management, payment processing, and service delivery.
- 5.2 Legal Obligation: Processing is required to comply with applicable legal and regulatory obligations, including KYC, AML, and fraud prevention requirements.
- 5.3 Legitimate Interests: hura500 processes certain data based on its legitimate interest in maintaining platform security, detecting fraud, preventing bonus abuse, and improving service quality — provided these interests are not overridden by the data subject's rights.
- 5.4 Consent: Where processing is based on consent (for example, receiving marketing communications), you may withdraw that consent at any time by updating your communication preferences in your account settings or by contacting our support team.
6. Data Sharing & Disclosure
hura500 does not sell, rent, or trade your personal data to third parties for their own commercial marketing purposes. We may share your data with the following categories of recipients under appropriate data protection safeguards:
- 6.1 Payment Service Providers: To facilitate deposits and withdrawals, your financial data is shared with the relevant payment processors (e-wallet operators, bank systems, and cryptocurrency networks) on a transaction-by-transaction basis.
- 6.2 Identity Verification Partners: KYC documentation may be shared with third-party verification services that assist hura500 in authenticating player identity and age.
- 6.3 IT & Hosting Infrastructure: Data is stored and processed on servers managed by contracted infrastructure providers who operate under strict data processing agreements with hura500.
- 6.4 Fraud & Security Services: Technical and behavioural data may be shared with fraud detection and cybersecurity service providers for the purpose of protecting the platform and its players.
- 6.5 Regulatory & Legal Authorities: hura500 will disclose personal data to government authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or valid legal process.
- 6.6 Business Transfers: In the event of a merger, acquisition, or sale of all or part of hura500's business, player data may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained.
No Third-Party Marketing: hura500 does not share your personal data with advertisers, data brokers, or any third party for external marketing purposes without your explicit consent.
7. Cookies & Tracking Technologies
- 7.1 hura500 uses cookies and similar tracking technologies (including web beacons and local storage objects) to deliver a functional and personalised platform experience.
- 7.2 Essential Cookies: These are required for core platform functionality, including maintaining your login session, preserving your language and game preferences, and enabling secure payment flows. The platform cannot function correctly without these cookies.
- 7.3 Analytics Cookies: These help hura500 understand how players navigate the platform — which pages are visited most frequently, how long sessions last, and where technical issues occur. This data is used in aggregate, anonymised form to improve platform performance.
- 7.4 Fraud Prevention Cookies: Certain cookies support our fraud detection systems by recognising devices and flagging anomalous login patterns that may indicate unauthorised account access or multi-accounting.
- 7.5 Managing Cookies: You may configure your browser to refuse cookies or to alert you when cookies are being placed. Please note that disabling essential cookies may prevent certain features of the hura500 platform from functioning correctly.
- 7.6 By continuing to use the hura500 platform after being informed of our cookie practices, you consent to the use of cookies as described in this section.
8. Data Retention
- 8.1 hura500 retains your personal data for as long as your account remains active and for a period thereafter as required by our legal, regulatory, and contractual obligations.
- 8.2 Transaction records, KYC documentation, and account activity logs may be retained for a minimum of five (5) years following account closure to satisfy anti-money laundering and regulatory requirements.
- 8.3 Self-exclusion records are retained indefinitely to prevent re-registration by individuals who have requested permanent exclusion from the platform.
- 8.4 Support communications are retained for a minimum of two (2) years for dispute resolution and quality assurance purposes.
- 8.5 Where personal data is no longer required for any legitimate purpose and retention is not mandated by law, hura500 will securely delete or anonymise that data.
9. Data Security
hura500 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:
- 256-bit SSL/TLS encryption on all data transmitted between your device and our servers
- Encrypted storage of sensitive personal data and KYC documents at rest
- Two-factor authentication (2FA) available to all registered players for account access protection
- Access controls ensuring only authorised hura500 personnel can access sensitive player data, on a need-to-know basis
- Regular security audits and vulnerability assessments of platform infrastructure
- Intrusion detection systems monitoring for anomalous access patterns or potential data breaches in real time
In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, hura500 will take prompt remedial action and notify affected players in accordance with applicable notification obligations.
While hura500 employs industry-standard security measures, no online system can be guaranteed to be completely immune from security threats. Players are encouraged to use strong, unique passwords and to enable two-factor authentication on their accounts.
10. Your Data Rights
As a data subject, you have a number of rights in relation to the personal data hura500 holds about you. These rights may be exercised by contacting our support team at [email protected].
Request a copy of the personal data hura500 holds about you and information on how it is being processed.
Request correction of inaccurate or incomplete personal data held in your account records.
Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to legal retention obligations.
Request that hura500 restricts the processing of your personal data in certain circumstances while a concern is being investigated.
Request a copy of certain personal data in a structured, machine-readable format for transfer to another service provider.
Object to the processing of your personal data where hura500 relies on legitimate interests as its legal basis, subject to applicable exceptions.
Where processing is based on your consent (such as marketing emails), withdraw that consent at any time without affecting the lawfulness of prior processing.
If you believe hura500 has not handled your personal data appropriately, you have the right to raise a complaint with a relevant supervisory authority.
hura500 will respond to data rights requests within thirty (30) calendar days of receipt. Requests may be subject to identity verification before we can process them, to ensure personal data is not disclosed to unauthorised individuals.
11. Third-Party Services & Links
- 11.1 The hura500 platform may reference third-party services (such as payment gateways or game providers) whose own privacy practices are governed by their respective privacy policies. hura500 is not responsible for the privacy practices of third-party services.
- 11.2 hura500 does not embed third-party social media widgets, advertising scripts, or tracking pixels from external marketing networks on its platform without player consent.
- 11.3 Any third-party data processors engaged by hura500 are required to process personal data only on our documented instructions and under binding data processing agreements that meet applicable data protection standards.
12. International Data Transfers
- 12.1 hura500 may transfer personal data to, or process it in, countries outside Malaysia where our service providers or infrastructure partners operate, including countries in Southeast Asia and Europe.
- 12.2 Where personal data is transferred internationally, hura500 takes reasonable steps to ensure that the receiving party provides an adequate level of data protection, including through contractual obligations that mirror internationally recognised data protection standards.
- 12.3 By using the hura500 platform, you acknowledge and consent to the transfer of your personal data to other jurisdictions as described in this section, where necessary to deliver the services you have requested.
13. Minors & Age Restrictions
- 13.1 The hura500 platform is strictly intended for use by individuals aged 21 years and above. hura500 does not knowingly collect or process personal data from individuals below this age threshold.
- 13.2 Age verification is a mandatory component of the KYC process. Where hura500 identifies or suspects that an account has been created by a person under the age of 21, that account will be immediately suspended, all associated personal data will be securely deleted, and any deposited funds will be returned to the source payment method.
- 13.3 If you become aware that a minor has registered on the hura500 platform, please notify us immediately at [email protected].
For players aged 21 and above only. hura500 enforces strict age controls. Gambling by minors is prohibited and taken seriously. Our KYC process is the primary mechanism for enforcing this requirement.
14. Amendments to This Policy
- 14.1 hura500 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or business operations.
- 14.2 Material changes to this Policy will be communicated to registered players via the email address associated with their account and/or by a prominent notice displayed on the platform.
- 14.3 Continued use of the hura500 platform following notification of a material change constitutes your acceptance of the revised Policy. The effective date at the top of this page will reflect the date of the most recent revision.
- 14.4 Archived versions of this Privacy Policy are available upon request by contacting our support team.
15. Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by hura500, please contact our Data Privacy team through the following channels:
Privacy Enquiries — Email
Response time: within 4 hours. Data rights requests: within 30 calendar days.
Live Chat
Available 24 hours a day, 7 days a week. For urgent privacy concerns or suspected data breaches.
Platform
https://hura500.cam
Please include your registered email address and the nature of your enquiry in any correspondence so that our team can respond efficiently. All communications regarding personal data rights will be handled in strict confidence.