Scope and Application

This Privacy Policy governs how Hehe555 ("we", "us", "our") handles personal data in connection with its websites, apps, products and services (collectively, the "Services"). It applies to all individuals whose data we process in relation to the Services. By using the Services, you acknowledge and agree to the practices described herein. If you do not agree, discontinue use of the Services.

Data Controller and Contact

Hehe555 acts as the data controller for the personal data processed in connection with the Services. You may contact our designated privacy contact at [email protected] with questions, requests or to exercise your rights under applicable data protection laws. We will respond in accordance with the timelines required by law.

Categories of Personal Data We Collect

• Identity data: name, date of birth, government-issued identification where required for verification.
• Contact data: postal address, email address, telephone number.
• Account data: user identifier, login history, profile preferences.
• Financial data: payment method details, source of funds, transaction data (deposits and withdrawals).
• Transactional data: bets placed, bonuses redeemed, winnings, account activity.
• Technical data: IP address, device information, browser type, operating system, log files, cookies.
• Marketing data: preferences and consent status for receiving marketing communications.

Purposes of Processing

• To provide and manage the Services, including account setup, maintenance and customer support.
• To verify identity and comply with anti-money laundering (AML) andKnow Your Customer (KYC) requirements.
• To protect the security of the Services, detect fraud, and prevent prohibited or unlawful activities.
• To process deposits, withdrawals, and other financial transactions and to reconcile accounts.
• To communicate with you about the Services, respond to inquiries, and provide notices related to your account.
• To personalize and improve the user experience, including feature improvements and service analytics.
• To deliver legally required notices, reports to regulators, and other compliance-related obligations.
• To provide marketing materials where you have opted in to receive them.

Legal Bases for Processing

• Contractual Necessity: Processing is necessary to perform our contract with you and provide the Services.
• Legal Obligations: We process data to comply with AML, KYC, gambling licensing, tax and other applicable laws.
• Legitimate Interests: We rely on legitimate interests to maintain accurate records, prevent fraud, and improve the Services, provided such processing is not overridden by your rights.
• Consent: Where required or used for direct marketing, and in limited circumstances where no other legal basis applies.

Cookies and Tracking Technologies

We use cookies and similar technologies to operate the Services and understand usage. Cookies are categorized as:

• Essential cookies: required for site operation and security.
• Functional cookies: enable preferences and features (language, region, session keys).
• Analytics cookies: collect usage information to improve the Services.
• Advertising cookies: track interactions to tailor marketing; consent is required where applicable.

You may manage cookie preferences through on-site controls. Refusing non-essential cookies may limit certain features of the Services.

Data Sharing and Recipients

• Within the Hehe555 group and with service providers (payment processors, hosting, fraud prevention, customer support) to operate and improve the Services.
• To regulatory authorities, law enforcement or other competent authorities when required by law or to protect legitimate interests.
• With third parties with your consent or where necessary to provide the Services (e.g., game providers, marketing partners under strict data protection obligations).

We may transfer personal data to countries outside the European Economic Area. Where transfers occur, we implement appropriate safeguards to protect your data in accordance with applicable data protection laws.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this Policy and to meet legal and regulatory obligations. Transactional data (deposits, withdrawals and bets) are retained for a minimum of five (5) years from the date of the last transaction or account closure, unless a longer period is required by applicable law. When data is no longer required, we will securely delete or anonymize it.

Security

We implement industry-standard security measures to protect personal data, including transport layer security (TLS) for data in transit, encryption at rest, access controls, intrusion detection, and regular security reviews. Access to personal data is limited to individuals with a legitimate need to know and who are subject to confidentiality obligations.

Your Rights

You have the following rights under applicable data protection laws, subject to limitations in law:

• Access: obtain a copy of your personal data we process.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request deletion of personal data, subject to legal obligations and legitimate interests.
• Restriction: limit processing under certain circumstances.
• Portability: receive your data in a structured, commonly used format and transmit it to another controller where feasible.
• Object: oppose processing based on legitimate interests or direct marketing.
• Withdraw Consent: revoke consent where processing is based on consent, without affecting lawfulness of previous processing.
• Complaint: lodge a complaint with a supervisory authority if you believe your rights are violated.

To exercise these rights, contact [email protected]. We will respond within the timeframe required by law, not exceeding thirty (30) days in most cases, and may request information to verify identity.

Marketing Communications

Marketing communications will be sent only with your opt-in consent or as otherwise permitted by law. You may withdraw consent or opt out at any time via your account settings or by contacting [email protected]. Even after withdrawal, we may retain certain data to ensure your request is honored and to comply with regulatory obligations.

Profiling and Automated Decision-Making

We may perform profiling to assess risk, detect fraud and comply with AML/KYC requirements. No decision with legal or similarly significant effect is made solely by automated processing; human review remains involved in such determinations.

Children’s Privacy

The Services are not directed at, and we do not knowingly collect personal data from, individuals under the age of 18. If we become aware of such data, we will take steps to remove it from our systems and restrict access to the related accounts.

Data Subject Inquiries and DPO Contact

For questions about this Policy, exercise of rights, or to request a copy of your data, contact [email protected]. We have appointed a Data Protection Officer who can assist with DPIA requests and data protection concerns.

Updates to this Policy

We may update this Policy to reflect changes in law, technology or the Services. Material changes will be communicated on the Services or via the contact information we hold for you, and continued use of the Services after such changes constitutes acceptance of the updated Policy.