hm505 — Official Policy

hm505 Privacy Policy

This page explains how we collect, use, and protect your personal data.

Last revised: 30 October 2026

1. Introduction

hm505 is an online gaming and betting platform designed for players in Myanmar. We take the security and privacy of your personal information very seriously.

This Privacy Policy ("Policy") sets out our position on the personal data of players ("you") who use the hm505 platform, its associated websites, mobile applications, and services ("Services"). By continuing to use the Services, you are considered to have agreed to the terms set out in this Policy.

This Policy should be read together with the Terms and Conditions. In the event of a conflict, this Policy takes precedence.

2. Types of Data We Collect

We collect the following data when players register, use the Services, and carry out financial transactions.

Registration Data

Name, date of birth, contact phone number, and email address — information that is essential for creating your account.

Financial Data

Deposit and withdrawal records, payment methods used (KBZPay, Wave Money, AYA Pay, CB Pay), and transaction records — used to manage financial operations.

Gaming Data

Games played, play duration, betting history, and win records — used to improve our services and support responsible gaming.

Technical Data

IP address, browser type, device information, access timestamps and Cookies data — used for platform security and improving user experience.

Communication Data

Customer service interactions handled via Live Chat, inquiries and complaint records — used to maintain quality and resolve customer issues.

What We Do Not Collect

We do not collect, without proper authorization, your full bank balance, NRC photo (only requested temporarily when required for processing), phone SIM card download-format GPS location, or biometric data that is not needed for decision-making.

3. How We Use Your Data

hm505 uses player data only for the following purposes—

  1. Creating accounts, verifying identity and managing access
  2. Processing deposit and withdrawal transactions
  3. Issuing bonuses, promotions and VIP rewards
  4. Checking gaming regulatory compliance and supporting responsible gambling
  5. Platform integrity, fraud prevention and security checks
  6. Fixing service errors and providing customer support
  7. Conducting analysis to improve our services
  8. Meeting requirements from legal, court or regulatory authorities

Player data is never used for any purpose outside those listed above.

4. Sharing Data with Third Parties

hm505 will never sell or rent your personal data to third parties. However, we may share data with the following parties where strictly necessary to deliver our services—

  • Payment service providers — KBZPay, Wave Money, AYA Pay, CB Pay receive only the data strictly necessary to process financial transactions
  • Game and technology software providers — limited data for platform operation
  • Cybersecurity and identity verification services — strictly necessary for fraud prevention
  • Legal proceedings — when required by law, court order or regulatory authorities

Any third party will receive only the data needed for their specific purpose, and those third parties must comply with data protection standards consistent with ours.

5. Cookies and Tracking Technologies

The hm505 platform uses Cookies and similar technologies to improve your experience and for security. The types of Cookies we use are—

  • Essential Cookies: strictly necessary for maintaining access and processing financial transactions
  • Functional Cookies: to remember your language preference and main settings
  • Analytical Cookies: to obtain data on platform health and performance

You can block Cookies in your browser settings, but please note that some platform features may be affected.

6. Data Security and Protection

hm505 applies modern security technologies to protect players' personal data—

  • TLS / SSL encryption — all data transfers are encrypted
  • Two-Factor Authentication — prevents unauthorized account access
  • Database encryption — stored data is encrypted
  • Background threat detection system — monitored 24/7
  • Access restrictions — only hm505 staff who strictly need it are granted data access

However, since no system in the world can be 100% guaranteed, should a data breach occur, players will be notified promptly and immediate protective action will be taken.

7. Data Retention Period

We will retain data for as long as necessary to provide our services or as required by law — whichever period is longer—

  • Inactive account data — deleted 3 years after registration if the service has not been used
  • Financial records — retained for a minimum of 5 years as required by law
  • Gaming records — retained for up to 3 years as required by law
  • Communication Records — 1 year after the service matter is resolved

After an account is closed, data that is no longer required by law will be securely deleted or anonymised.

8. Your Personal Data Rights

Each player has the following rights regarding their personal data—

Right of Access

If you want to know what data we hold about you, contact us at [email protected]. We will respond within 30 days.

Right to Rectification

You can request that incorrect data be corrected. Some data can be updated directly in your account settings, while other data must be corrected through support.

Right to Erasure

You can request that your personal data be deleted, as long as it does not conflict with our legal retention obligations. Please note that financial records must be kept as required by law.

Right to Restriction

You can request that the use of your personal data be temporarily paused for a set period.

Right to Portability

You can request a copy of the data you have provided in a readable format.

Send any requests relating to these rights to [email protected]. We will respond within 30 days, or up to 90 days for complex cases.

9. Protection for Players Under 21

hm505 services are intended only for players aged 21 and above (21+). We do not knowingly collect personal data from children or minors. The following measures are in place—

  • Date of birth verification is required during account registration
  • Suspicious accounts will be monitored and reviewed
  • If we become aware that a child's data has been entered, it will be deleted immediately

10. International Data Transfers

Some of hm505's technology and software providers may have servers located outside Myanmar. If such international data transfers occur, we will ensure that agreed protection standards are met and that the protections set out in this policy continue to apply.

11. Policy Changes

hm505 may revise this policy to keep it in line with changes to our services, legal requirements, or business operations.

  • For significant changes, we will notify your registered account
  • The "Last Updated" date at the top of this page will be updated accordingly
  • Continuing to use our services after a change takes effect means you accept the updated policy

12. Contact Us

If you have any questions, requests, or complaints about this Privacy Policy, you can reach the hm505 data privacy support team through the following channels—

  • Email: [email protected]
  • Live Chat: 24/7 Live Chat on the platform (available in Myanmar language)

We will respond within 3 days, or no longer than 30 days for complex cases. We are committed to handling all matters with care and goodwill, even if you are not satisfied with our initial response.

What You Should Know About Personal Data Protection

At registration, we require your name, contact phone number, email address, and date of birth (for the 21+ age check). This information is essential for creating your account and delivering our services smoothly.

Yes. All payment data is protected with SSL/TLS encryption. hm505 does not store bank PINs or digital wallet passwords — transactions are processed through the payment gateways of KBZPay, Wave Money, AYA Pay, and CB Pay.

No. Gaming records are only shared with staff who need them to operate the service (for example, the compliance team) or when required by a legal directive. They are never shared with third parties for commercial purposes.

You can request data deletion as long as it does not conflict with legal retention obligations. Note that financial records may be kept for the legally required period. Contact [email protected] to submit a deletion request.

Blocking essential cookies will prevent core functions such as login and financial transactions from working normally, affecting your experience on the site. Blocking only analytics cookies will not affect the main services.

For major policy changes, we will notify you via your registered phone number or email, and we will also update the "Last revised date" at the top of this page. Bookmark this page so you can check back anytime.

For personal data matters, 24/7 Live Chat is the fastest and most direct channel. For cases that need a written record (for example, a data deletion request), emailing [email protected] is more effective.