Privacy Policy

1. Introduction and Scope

hoa788 ("we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, store, and protect information about you when you access or use our gaming platform at hoa788.cam (the "Platform" or "Services").

This Privacy Policy applies to all Users of hoa788 Services, including visitors who browse our website without registering, registered Account holders, and any person who interacts with our customer support, marketing communications, or other services. By using hoa788 Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein.

This Privacy Policy should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy, which form part of your overall agreement with hoa788. In the event of any conflict between this Privacy Policy and other policies, this Privacy Policy shall prevail with respect to data protection matters.

We take our responsibilities under international data protection laws seriously, including principles aligned with the General Data Protection Regulation (GDPR) and applicable Indonesian data protection standards. We are committed to maintaining the highest standards of data privacy and security for all our Indonesian Users.

2. Data Controller Information

For the purposes of applicable data protection laws, hoa788 acts as the data controller for personal information collected through our Platform. As data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring such processing complies with applicable data protection requirements.

hoa788 is an international gaming platform licensed and regulated by offshore authorities, operating to serve the Indonesian market with specific attention to Indonesian banking systems, currency (Indonesian Rupiah/IDR), and cultural preferences. Our data processing activities respect both international data protection standards and Indonesian market context.

For all inquiries related to data protection, privacy concerns, or exercise of your privacy rights, please contact our Data Protection Officer at [email protected] with "Privacy Inquiry" in the subject line. We will respond to all legitimate requests within 30 days.

3. Information We Collect

3.1 Information You Provide Directly

When you register for an Account with hoa788, you provide us with personal information including:

• Identity Information: Full legal name as it appears on government-issued identification, date of birth, gender, nationality, government-issued identification number (KTP number for Indonesian residents).
• Contact Information: Residential address, email address, mobile phone number, preferred language for communication.
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet account information (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history, deposit and withdrawal records.
• Account Credentials: Username, password (stored in encrypted format), security questions and answers, two-factor authentication settings.
• Verification Documents: Copies of government-issued photo identification (KTP, passport, driver's license), proof of address documents (utility bills, bank statements), selfies for facial verification, proof of payment method ownership.

3.2 Information We Collect Automatically

When you access or use hoa788 Services, we automatically collect certain technical and usage information:

• Device Information: Device type and model, operating system and version, browser type and version, screen resolution, device identifiers (IMEI, MAC address, advertising ID).
• Connection Information: IP address, internet service provider, connection type (WiFi, mobile data), geographic location (derived from IP address), time zone setting.
• Usage Data: Pages visited, features accessed, games played, time spent on each page, click patterns, navigation paths, session duration, frequency of visits.
• Gaming Activity: Bets placed (amount, type, selection), game outcomes, win/loss records, bonus utilization, transaction history, Account balance changes.
• Communication Records: Live chat transcripts, email correspondence with customer support, phone call recordings (where permitted by law and with your consent), feedback and survey responses.

3.3 Information from Third-Party Sources

We may receive information about you from third-party sources to verify your identity, prevent fraud, and comply with legal obligations:

• Payment Processors: Transaction confirmation, payment method verification, fraud risk assessment data from Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallet providers.
• Identity Verification Services: Results of identity document verification, facial recognition matching, database checks against sanctions lists and politically exposed persons (PEP) lists.
• Credit Reference Agencies: Information to assess financial risk and prevent fraud (where legally permitted in Indonesia).
• Public Sources: Publicly available information to verify identity and comply with anti-money laundering regulations.

4. Purposes of Data Processing

hoa788 processes your personal information for the following specific purposes:

4.1 Account Management and Service Delivery

• Creating and maintaining your gaming Account
• Processing your deposits, withdrawals, and other financial transactions
• Managing your Account balance and transaction history
• Processing your bets and calculating winnings
• Applying bonuses, promotions, and loyalty rewards
• Providing customer support and responding to your inquiries
• Communicating with you about your Account and transactions

4.2 Legal and Regulatory Compliance

• Verifying your identity and age (21+ requirement) in accordance with Indonesian regulations
• Conducting Know Your Customer (KYC) and Customer Due Diligence (CDD) procedures
• Preventing money laundering, terrorist financing, and fraud
• Complying with international gaming licensing requirements
• Responding to legal requests from law enforcement and regulatory authorities
• Maintaining records as required by applicable gaming and financial regulations
• Implementing responsible gaming measures and self-exclusion programs

4.3 Security and Fraud Prevention

• Detecting and preventing fraudulent transactions and Account access
• Identifying duplicate Accounts and multi-accounting violations
• Monitoring for suspicious betting patterns, collusion, and cheating
• Protecting against unauthorized access, data breaches, and cyber attacks
• Investigating potential violations of our Terms & Conditions
• Maintaining platform integrity and fairness for all Users

4.4 Marketing and Communications

• Sending promotional offers, bonuses, and special deals (with your consent)
• Providing personalized gaming recommendations based on your preferences
• Informing you about new features, games, and platform updates
• Conducting customer satisfaction surveys and market research
• Managing loyalty programs and VIP tier benefits

4.5 Platform Improvement and Analytics

• Analyzing usage patterns to improve user experience and interface design
• Testing new features and optimizing platform performance
• Understanding Indonesian player preferences and behavior patterns
• Developing new games and betting markets relevant to Indonesian Users
• Identifying and fixing technical issues and bugs

5. Legal Basis for Processing

Under applicable data protection laws, we must have a lawful basis for processing your personal information. hoa788 relies on the following legal bases:

5.1 Contractual Necessity

Processing is necessary to perform our contract with you (the Terms & Conditions you agreed to upon registration). This includes processing required to create your Account, process transactions, deliver gaming Services, and communicate with you about your Account.

5.2 Legal Obligations

Processing is necessary for compliance with legal obligations to which hoa788 is subject, including international gaming licensing requirements, anti-money laundering regulations, age verification laws, tax reporting obligations, and responses to lawful requests from authorities.

5.3 Legitimate Interests

Processing is necessary for our legitimate business interests, including fraud prevention, platform security, service improvement, network and information security, internal administration, and defending our legal rights. We only rely on legitimate interests where such interests are not overridden by your fundamental rights and freedoms.

5.4 Consent

For certain processing activities, such as marketing communications and non-essential cookies, we obtain your explicit consent. You have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

6. Data Sharing and Third Parties

hoa788 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information with the following categories of recipients for the purposes described in this Privacy Policy:

6.1 Service Providers and Business Partners

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) for processing deposits and withdrawals.
• Identity Verification Providers: Third-party services that verify your identity documents and perform background checks as part of KYC procedures.
• Game Providers: Licensed gaming software suppliers who provide slots, live casino games, and other gaming content on our Platform.
• Cloud Hosting Providers: Secure data centers that host our Platform infrastructure and store encrypted data backups.
• Customer Support Tools: Live chat software and helpdesk platforms used to provide customer service.
• Analytics Services: Tools that help us understand user behavior and improve our Platform (data is anonymized where possible).

6.2 Legal and Regulatory Authorities

We may disclose your information to law enforcement, regulatory bodies, courts, and other government authorities when required by law, court order, or legal process, or when we have a good-faith belief that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to government requests.

6.3 Corporate Transactions

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your personal information may be transferred to the successor entity. We will notify you via email and/or prominent notice on our Platform of any such change in ownership or control of your personal information.

6.4 With Your Consent

We may share your information with other third parties when you have given us explicit consent to do so.

Data Processing Agreements: All third-party service providers are bound by data processing agreements that require them to maintain appropriate security measures, process data only for specified purposes, and comply with applicable data protection laws.

7. Data Security Measures

hoa788 implements comprehensive technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

7.1 Technical Security Measures

• Encryption: All data transmissions between your device and our servers are protected by 256-bit SSL/TLS encryption (the same standard used by banks). Sensitive data stored in our databases is encrypted at rest.
• Secure Authentication: Passwords are hashed using industry-standard algorithms and never stored in plain text. Two-factor authentication (2FA) is available for additional Account protection.
• Firewall Protection: Our servers are protected by enterprise-grade firewalls that filter malicious traffic and prevent unauthorized access attempts.
• Intrusion Detection: Automated systems monitor for suspicious activity and potential security breaches 24/7.
• Regular Security Audits: Independent third-party security firms conduct periodic penetration testing and vulnerability assessments of our systems.
• Data Backup: Encrypted backups are stored in geographically distributed secure locations to ensure business continuity and data recovery.

7.2 Organizational Security Measures

• Access Controls: Employee access to personal data is restricted on a need-to-know basis and subject to strict authentication requirements.
• Staff Training: All employees receive regular training on data protection principles, security best practices, and confidentiality obligations.
• Confidentiality Agreements: Employees and contractors sign legally binding confidentiality agreements prohibiting unauthorized disclosure of user information.
• Incident Response Plan: We maintain a documented incident response plan for rapid detection, containment, and remediation of data breaches.
• Vendor Security Assessment: Third-party service providers undergo security due diligence before engagement and are subject to ongoing monitoring.

7.3 Your Security Responsibilities

While we implement robust security measures, you also have a responsibility to protect your Account:

• Choose a strong, unique password and never share it with anyone
• Enable two-factor authentication (2FA) on your Account
• Log out of your Account when using shared or public devices
• Keep your email account secure (it is used for Account recovery)
• Be cautious of phishing attempts—hoa788 will never ask for your password via email
• Report any suspicious activity on your Account immediately

Data Breach Notification: In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify affected Users and relevant authorities in accordance with applicable data breach notification requirements, typically within 72 hours of becoming aware of the breach.

8. Data Retention Periods

hoa788 retains your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

8.1 Active Account Data

While your Account is active, we retain all Account information, transaction history, and gaming activity to provide Services, comply with legal obligations, and resolve disputes. This data is immediately accessible to you through your Account dashboard.

8.2 Closed Account Data

After you close your Account, we retain certain information for legal and regulatory compliance purposes:

• Transaction Records: Retained for 7 years from the date of transaction, as required by anti-money laundering regulations and tax laws.
• Identity Verification Documents: Retained for 7 years from Account closure to comply with KYC record-keeping requirements.
• Gaming Activity History: Retained for 5 years to resolve potential disputes, investigate fraud, and comply with gaming regulations.
• Communication Records: Retained for 3 years from Account closure for quality assurance and dispute resolution purposes.

8.3 Self-Excluded Users

If you self-exclude from hoa788 under our Responsible Gaming program, we retain your identity information indefinitely to prevent you from creating new Accounts during your self-exclusion period and to honor permanent self-exclusions.

8.4 Marketing Data

If you opt out of marketing communications, we will stop sending promotional messages but retain a record of your opt-out preference indefinitely to ensure we do not contact you in the future.

8.5 Data Deletion

After the applicable retention periods expire, we securely delete or anonymize your personal information. Anonymized data (data that cannot be linked back to you) may be retained indefinitely for statistical analysis and platform improvement.

9. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal information:

9.1 Right of Access

You have the right to obtain confirmation as to whether we process your personal data and, if so, to access that data along with information about how it is processed. You can access most of your data through your Account dashboard. For additional information, contact us at [email protected].

9.2 Right to Rectification

You have the right to correct inaccurate personal data and to have incomplete data completed. You can update most information (email, phone number, address) directly in your Account settings. For changes to identity information, contact customer support with supporting documentation.

9.3 Right to Erasure ("Right to be Forgotten")

You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected or you withdraw consent. However, this right is limited by legal obligations that require us to retain certain data (see Section 8).

9.4 Right to Restriction of Processing

You have the right to request that we restrict processing of your personal data in certain situations, such as when you contest the accuracy of the data or object to processing based on legitimate interests while we verify the grounds for processing.

9.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller. This right applies to data processed based on your consent or for contract performance.

9.6 Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes. If you object to marketing, we will stop processing your data for such purposes immediately.

9.7 Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal.

9.8 Right to Lodge a Complaint

You have the right to lodge a complaint with your local data protection authority if you believe we have violated your privacy rights.

Exercising Your Rights: To exercise any of these rights, email us at [email protected] with "Privacy Rights Request" in the subject line. Include your full name, Account username (if applicable), and specify which right you wish to exercise. We may request identity verification to protect your personal information from unauthorized access. We will respond to legitimate requests within 30 days.

10. Cookies and Tracking Technologies

hoa788 uses cookies and similar tracking technologies to enhance your experience, analyze usage patterns, and deliver personalized content.

10.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our Platform. They help us remember your preferences, keep you logged in, and understand how you use our Services.

10.2 Types of Cookies We Use

• Essential Cookies: Required for the Platform to function properly, including session management, security features, and load balancing. These cannot be disabled.
• Functional Cookies: Remember your preferences (language, currency display) and provide enhanced features.
• Analytics Cookies: Help us understand how Users interact with the Platform, which pages are visited most, and where improvements are needed.
• Marketing Cookies: Track your browsing activity to deliver personalized promotional content and measure campaign effectiveness (requires consent).

10.3 Managing Cookies

You can control cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. However, disabling essential cookies may impact Platform functionality. To manage marketing cookies specifically, use the cookie consent banner displayed on your first visit to our Platform.

10.4 Other Tracking Technologies

We may use web beacons (pixel tags), local storage, and device fingerprinting for fraud prevention and security purposes.

11. International Data Transfers

hoa788 operates internationally and may transfer your personal information to countries outside Indonesia, including to our servers and service providers located in other jurisdictions. When we transfer data internationally, we ensure appropriate safeguards are in place:

• Standard Contractual Clauses approved by data protection authorities
• Transfers to countries recognized as providing adequate data protection
• Binding Corporate Rules for transfers within corporate groups
• Your explicit consent where required by law

All international data transfers comply with applicable Indonesian data protection regulations and international standards.

12. Protection of Minors

hoa788 Services are strictly prohibited for persons under 21 years of age. We do not knowingly collect personal information from minors. If we become aware that we have collected information from a person under 21, we will delete such information immediately and close the associated Account.

Parents and guardians should monitor their children's internet usage and ensure minors do not access gambling platforms. If you believe we have inadvertently collected information from a minor, contact us immediately at [email protected].

13. Changes to This Policy

hoa788 may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or Services. Material changes will be communicated via email and/or prominent notice on our Platform at least 30 days before the changes take effect.

The "Last Updated" date at the top of this Policy indicates when the most recent changes were made. We encourage you to review this Privacy Policy periodically. Your continued use of hoa788 Services after changes become effective constitutes your acceptance of the updated Policy.

14. Contact Information

For any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us:

• Data Protection Officer: [email protected]
• Email Subject Line: "Privacy Inquiry" or "Data Protection Request"
• 24/7 Live Chat: Available via the chat icon on our Platform
• Response Time: We respond to all legitimate privacy inquiries within 30 days

For responsible gaming concerns and self-exclusion requests, visit our Responsible Gaming page.