hoki70 Privacy Policy

Definitions

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" means any information that identifies or can reasonably be used to identify a natural person, directly or in combination with other available data.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, erasure, and archiving.
• "Member" or "You" means any individual who has registered an account on the hoki70 Platform and whose Personal Data is processed under this policy.
• "Platform" means the hoki70 website accessible at hoki70.vip, its sub-domains, and all associated digital service touchpoints.
• "Data Controller" means the entity responsible for determining the purposes and means of processing Personal Data collected through the Platform.
• "Third-Party Processor" means any external organization that processes Personal Data on behalf of hoki70 for a defined service purpose, operating under a data processing agreement.
• "KYC" (Know Your Customer) means the identity and age verification process applied by hoki70 to Member accounts, particularly prior to withdrawal processing.
• "Cookie" means a small text file placed on a Member's device by the Platform to facilitate session management, analytics, and personalization functions.
• "Sensitive Data" means a sub-category of Personal Data that warrants heightened protection, including financial account details and government-issued identity document numbers.

Data Controller

hoki70 acts as the Data Controller in respect of all Personal Data collected from Members through the Platform. hoki70 operates under an international gaming license and processes Member data in accordance with that license's data governance requirements and the privacy commitments set out in this policy.

All data-related correspondence, including access requests, correction requests, deletion requests, and complaints, should be directed to:

• Platform: hoki70.vip
• Email: [email protected]
• Operating Hours: 24 hours a day, 7 days a week (live chat); email responses within one business hour during WIB business hours (09:00–22:00 WIB)

Data We Collect

hoki70 collects Personal Data in the following categories, depending on how you interact with the Platform:

When you create a hoki70 account, we collect the information you provide during the registration process:

• Full legal name
• Date of birth (to verify the 21+ age requirement)
• Email address
• Indonesian mobile phone number
• Username (chosen by you)
• Account password (stored in encrypted, hashed form — never in plain text)
• City or region of residence within Indonesia (e.g., Jakarta, Surabaya, Bandung, Bali, Medan)

Prior to processing your first withdrawal, hoki70 may request the following identity and payment verification documents:

• Indonesian National Identity Card (KTP) — front and back image
• Selfie photograph with KTP, where required for enhanced verification
• Bank account statement or e-wallet screenshot confirming ownership of the payment method used for deposits (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, or LinkAja)

We record all deposit and withdrawal transactions associated with your hoki70 account, including:

• Transaction amount in IDR
• Payment channel used (e.g., BCA, OVO, GoPay)
• Transaction timestamp (WIB)
• Transaction reference number
• Destination bank or e-wallet account details (for withdrawal processing)

hoki70 logs all gaming and betting activity conducted through your account, including game sessions, bet amounts, outcomes, bonus activation events, and wagering progress. This data is used for account integrity monitoring, bonus abuse prevention, responsible gaming oversight, and dispute resolution.

When you access hoki70, our systems automatically record certain technical data, including:

• IP address and approximate geolocation (country and city level)
• Device type, operating system, and browser version
• Session start and end timestamps
• Pages and features accessed within the Platform
• Connection type (WiFi, 4G, 5G — relevant for Indonesian mobile-first users)

We retain records of communications between you and hoki70 support, including live chat transcripts and email correspondence. This data is used for quality assurance, dispute resolution, and fraud prevention purposes.

How We Collect Data

hoki70 collects Personal Data through the following channels:

• Directly from you: Registration forms, KYC document submissions, deposit and withdrawal requests, support interactions, and any other voluntary data submission on the Platform.
• Automatically: Server logs, session cookies, and analytics tools record technical and behavioral data each time you access the Platform.
• From payment processors: When you make a deposit or withdrawal, hoki70 receives transaction confirmation data from the relevant Indonesian bank or e-wallet operator (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, etc.).
• From identity verification services: Where enhanced KYC is required, hoki70 may use licensed third-party identity verification providers to cross-check document authenticity.
• From fraud prevention systems: Automated systems may flag accounts based on behavioral patterns, IP analysis, or cross-account matching for manual review.

Legal Basis for Processing

hoki70 processes Member Personal Data on the following legal bases:

How We Use Your Data

hoki70 uses the Personal Data it collects for the following purposes:

To create, maintain, and manage your hoki70 Member account, including processing login requests, updating account settings, and communicating account-related notices such as password resets and security alerts.

To process IDR deposits and withdrawals via your chosen Indonesian payment channel (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, or LinkAja), including verifying that the payment method is registered in your name.

To verify that you meet hoki70's 21+ age requirement and that your account identity is consistent with the payment methods associated with your account, in compliance with hoki70's international gaming license obligations.

To detect, investigate, and prevent fraudulent activity, money laundering, duplicate accounts, bonus abuse, and unauthorized account access. This includes automated monitoring of account behavior and manual review by hoki70's security team.

To monitor gaming activity for signs of problem gambling behavior and to administer responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion requests. hoki70 takes its responsible gaming obligations seriously as a condition of its operating license.

To provide assistance via live chat and email, including resolving account queries, payment disputes, and technical issues. Support interactions are logged for quality assurance purposes and retained as described in Section 9.

Where you have opted in to receive marketing communications, to send you information about hoki70 promotions, bonus offers, and seasonal campaigns relevant to Indonesian players — including promotions tied to BRI Liga 1 fixtures, Idul Fitri, Ramadhan, and Indonesian Independence Day. You may withdraw this consent at any time by updating your account preferences or contacting support.

To analyze aggregate, anonymized usage patterns across the Platform for the purpose of improving game content, navigation, payment flows, and overall user experience for Indonesian players.

Data Sharing

hoki70 does not sell your Personal Data. We share Member data only in the following limited and controlled circumstances:

Transaction data is shared with the relevant Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) or e-wallet operator (OVO, DANA, GoPay, ShopeePay, LinkAja) to the extent necessary to process your deposit or withdrawal request. These processors operate under their own privacy policies and applicable Indonesian financial regulations.

When you play a game supplied by a third-party Game Provider (such as Evolution Gaming, Pragmatic Play, PG Soft, Microgaming, NetEnt, Spribe, or Pocket Games Soft), a session token and anonymized player identifier are shared with that provider to facilitate gameplay. hoki70 does not share your name, contact details, or financial information with Game Providers.

Where enhanced KYC is required, KTP and selfie data may be shared with a licensed third-party identity verification provider operating under a data processing agreement with hoki70. This provider processes your data solely for the purpose of document authentication and returns a verification result to hoki70; it does not retain your documents for any other purpose.

hoki70 may share limited account and behavioral data with cross-platform fraud prevention services to identify and block accounts engaged in systematic abuse. No personally identifiable financial data is shared through these services.

hoki70 may disclose Personal Data to competent regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, a valid legal order, or in connection with hoki70's gaming license compliance obligations. hoki70 will, where legally permissible, notify affected Members of such disclosures.

In the event of a merger, acquisition, or sale of substantially all of hoki70's operating assets, Member Personal Data may be transferred to the acquiring entity as part of that transaction. Members will be notified by email in advance of any such transfer and given the opportunity to close their accounts if they do not consent to the transfer.

Cookies & Tracking Technologies

hoki70 uses cookies and similar tracking technologies to operate the Platform effectively and to improve the Member experience. The following categories of cookies are used:

You can manage or delete cookies through your browser settings. Note that disabling essential cookies will prevent you from logging in to your hoki70 account. hoki70 does not use third-party advertising cookies or behavioral retargeting cookies.

Data Retention

hoki70 retains Personal Data for the periods set out below, after which data is securely deleted or anonymized:

Upon expiry of the applicable retention period, Personal Data is securely deleted from hoki70's systems. Where deletion is not technically feasible (for example, in backup archives), the data is rendered inaccessible and will be deleted at the next scheduled backup cycle.

Security Measures

hoki70 implements a range of technical and organizational security measures to protect Member Personal Data from unauthorized access, loss, alteration, or disclosure:

• Encryption in transit: All data transmitted between Member devices and hoki70 servers is encrypted using 256-bit TLS/SSL protocols.
• Encryption at rest: Sensitive data fields, including passwords (stored as salted hashes) and KYC document files, are encrypted at the database level.
• Access controls: Access to Member Personal Data within hoki70's internal systems is restricted to staff with a documented operational need, using role-based access controls and multi-factor authentication.
• Intrusion detection: hoki70's infrastructure is monitored 24/7 by automated intrusion detection systems. Anomalous access patterns trigger immediate alerts to the security team.
• Penetration testing: hoki70 conducts regular security assessments of its Platform infrastructure to identify and remediate vulnerabilities.
• Data breach response: In the event of a data breach affecting Member Personal Data, hoki70 will notify affected Members by email as promptly as practicable, describing the nature of the breach, the data affected, and the steps taken to contain it.

While hoki70 takes data security seriously, no online platform can guarantee absolute security. Members are encouraged to use a unique, strong password for their hoki70 account and to activate any available two-factor authentication feature. Never share your hoki70 password with anyone.

Your Rights

hoki70 respects the following rights that Members have in relation to their Personal Data. To exercise any of these rights, contact [email protected] with your registered username and a clear description of your request. hoki70 will respond within five business days.

Minors

The hoki70 Platform is strictly intended for adults aged 21 and over. hoki70 does not knowingly collect Personal Data from individuals under the age of 21. The 21+ age requirement reflects hoki70's responsible gaming policy for the Indonesian market and is enforced at registration and at the KYC verification stage prior to withdrawal processing.

If hoki70 becomes aware that a Member account has been registered by a person under the age of 21, the account will be suspended immediately, all gaming activity associated with the account will be voided, and any deposits will be returned to the originating payment method following identity verification. KYC documents submitted in connection with an underage account will be securely deleted following the investigation.

Parents and guardians who believe a minor in their household may have accessed the hoki70 Platform should contact [email protected] immediately. hoki70 will cooperate fully to resolve the matter and prevent further access.

Third-Party Services

The hoki70 Platform integrates with third-party services to deliver its full product offering. Each third-party service provider operates under its own privacy policy, and hoki70 is not responsible for the data practices of these external entities beyond the contractual data processing obligations they have agreed to in their agreements with hoki70.

The primary third-party service categories integrated into hoki70 are:

• Game Providers: Evolution Gaming, Pragmatic Play, PG Soft, Microgaming, NetEnt, Spribe, Pocket Games Soft. These providers receive anonymized session tokens to deliver their game content through the hoki70 interface.
• Payment Processors: Indonesian banking and e-wallet networks including BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja. These processors receive transaction data as described in Section 7.1.
• Infrastructure Providers: Cloud hosting, content delivery network (CDN), and database services that underpin the Platform's technical operation. These providers are bound by data processing agreements that restrict use of any Member data to infrastructure operation purposes only.
• Analytics Platforms: Anonymized, aggregated behavioral analytics tools used to improve Platform navigation and game content recommendations. No personally identifiable data is transmitted to these services.

The links available on hoki70 are limited to internal Platform pages only. hoki70 does not link to external third-party websites and accepts no responsibility for the privacy practices of any website not operated by hoki70.

International Data Transfers

hoki70 operates as an internationally licensed offshore platform, and Member Personal Data may be stored and processed on servers located outside Indonesia. Such transfers are necessary for the operation of the Platform and are undertaken under the following safeguards:

• Data processing agreements with all Third-Party Processors require them to implement security standards equivalent to those applied by hoki70 itself.
• KYC documents and financial transaction records are stored on infrastructure with documented security certifications.
• hoki70 does not transfer Member data to jurisdictions that lack adequate data protection frameworks without appropriate contractual safeguards in place.

By registering a hoki70 account, you acknowledge that your Personal Data may be processed outside Indonesia in connection with the Platform's operation, on the terms described in this Privacy Policy.

Policy Changes

hoki70 reserves the right to update or amend this Privacy Policy at any time. When we make a material change — for example, introducing a new category of data collection, a new sharing arrangement, or a change to retention periods — we will notify you by email to your registered address at least seven (7) days before the change takes effect. The "Last updated" date at the top of this page reflects the date of the most recent revision.

For non-material changes (such as clarifications of existing language, correction of typographical errors, or restructuring of sections without substantive effect), hoki70 may update this policy without advance notice, though the "Last updated" date will still be revised to reflect the change.

Your continued use of the hoki70 Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any change, you are entitled to close your account in accordance with Clause 3.5 of the hoki70 Terms & Conditions prior to the effective date. Accounts closed for this reason will have any Real Money Funds balance returned to the Member's verified payment method without deduction.

We encourage you to review this Privacy Policy periodically so that you remain informed about how hoki70 handles your Personal Data. The current version of this policy is always accessible at hoki70.vip/privacy-policy.

Contact Us

For any questions, requests, or complaints relating to this Privacy Policy or to the way hoki70 handles your Personal Data, please contact our team through any of the channels below:

• Live Chat: Available24 hours a day, 7 days a week, directly on the hoki70 Platform. Average first-response time is under two minutes. Native Indonesian-speaking agents are available to assist you.
• Email: [email protected] — please include your registered username and a clear description of your request. Responses are typically provided within one business hour during WIB hours (09:00–22:00 WIB, UTC+7).

When submitting a data rights request (access, correction, deletion, or portability), please include the following information to help us process your request efficiently:

• Your registered hoki70 username
• The email address associated with your account
• A clear description of the right you wish to exercise and the specific data it relates to
• A copy of a valid identity document if your request relates to account-level data (for verification purposes)

hoki70 will acknowledge receipt of your request within 24 hours and provide a substantive response within five (5) business days. Where a request is complex or involves a large volume of data, we may extend this period by a further ten (10) business days and will notify you accordingly.