hoki365 Casino & Sportsbook Data Care
This page describes what we collect when you use hoki365 and how we keep that data protected. We gather personal information only when you register, verify your account, or deposit and withdraw funds. Our commitment is straightforward: we do not sell your data to marketers, we encrypt all communications, and we keep your details secure from unauthorised access.
Your account on hoki365 contains sensitive details — your name, national ID number, address, payment methods (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet credentials), and transaction history. We treat this information with strict confidentiality and comply with data-protection standards. This policy explains what we collect, why, how long we keep it, and what rights you have regarding your data.
Our services are available only where local law permits. Users are responsible for verifying that access and use comply with their jurisdiction's regulations. If you have questions about how we handle your information, our support team can respond during business hours.
What we collect and how we use it
We at hoki365 collect data in these categories:
- Registration data: When you create an account, we collect your email address, chosen username, password (hashed, never stored in plain text), phone number, and full name.
- Identity verification (KYC): For deposits and withdrawals, we require your national ID number, date of birth, address, and a selfie photo holding your ID. This is mandatory to comply with anti-money-laundering (AML) regulations.
- Payment details: We store your DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, and bank account information (account number, bank name, account holder name) to process deposits and withdrawals. We do not store your passwords or full card numbers.
- Transaction history: Every deposit, withdrawal, slot spin, live-dealer hand, esports position, and sports market entry is logged with timestamp, amount, game/market name, and outcome.
- Behavioural data: We track which games you play, how long you play, which payment methods you use, and your login times. This helps us detect fraud and identify technical issues.
- Device and IP data: Your device type (Android / iOS / desktop), browser version, IP address, and approximate location (city level, not street address) are recorded for security and fraud detection.
We use this data to: (1) operate your account and process transactions; (2) comply with AML and KYC regulations; (3) prevent fraud and unauthorised access; (4) settle game outcomes and payouts; (5) respond to support requests; (6) comply with law-enforcement requests (subpoenas, court orders).
We do not use your data to: sell to third-party marketers, send unsolicited promotional emails beyond account notifications, create profiles for targeting, or share your information with advertisers. If you opt into account notifications (e.g., tournament updates, withdrawal confirmations), we send emails only to that registered address. You can disable these notifications in your account settings at any time.
Data retention and deletion
We at hoki365 retain your data as long as your account is active. If you request account deletion, we anonymise your personal details (name, ID number, address, payment methods) within 30 days but retain transaction records for seven years to comply with financial-reporting and tax obligations. We cannot delete transaction history because it is required for regulatory audits.
If you close your account voluntarily and have no pending withdrawals or disputes, deletion begins immediately. If a withdrawal is in progress or a dispute is open, we retain your data until resolution. After seven years, transaction records are archived in encrypted offline storage and are not accessible via our live systems.
- Data retention
- We keep active account data for as long as your account exists. Transaction records are kept for seven years for regulatory compliance.
- Deletion request
- You can request account deletion via support. We anonymise personal details within 30 days but cannot delete transaction history.
- Data export
- You can request a copy of all your data in machine-readable format. We provide this within 10 business days at no cost.
How we protect your data
We at hoki365 encrypt all data in transit using SSL/TLS (Secure Sockets Layer / Transport Layer Security). When you log in, deposit, or view your account, communication between your device and our servers is encrypted. Eavesdroppers cannot intercept your password, payment details, or account balance.
At rest, your data is stored in encrypted databases on our servers. Encryption keys are managed separately and rotated quarterly. Backups are encrypted and stored in multiple geographic locations to ensure continuity during system failures. We do not store unencrypted copies of sensitive data (passwords, ID numbers, payment methods) anywhere on our systems.
Our servers are located in data centres across Asia and Europe. This means your data may be processed outside your home country. By using hoki365, you consent to this international data transfer. We maintain data-centre agreements that require equivalent security and confidentiality standards to those in your jurisdiction.
We conduct quarterly security audits by independent third-party auditors. We test for vulnerabilities, unauthorised access, and encryption failures. If a vulnerability is discovered, we patch it immediately and notify affected users within 24 hours. We maintain cyber-liability insurance to cover potential data-breach costs.
Your data security is central to our operations. We encrypt in transit and at rest, conduct regular audits, and maintain strict access controls.
Third parties and data sharing
We at hoki365 share your data with these third parties only as necessary:
- Payment processors: mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, and banks (online payment, e-wallet, mobile banking, local payment) receive your account number and transaction amount only. They do not receive your full personal profile or gaming history.
- KYC/AML providers: Third-party identity-verification services receive your name, ID number, date of birth, and selfie photo to verify your identity. These vendors are contractually bound to keep your data confidential and delete it after verification.
- Game studios: Slot game providers (e.g., Pragmatic Play for Aviator, Sweet Bonanza; NetEnt for Gates of Olympus) receive only your player ID (not your name or contact) and your spin outcomes for tournament leaderboards. They do not receive payment details or personal information.
- Law enforcement: If we receive a valid court order or subpoena from police, tax authorities, or financial regulators, we disclose the minimum data required by law. We notify you of such requests unless legally prohibited.
We do not share your data with marketing agencies, data brokers, or ad networks. We do not sell user lists or transaction profiles. Your information stays within our hoki365 ecosystem and only leaves to the third parties listed above.
Cookies and tracking technologies
We at hoki365 use cookies to maintain your login session, remember your language preference, and track whether you have read promotional banners. Cookies are small text files stored on your device. Session cookies expire when you close your browser; persistent cookies remain for 12 months unless you delete them.
We do not use third-party tracking cookies (Google Analytics, Facebook Pixel) because we do not share behavioural data with advertisers. We use only first-party cookies to operate hoki365 itself. You can disable cookies in your browser settings, but this may prevent you from logging in or using certain features.
We do not use cookies to profile you across other websites. When you leave hoki365 to visit another site, we do not track your activity there. Your browsing outside hoki365 is private.
Your rights and how to contact us
We at hoki365 acknowledge your rights under data-protection laws applicable in your jurisdiction. You have the right to:
- Access all your data in a machine-readable format within 10 business days.
- Correct inaccurate data (e.g., if your address is wrong, you can update it in your account settings).
- Request deletion of your personal details (though transaction records are retained for regulatory reasons).
- Restrict how we use your data (e.g., opt out of promotional emails).
- Object to profiling or automated decision-making (we do not perform these functions, so this is not applicable).
- Lodge a complaint with your data-protection authority if you believe we have breached your privacy.
To exercise any of these rights, contact our support team via email or live chat during business hours (9 AM–9 PM on weekdays). We respond to data requests within 10 business days. For account holders in Jakarta, Surabaya, Bandung, Medan, and Semarang, our multilingual support team handles requests in English and Indonesian.
If you have concerns about how we handle your data or suspect a breach, contact us immediately. We investigate all reports and notify affected users if necessary. This policy is subject to change; we will publish updates on this page and notify you of material changes via your registered email address during Idul Fitri, Idul Adha, Imlek, Nyepi, and other regulatory-update periods.
Our services are available only where local law permits. Users are responsible for verifying that access and use comply with their jurisdiction's regulations and data-protection laws. If you have questions about our privacy practices, contact our support team or submit a formal data-subject request via our contact form.