Your Privacy Matters
at hao88

This Privacy Policy ("Policy") describes how hao88 ("we", "us", "our", or "the Platform") collects, uses, stores, discloses, and protects the personal information of individuals ("Members", "you", or "your") who register for an account, make deposits, place bets, or otherwise interact with the hao88 online betting and gaming platform accessible at https://hao88.club.

hao88 is Indonesia's premier online betting destination, providing world-class sports betting, live casino games, premium slot titles, and more to players across Indonesia — including major cities such as Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, and Semarang. All financial transactions are conducted in Indonesian Rupiah (IDR / Rp), and our platform is designed specifically for the needs and preferences of Indonesian players aged 21 and above.

We recognize that your personal privacy is important, and we are committed to handling your personal data with the highest standards of transparency, security, and integrity. By registering an account or using any feature of the hao88 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

This Policy should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference into the overall agreement between hao88 and its Members.

hao88 collects personal data in several categories depending on the nature of your interaction with the Platform. The table below summarizes the main categories of personal data we collect and provides examples of the specific data points within each category.

We do not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, biometric data for identification purposes, or health and medical information. If any such data is incidentally included in documentation you submit to us (for example, a religion field on an Indonesian KTP), we will not use it for any processing purpose and will limit our handling of that document to the strict minimum required for identity verification.

hao88 collects personal data through the following channels:

• Direct collection: Information you provide voluntarily when registering your account, completing your profile, submitting KYC documents, contacting our support team, or participating in promotions.
• Automated collection: Technical and behavioral data collected automatically as you interact with the Platform, including session logs, bet placement records, game activity data, and device/browser telemetry gathered via server logs and analytics tools.
• Cookies and similar tracking technologies: Data collected via cookies, web beacons, pixel tags, and local storage mechanisms placed on your device when you visit the hao88 website. See Clause 7 for full details of our cookie practices.
• Payment processor feeds: Confirmation data received from Indonesian bank transfer gateways and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) when you complete a deposit or withdrawal, including transaction reference numbers and timestamps.
• Third-party identity verification services: Where hao88 uses a third-party KYC or document verification provider to assist with identity checks, that provider may return structured identity data to hao88 as part of the verification outcome.
• Publicly available sources: In limited circumstances related to fraud prevention or AML compliance, hao88 may cross-reference information you provide against publicly available databases or sanction screening lists.

hao88 processes your personal data for the following specific, documented purposes:

• Account creation and management: To register your account, verify your identity and age (21+ requirement), and maintain accurate records of your membership status and preferences.
• Transaction processing: To process deposits and withdrawals in IDR via your nominated Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), and to maintain a complete, accurate financial transaction history for your account.
• KYC and AML compliance: To verify your identity, confirm your age is 21 or above, validate your source of funds, and comply with applicable anti-money-laundering and counter-terrorism financing obligations.
• Platform operation and game integrity: To facilitate your access to all hao88 products including the sportsbook, live casino, and slots; to record all bets and game outcomes; and to detect and investigate suspected fraud, collusion, or prohibited conduct.
• Customer support: To respond to your queries, resolve disputes, process complaints, and maintain a record of all support interactions to ensure continuity and quality of service.
• Responsible gaming: To monitor your gaming activity for signs of problem gambling behavior, enforce self-exclusion requests and deposit limits you have set, and contact you if our responsible gaming monitoring tools flag a concern.
• Marketing communications: To send you promotional offers, bonus notifications, and information about new products or seasonal events — but only where you have given your explicit consent to receive such communications. You may withdraw this consent at any time through your account settings or by contacting support.
• Security and fraud prevention: To protect the integrity of the Platform, detect and prevent unauthorized account access, investigate suspicious activity, and cooperate with law enforcement or regulatory authorities where legally required.
• Platform improvement: To analyze aggregated, anonymized usage data to understand how Members interact with the Platform, identify areas for improvement, and develop new features and products.

hao88 will not process your personal data for any purpose that is incompatible with those listed above without first obtaining your explicit consent or establishing a new lawful basis for the processing.

hao88 processes your personal data on the following legal bases, depending on the specific processing activity involved:

hao88 does not sell your personal data. We share your data only in the limited circumstances described below, and only with parties who are contractually bound to handle your data in a manner consistent with this Privacy Policy.

• Payment processors and banking partners: We share the minimum necessary financial data with Indonesian bank transfer gateway operators and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process your deposits and withdrawals. These parties act as independent data controllers subject to their own privacy policies and applicable Indonesian financial regulations.
• KYC and identity verification providers: We may share identity documents and personal data with third-party KYC verification service providers for the sole purpose of verifying your identity and age. These providers are bound by strict data processing agreements and are not permitted to use your data for any other purpose.
• Game and platform technology providers: Our game studio partners (including Pragmatic Play, PG Soft, NetEnt, Microgaming, Spribe, and Evolution Gaming) and platform technology suppliers may receive anonymized or pseudonymized session data necessary to facilitate game play and resolve technical disputes. These providers do not receive your full identity or financial data.
• Responsible gaming and self-exclusion systems: Where you have enrolled in a self-exclusion program, hao88 may share relevant data with third-party responsible gaming databases to enforce cross-operator exclusion, where applicable.
• Law enforcement and regulatory authorities: hao88 will disclose personal data to law enforcement agencies, courts, or regulatory bodies when required to do so by a valid legal process, court order, or applicable law. Where permitted by law, we will notify the affected Member of such a disclosure request.
• Business transfers: In the event that hao88 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred to the successor entity as part of the transaction, subject to equivalent privacy protections being maintained.

hao88 uses cookies and similar technologies (including web beacons, pixel tags, and local storage) to operate the Platform, maintain session continuity, understand how Members use our services, and detect fraudulent activity. Cookies are small text files stored on your device when you visit the hao88 website.

You can manage cookie preferences through your browser settings. Most modern browsers allow you to block, delete, or restrict cookies on a per-site basis. Please note that disabling strictly necessary cookies will impair your ability to log in and use the hao88 Platform. hao88 does not use advertising or targeting cookies designed to track you across third-party websites.

hao88 retains personal data for the minimum period necessary to fulfill the purpose for which it was collected, while also accounting for any legal, regulatory, or contractual requirements that mandate longer retention periods.

• Active account data: Retained for the full duration of your account's active status on the Platform.
• Transaction and betting records: Retained for a minimum of five years from the date of each transaction, in accordance with standard financial record-keeping requirements applicable to international gambling operators.
• KYC documents: Retained for a minimum of five years from the date of submission or from the date of account closure, whichever is later, to satisfy AML compliance obligations.
• Customer support communications: Retained for three years from the date of the last support interaction, to enable dispute resolution and quality assurance.
• Marketing preferences and opt-in records: Retained for the duration of your account's active status, plus two years after account closure, to demonstrate compliance with consent-based marketing obligations.
• Technical and session data: Retained for up to 12 months from collection, after which it is anonymized or deleted.
• Closed account data: Following account closure, hao88 will retain a minimal set of data — including identity verification records, transaction summaries, and any AML-related documentation — for the periods specified above. All other personal data is deleted within 90 days of confirmed account closure.

hao88 implements a comprehensive suite of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. Our security program includes, but is not limited to:

• Transport layer security: All data exchanged between your browser and hao88 servers is encrypted using TLS 1.3, the current industry gold standard for web communications security.
• Database encryption: Personal data and financial records stored in hao88 databases are encrypted at rest using AES-256 encryption.
• Access controls: Internal access to personal data is governed by a strict role-based access control (RBAC) framework. Only personnel with a documented, operational need are granted access to Member data, and all access events are logged to an immutable audit trail.
• Two-factor authentication: hao88 supports and strongly encourages two-factor authentication (2FA) for all Member accounts. Internal administrative access to systems containing Member data requires 2FA as a mandatory control.
• Penetration testing: hao88's infrastructure undergoes regular penetration testing conducted by independent security professionals to identify and remediate vulnerabilities before they can be exploited.
• Intrusion detection and monitoring: Our systems are monitored 24/7 for anomalous activity using automated intrusion detection systems. Security alerts are triaged and investigated by our security operations team in real time.
• Staff training: All hao88 employees and contractors with access to Member data receive mandatory data protection and security awareness training upon onboarding and at regular intervals thereafter.

While hao88 takes all reasonable steps to protect your personal data, no internet-based system is completely immune to security risks. You also play an important role in keeping your data safe — please use a strong, unique password for your hao88 account, enable 2FA, and never share your login credentials with any other person.

As a Member of hao88, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with a clear description of your request and sufficient information to verify your identity. We will respond to all valid requests within 30 calendar days.

• Right of access: You have the right to request a copy of the personal data we hold about you, along with information about how and why we are processing it.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or supplement it without undue delay.
• Right to erasure ("right to be forgotten"): You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn your consent, or where you object to processing on the basis of legitimate interests and your interests override ours. This right is subject to our legal retention obligations.
• Right to restriction of processing: You have the right to request that we restrict processing of your personal data in certain circumstances — for example, while you contest the accuracy of data we hold, or while an objection to processing is being assessed.
• Right to data portability: Where processing is based on your consent or on performance of a contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing of your personal data that is based on hao88's legitimate interests, including profiling. You also have an unconditional right to object to processing of your data for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time by updating your preferences in Account Settings or by contacting our support team. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

hao88 strictly prohibits the use of its Platform by any individual under the age of 21. This age restriction is enforced both as a legal compliance matter and as a core component of our responsible gaming commitment. The collection and processing of personal data from individuals under 21 is neither intended nor permitted.

During the account registration process, all applicants are required to provide their date of birth. Before any withdrawal is processed, full KYC identity verification — including documentary proof of age — is mandatory for all Members. Where our KYC process reveals that a Member is under 21 years of age, hao88 will:

• Immediately close the Member's account without notice.
• Void any bets placed or games participated in by the underage individual.
• Return any real-money deposits to the original deposit channel after deducting applicable administration costs and any amounts derived from wagering activity.
• Securely delete any personal data associated with the underage account, with the exception of records required for legal and AML compliance purposes.

The hao88 Platform may contain references to or integrations with third-party services — including payment gateways, game providers, and analytics tools. While hao88 exercises care in selecting its third-party partners, we do not control the data practices of third parties and are not responsible for the privacy policies or data handling practices of any external service.

Specifically:

• Payment processors for Indonesian bank transfers and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja) operate under their own privacy policies and are subject to Indonesian financial services regulations.
• Game providers (Pragmatic Play, PG Soft, NetEnt, Microgaming, Spribe, Evolution Gaming, Habanero) may operate their own analytics or technical telemetry systems within their game environments. hao88's contractual agreements with these providers restrict their use of any Member-identifiable data.
• hao88's analytics infrastructure uses aggregated, anonymized data and does not transmit personally identifiable Member information to third-party analytics platforms.

We encourage you to review the privacy policies of any third-party service with which you interact through the hao88 Platform. hao88 accepts no liability for the data practices of external parties.

hao88 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data practices, updates to applicable law, or the introduction of new Platform features that involve the collection or use of personal data.

When material changes are made to this Policy — meaning changes that meaningfully affect your rights or the way we process your personal data — hao88 will notify active Members by:

• Sending an email notification to the registered email address on file, at least seven calendar days before the revised Policy takes effect.
• Displaying a prominent notice on the hao88 Platform upon your next login during the notification period.

Non-material changes (such as typographical corrections, clarifications that do not alter the substance of the Policy, or updates to contact information) may be made without prior notification, though the "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

Your continued use of the hao88 Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated Policy. If you do not agree with the revised Policy, you should cease using the Platform and request closure of your account.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way hao88 handles your personal data, please contact our Data Protection team using the details below. We are committed to addressing all privacy-related inquiries promptly and transparently.

When submitting a privacy request by email, please include your registered username or account email address, a clear description of your request (e.g., "access request", "deletion request", "rectification request"), and any supporting information that will help us locate and verify your records efficiently. We may ask for additional verification before processing sensitive requests such as data deletion or account closure.

hao88 takes all privacy complaints seriously. If you are not satisfied with our response to your privacy inquiry, you may escalate the matter in writing to our senior compliance team at the same email address with the subject line "Privacy Escalation — [Your Username]". We are committed to resolving all escalated complaints within 14 calendar days of receipt.