hoki7 Privacy Policy

Who We Are

hoki7 is an internationally licensed online gaming platform operating at hoki7.vip. For the purposes of this Policy, hoki7 is the data controller — meaning we determine why and how your personal data is processed. hoki7 serves English-preference players across Indonesia, offering sports betting, live casino games, slots, crash games, and related gaming services, all denominated in Indonesian Rupiah (IDR / Rp).

Our designated data protection contact can be reached at [email protected]. For the fastest response, use the live chat option within your account dashboard.

Data We Collect

hoki7 collects the minimum personal data necessary to deliver a secure, compliant, and personalised gaming experience. The categories of data we collect are described below:

2.1 Identity & Contact Data

Full legal name, date of birth, gender, residential address, email address, and phone number. This data is collected at account registration and updated during KYC verification.

2.2 Account & Authentication Data

Username, hashed password, two-factor authentication (2FA) settings, login timestamps, IP addresses used during session initiation, and device fingerprint data.

2.3 Financial & Transaction Data

Bank account numbers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit amounts, withdrawal requests, transaction timestamps, and running balance records. We do not store full card numbers or CVV codes.

2.4 Identity Verification (KYC) Documents

Copies of government-issued photo identification (KTP, SIM, or passport), proof-of-address documents (utility bills or bank statements dated within three months), and selfie photographs where requested for liveness verification.

2.5 Gaming & Behavioural Data

Game session logs, bet amounts, wagering history, win/loss records, bonus activity, responsible gaming tool usage (deposit limits, cool-off periods, self-exclusion requests), and session duration data.

2.6 Technical & Device Data

IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, referring URL, clickstream data, and session cookies. This data is collected automatically via server logs and analytics tools.

2.7 Communications Data

Records of live chat conversations, support ticket content, email correspondence, and any other written communication you initiate with hoki7 customer support or compliance teams.

2.8 Marketing Preferences

Your opt-in or opt-out status for promotional communications, preferred contact channel, and records of promotional materials delivered to you and your engagement with them.

How We Collect Your Data

hoki7 collects personal data through the following channels:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to a survey or promotion.
• Automatically: When you access or use the Platform, our servers automatically log technical and device data, session activity, and interaction patterns.
• From third-party payment processors: When you initiate a deposit or withdrawal, the relevant bank or e-wallet provider (BCA, BRI, OVO, GoPay, etc.) transmits transaction confirmation data to hoki7 for account crediting and reconciliation purposes.
• From identity verification partners: Where hoki7 uses third-party KYC service providers to assist with document authentication and liveness checks, those providers return a verification result and confidence score to hoki7. The underlying document images may also be temporarily processed by the KYC partner.
• From fraud prevention and risk services: hoki7 may receive device reputation scores, IP risk signals, and behavioural anomaly flags from third-party fraud detection platforms to protect both Players and the integrity of the Platform.

Legal Basis for Processing

hoki7 processes personal data on one or more of the following legal grounds, depending on the specific processing activity:

How We Use Your Data

hoki7 uses the personal data it collects for the following specific purposes:

• Account Management: Creating, maintaining, and securing your hoki7 account, including authentication, password resets, and session management.
• KYC & Compliance: Verifying your identity and age (21+ requirement), screening against sanctions lists and politically exposed person (PEP) databases, and fulfilling our obligations under applicable anti-money laundering regulations.
• Payment Processing: Processing deposits and withdrawals via your chosen Indonesian payment method, reconciling transactions, and maintaining accurate balance records.
• Game Delivery: Logging game sessions, recording bet outcomes, applying bonus credits, enforcing wagering requirements, and resolving any game disputes or malfunction claims.
• Customer Support: Responding to your queries, resolving complaints, and maintaining records of our communications for quality assurance and dispute resolution purposes.
• Responsible Gaming: Monitoring gaming patterns to identify potential signs of problem gambling, applying deposit limits or cool-off periods you have set, and enforcing self-exclusion requests.
• Fraud & Security: Detecting, investigating, and preventing fraudulent activity, multi-accounting, bonus abuse, money laundering, and unauthorised access to your account.
• Analytics & Product Improvement: Analysing aggregated usage patterns to improve the Platform's performance, game selection, and user experience. Aggregated analytics do not identify individual Players.
• Marketing Communications: Sending you personalised promotional offers, bonus notifications, and Platform updates — but only where you have opted in or where hoki7 has a legitimate interest in contacting existing Players about directly related services. You may opt out at any time.
• Legal & Regulatory: Complying with court orders, regulatory requests, audit requirements, and other legally mandated disclosures.

Data Sharing & Disclosure

hoki7 does not sell, rent, or trade your personal data. We share data only in the following limited and controlled circumstances:

6.1 Service Providers (Data Processors)

hoki7 engages carefully selected third-party service providers who process personal data on our behalf and under our instruction. These include payment gateway operators, KYC verification platforms, cloud hosting providers, fraud detection services, and customer support software vendors. All processors are bound by data processing agreements that restrict their use of your data to the specified purpose only.

6.2 Game Content Providers

Live casino and RNG game studios — including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Pocket Games Soft — may receive anonymised session identifiers and bet data to facilitate game delivery and dispute resolution. These studios do not receive your full identity data.

6.3 Financial Institutions

When processing deposits and withdrawals, hoki7 necessarily shares transaction data with the relevant Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) or e-wallet provider (OVO, DANA, GoPay, ShopeePay, LinkAja) to complete the payment instruction. This sharing is inherent to the payment process and governed by the financial institution's own privacy terms.

6.4 Legal & Regulatory Disclosures

hoki7 may disclose personal data to law enforcement agencies, regulatory bodies, or courts when required by applicable law, a valid legal order, or our international gaming licence obligations. We will notify affected Players of such disclosures where legally permitted to do so.

6.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of hoki7's business, personal data held by hoki7 may be transferred to the acquiring entity. hoki7 will notify affected Players of any such transfer and the acquirer will be required to honour the commitments in this Policy.

6.6 With Your Consent

hoki7 may share your data with third parties not described above where you have given explicit, informed consent for a specific sharing activity. You may withdraw that consent at any time by contacting support.

International Data Transfers

hoki7 operates as an internationally licensed platform, and some of the service providers we engage — including cloud infrastructure providers and game studio partners — may process your data in jurisdictions outside Indonesia. Where such international transfers occur, hoki7 ensures that appropriate safeguards are in place, including:

• Standard contractual clauses (SCCs) or equivalent data transfer mechanisms in contracts with processors located in jurisdictions that do not have an adequacy decision;
• Binding corporate rules or equivalent commitments within group entities;
• Transfer to jurisdictions that maintain internationally recognised data protection standards comparable to those applied by hoki7.

By using hoki7, you acknowledge that your data may be processed outside Indonesia. If you wish to obtain further information about the safeguards applied to any specific international transfer, contact our data protection team at [email protected].

Cookies & Tracking Technologies

hoki7 uses cookies and similar tracking technologies to ensure the Platform functions correctly, to maintain your session security, and to understand how Players interact with our services. The types of cookies we use are described below:

hoki7 does not use third-party advertising cookies or retargeting pixels. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair the Platform's functionality. For detailed browser-level cookie controls, refer to your browser's help documentation.

Data Security

hoki7 applies a layered, defence-in-depth approach to protecting the personal data it holds. Our technical and organisational security measures include:

• Encryption in Transit: All data exchanged between your device and hoki7 servers is encrypted using TLS 1.3 with 256-bit AES cipher suites. HTTP connections are automatically redirected to HTTPS.
• Encryption at Rest: Sensitive fields in hoki7's databases — including identity document records, payment method identifiers, and KYC document images — are encrypted at rest using AES-256.
• Password Hashing: Passwords are never stored in plain text. hoki7 uses a modern adaptive hashing algorithm (bcrypt with a high cost factor) to store password credentials.
• Access Controls: Access to production systems and personal data is restricted to authorised hoki7 personnel on a strict need-to-know basis, enforced via role-based access control (RBAC) and multi-factor authentication (MFA).
• Intrusion Detection: hoki7's infrastructure is monitored continuously by intrusion detection and prevention systems (IDPS). Anomalous access patterns trigger automated alerts and human review.
• Penetration Testing: hoki7 engages independent security firms to conduct regular penetration testing and vulnerability assessments of the Platform.
• Data Breach Response: In the event of a confirmed personal data breach that presents a risk to affected Players, hoki7 will notify impacted individuals without undue delay, consistent with applicable notification requirements.

While hoki7 takes all reasonable steps to protect your data, no system is entirely immune to security threats. You are responsible for maintaining the security of your own account credentials and device.

Data Retention

hoki7 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

Once the applicable retention period has expired and there is no overriding legal basis for continued storage, hoki7 will securely delete or anonymise the relevant personal data.

Your Data Subject Rights

As a data subject, you hold the following rights in respect of the personal data hoki7 processes about you. You may exercise any of these rights by contacting our data protection team via live chat or at [email protected]. hoki7 will respond to all verifiable requests within 30 days.

Minors

hoki7 strictly prohibits access to its Platform by anyone under the age of 21. hoki7 does not knowingly collect personal data from individuals under 21 years of age. Age verification is a mandatory step of the KYC process, and accounts found to belong to individuals under 21 will be immediately closed and any balances returned.

If you are a parent or guardian and believe that a minor has gained access to hoki7 and submitted personal data, please contact our support team immediately at [email protected]. We will investigate and delete any data associated with the underage account without delay.

21+ Only. Play Responsibly.

Third-Party Links & Services

The hoki7 Platform may integrate with third-party game studios and payment providers whose services have their own privacy policies. hoki7 is not responsible for the data practices of these third parties. When interacting with a third-party game interface or payment gateway embedded within hoki7, you may also be subject to that third party's terms and privacy notice.

hoki7 does not include outbound links to third-party websites unrelated to gaming delivery or payment processing. Any external services referenced in promotional content are accessed at your own discretion.

Changes to This Policy

hoki7 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or operational requirements. Where changes are material — such as a new category of data collection or a new sharing arrangement — we will notify registered Players via the Platform dashboard or by email at least seven (7) days before the change takes effect.

The "Last Updated" date at the top of this page will always reflect the most recent revision. We encourage you to review this Policy periodically. Continued use of hoki7 after the effective date of any revision constitutes your acceptance of the updated Policy.

Contact & Complaints

For any questions, requests, or concerns relating to this Privacy Policy or the way hoki7 processes your personal data, please use the following contact options:

• Live Chat: Available 24/7 from your hoki7 account dashboard — the fastest channel for data subject requests and urgent privacy concerns.
• Email: [email protected] — for formal written requests, document submissions, and data subject rights exercises. Include "Privacy Request — [Your Username]" in the subject line. We will acknowledge your request within 48 hours and provide a substantive response within 30 days.

If you are not satisfied with hoki7's response to a privacy complaint, you have the right to escalate the matter to the supervisory authority responsible for data protection in the jurisdiction where hoki7 holds its international gaming licence, or to the relevant authority in your own country of residence.