hoki88 Privacy Policy

This Privacy Policy ("Policy") governs the collection, use, storage, and disclosure of personal data by hoki88 ("hoki88", "we", "us", "our") in connection with the operation of the online gaming and sports betting platform accessible at hoki88.cam ("Platform").

hoki88 is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. This Policy is intended to give you a clear and complete understanding of our data practices so that you can make informed decisions about your relationship with our Platform.

By registering an Account on hoki88 or by continuing to access the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to the terms of this Policy, you must not use the Platform.

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial data, IP address, and behavioural data collected through use of the Platform.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, or deletion.
• "Data Subject" means the individual to whom the Personal Data relates — in the context of this Policy, this is typically you as registered User of the Platform.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data. For the purposes of this Policy, hoki88 is the Data Controller.
• "Data Processor" means any third party that Processes Personal Data on behalf of hoki88, under hoki88's instructions and contractual oversight.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the Processing of your Personal Data for a stated purpose.
• "KYC" means Know Your Customer — the identity and age verification procedures required under anti-money-laundering and responsible gaming obligations.
• "Cookies" means small text files placed on your device by the Platform for the purposes of session management, preference storage, analytics, and fraud prevention.

hoki88 acts as the Data Controller in respect of all Personal Data collected through or in connection with the Platform. As Data Controller, hoki88 is responsible for determining the purposes for which, and the manner in which, your Personal Data is processed.

Where hoki88 engages third-party service providers — such as payment processors, KYC verification partners, and analytics providers — those parties act as Data Processors under binding contractual agreements that restrict their use of your data to the specific services they provide to hoki88. They are not permitted to use your Personal Data for their own independent purposes.

For any queries, concerns, or requests relating to how hoki88 handles your Personal Data, please contact our data protection team via the contact details provided in Section 15 of this Policy.

hoki88 collects the following categories of Personal Data in the course of operating the Platform:

hoki88 uses your Personal Data for the following purposes:

1. Account Registration and Management: To create and maintain your hoki88 Account, verify your identity and age (KYC), process your login credentials securely, and manage account settings and preferences.
2. Payment Processing: To facilitate deposits and withdrawals via your chosen payment method — including Touch'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, BTC, and USDT — and to maintain accurate financial records in MYR.
3. Platform Delivery: To provide access to the full range of gaming and sports betting services on the Platform, including live casino, slotsportsbook (Liga Super Malaysia, EPL, UFC), lottery, and arcade products.
4. Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, identity theft, and other financial crimes. This includes automated risk scoring, IP monitoring, and device fingerprinting.
5. Legal and Regulatory Compliance: To comply with applicable anti-money-laundering (AML), counter-terrorism financing (CTF), and know-your-customer (KYC) obligations, and to respond to lawful requests from regulatory or law enforcement authorities.
6. Responsible Gambling: To monitor usage patterns, identify signs of problem gambling behaviour, administer self-exclusion and deposit limit requests, and fulfil our duty of care to users.
7. Customer Support: To respond to your queries, complaints, and account-related requests via live chat, email, and other support channels, across English, Bahasa Melayu, and Mandarin.
8. Platform Improvement: To analyse aggregate usage data, identify technical issues, and improve the performance, features, and user experience of the Platform.
9. Marketing Communications (with consent): Where you have opted in, to send you promotional materials, bonus offers, and Platform updates via email or SMS. You may withdraw this consent at any time via your account settings or by contacting support.

hoki88 processes your Personal Data one or more of the following legal bases:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and hoki88 — specifically, the Terms and Conditions governing your Account. This covers identity verification, payment processing, and Platform delivery.
• Legal Obligation: Processing is required to comply with applicable laws, including AML regulations, KYC requirements, and responses to lawful regulatory or judicial requests.
• Legitimate Interests: Processing is in the legitimate interests of hoki88 and does not override your fundamental rights. This covers fraud prevention, platform security monitoring, and internal analytics.
• Consent: Where processing is based on your consent — primarily direct marketing communications — you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted before withdrawal.

hoki88 does not sell, rent, or trade your Personal Data to any third party for their own marketing purposes. Personal Data is shared with third parties only to the extent necessary and in the following circumstances:

• Payment Processors: Your financial transaction data is shared with the relevant payment service providers (including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX operators, Malaysian banks, and cryptocurrency processing partners) solely for the purpose of completing your deposit or withdrawal transaction.
• KYC and Identity Verification Partners: Your identity documentation (MyKad, selfie) is processed by our contracted identity verification service provider. This provider acts as a Data Processor under binding data processing agreements and is not permitted to retain or use your data beyond the scope of their verification service.
• Fraud Prevention and Risk Management Providers: Technical data (IP address, device information, session data) may be shared with fraud detection service providers to identify and prevent unauthorised access, multi-accounting, and financial crime.
• Analytics Providers: Anonymised or pseudonymised usage data may be shared with analytics platforms to help us understand Platform performance and user behaviour patterns.
• Regulatory and Law Enforcement Authorities: Where required by applicable law or pursuant to a valid court order or regulatory demand, hoki88 will disclose relevant Personal Data to the appropriate authority. hoki88 will notify you of such a request where it is legally permitted to do so.
• Professional Advisers: hoki88's legal, audit, and financial advisers may access Personal Data where strictly necessary in connection with their professional advisory services, under obligations of professional confidentiality.

All third-party Data Processors engaged by hoki88 are subject to contractual obligations that require them to implement appropriate technical and organisational security measures and to process your Personal Data only for the specific purposes authorised by hoki88.

hoki88 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device that enable the Platform to recognise you across sessions, maintain security, and personalise your experience.

The following categories of cookies are used on the hoki88 Platform:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies, security tokens, and anti-fraud identifiers. These cannot be disabled without impairing core Platform functionality.
• Functional Cookies: Used to remember your preferences, such as language settings, odds format, and display preferences. These improve your experience but are not essential to Platform operation.
• Analytics Cookies: Used to collect anonymised data about how users interact with the Platform, such as pages visited, session duration, and navigation paths. This data informs Platform development decisions.
• Security and Fraud Prevention Cookies: Used in combination with device fingerprinting to detect and prevent multi-accounting, bot activity, and fraudulent login attempts.

You may configure your browser to refuse cookies or to alert you when cookies are being set. Note that disabling certain cookies may affect the functionality of the Platform. hoki88 does not currently support a cookie preference centre on the Platform; if you wish to discuss cookie usage, please contact our support team.

hoki88 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account Data: Retained for the duration of your Account and for a period of at least 5 years following Account closure, in accordance with AML record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of 6 years from the date of the transaction, in accordance with financial record-keeping requirements applicable to gaming operators.
• KYC Documentation: Retained for a minimum of 5 years from the date of verification or from Account closure, whichever is later.
• Customer Support Communications: Retained for a period of 2 years from the date of the most recent interaction, unless a longer retention period is required for dispute resolution or legal proceedings.
• Technical and Usage Data (Logs): Retained for up to 24 months in identifiable form, after which it is anonymised for aggregate analytics purposes.
• Marketing Consent Records: Retained for as long as you remain an active subscriber, and for 3 years from the date of withdrawal of consent.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised in accordance with our internal data lifecycle management procedures.

hoki88 implements a comprehensive set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in Transit: All data transmitted between your device and the Platform is encrypted using256-bit SSL/TLS protocols. This applies to all sessions, including login, deposit, withdrawal, and support communications.
• Encryption at Rest: Sensitive Personal Data and financial records stored in hoki88's systems are encrypted at rest using industry-standard encryption standards.
• Access Controls: Access to Personal Data within hoki88's internal systems is restricted to authorised personnel on a need-to-know basis. Role-based access controls and audit logging are in place across all data systems.
• Two-Factor Authentication: hoki88 provides and strongly recommends two-factor authentication (2FA) for all registered Accounts. 2FA is required for certain high-risk actions including large withdrawal requests.
• Intrusion Detection and Monitoring: hoki88 operates real-time monitoring systems to detect unusual activity, potential breaches, and unauthorised access attempts. Security incidents are triaged and escalated in accordance with a documented incident response procedure.
• Penetration Testing: hoki88 conducts periodic security assessments and penetration testing of its Platform infrastructure to identify and remediate vulnerabilities proactively.

While hoki88 takes all reasonable steps to protect your Personal Data, no system is completely immune to security threats. In the event of a data security incident that poses a risk to your rights and freedoms, hoki88 will notify affected users in accordance with applicable data breach notification requirements.

As a Data Subject, you have the following rights in relation to your Personal Data held by hoki88. To exercise any of these rights, please contact our support team using the details provided in Section 15. hoki88 will respond to all valid requests within a reasonable timeframe and, where legally required, within 30 calendar days of receipt.

Please note that certain rights are subject to limitations — for example, the right of erasure cannot override hoki88's legal obligation to retain financial and KYC records for regulatory compliance purposes. Where hoki88 is unable to fulfil a request in full, we will explain the reason clearly.

The hoki88 Platform is strictly for individuals aged21 years and above. hoki88 does not knowingly collect Personal Data from any person under the age of 21. If you are under 21, you are not permitted to register an Account or use the Platform, and you must cease accessing the Platform immediately.

Age verification is enforced as part of the KYC process required before any withdrawal is processed. If hoki88 becomes aware that Personal Data has been collected from a person under the age of 21, that Account will be immediately suspended, all associated Personal Data will be deleted without undue delay, and any Account balance will be handled in accordance with our Terms and Conditions.

Parents or guardians who believe a minor has registered on the Platform should contact our support team immediately via live chat or at the email address provided in Section 15.

In the course of operating the Platform, Personal Data may be transferred to, stored, or processed in countries other than Malaysia. This may occur in connection with our use of cloud hosting infrastructure, payment processors, KYC verification providers, and other third-party service providers whose servers may be located in other jurisdictions.

Where Personal Data is transferred outside Malaysia, hoki88 takes reasonable steps to ensure that appropriate safeguards are in place to protect the security and integrity of that data, and that the receiving entity is bound by contractual obligations equivalent to those applicable within Malaysia.

By using the Platform and providing your Personal Data, you acknowledge and consent to such transfers, where necessary for the provision of the Platform services.

hoki88 reserves the right to update or amend this Privacy Policy at any time. Any material changes to this Policy will be communicated to registered users via email notification and/or by displaying a prominent notice on the Platform prior to the changes taking effect.

The "Last Updated" date at the top of this page will be revised whenever changes are made. We encourage you to review this Policy periodically to remain informed of how hoki88 protects your Personal Data. Your continued use of the Platform following notification of an update constitutes acceptance of the revised Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the handling of your Personal Data by hoki88, please contact our data protection and support team through the following channels:

• Live Chat: Available via the Platform from8am to 2am MYT daily, with emergency support available overnight. Average first response time is under 3 minutes. This is the fastest channel for urgent data-related queries.
• Email: Contact our team at [email protected] (displayed as plain text — not a clickable link). Data and privacy requests submitted by email are acknowledged within 1 business day and resolved within 30 calendar days.
• Languages: Support for privacy and data queries is available in English, Bahasa Melayu, and Mandarin Chinese.

When submitting a data rights request, please provide your registered username and the email address associated with your Account so that we can verify your identity before processing the request. This verification step is required to protect your data from unauthorised access by third parties.