hiu88 Privacy Policy

SECTION 1 Introduction

hiu88 (referred to in this Privacy Policy as "hiu88", "we", "us", or "our") operates the online betting and gaming platform accessible at hiu88.bet. This Privacy Policy applies to all personal data processed in connection with the hiu88 platform, including data collected through the website, mobile interface, live chat system, email correspondence, and any other interaction between you and hiu88.

We are committed to handling your personal data with transparency, integrity, and care. This Privacy Policy is designed to give you a clear, honest account of our data practices — written in plain language rather than impenetrable legal boilerplate — while still meeting the formal requirements of applicable data protection standards.

This Privacy Policy forms part of the overall agreement between you and hiu88, alongside the Terms & Conditions and the Responsible Gaming Policy. By registering a hiu88 account or using the platform, you confirm that you have read and understood this Privacy Policy.

SECTION 2 Definitions

The following definitions apply throughout this Privacy Policy:

• "Personal Data" — any information that identifies or can reasonably be used to identify a living natural person, directly or in combination with other data.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion.
• "Member" / "User" / "you" — any individual who has registered a verified account on the hiu88 platform or who visits the hiu88 website.
• "Controller" — hiu88, as the entity that determines the purposes and means of processing your Personal Data.
• "Processor" — a third-party service provider that processes Personal Data on behalf of hiu88, under a binding data processing agreement.
• "Cookie" — a small text file placed on your device by the hiu88 platform to store session information, preferences, and analytics data.
• "KYC" — Know Your Customer identity verification procedures used to confirm a Member's identity, age, and payment account ownership.
• "IDR" — Indonesian Rupiah, the exclusive transaction currency of the hiu88 platform.

SECTION 3 Data We Collect

hiu88 collects only the personal data necessary to provide you with a secure, compliant, and functional gaming experience. The categories of data we collect are set out in the table below:

SECTION 4 How We Collect Your Data

hiu88 collects personal data through the following channels:

• Direct submission: Information you provide when registering an account, completing KYC verification, submitting a deposit or withdrawal request, contacting support via live chat, WhatsApp, or email, or participating in a promotion.
• Automated technical collection: Data gathered automatically when you interact with the hiu88 platform, including IP address, device identifiers, session cookies, and clickstream data. This collection occurs whether or not you are logged in to your account.
• Payment processors: Confirmation data returned by Indonesian bank systems (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) when you execute a deposit or withdrawal transaction.
• Identity verification services: Where hiu88 uses a third-party KYC or document verification provider, that provider may return a verification result and associated metadata to hiu88. Raw document images are handled according to the verification provider's own data processing agreement.
• Fraud and risk screening: hiu88 may receive flagging signals from anti-fraud and anti-money-laundering screening services that cross-reference account data against known risk databases.

SECTION 5 How We Use Your Data

hiu88 uses your personal data for the following purposes:

• Creating and managing your hiu88 member account, including verifying your identity and confirming you meet the 21+ age requirement.
• Processing deposits and withdrawals in IDR via your nominated Indonesian bank account or e-wallet.
• Detecting and preventing fraud, money laundering, multi-accounting, and other forms of prohibited conduct as defined in the hiu88 Terms & Conditions.
• Monitoring gameplay patterns as part of our responsible gaming obligations — including identifying signs of problem gambling behaviour and triggering proactive outreach where warranted.
• Calculating bonus eligibility and enforcing wagering requirements in accordance with active promotions.
• Providing customer support through live chat, WhatsApp, and email, including resolving disputes and responding to complaints.
• Sending transactional communications including deposit confirmations, withdrawal status updates, security alerts, and account notifications.
• Sending marketing communications about hiu88 promotions, seasonal offers (such as Idul Fitri, Ramadhan, and Imlek campaigns), and new product launches — only where you have given consent or where hiu88 has a legitimate interest, and only until you opt out.
• Analysing aggregate usage patterns to improve platform performance, game selection, and user experience.
• Meeting legal and regulatory obligations applicable to hiu88's operating jurisdiction.

SECTION 6 Legal Basis for Processing

hiu88 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil the hiu88 Terms & Conditions you accepted on registration — including account management, payment processing, and bonus administration.
• Legal obligation: Processing necessary to comply with applicable anti-money-laundering, counter-terrorism-financing, and KYC requirements imposed on hiu88 as a licensed gaming operator.
• Legitimate interests: Processing carried out to pursue hiu88's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and service improvement — where those interests are not overridden by your rights.
• Consent: Processing of your data for marketing communications and non-essential analytics cookies, which you may withdraw at any time without affecting the lawfulness of prior processing.

SECTION 7 Data Sharing & Disclosure

hiu88 does not sell, rent, or trade your personal data to third parties. Data is shared only in the following circumstances and only to the extent necessary:

• Payment processors: Your bank account details and transaction data are shared with the relevant Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) or e-wallet provider (OVO, DANA, GoPay, ShopeePay, LinkAja) solely to execute your deposit or withdrawal instruction.
• KYC and identity verification providers: Document images and identity data are shared with our contracted KYC service provider for the purpose of age and identity verification. These providers are bound by strict data processing agreements.
• Fraud and AML screening services: Transaction data and account metadata may be cross-referenced with third-party anti-fraud and anti-money-laundering databases to identify and prevent financial crime.
• Technology infrastructure providers: Cloud hosting, database management, and platform security services are delivered by contracted third-party infrastructure providers operating under binding data processing agreements with hiu88.
• Legal and regulatory authorities: hiu88 will disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction when required to do so by applicable law, a court order, or a legitimate regulatory demand. hiu88 will notify affected Members of such disclosure to the extent permitted by law.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or part of hiu88's business assets, your personal data may be transferred to the acquiring entity, which will be required to honour the terms of this Privacy Policy.

SECTION 8 Cookies & Tracking Technologies

hiu88 uses cookies and similar tracking technologies on the hiu88 platform. The following cookie categories are in use:

• Essential cookies: Required for the platform to function correctly. These include session authentication cookies, security tokens, and load-balancing identifiers. They cannot be disabled without breaking platform functionality.
• Functional cookies: Store your preferences such as preferred language, display settings, and last-used payment method to improve your experience on return visits.
• Analytics cookies: Used by hiu88's internal analytics tools to understand aggregate user behaviour — including page views, game session lengths, and navigation paths — to guide product improvements. Aggregate data only; no individual profiling.
• Security cookies: Support hiu88's fraud detection and account security systems by fingerprinting device characteristics and identifying anomalous login patterns.

You can manage your cookie preferences through your browser settings. Disabling essential cookies will impair or prevent your ability to log in and use the hiu88 platform. Disabling analytics or functional cookies will not affect your ability to play but may reduce the quality of personalised features.

SECTION 9 Data Retention

hiu88 retains your personal data for as long as your account remains active and for a defined period after account closure, as set out below:

• Active account data: Retained for the full duration of your membership plus a minimum of 5 years after account closure, to meet anti-money-laundering record-keeping obligations.
• KYC documents: Retained for a minimum of 5 years from the date of submission, in line with standard financial services compliance requirements.
• Transaction records: All deposit and withdrawal records in IDR are retained for a minimum of 5 years from the date of the transaction.
• Support communications: Live chat transcripts, email correspondence, and WhatsApp records are retained for 2 years from the date of the interaction, or longer if the communication relates to an ongoing dispute.
• Technical and usage logs: Server access logs and session data are retained for 12 months, after which they are anonymised or deleted.
• Marketing consent records: Records of your marketing consent (opt-in and opt-out events) are retained for the duration of your membership plus 2 years, to demonstrate compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Data that forms part of a regulatory inquiry, legal proceeding, or unresolved dispute will be retained until that matter is fully resolved, regardless of the standard retention period.

SECTION 10 Data Security

hiu88 implements a multi-layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures in place include:

• 256-bit SSL/TLS encryption for all data in transit between your device and hiu88 servers.
• AES-256 encryption for sensitive data stored at rest, including financial records and KYC documents.
• Role-based access controls ensuring that hiu88 staff can only access personal data relevant to their specific function and on a strict need-to-know basis.
• Full audit logging of all internal access to personal data, with regular review by the security team.
• Two-factor authentication requirements for all internal staff accounts with access to production data systems.
• Regular third-party penetration testing and vulnerability assessments of the hiu88 platform and infrastructure.
• Incident response procedures that mandate notification of affected Members within a reasonable timeframe in the event of a confirmed data breach involving their personal data.

While hiu88 takes all reasonable technical and organisational measures to protect your data, no online platform can guarantee absolute security. You are responsible for keeping your hiu88 login credentials confidential and for notifying hiu88 immediately if you suspect unauthorised access to your account.

SECTION 11 Your Data Rights

As a hiu88 Member, you have the following rights over your personal data. To exercise any of these rights, contact hiu88 support via live chat or email at support@hiu88.bet:

• Right of access: You may request a copy of all personal data that hiu88 holds about you. hiu88 will provide this within 30 days of receiving a verified request.
• Right to rectification: If any personal data held by hiu88 is inaccurate or incomplete, you may request that it be corrected. Account name changes may require re-submission of KYC documents.
• Right to erasure: You may request that hiu88 delete your personal data. This right is subject to legal retention obligations — hiu88 cannot delete transaction records or KYC documents that are required to be kept for regulatory compliance purposes.
• Right to data portability: You may request that hiu88 provide your personal data in a structured, commonly used, machine-readable format (e.g., CSV or JSON) so that you can transfer it to another service provider.
• Right to restrict processing: You may request that hiu88 restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed.
• Right to object: You may object to hiu88's processing of your personal data where that processing is based on legitimate interests, including profiling for marketing purposes. Your objection will be assessed against hiu88's compelling legitimate grounds.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

SECTION 12 International Data Transfers

hiu88 operates as an internationally licensed platform. Your personal data may be processed and stored on servers located outside Indonesia. Where data is transferred to countries that do not offer an equivalent level of data protection to that provided under the laws applicable to hiu88's primary jurisdiction, hiu88 ensures that appropriate safeguards are in place, including:

• Standard contractual clauses approved by a recognised data protection authority, incorporated into contracts with all third-party Processors handling data outside the primary jurisdiction.
• Binding corporate rules where data is transferred within a group of affiliated companies.
• Adequacy decisions where the destination country has been recognised as providing an adequate level of data protection.

Members in Indonesia should be aware that Indonesian data protection legislation (including UU PDP, the Personal Data Protection Law) may apply to hiu88's processing of Indonesian residents' data. hiu88 is committed to upholding the rights conferred upon Indonesian residents under applicable national data protection law.

SECTION 13 Children's Privacy

hiu88 is strictly an adults-only platform. You must be at least 21 years of age to register and use the hiu88 service. hiu88 does not knowingly collect, use, or retain personal data from individuals under the age of 21.

If hiu88 becomes aware that personal data has been collected from a person under 21 years of age — whether through a false declaration during registration or by any other means — hiu88 will immediately close the relevant account, void all associated balances, and securely delete the personal data collected, subject to any legal obligations to retain records of the underage access event.

If you are a parent or guardian and believe that a minor in your care has registered or attempted to register an hiu88 account, contact hiu88 support immediately via live chat or at support@hiu88.bet so that the matter can be resolved promptly.

SECTION 14 Policy Updates

hiu88 reviews this Privacy Policy periodically and will update it as necessary to reflect changes in our data practices, applicable law, or the services we offer. Where a change is material — meaning it affects your rights or our core data processing activities in a meaningful way — hiu88 will provide at least 7 calendar days' advance notice by posting a prominent notice on the platform and, where possible, by sending an email to your registered address.

The version of this Privacy Policy published at https://hiu88.bet/privacy-policy at any given time is the current, binding version. The "Last updated" date at the top of this document will be revised with each new version. Previous versions are available upon written request to hiu88 support.

Your continued use of the hiu88 platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy. If you do not agree with a material change, you have the right to close your account and withdraw any available balance before the change takes effect.

SECTION 15 Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about hiu88's data practices, please contact us through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week directly on the hiu88 platform. For privacy-related queries, select "Account & Privacy" as the query category so your request is routed to the appropriate team.
• WhatsApp: Available 08:00–24:00 WIB. Indonesian-speaking support agents are available for Members who prefer to discuss privacy matters in Bahasa Indonesia.
• Email: support@hiu88.bet — for formal privacy requests, use the subject line "Privacy Request — [your username]" to ensure prompt routing. Responses are provided within 4 hours during peak hours and within 24 hours at all other times.