Hoki108 Privacy Policy – Personal Data Protection & Information Security for Malaysian Players

This Privacy Policy ("Policy") describes how hoki108 ("we", "platform", "company") collects, uses, stores, protects, and discloses your personal information when you use our online casino platform at hoki108.bet. This document also outlines your rights regarding the personal data we hold about you.

Hoki108 is fully committed to protecting the privacy of every Malaysian player on our platform. We understand that your trust in us depends not only on the quality of the games we offer, but also on how responsibly and with integrity we handle your most sensitive information.

By registering, accessing, or using any hoki108 service, you agree to the collection and use of your information as described in this Privacy Policy. If you do not agree with any part of this policy, you should not use our platform.

This policy applies to all hoki108 platform users regardless of geographic location, access method (web browser or mobile app) or type of service used.

Hoki108 collects various types of personal data necessary to provide Malaysian players with a safe, fair, and responsible online casino experience. Below are the main categories of data we collect:

Hoki108 does not collect special categories of sensitive data such as medical data, biometric data (unless required for specific identity verification), or data relating to religious beliefs, political views or sexual orientation.

Hoki108 collects your personal data through several key channels. Understanding these channels helps you better appreciate what type of data we hold about you:

• Account Registration: When you register a new account at hoki108, you provide us directly with your name, phone number, email address, date of birth, and password.
• Identity Verification (KYC): To comply with anti-money laundering (AML) and responsible gambling requirements, hoki108 may request identity verification documents such as a Malaysian identity card or passport. Images of these documents are processed and stored securely.
• Financial Transactions: When you make a deposit using Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow or FPX (Maybank2u, CIMB Clicks), the relevant transaction details are recorded by our system for accounting and security verification purposes.
• Gaming Activity: hoki108's system automatically records all your gaming activity, including games played, bet amounts, outcomes and session duration, for game integrity and responsible gaming purposes.
• Cookies & Tracking Technologies: The hoki108 platform uses cookies and similar tracking technologies to collect technical and usage data. See Section 7 for further details on our cookie policy.
• Customer Support Interactions: When you contact the hoki108 support team via LiveChat, email or WhatsApp, the information you provide and the conversation records are retained for issue resolution and service improvement purposes.
• Trusted Third Parties: In certain cases, hoki108 may receive additional information from third-party identity verification service providers or fraud prevention agencies for security purposes.

Hoki108 uses the personal data we collect for lawful and transparent purposes. Every use of your data has a clear legal basis under Malaysia's PDPA:

• Service Provision: To create and manage your account, process deposits and withdrawals, ensure winnings are paid accurately and provide access to all games on the hoki108 platform.
• Identity Verification & Fraud Prevention: To verify your identity during registration and the KYC process, and to detect and prevent fraudulent activity, money laundering or platform abuse.
• Regulatory Compliance: To fulfil hoki108's legal obligations under anti-money laundering (AML) laws, licensing regulatory requirements, and applicable responsible gaming regulations.
• Platform Security: To monitor suspicious activity, protect game integrity and ensure the wellbeing of all players at hoki108.
• Service Improvement: To analyze aggregated platform usage patterns for the purpose of improving the interface, adding new games, and optimizing the overall player experience.
• Service Communications: To send important notices related to your account, such as deposit confirmations, security alerts, policy updates and transaction information.
• Marketing Communications (with consent): To send information about hoki108 promotions, bonuses, new games, and exclusive offers — only to players who have consented to receive such communications.
• Responsible Gaming: To monitor gaming patterns and, where necessary, reach out to players showing signs of gaming behaviour that may require attention in the interest of their wellbeing.

Hoki108 understands the importance of keeping your data confidential. We do not sell or disclose your personal data to third parties for their own commercial purposes. However, there are specific situations where hoki108 needs to share your data with trusted parties to keep our platform running properly:

• Payment Service Providers: To process your deposits and withdrawals via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay and FPX, the necessary transaction details are shared with the relevant e-wallet providers and financial institutions. This processing is subject to each provider's own privacy policy.
• Game Software Providers: Third-party game providers that supply games for the hoki108 platform may receive technical data necessary to ensure games function correctly and that game outcomes are legitimate.
• Identity Verification Service Providers: For KYC and fraud prevention purposes, certain identity data may be shared with third-party verification services operating under strict confidentiality agreements with hoki108.
• Legal Authorities: hoki108 is legally obligated to disclose information to the relevant authorities — such as regulatory bodies, law enforcement agencies or courts — when lawfully required to do so. We will notify you of any such disclosure where we are permitted to.
• Professional Advisors: Lawyers, accountants, and security consultants engaged by hoki108 may have access to data necessary for carrying out their professional duties, subject to strict professional confidentiality obligations.

All third parties that receive personal data from hoki108 are required to uphold data protection standards equivalent to or higher than our own. hoki108 conducts periodic due diligence reviews of third-party providers to ensure their ongoing compliance.

Hoki108 invests seriously in a comprehensive data security infrastructure to protect your personal information from unauthorised access, loss, alteration, or improper disclosure.

The key technical and organisational security measures we employ include:

• 256-bit SSL/TLS Encryption: All communications between your device and hoki108 servers are encrypted using 256-bit SSL/TLS protocols. This means all transmitted data — including login credentials, financial transactions, and game data — cannot be read by third parties.
• Data Encryption at Rest: Sensitive data stored on hoki108's servers — including identity information and financial data — is encrypted using current industry encryption standards while at rest.
• Strict Access Controls: Only hoki108 staff with a legitimate business need who have undergone rigorous background checks are permitted to access players' personal data. Access is granted on a least-privilege basis.
• 24/7 Security Monitoring: An automated security monitoring system operates around the clock to detect any unauthorised access attempts or suspicious activity involving player data.
• Regular Security Audits: hoki108 conducts regular penetration testing and security audits carried out by independent third-party cybersecurity firms to identify and address any system vulnerabilities.
• PCI DSS Compliance: Payment data processing at hoki108 complies with the Payment Card Industry Data Security Standard (PCI DSS) to safeguard your financial information.

The hoki108 platform uses cookies and similar tracking technologies to enhance your experience, maintain session security, and understand how players use our platform. The following are the types of cookies we use:

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect the overall functionality of the hoki108 platform.

As a hoki108 player based in Malaysia, you have specific rights regarding your personal data under the Personal Data Protection Act 2010 (PDPA). hoki108 fully respects and facilitates the exercise of these rights:

Hoki108 retains your personal data only for as long as necessary for the purposes set out in this Privacy Policy, or as required by applicable laws and regulatory obligations.

• Active Account Data: For as long as your hoki108 account remains active, we retain all account information, identity data and associated transaction records.
• After Account Closure: When your account is closed — whether at your own request or by hoki108 — we retain the necessary records for legal compliance, dispute resolution, and fraud prevention purposes for a minimum of five (5) years in accordance with AML and gambling regulatory requirements.
• Financial Transaction Records: Retained for a minimum of seven (7) years in accordance with Malaysia's accounting and tax legal requirements.
• Support Communication Data: Customer support chat records and emails are retained for three (3) years from the date of the last interaction.
• Aggregated Analytics Data: Anonymized and aggregated data (which cannot be attributed to any specific individual) may be retained indefinitely for platform improvement purposes.

Once the retention period expires, hoki108 will securely delete or anonymize your data using industry-validated data destruction methods. You may request early deletion — subject to our legal obligations — by contacting the hoki108 Data Protection Officer.

Hoki108 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other operational needs. We are committed to notifying you of any material changes that affect how we process your personal data.

When we make material changes to this Privacy Policy, we will:

• Sending an email notice to the address registered with your hoki108 account at least 14 days before the changes take effect.
• Displaying a prominent notice on the hoki108 platform homepage for an appropriate period.
• Updating the "Last Updated" date at the top of this document.

For non-material changes — such as correcting typographical errors, providing clearer explanations of existing practices, or adding information that does not substantively alter the policy — we may not send a separate notice but will update this document on the platform.

Your continued use of the hoki108 platform after any Privacy Policy amendments take effect constitutes your acceptance of the revised Policy. We encourage you to review this Privacy Policy periodically.

If you have any questions, concerns, or requests relating to this Privacy Policy or how hoki108 handles your personal data, please contact our Data Protection Officer (DPO) through the following channels:

Hoki108 is committed to responding to all privacy-related requests and complaints within 14 business days from the date of receipt. For requests requiring further investigation, we will keep you informed of progress within the same timeframe.