HokiBet Privacy Policy – Malaysian Member Personal Data Protection

1 Introduction

HokiBet ("we", "Platform", "company") respects the privacy of every user and member who uses our services. This Privacy Policy clearly explains how we collect, use, store, disclose, and protect your personal information when you access or use the HokiBet website, mobile app, and all related services.

We take every responsibility relating to your personal data seriously. All data processing activities are carried out in accordance with internationally recognised data protection principles — including data minimisation, clear purpose, limited retention, and robust security.

This policy applies to all individuals who register an account, visit our website, use the HokiBet mobile app, or interact with any of our online services. If you do not agree with any provision of this policy, please discontinue use of our platform.

2 Data We Collect

HokiBet only collects personal data that is strictly necessary to provide you with a safe, seamless, and quality service. The following are the categories of data we collect:

2.1 Information You Provide Directly

• Full name as shown on your official identification document.
• Date of birth for age limit verification.
• Active email address and mobile phone number.
• Current residential address for verification and compliance purposes.
• Bank account or digital wallet information for processing deposits and withdrawals.
• Identity documents such as MyKad or passport for the KYC process.
• Any other information you provide when contacting our support team.

2.2 Information Collected Automatically

• Your device's IP address and approximate location information.
• Browser type, operating system, and device information.
• Activity log data including dates, times, and pages visited.
• Game session data including wagers, wins, and play duration.
• Complete financial transaction records for every deposit and withdrawal.

2.3 Data from Trusted Third Parties

• Identity verification information from third-party KYC services we use.
• Payment processing data from payment gateway providers integrated with our platform.
• Legally available public information for anti-money laundering (AML) compliance purposes.

3 How We Use Your Data

Collected data is used solely for the stated purposes and will not be used for any other purpose without your notification or consent. Below is a summary table of data usage:

Hokibet does not use your data to make automated decisions that could significantly affect you without human intervention. Any material decisions involving your account will be reviewed by our qualified staff.

4 Data Sharing with Third Parties

Hokibet does not share, sell, or disclose your personal data to third parties except in the following limited and controlled situations:

• Contracted service providers: Companies that assist us in running operations, such as payment gateway providers, KYC services, server service providers, and technical support. All such parties are bound by strict confidentiality agreements.
• Regulatory authority: When required by law, court order, or directive from a competent authority for investigation or regulatory compliance purposes.
• Fraud prevention: Limited sharing with fraud prevention agencies and industry security monitoring networks to protect the platform and all members.
• Business transfer: In the event of a merger, acquisition, or asset transfer, data may be transferred to a new entity provided that equivalent privacy policy standards are maintained.

5 Data Storage & Security

The security of your personal data is hokibet's highest priority. We implement multiple layers of technical and organisational protection to ensure your data remains safe from unauthorised access, loss, or misuse at all times.

Technical Security Measures

• 256-bit SSL/TLS encryption for all data transmitted over the network.
• AES-256 encryption for data stored in our databases.
• Multi-layer firewall and intrusion detection & prevention systems (IDS/IPS).
• Two-factor authentication (2FA) for staff access to internal systems.
• Regular security audits conducted by independent and qualified third parties.
• Automated backup systems with tested disaster recovery.

Data Retention Period

HokiBet retains your personal data for as long as necessary to fulfil the purpose of collection or as required by law. Generally:

• Active account data is retained for the duration the account remains active plus 5 years after account closure.
• Financial transaction records are retained for a minimum of 7 years for AML compliance purposes.
• Customer support communication logs are retained for 3 years.
• Cookie and session data expires automatically according to the configured settings.

6 Cookies & Tracking Technologies

HokiBet uses cookies and similar tracking technologies to enhance the user experience, ensure session security, and gather analytical information that helps us continuously improve the platform.

Types of Cookies Used

• Essential Cookies: Required for core platform functions such as login verification, session security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collects anonymous information about how you use the platform to help us identify and fix technical issues.
• Functional Cookies: Stores your preferences such as display settings and favourite game selections to enhance your experience.
• Analytical Cookies: Helps us understand platform usage patterns in aggregate for continuous improvement purposes.

You can manage or disable cookies through your browser settings at any time. Please note that disabling essential cookies may affect your ability to log in or use certain platform features.

7 Your Rights as a Data Subject

HokiBet recognises and respects your rights over your personal data. Below are the rights you hold and how to exercise them:

To exercise any of the above rights, please contact our data protection team via Live Chat or support email. We will process your request within 30 days of receipt. For complex cases, this period may be extended up to 60 days with notification to you.

8 Children's Data

The hokibet platform is strictly for individuals aged 18 and above. We do not intentionally collect or process personal data from any individual under the age of 18.

If we determine that a child's personal data has been collected without proper age verification, we will take immediate steps to delete the data and close the account in question. Parents or guardians who have reason to believe their child has registered on our platform are encouraged to contact us promptly.

9 Third-Party Links

The hokibet platform may contain links or references to third-party websites or services in certain contexts. This Privacy Policy applies only to the hokibet platform and does not cover the privacy practices of external websites or services you may access.

Hokibet is not responsible for the content, privacy policies, or security practices of any third-party websites. We encourage you to read and understand the privacy policy of each website you visit separately.

10 Privacy Policy Amendments

HokiBet reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or improvements to our data protection measures.

Any amendments made will be published on this page along with an updated "Last Updated" date. For changes deemed material or significant, we will notify you via in-platform notification or registered email at least 14 days before the amendment takes effect.

Your continued use of the hokibet platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with the amendments, you have the right to close your account in accordance with the established procedure.

11 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, hokibet's Data Protection Officer (DPO) team is ready to assist you.

You can reach us through the following methods:

• Live Chat: Available 24/7 via the chat icon at the bottom corner of the platform.
• Email: [email protected] — we respond within 1–2 business days.
• FAQ: For general enquiries, please visit the FAQ us.

We are committed to addressing every privacy-related query and complaint seriously and within a reasonable timeframe. Your satisfaction and trust are our top priority.