hiu77 Privacy Policy

Introduction

hiu77 ("we", "us", "our", or "the Platform") operates the online gaming platform accessible at hiu77.vu. As a platform serving Indonesia's English-preference gaming community, hiu77 processes personal data belonging to members located primarily in Indonesia and handles that data responsibly, transparently, and in accordance with internationally recognised data protection principles.

This Privacy Policy applies to all personal data we collect when you visit hiu77.vu, register an Account, make a deposit or withdrawal, participate in any game or promotion, contact our support team, or otherwise interact with the Platform in any way. By registering an Account or using any hiu77 service, you acknowledge that you have read and understood this Privacy Policy.

This Privacy Policy should be read in conjunction with hiu77's Terms & Conditions and Responsible Gaming Policy, both of which are available on the Platform. In the event of any conflict between this Privacy Policy and the Terms & Conditions, the Terms & Conditions prevail.

Definitions

The following terms have the meanings set out below throughout this Privacy Policy:

Data We Collect

3.1 Registration Data

When you create a hiu77 Account, we collect the information you provide during the registration process, including:

• Full legal name
• Date of birth (to verify you are 21 or older)
• Valid email address
• Active Indonesian mobile phone number
• Username and encrypted password
• City or region of residence within Indonesia (e.g., Jakarta, Surabaya, Bandung, Medan, Bali)

3.2 Identity Verification (KYC) Data

For account verification purposes, hiu77 may collect the following KYC documents and associated data:

• Indonesian National Identity Card (KTP) — front and back
• Passport or other government-issued photo identification where KTP is unavailable
• Selfie photograph for facial verification
• Proof of payment method ownership — for example, a mobile banking screenshot showing an active BCA, BRI, BNI, or Mandiri account registered in your name

3.3 Financial Transaction Data

When you make a deposit or withdrawal, hiu77 records transaction data including the payment method used (bank name, masked account number, or e-wallet identifier such as OVO, DANA, GoPay, ShopeePay, or LinkAja), the transaction amount in IDR, the date and time of the transaction, and the transaction reference number. hiu77 does not store full bank account numbers or card numbers on its servers.

3.4 Gaming Activity Data

hiu77 maintains detailed records of your gaming activity, including wagers placed, games accessed, bet amounts, outcomes, bonus usage, and session timestamps. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance.

3.5 Technical and Device Data

When you access the Platform, our servers automatically collect certain technical data, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, and the time and duration of each session. This data is used for security monitoring, fraud detection, and platform optimisation.

3.6 Communication Data

When you contact hiu77 via live chat, email, or WhatsApp, we retain records of those communications — including the content of messages, timestamps, and any personal data you include in your enquiry. These records are retained for quality assurance, dispute resolution, and compliance purposes.

How Data Is Collected

hiu77 collects Personal Data through the following channels:

• Directly from you — during registration, KYC submission, deposit and withdrawal requests, support interactions, and participation in promotions
• Automatically — via cookies, server logs, and session tracking technologies when you browse or use the Platform
• From third-party service providers — including identity verification agencies, payment processors (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja), fraud detection partners, and analytics providers
• From publicly available sources — where necessary for compliance or fraud-prevention purposes, hiu77 may cross-reference data against public records or sanction lists

Purposes of Processing

hiu77 processes your Personal Data only for specific, legitimate purposes. The table below summarises the primary purposes and the categories of data used for each:

hiu77 does not use your Personal Data for automated decision-making that produces significant legal effects without human review, except as part of clearly disclosed fraud-detection procedures.

Legal Basis for Processing

hiu77 processes your Personal Data on one or more of the following legal grounds:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions — including account management, payment processing, and KYC verification.
• Legal obligation: Processing required to comply with applicable anti-money laundering (AML), counter-terrorism financing (CTF), age verification, and gaming licence obligations.
• Legitimate interests: Processing carried out for hiu77's legitimate operational interests — including fraud prevention, platform security, responsible gaming monitoring, and customer support — where those interests are not overridden by your privacy rights.
• Consent: Where we rely on your consent — for example, for promotional communications — you may withdraw that consent at any time by contacting support or updating your Account preferences. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Sharing Your Data

7.1 Service Providers

hiu77 shares Personal Data with trusted third-party service providers acting as Data Processors, strictly for the purpose of delivering services on our behalf. These include payment processors (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja), KYC and identity verification providers, cloud hosting and infrastructure providers, cybersecurity and fraud detection services, and customer communication platforms. All Data Processors are contractually bound to process your data solely on hiu77's instructions and to maintain appropriate security standards.

7.2 Game Providers

When you play games on hiu77, limited session and wallet data is transmitted to the relevant game studio (such as Pragmatic Play, Evolution Gaming, PG Soft, or Microgaming) to facilitate gameplay and resolve disputes. Game providers do not receive your full identity data or payment method details unless specifically required for a dispute resolution process.

7.3 Legal and Regulatory Disclosure

hiu77 may disclose Personal Data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law, court order, or the conditions of our gaming licence. hiu77 will notify you of such disclosure where legally permitted to do so.

7.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of hiu77's assets, your Personal Data may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy terms applicable to your data following the transaction.

Data Retention

hiu77 retains your Personal Data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and registration data: Retained for the lifetime of your Account plus a minimum of 5 years following account closure, to comply with AML and gaming licence record-keeping obligations.
• KYC documents: Retained for a minimum of 5 years from the date of verification, or longer if required by the applicable licensing authority.
• Financial transaction records: Retained for a minimum of 5 years in accordance with standard financial record-keeping requirements.
• Gaming activity logs: Retained for a minimum of 2 years, or longer where required for dispute resolution or regulatory review.
• Support communications: Retained for 2 years from the date of the last interaction, or longer where the communication relates to an unresolved dispute or legal matter.
• Technical and device logs: Retained for up to 12 months, after which they are anonymised or deleted.

Once the applicable retention period expires and there is no legal or compliance reason to retain the data further, hiu77 will securely delete or anonymise your Personal Data.

Data Security

hiu77 implements a comprehensive set of technical and organisational measures to protect your Personal Data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• Encryption in transit: All data transmitted between your device and hiu77's servers is encrypted using TLS 1.3 with 256-bit AES encryption.
• Encryption at rest: Sensitive data stored on hiu77's servers — including KYC documents and financial records — is encrypted at rest using industry-standard algorithms.
• Access controls: Access to Personal Data is restricted to hiu77 personnel and Data Processors with a specific operational need. All internal access is logged and audited.
• Two-factor authentication: hiu77 supports SMS OTP-based two-factor authentication for Member accounts and enforces 2FA for internal staff access to data systems.
• Penetration testing: hiu77's infrastructure undergoes regular security assessments, including third-party penetration testing, to identify and remediate vulnerabilities.
• Incident response: hiu77 maintains a documented data breach response plan. In the event of a breach that poses a risk to your rights and freedoms, affected Members will be notified promptly.

Cookies & Tracking Technologies

10.1 What Cookies We Use

hiu77 uses the following categories of cookies and similar tracking technologies on the Platform:

10.2 Managing Cookies

You may manage or disable non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies via their privacy or security settings. Note that disabling essential or security cookies may significantly impair your ability to use hiu77 — in particular, you may not be able to remain logged in or complete financial transactions.

Your Rights

hiu77 respects your rights in relation to your Personal Data. Depending on applicable data protection law, you may have the following rights:

• Right of access: You may request a copy of the Personal Data hiu77 holds about you, along with information about how it is processed.
• Right to rectification: You may request correction of any inaccurate or incomplete Personal Data. You can update most Account details directly in your profile settings; for KYC data, contact support.
• Right to erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to hiu77's legal and regulatory retention obligations (see Clause 8).
• Right to restriction: You may request that hiu77 restricts processing of your Personal Data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a copy of your Personal Data in a structured, machine-readable format.
• Right to object: You may object to processing of your Personal Data based on hiu77's legitimate interests, including direct marketing (if applicable). Where you object to direct marketing, hiu77 will cease that processing immediately.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact hiu77 using the details in Clause 14. hiu77 will respond to all valid requests within 30 calendar days. Where a request is complex or involves a large volume of data, hiu77 may extend this period by a further 60 days with notice to you.

Minors

hiu77 is strictly an adults-only platform. We do not knowingly collect Personal Data from any individual under the age of 21. The Platform employs age verification checks during registration and KYC review processes to enforce this restriction.

If hiu77 becomes aware that Personal Data has been collected from a person under the age of 21, that data will be deleted without delay and the associated Account will be permanently closed. Any funds deposited by or on behalf of a minor will be returned to the originating payment method.

Policy Changes

hiu77 reserves the right to update or revise this Privacy Policy at any time. When material changes are made, we will notify Members by posting a prominent notice on the Platform and updating the "Last Updated" date at the top of this document. For significant changes that affect how we process your data, we may also send a direct notification to the email address registered on your Account.

Your continued use of hiu77 following the publication of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you must stop using the Platform and close your Account.

We encourage you to review this Privacy Policy periodically to remain informed about how hiu77 protects your personal information.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way hiu77 processes your Personal Data, please reach us through the following channels:

• Live Chat: Available 24/7 directly within the hiu77 Platform — the fastest route for all privacy-related queries.
• Email: [email protected] (plain text — not a clickable link)
• WhatsApp: +62 811-0777-7777 (plain text — not a clickable link) — available 07:00–00:00 WIB daily

When submitting a privacy-related request by email, please include your registered Account username, a clear description of your request or concern, and — if requesting access to or deletion of your data — confirmation that you are writing from the email address registered on your hiu77 Account. hiu77's Indonesian-speaking support agents are available around the clock and will acknowledge your request promptly.