Privacy Policy

hp788 operates as an online casino and sportsbook platform serving players in Indonesia and internationally. In the course of providing our services — account registration, identity verification, payment processing, game delivery, customer support, and promotional communications — we necessarily collect and process certain categories of personal data about our players and platform visitors.

We are committed to handling that data responsibly, transparently, and securely. This Privacy Policy sets out, in plain language, everything you need to know about how hp788 treats your personal information: what we collect, why we collect it, who we share it with, how long we keep it, and what choices and rights you have as a data subject.

We do not sell your personal data to third parties for their own marketing purposes. We do not share your personal data with advertisers or data brokers. Our data-sharing relationships are limited to the operational partners specifically described in Section 7 of this Policy.

In this Privacy Policy, the following terms carry the meanings assigned to them below:

hp788 collects the following categories of Personal Data, depending on how you interact with the Platform:

3.1 Registration & Identity Data

• Full legal name (as it appears on government-issued ID)
• Date of birth (to verify the 21+ age requirement)
• Residential address (city, province, postal code, Indonesia)
• Email address and chosen username
• Password (stored in hashed, salted form — never in plain text)
• Phone number (optional, used for two-factor authentication)

3.2 KYC & Verification Data

• Scanned or photographed copy of government-issued photo ID (Indonesian KTP, passport, or equivalent)
• Proof of residential address (recent utility bill, bank statement, or equivalent dated within 90 days)
• Selfie or liveness-check photograph where enhanced verification is required

3.3 Financial & Transaction Data

• Bank account number and registered account name (for BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, and other supported banks)
• E-wallet account number or registered phone number (for DANA, OVO, GoPay, ShopeePay, LinkAja)
• Deposit amounts, withdrawal amounts, dates, and transaction reference numbers
• Payment method used per transaction

3.4 Gaming & Betting Activity Data

• Bet history, game session logs, wager amounts, game outcomes, and running account balance
• Sportsbook selections, odds accepted, and live-bet activity
• Bonus and promotion usage records
• Responsible gaming tool settings (deposit limits, session reminders, self-exclusion status)

3.5 Technical & Device Data

• IP address and geolocation (derived from IP, not GPS)
• Device type, operating system, browser type and version
• Session timestamps, page-visit duration, click-stream data
• Cookies and similar tracking technologies (see Section 8)

3.6 Communications Data

• Content of live-chat conversations, emails, and support tickets submitted to hp788
• Survey responses and feedback you voluntarily provide
• Records of marketing email opens and click-through events (where you have opted in to communications)

hp788 collects Personal Data through the following channels:

• Directly from you: when you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact our support team, or respond to a promotional survey.
• Automatically: through cookies, server logs, and analytics tools embedded in the Platform that capture device, browser, and session data when you visit or interact with the site.
• From payment providers: when you initiate a transaction via a supported bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI) or e-wallet (DANA, OVO, GoPay, ShopeePay, LinkAja), the provider confirms transaction status and may return basic account-holder data to verify that the payment method belongs to you.
• From identity verification partners: where hp788 uses a third-party KYC provider to perform automated document checks or liveness verification, that provider returns a verification result (pass / fail / refer) and a confidence score to hp788.
• From fraud-prevention and AML screening services: hp788 may receive flags or risk scores from third-party screening providers when a player's profile or transaction pattern triggers an automated alert.

hp788 processes your Personal Data on one or more of the following legal bases:

hp788 uses Personal Data for the following purposes:

• Account management: Creating, maintaining, and securing your hp788 account; authenticating your identity at login; enforcing the one-account-per-player rule.
• Age and identity verification: Confirming that you meet the 21+ minimum age requirement and that your identity matches the payment methods registered on your account, in compliance with applicable gaming regulations.
• Payment processing: Executing deposits and withdrawals via your chosen bank or e-wallet, verifying that funds originate from a payment account registered in your name, and maintaining transaction records.
• Game and platform delivery: Logging game sessions and bet history to resolve disputes, calculate winnings, and ensure the integrity of game outcomes provided by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft.
• Responsible gaming: Monitoring gaming patterns to detect signs of problem gambling behaviour; enforcing deposit limits, loss caps, and self-exclusion orders set by the player or imposed by hp788.
• Fraud prevention and AML compliance: Screening transactions and player profiles against fraud watchlists and AML indicators; investigating unusual activity; reporting to relevant authorities where required by law.
• Customer support: Reviewing support tickets, live-chat transcripts, and email correspondence to resolve account queries, disputes, and complaints.
• Marketing communications (with consent): Sending personalised bonus offers, reload promotion alerts, and platform news to players who have opted in to marketing communications. You may opt out at any time via the unsubscribe link in any email or by contacting support.
• Platform analytics and improvement: Analysing aggregate, anonymised usage data to improve site performance, page design, and game content recommendations.

hp788 does not sell, rent, or trade your Personal Data to any third party for that party's own marketing or commercial use. We share Personal Data only in the following limited circumstances:

• Payment processing partners: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI) and e-wallet providers (DANA, OVO, GoPay, ShopeePay, LinkAja) receive the minimum data necessary to execute your requested transaction and confirm payment ownership.
• KYC and identity verification providers: Third-party KYC vendors receive copies of your identity documents and, where applicable, a liveness photograph, solely to perform verification checks on hp788's behalf. These vendors act as Data Processors under contractual data-protection agreements with hp788.
• Game studio providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft, and other certified studios receive a session token and anonymised player identifier to authenticate your game session. They do not receive your full name, banking details, or KYC documents.
• Fraud and AML screening services: Risk and compliance screening providers may receive transaction data and account metadata (hashed identifiers where possible) to perform automated fraud and AML checks.
• Legal and regulatory authorities: hp788 will disclose Personal Data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by applicable law, a valid court order, or a lawful regulatory directive. hp788 will notify the affected player of such disclosure wherever legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of hp788's assets, Personal Data may be transferred to the acquiring entity, subject to equivalent data-protection commitments. Players will be notified prior to any such transfer taking effect.

hp788 uses cookies and similar technologies (local storage, session tokens, pixel tags) to operate the Platform effectively and to understand how players use it. The categories of cookies we deploy are described below:

You may manage non-essential cookie preferences through your browser settings. Please note that disabling functional or analytics cookies will not affect your ability to play games or process transactions, but may reduce the personalisation of your experience on the Platform.

hp788 retains Personal Data for only as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

Following the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual.

hp788 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption: All data transmitted between your browser or device and the hp788 Platform is encrypted in transit using 256-bit SSL/TLS encryption.
• Password hashing: Passwords are stored using a strong, salted hashing algorithm. hp788 personnel cannot view your password in plain text.
• Access controls: Internal access to Personal Data is restricted on a strict need-to-know basis. All staff with access to personal data receive data-protection training and are bound by confidentiality obligations.
• Payment data isolation: Full bank account and e-wallet details are not stored on hp788's primary application servers. Payment data is tokenised and handled through dedicated, PCI-compliant payment infrastructure.
• Intrusion detection and monitoring: The Platform is monitored 24/7 for suspicious access patterns, DDoS attempts, and anomalous behaviour via automated security systems.
• Penetration testing: hp788 commissions independent security penetration tests on a regular basis to identify and remediate vulnerabilities proactively.

As a data subject, you hold the following rights with respect to your Personal Data processed by hp788. To exercise any of these rights, contact us at the email address listed in Section 15:

• Right of Access: You may request a copy of the Personal Data hp788 holds about you, along with information about how it is being used.
• Right to Rectification: You may request correction of inaccurate or incomplete Personal Data. For most profile fields, you can update your information directly from your account dashboard; for KYC documents, please contact support.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and no other legal basis applies. Note that this right is subject to overriding legal retention obligations (e.g., AML record-keeping requirements) that may prevent full erasure during the applicable retention period.
• Right to Restriction of Processing: You may request that hp788 restrict processing of your Personal Data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to Data Portability: You may request that hp788 provide your Personal Data in a structured, commonly used, machine-readable format, or transmit it directly to another service provider where technically feasible.
• Right to Object: You may object to processing of your Personal Data carried out on the basis of legitimate interests, including profiling for fraud-detection or responsible-gaming purposes. hp788 will assess whether its legitimate interests override your objection on a case-by-case basis.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

hp788 will respond to all valid data-rights requests within 30 days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

The hp788 Platform is strictly intended for adults aged 21 and over. hp788 does not knowingly collect, store, or process Personal Data relating to individuals under the age of 21. If we become aware that a minor has registered an account or submitted Personal Data to the Platform, we will immediately suspend that account, delete the associated Personal Data to the extent permitted by applicable law, and void any transactions or winnings associated with the account.

If you are a parent or guardian and believe that a minor in your care has accessed or registered on hp788 without your knowledge, please contact our support team immediately at the email address listed in Section 15 so that we can take prompt remedial action.

The hp788 Platform integrates with a number of third-party services to deliver its full range of features. Each third-party provider operates under its own privacy policy, and hp788 is not responsible for the privacy practices of those providers except to the extent that they process Personal Data as a Data Processor acting under hp788's instructions.

The principal third-party service categories integrated into the Platform include:

• Game studios: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft deliver their respective game products via API integration. These studios receive only a session token and anonymised player reference — not your name, banking details, or ID documents.
• Payment gateways: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI) and e-wallet providers (DANA, OVO, GoPay, ShopeePay, LinkAja) process payment instructions under their own licensing and data-handling frameworks. hp788 does not store full card or bank account numbers on its application servers.
• Identity verification platforms: Where automated KYC is used, a third-party verification vendor processes document images and liveness data solely for verification purposes, under a Data Processing Agreement with hp788.
• Infrastructure and hosting providers: hp788's Platform is hosted on cloud infrastructure that is contractually bound to process server and log data solely as instructed by hp788 and under strict confidentiality obligations.

hp788 performs due diligence on all Data Processors before engagement and maintains written Data Processing Agreements with each provider that mandate appropriate technical and organisational security measures.

hp788 reserves the right to update this Privacy Policy at any time to reflect changes in our data-processing practices, applicable law, or platform functionality. When material changes are made, we will notify registered players by email or via a prominent in-platform notification at least 7 days before the revised Policy takes effect.

The "Last updated" date at the top of this page indicates when the most recent revision was published. We encourage you to review this Policy periodically. Your continued use of the hp788 Platform after the effective date of a revised Policy constitutes your acknowledgement of the updated terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way hp788 handles your Personal Data, please contact our Data Protection team using the details below:

Live chat support is available 24/7 from the hp788 Platform and is staffed by native Indonesian-speaking agents who can assist with general account queries. For formal data-rights requests, we recommend contacting us by email to ensure a documented paper trail for your request.