Privacy Policy

1. Introduction and Scope

This Privacy Policy governs the collection, processing, and use of personal information by 29hoky (referred to as "we," "us," or "our") in connection with your use of our online gaming platform accessible at https://29hoky.cam (the "Platform"). This policy applies to all users who access or register on the Platform, including visitors, registered players, and former account holders.

29hoky operates as an online gaming platform targeting users in Indonesia, offering sports betting, live casino games, lottery services including togel (Indonesian lottery), sabung ayam (cockfighting entertainment), slot games, and other gaming products. We process personal data in accordance with applicable data protection laws and international best practices for online gaming operators.

By creating an account, accessing our website, or using any of our services, you acknowledge that you have read, understood, and agree to the collection, use, and disclosure of your personal information as described in this Privacy Policy. If you do not agree with our privacy practices, you must not use our Platform.

2. Information We Collect

We collect various types of personal information to provide you with our gaming services, comply with legal obligations, and improve your user experience. The categories of information we collect include:

2.1 Information You Provide Directly

When you register an account or use our services, you voluntarily provide us with the following personal information:

• Identity Information: Full legal name, date of birth, gender, nationality, government-issued identification numbers (KTP number, passport number, or driver's license number)
• Contact Information: Residential address, email address, phone number, postal code, city and province of residence
• Financial Information: Bank account details (bank name, account holder name, account number), e-wallet account information (OVO, DANA, GoPay, ShopeePay, LinkAja), payment card information, transaction history
• Verification Documents: Copies of government-issued ID cards, proof of address documents, bank statements, selfie photographs for identity verification
• Communication Data: Messages, emails, live chat transcripts, customer support inquiries, feedback, and survey responses

2.2 Information We Collect Automatically

When you access or use the Platform, we automatically collect certain technical and usage information:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers, mobile network information
• Connection Data: IP address, geographical location (country, city), internet service provider, connection timestamps
• Usage Data: Pages visited, features accessed, games played, bets placed, deposit and withdrawal history, session duration, clickstream data, referral source
• Cookies and Tracking Technologies: Cookie identifiers, tracking pixels, web beacons, and similar technologies (see Section 8 for details)

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment processors and financial institutions that facilitate transactions
• Identity verification services that confirm your age and identity
• Fraud prevention services and security providers
• Marketing partners and affiliate networks
• Public databases and government registries for compliance purposes

3. How We Use Your Personal Data

29hoky processes your personal information for various legitimate business purposes in connection with providing our gaming services. The specific purposes for which we use your data include:

3.1 Account Management and Service Provision

• Creating, maintaining, and managing your gaming account
• Verifying your identity and age (21+ requirement) to comply with legal obligations
• Processing deposits, withdrawals, and other financial transactions
• Providing access to gaming products including sports betting, casino games, togel, and sabung ayam
• Managing bonuses, promotions, and loyalty programs
• Calculating and paying out winnings and refunds

3.2 Security and Fraud Prevention

• Detecting, preventing, and investigating fraud, money laundering, and other illegal activities
• Monitoring betting patterns for suspicious activity and potential bonus abuse
• Enforcing our Terms & Conditions and other policies
• Protecting the security and integrity of our Platform and systems
• Preventing underage gambling and self-excluded individuals from accessing our services

3.3 Customer Support and Communications

• Responding to your inquiries, questions, and support requests
• Sending transactional communications (account confirmations, deposit/withdrawal notifications, password resets)
• Providing customer service via live chat, email, WhatsApp, and phone
• Notifying you of important changes to our services or policies

3.4 Marketing and Promotional Activities

• Sending promotional emails, SMS messages, and push notifications about bonuses, new games, and special offers (with your consent)
• Personalizing marketing communications based on your preferences and gaming activity
• Conducting market research and customer satisfaction surveys
• Analyzing the effectiveness of our marketing campaigns

3.5 Platform Improvement and Analytics

• Analyzing user behavior and preferences to improve our Platform and services
• Conducting data analytics to understand trends and optimize user experience
• Testing new features, products, and services
• Troubleshooting technical issues and bugs

3.6 Legal Compliance and Regulatory Obligations

• Complying with applicable gaming regulations and licensing requirements
• Fulfilling anti-money laundering (AML) and know-your-customer (KYC) obligations
• Responding to legal requests, court orders, and regulatory inquiries
• Maintaining records as required by law
• Enforcing responsible gaming measures and self-exclusion programs

4. Data Sharing and Disclosure

29hoky does not sell your personal information to third parties. However, we may share your data with trusted third parties in the following circumstances:

4.1 Service Providers and Business Partners

We share personal data with third-party service providers who perform services on our behalf, including:

• Payment Processors: Banks, e-wallet providers, and payment gateways that process deposits and withdrawals (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, etc.)
• Game Providers: Software developers and gaming studios that provide our casino games, slots, and live dealer content
• Identity Verification Services: Third-party KYC providers that verify your age and identity
• Customer Support Tools: Live chat platforms, email services, and CRM systems
• Cloud Hosting Providers: Data center and cloud storage providers that host our Platform infrastructure
• Marketing and Analytics Services: Email marketing platforms, analytics tools, and advertising networks

4.2 Legal and Regulatory Authorities

We may disclose your personal information to government authorities, law enforcement agencies, regulatory bodies, or courts when:

• Required by applicable law, regulation, or legal process
• Necessary to comply with a court order, subpoena, or government investigation
• Required to report suspicious transactions under anti-money laundering laws
• Necessary to protect the rights, property, or safety of 29hoky, our users, or the public

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the successor entity or buyer as part of the business transaction. We will notify you of any such change in ownership or control of your personal data.

4.4 With Your Consent

We may share your personal information with other third parties when you have given us explicit consent to do so.

5. Data Security Measures

29hoky implements robust technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security practices include:

5.1 Technical Security Controls

• Encryption: All data transmitted between your device and our servers is protected using 256-bit SSL/TLS encryption. Sensitive data stored in our databases is encrypted at rest.
• Secure Data Centers: Our servers are hosted in secure, certified data centers with 24/7 physical security, environmental controls, and redundant power systems.
• Firewalls and Intrusion Detection: Multi-layer firewall protection and intrusion detection systems monitor and block unauthorized access attempts.
• DDoS Protection: Distributed denial-of-service attack mitigation systems protect our Platform from malicious traffic.
• Regular Security Audits: Independent security firms conduct regular penetration testing and vulnerability assessments.

5.2 Access Controls and Authentication

• Role-based access controls limit employee access to personal data on a need-to-know basis
• Two-factor authentication (2FA) is available for user accounts and mandatory for employee access
• Strong password policies and account lockout mechanisms prevent unauthorized access
• All access to personal data is logged and monitored for suspicious activity

5.3 Organizational Measures

• Comprehensive employee training on data protection and privacy best practices
• Confidentiality agreements signed by all employees and contractors with access to personal data
• Incident response procedures for data breaches and security incidents
• Regular backup and disaster recovery procedures to prevent data loss

Important Notice: While we implement industry-leading security measures, no system is completely secure. You are responsible for maintaining the confidentiality of your account credentials and should immediately notify us if you suspect unauthorized access to your account.

6. Data Retention and Deletion

29hoky retains your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

6.1 Retention Periods

• Active Accounts: Personal data is retained for the duration of your active account relationship with us.
• Closed Accounts: After account closure, we retain personal data for a minimum of 5 years to comply with financial record-keeping requirements, anti-money laundering regulations, and tax laws.
• Transaction Records: Financial transaction records are retained for 7 years in accordance with accounting and tax regulations.
• Marketing Data: If you unsubscribe from marketing communications, we will remove your data from marketing lists within 30 days but may retain a suppression record to honor your opt-out preference.
• Legal Holds: Data may be retained longer if required for legal proceedings, investigations, or regulatory inquiries.

6.2 Data Deletion

After the applicable retention period expires, we securely delete or anonymize your personal information using industry-standard data destruction methods. Anonymized data that cannot be linked back to you may be retained indefinitely for statistical and analytical purposes.

7. Your Privacy Rights

As a user of 29hoky, you have certain rights regarding your personal information. Depending on your jurisdiction, these rights may include:

7.1 Right of Access

You have the right to request a copy of the personal information we hold about you. We will provide this information in a structured, commonly used, and machine-readable format within 30 days of your request.

7.2 Right to Rectification

You have the right to correct any inaccurate or incomplete personal information. You can update most information directly through your account settings or by contacting customer support.

7.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data, subject to our legal obligations to retain certain records. We will honor erasure requests unless we have a legitimate reason to retain the data (e.g., legal compliance, fraud prevention, dispute resolution).

7.4 Right to Restriction of Processing

You may request that we limit how we use your personal data in certain circumstances, such as while we verify the accuracy of information you have disputed.

7.5 Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format and to transmit that data to another service provider where technically feasible.

7.6 Right to Object

You may object to processing of your personal data for marketing purposes at any time by unsubscribing from marketing emails or contacting customer support.

7.7 Right to Withdraw Consent

Where we process your data based on consent, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.

7.8 Exercising Your Rights

To exercise any of these rights, please contact us at [email protected] with "Privacy Rights Request" in the subject line. We will respond within 30 days and may request additional information to verify your identity before processing your request.

8. Cookies and Tracking Technologies

29hoky uses cookies, web beacons, and similar tracking technologies to enhance your user experience, analyze Platform usage, and deliver personalized content and advertising.

8.1 Types of Cookies We Use

• Essential Cookies: Necessary for the Platform to function properly, including session management, security, and load balancing. These cannot be disabled.
• Performance Cookies: Collect anonymous data about how visitors use the Platform to help us improve performance and user experience.
• Functionality Cookies: Remember your preferences and settings (e.g., language preference, login information) to provide a more personalized experience.
• Marketing Cookies: Track your browsing activity to deliver relevant advertisements and measure the effectiveness of marketing campaigns.

8.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies or delete cookies already stored. However, disabling certain cookies may affect the functionality of the Platform and prevent you from using some features.

8.3 Third-Party Tracking

Our Platform may contain links to third-party websites and services that have their own privacy policies and cookie practices. We are not responsible for the privacy practices of these third parties.

9. International Data Transfers

29hoky primarily serves users located in Indonesia. However, some of our service providers and data processing infrastructure may be located in other countries. When we transfer personal data outside Indonesia, we ensure appropriate safeguards are in place to protect your information, including:

• Standard contractual clauses approved by data protection authorities
• Data processing agreements with third-party processors
• Transfers to countries with adequate data protection laws
• Technical and organizational security measures to protect data in transit and at rest

10. Children's Privacy

29hoky services are strictly intended for individuals who are at least 21 years of age. We do not knowingly collect, use, or solicit personal information from anyone under the age of 21. If we become aware that we have collected personal information from an individual under 21 without proper age verification, we will immediately delete that information and close the associated account.

If you believe that a minor under 21 has created an account on our Platform, please contact us immediately at [email protected] so we can take appropriate action.

11. Changes to This Privacy Policy

29hoky reserves the right to modify, update, or replace this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page
• Notify registered users via email or Platform notification
• Post a prominent notice on our website for a reasonable period

Your continued use of the Platform after any changes become effective constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your personal information.

12. Contact Information

If you have any questions, concerns, or complaints about this Privacy Policy or our data protection practices, please contact us using the following methods:

• Email: [email protected] (include "Privacy Inquiry" in subject line)
• Live Chat: Available 24/7 directly on our website
• WhatsApp: +62 812 3456 7890

We aim to respond to all privacy-related inquiries within 48 hours during business days. For urgent matters regarding data breaches or security concerns, please mark your communication as "URGENT" for priority handling.