Privacy Policy

This Privacy Policy ("Policy") is issued by Hokibet ("Hokibet", "we", "us", or "our"), the operator of the online gaming and sports betting platform accessible at hokibet.cam. This Policy describes how Hokibet collects, uses, stores, discloses, and otherwise processes personal data obtained from users ("Players", "you", or "your") who access or use the Hokibet platform, whether via desktop browser or mobile device.

Hokibet is committed to protecting the privacy and personal data of all Players, including those accessing our services from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and elsewhere in Malaysia. We process personal data in accordance with applicable data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity, confidentiality, and accountability.

This Policy should be read alongside our Terms and Conditions and Responsible Gambling Policy, both of which are incorporated by reference. By registering an account with Hokibet, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, and digital identifiers such as IP address.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction, whether by automated or manual means.
• "Data Controller" means Hokibet, which determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" means a natural or legal person who processes personal data on behalf of Hokibet under contract, such as a KYC verification provider or payment gateway operator.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for a stated purpose.
• "KYC" means Know Your Customer — the identity verification process required by Hokibet prior to processing withdrawals or where otherwise required by our compliance framework.
• "Cookies" means small text files placed on a user's device by a website, used to store information about browsing behaviour, preferences, and session data.

Hokibet collects personal data across several categories depending on the nature of your interaction with the Platform. The following table summarises the categories of data we collect and examples of data within each category:

We do not collect sensitive categories of personal data such as health information, religious beliefs, or biometric data, except where expressly required for identity verification purposes and only to the minimum extent necessary.

Hokibet collects personal data through the following channels and methods:

1. Direct Provision by You: When you register an account, complete your profile, submit KYC documentation, make a deposit or withdrawal, contact our support team via live chat or email, or respond to a survey or promotion.
2. Automated Technical Means: When you access the Platform, we automatically collect technical data including IP address, device identifiers, browser type, and session data through server logs, cookies, and similar tracking technologies.
3. Payment Service Providers: When you transact through DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, or cryptocurrency networks (BTC/USDT), our payment processors may share transactional metadata with us for fraud prevention and reconciliation purposes.
4. Third-Party Identity Verification Services: Where Hokibet uses a third-party KYC provider to verify identity documents, that provider may return verification outcomes and flagged data to Hokibet in accordance with their own privacy policies and our data processing agreements with them.
5. Publicly Available Sources: In limited circumstances related to fraud prevention or AML compliance, Hokibet may cross-reference information you provide against publicly available records, sanctions databases, or politically exposed person (PEP) lists.

Hokibet processes your personal data only for clearly defined, lawful purposes. The primary purposes for which we process personal data are:

• Account Creation and Management: To register your account, verify your identity, manage your account settings and preferences, and ensure the ongoing accuracy of your profile information.
• Service Delivery: To enable you to access and use the Hokibet Platform, including gaming, sports betting, deposits, withdrawals, and VIP programme participation.
• KYC and Identity Verification: To comply with our legal obligations to verify the identity of Players, particularly in relation to age verification (minimum 21 years), AML compliance, and withdrawal authorisation.
• Financial Transactions: To process deposits and withdrawals securely, reconcile accounts, generate transaction records, and prevent unauthorised financial activity.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, account takeover attempts, money laundering, and other abuse of the Platform.
• Responsible Gambling: To monitor gaming behaviour, identify potential problem gambling indicators, enforce self-exclusion or deposit limit requests, and fulfil our responsible gambling obligations.
• Customer Support: To respond to your enquiries, complaints, and requests submitted via live chat, email, or other support channels.
• Legal and Regulatory Compliance: To comply with applicable laws, regulations, court orders, or requests from competent regulatory or law enforcement authorities.
• Marketing and Promotions: Where you have provided consent, to send you information about promotions, bonuses, VIP programme updates, and new features on the Platform. You may withdraw marketing consent at any time.
• Platform Improvement: To analyse aggregated and anonymised usage data to improve the performance, features, and user experience of the Hokibet Platform.

Hokibet processes personal data on the following legal bases, which apply to different categories of processing activity:

• Contractual Necessity: Processing required to perform the contract between Hokibet and the Player — including account registration, gaming services, and financial transactions — is carried out on the basis that it is necessary for the performance of that contract.
• Legal Obligation: Processing required to comply with applicable law, including KYC verification, AML record-keeping, age verification, and regulatory reporting, is carried out on the basis of legal obligation.
• Legitimate Interests: Processing for fraud prevention, platform security, technical data collection, and certain service improvement activities is carried out on the basis of Hokibet's legitimate business interests, provided those interests are not overridden by your rights and interests.
• Consent: Processing for direct marketing communications is carried out on the basis of your express consent. You may withdraw marketing consent at any time by contacting our support team or updating your account preferences.

Hokibet does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only where necessary and under strict controls. The categories of recipients with whom Hokibet may share personal data include:

• Payment Service Providers: Including operators of DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and banking institutions such as Maybank, CIMB, Public Bank, and Hong Leong, for the purpose of processing deposits and withdrawals and preventing payment fraud.
• KYC and Identity Verification Providers: Third-party service providers engaged by Hokibet to conduct identity document verification, age confirmation, and sanctions screening as part of our KYC and AML programme.
• Fraud Detection and Security Services: Technology providers engaged to monitor for suspicious activity, detect bot usage, and investigate potential account compromise, acting as Data Processors under our instruction.
• IT Infrastructure and Hosting Providers: Cloud hosting, server management, and database providers who store or process Platform data on Hokibet's behalf under contractual data processing agreements.
• Customer Support Technology Providers: Providers of live chat and ticketing systems used to deliver our 24/7 trilingual support service (English, Bahasa Melayu, Chinese).
• Regulatory and Law Enforcement Authorities: Where required by law, court order, or a lawful request from a competent authority, Hokibet may disclose personal data to regulators, law enforcement agencies, or government bodies.
• Professional Advisers: Lawyers, auditors, accountants, and other professional advisers engaged by Hokibet for legal, financial, or compliance advice, subject to professional confidentiality obligations.

All third-party Data Processors engaged by Hokibet are contractually required to process personal data only in accordance with Hokibet's instructions and to maintain appropriate technical and organisational security measures.

Hokibet uses cookies and similar tracking technologies on the Platform to enhance your user experience, maintain session continuity, and support security and analytics functions. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly and cannot be disabled. They include session management cookies, authentication tokens, and security-related cookies that prevent cross-site request forgery.
• Functional Cookies: These cookies remember your preferences, such as your preferred language (English, Bahasa Melayu, or Chinese), display settings, and login status, to provide a personalised experience on your return visits.
• Analytics Cookies: These cookies collect aggregated, anonymised information about how Players use the Platform — including which pages are visited most frequently and how users navigate between sections — to help us improve the platform's performance and usability.
• Security and Fraud Detection Cookies: These cookies help Hokibet identify and prevent suspicious login activity, multiple account creation, and other potentially fraudulent behaviour.

Most browsers allow you to control or delete cookies through browser settings. Please note that disabling strictly necessary cookies may impair the functionality of the Hokibet Platform. For guidance on managing cookies in your specific browser, consult your browser's help documentation.

Hokibet retains personal data for no longer than is necessary for the purposes for which it was collected, subject to applicable legal and regulatory retention obligations. Our general retention principles are as follows:

1. Active Account Data: Personal data associated with an active Player Account is retained for the duration of the account's active status plus any applicable statutory retention period following closure.
2. KYC and AML Records: Identity documents, verification outcomes, and transaction records required for AML compliance are retained for a minimum period as required under applicable anti-money laundering and financial crime prevention regulations, typically a minimum of five years from the date of the relevant transaction or the closure of the account, whichever is later.
3. Financial Transaction Records: Records of deposits, withdrawals, and betting transactions are retained for a minimum period consistent with applicable financial record-keeping obligations.
4. Customer Support Communications: Live chat transcripts and email correspondence with our support team are retained for up to 24 months from the date of the interaction, unless a longer period is required for an ongoing dispute or regulatory matter.
5. Marketing Data: Where you have consented to marketing communications, your preferences and contact information are retained until you withdraw consent or close your account.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Where anonymisation is not possible, data is securely destroyed using industry-standard methods.

Hokibet implements a comprehensive suite of technical and organisational security measures to protect personal data against unauthorised access, loss, disclosure, alteration, or destruction. Key security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the Hokibet Platform is encrypted using 256-bit Secure Socket Layer (SSL) / Transport Layer Security (TLS) protocols — the same standard employed by major Malaysian financial institutions including Maybank and CIMB.
• Encrypted Data Storage: Sensitive personal data, including identity document copies and financial information, is stored in encrypted form at rest in our secure data infrastructure.
• Access Controls: Access to personal data is restricted on a need-to-know basis. All Hokibet staff and contractors with access to personal data are subject to contractual confidentiality obligations and undergo regular data protection training.
• Intrusion Detection and Monitoring: Our systems are monitored around the clock for suspicious access attempts, anomalous behaviour, and potential security incidents.
• Regular Security Audits: Hokibet conducts regular internal and third-party security assessments to identify and remediate vulnerabilities in our systems and processes.
• Secure Password Practices: Player passwords are stored using industry-standard hashing algorithms and are never stored in plaintext. We encourage Players to use strong, unique passwords and to enable any available two-factor authentication.

In the event of a personal data breach that poses a material risk to Players, Hokibet will notify affected individuals and relevant regulatory authorities in accordance with applicable legal requirements and without undue delay.

As a Player whose personal data is processed by Hokibet, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team using the details in Section 15.

Hokibet will respond to valid data rights requests within a reasonable timeframe, and in any event within 30 days of receipt. We may request proof of identity before fulfilling a data rights request to ensure we do not disclose information to an unauthorised party.

The Hokibet Platform is strictly intended for individuals aged 21 years and above. Hokibet does not knowingly collect personal data from any person under the age of 21. Where Hokibet discovers or has reasonable grounds to believe that personal data has been submitted by a person under 21, the relevant Account will be immediately suspended, the data will be deleted, and any funds held in the Account will be returned to the relevant depositing payment method.

If you are a parent or guardian and believe that a minor has registered an Account or submitted personal data to Hokibet, please contact our support team immediately at the details provided in Section 15. We will investigate the matter promptly and take appropriate remedial action.

We recommend that parents and guardians utilise parental control software and monitor internet usage to prevent access to online gaming platforms by minors.

The Hokibet Platform does not include links to external third-party websites. In the event that any informational references to external services or support organisations are included on the Platform (such as responsible gambling support resources), Hokibet is not responsible for the privacy practices of those external entities. Players who choose to access any third-party resources should review the applicable privacy policies of those services independently.

Hokibet's Privacy Policy applies solely to data processing activities carried out by Hokibet as Data Controller in connection with the hokibet.cam Platform. It does not extend to data processed by payment service providers, KYC partners, or other third-party processors acting under their own privacy policies, except to the extent that we are acting as a Data Controller directing that processing.

Hokibet reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the services we offer. Where changes are material, we will provide reasonable advance notice to active Players through the Platform, by email to the registered address on your Account, or by pop-up notification upon next login.

The current version of this Privacy Policy is identified by the "Last Updated" date displayed at the top of this page. We encourage Players to review this page periodically to stay informed of how we protect and handle your personal data. Continued use of the Platform following the effective date of any amendment constitutes your acceptance of the updated Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy, our data processing practices, or the exercise of your data rights, please contact Hokibet's support team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the Platform. Our support team can assist with general privacy enquiries and will escalate data rights requests to the appropriate internal team. Average response time: 3–5 minutes.
• Email: For formal data rights requests, privacy complaints, or written enquiries, please contact us at [email protected] with the subject line "Privacy Enquiry" or "Data Rights Request". We aim to acknowledge all written privacy communications within 24 hours and to respond substantively within 30 days.
• Support Languages: English, Bahasa Melayu, and Mandarin Chinese.

When submitting a data rights request, please include your registered Account username and, where appropriate, a description of the specific data or processing activity your request relates to. We may request a form of identity verification before fulfilling your request to protect against unauthorised disclosure.