Privacy Policy

1. Introduction and Scope

This Privacy Policy describes how hh178 ("we," "us," "our," or the "Company") collects, uses, processes, stores, and protects the personal information of users ("you," "your," or "User") who access or use our online gaming platform (the "Service"). This policy applies to all personal data collected through the hh178 website, mobile applications, and related services.

By creating an account or using the Service, you acknowledge that you have read, understood, and consent to the practices described in this Privacy Policy. If you do not agree with our privacy practices, you must discontinue using the Service immediately.

hh178 is committed to protecting your privacy and complying with applicable data protection laws and regulations. We recognize that the personal information you provide to us is sensitive and requires the highest level of security and confidentiality.

2. Information We Collect

2.1 Information You Provide Directly

When you register for an hh178 account, we collect the following personal information:

• Identity Information: Full legal name, date of birth, nationality, and gender
• Contact Information: Email address, mobile phone number, and residential address
• Account Credentials: Username, password (stored in encrypted hash format), and security questions
• Identification Documents: Government-issued ID (Indonesian KTP, passport, or driver's license), proof of address, and selfie verification photos submitted during KYC verification
• Payment Information: Bank account details, e-wallet account information, and payment transaction history
• Communication Records: Customer support chat logs, email correspondence, and phone call recordings (with your consent)

2.2 Information Collected Automatically

When you access or use the Service, we automatically collect certain technical information:

• Device Information: Device type, operating system, browser type and version, screen resolution, and device identifiers
• Connection Data: IP address, internet service provider, connection timestamps, and geographic location data
• Usage Information: Pages viewed, time spent on pages, links clicked, games played, bets placed, and navigation patterns
• Cookie Data: Session cookies, preference cookies, security cookies, and analytics cookies (see Section 8 for details)
• Performance Data: Error reports, crash logs, and system performance metrics

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment processors (to verify transactions and prevent fraud)
• Identity verification services (to confirm your identity and age)
• Credit reference agencies (where permitted by law, to assess financial risk)
• Fraud prevention databases (to detect and prevent fraudulent activity)
• Marketing partners (if you consent to receive promotional communications)

3. How We Use Your Information

3.1 Primary Uses

We process your personal information for the following purposes:

• Account Management: Creating, maintaining, and managing your hh178 account, including authentication and account recovery
• Service Provision: Processing bets, managing game play, calculating winnings, processing deposits and withdrawals, and maintaining accurate account balances
• Compliance and Verification: Verifying your identity, age, and location to ensure compliance with legal and regulatory requirements, including anti-money laundering (AML) and know-your-customer (KYC) obligations
• Payment Processing: Facilitating deposits and withdrawals through Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, etc.) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja)
• Customer Support: Responding to inquiries, resolving disputes, troubleshooting technical issues, and providing assistance with account questions
• Security and Fraud Prevention: Detecting and preventing fraudulent activity, bonus abuse, collusion, unauthorized access, and other security threats

3.2 Secondary Uses

With your consent or where permitted by law, we may also use your information for:

• Marketing Communications: Sending promotional emails, SMS messages, and push notifications about bonuses, tournaments, and special offers (you can opt out at any time)
• Service Improvement: Analyzing usage patterns to improve game selection, user interface design, and overall platform performance
• Personalization: Customizing your experience based on gaming preferences, favorite sports, and previous activity
• Research and Analytics: Conducting statistical analysis and research to better understand user behavior and market trends
• Responsible Gaming: Monitoring play patterns to identify potential problem gaming behavior and providing intervention resources

4. Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our contract with you (the Terms and Conditions) and provide the Service
• Legal Obligation: Processing is required to comply with applicable laws, including age verification, AML regulations, tax reporting, and licensing requirements
• Legitimate Interests: Processing is necessary for our legitimate business interests in fraud prevention, security, service improvement, and marketing (where not overridden by your privacy rights)
• Consent: You have provided explicit consent for specific processing activities, such as marketing communications or use of cookies

5. Information Sharing and Disclosure

5.1 Third-Party Service Providers

We share your personal information with trusted third-party service providers who assist us in operating the Service:

• Payment Processors: To facilitate deposits and withdrawals through Indonesian banks and e-wallets
• Identity Verification Services: To conduct KYC checks and verify your age, identity, and address
• Game Providers: To deliver casino games, slots, live dealer experiences, and sports betting platforms
• Cloud Hosting Services: To store data securely on encrypted servers
• Customer Support Tools: To manage live chat, email ticketing, and support inquiries
• Analytics Providers: To analyze platform usage and improve service quality
• Marketing Partners: To deliver targeted advertising (only with your consent)

All third-party service providers are bound by strict confidentiality obligations and are only permitted to process your data for specified purposes on our behalf. We conduct due diligence on all partners to ensure they maintain adequate security standards.

5.2 Legal and Regulatory Disclosure

We may disclose your information when required by law or when we believe disclosure is necessary to:

• Comply with legal obligations, court orders, or regulatory requests
• Enforce our Terms and Conditions or other agreements
• Protect the rights, property, or safety of hh178, our users, or the public
• Detect, prevent, or address fraud, security breaches, or technical issues
• Respond to verified law enforcement requests in accordance with applicable law

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity or successor organization. We will notify you via email and/or a prominent notice on our website before your information is transferred and becomes subject to a different privacy policy.

5.4 What We Never Do

hh178 never engages in the following practices:

• We never sell your personal information to third parties for marketing purposes
• We never share your information with unrelated third parties for their own commercial gain
• We never publicly disclose your gaming activity, winnings, or losses without your explicit consent
• We never rent or lease customer databases to external organizations

6. Data Security Measures

6.1 Technical Security

We implement industry-standard security measures to protect your personal information:

• Encryption: All data transmission between your device and our servers uses SSL/TLS encryption (minimum 256-bit)
• Secure Storage: Personal data is stored on encrypted servers with restricted physical and digital access
• Password Protection: User passwords are hashed using advanced cryptographic algorithms and never stored in plain text
• Firewall Protection: Our infrastructure is protected by enterprise-grade firewalls and intrusion detection systems
• Regular Security Audits: We conduct periodic security assessments and penetration testing to identify vulnerabilities

6.2 Organizational Security

• Access Controls: Personal data is accessible only to authorized employees who require it for their job functions
• Employee Training: All staff receive regular training on data protection principles and security best practices
• Confidentiality Agreements: Employees with access to personal data are bound by strict confidentiality obligations
• Incident Response: We maintain a comprehensive data breach response plan with defined protocols for notification and remediation

6.3 Your Security Responsibilities

You play a critical role in protecting your account security:

• Choose a strong, unique password and do not share it with anyone
• Enable two-factor authentication (if available) for additional security
• Log out of your account when using shared or public devices
• Keep your email account secure, as it is used for account recovery
• Report any suspicious activity or unauthorized access immediately
• Avoid accessing your account over unsecured public Wi-Fi networks

7. Data Retention and Deletion

7.1 Retention Periods

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

Data Category	Retention Period	Reason
Account Information	Duration of account + 5 years after closure	Legal compliance, financial record-keeping
Transaction Records	7 years after transaction	Tax reporting, AML compliance, audit requirements
KYC Documents	5 years after account closure	Regulatory requirements, identity verification
Customer Support Logs	3 years after last interaction	Dispute resolution, service improvement
Marketing Data (with consent)	Until consent withdrawn + 30 days	Marketing communications, preference management
Usage Analytics	18 months after collection	Service improvement, platform optimization

7.2 Right to Erasure

You have the right to request deletion of your personal data under certain circumstances. However, we may be required to retain certain information for legal, regulatory, or security purposes even after you request deletion. When you close your account, we will delete or anonymize your data in accordance with our retention schedule, except where longer retention is required by law.

8. Cookies and Tracking Technologies

8.1 Types of Cookies We Use

• Essential Cookies: Necessary for platform functionality, account authentication, and security (cannot be disabled)
• Performance Cookies: Collect anonymous data on how you use the Service to help us improve performance
• Functional Cookies: Remember your preferences and settings for a personalized experience
• Analytics Cookies: Help us understand user behavior through tools like Google Analytics
• Marketing Cookies: Track your activity across websites to deliver targeted advertising (only with consent)

8.2 Managing Cookie Preferences

You can control cookie settings through your browser preferences. However, disabling essential cookies may affect platform functionality. Most browsers allow you to refuse cookies, delete existing cookies, or receive alerts when cookies are being sent. Refer to your browser's help section for specific instructions.

9. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal information:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete information
• Right to Erasure: Request deletion of your data (subject to legal retention requirements)
• Right to Restrict Processing: Request limitation on how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for marketing purposes
• Right to Withdraw Consent: Withdraw consent for processing activities that require consent (without affecting lawfulness of prior processing)

To exercise any of these rights, contact our customer support team via email or live chat. We will respond to your request within thirty (30) days. Identity verification may be required to process certain requests.

10. Children's Privacy

The hh178 Service is strictly intended for individuals aged 21 years or older. We do not knowingly collect personal information from individuals under 21 years of age. If we discover that we have inadvertently collected information from someone under 21, we will delete that information immediately and close the associated account. Parents or guardians who believe their child has provided information to us should contact our support team immediately.

11. International Data Transfers

Your personal information may be transferred to and processed in countries outside of Indonesia where our service providers, payment processors, or hosting infrastructure are located. When we transfer data internationally, we ensure appropriate safeguards are in place through standard contractual clauses, adequacy decisions, or other legally approved mechanisms to protect your information to the same standard required in Indonesia.

12. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. Material changes will be communicated via email to your registered address and/or through a prominent notice on the hh178 platform. The "Last Updated" date at the top of this policy indicates when the most recent revisions were made. Your continued use of the Service after changes are posted constitutes acceptance of the revised Privacy Policy.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact us:

• Email: [email protected] (display as plain text; do not use mailto: protocol)
• Live Chat: Available 24/7 through the hh178 platform
• Response Time: We aim to respond to all privacy inquiries within 24-48 hours

For urgent privacy concerns or suspected data breaches, please use the subject line "URGENT: Privacy Matter" to ensure priority handling by our data protection team.