HokiBet Privacy Policy – Malaysian Player Data Protection

HokiBet is an online sports betting and casino platform built to serve Malaysian players. We understand that your trust is our most valuable asset, and protecting your personal data is a responsibility we take extremely seriously.

This Privacy Policy has been prepared in accordance with the requirements of the Personal Data Protection Act 2010 (PDPA) Malaysia, which governs how organisations collect, use and disclose personal data within Malaysia. As a platform operating for Malaysian players, hokibet fully comply with the data protection principles established under Malaysian law.

HokiBet collects your personal data through various means — directly from you during registration or platform use, and automatically through the technologies we employ.

2.1 Data We Do Not Collect

HokiBet does not collect sensitive data such as health information, sexual orientation, religious beliefs, or political affiliations. We also do not store full credit or debit card numbers — payment information is processed through secure third-party payment providers including FPX, Touch 'n Go eWallet, DuitNow, GrabPay, Boost, and ShopeePay.

The personal data we collect is used solely for legitimate purposes directly related to the services provided by hokibet. The following outlines the primary purposes for which your data is used:

3.1 Platform Operations & Account Management

• Creating and managing your hokibet member account.
• Securely processing deposit and withdrawal transactions.
• Verifying your identity (KYC) to meet legal compliance requirements.
• Settling bets and crediting winnings to your account.

3.2 Security & Fraud Prevention

• Detecting and preventing fraudulent activity, money laundering, or platform abuse.
• Monitoring for suspicious usage patterns to protect the security of your account.
• Complying with reporting requirements to the relevant authorities in Malaysia.

3.3 Service Improvements

• Analysing usage patterns to improve the user experience on the hokibet platform.
• Developing new features and products better suited to the needs of Malaysian players.
• Analysing game preferences — Super League football, badminton, e-sports, live casino — to optimise our offerings.

3.4 Communication & Customer Support

• Sending important notifications related to your account, transactions, and security.
• Responding to enquiries and complaints via live chat, email, or other communication channels.
• Sending promotional and bonus communications (where you have opted in to receive them).

HokiBet does not sell, rent or trade your personal data to third parties for marketing purposes. However, in certain legitimate circumstances, we may need to share your information with the following parties:

• Payment providers: Information required to process transactions via FPX, Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and other payment methods supported by hokibet.
• Technology service providers: Companies that assist in the operation of the hokibet platform — including hosting, data processing, and analytics — all bound by strict confidentiality agreements.
• Law enforcement authorities: We will disclose the necessary information to the police, courts, or other authorities in Malaysia when required by law or court order.
• Audit and compliance: Independent auditors or regulatory bodies conducting compliance reviews of hokibet's operations.

In all instances of data sharing, hokibet ensuring that recipients comply with data protection standards equivalent to or higher than those we apply ourselves.

HokiBet implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration or destruction.

5.1 Technical Security

• 256-bit SSL Encryption: All communications between your device and hokibet's servers are encrypted using TLS 1.3.
• Two-factor authentication (2FA): Available and recommended for all hokibet accounts to prevent unauthorised access.
• 24/7 Monitoring: Automated monitoring systems continuously watch for any unauthorised access attempts or suspicious activity.
• Firewall and intrusion detection systems: Multiple security layers protect hokibet's infrastructure against cyberattacks.
• Regular data backups: Data is automatically backed up to secure locations to ensure continuity of service.

5.2 Organisational Security

• Access to users' personal data is restricted solely to hokibet staff who require it to perform their job responsibilities.
• All staff who handle personal data are bound by confidentiality agreements and undergo regular data protection training.
• Our role-based access control (RBAC) policy ensures each employee can only access the data required for their specific role.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding the personal data we hold. HokiBet fully respects and facilitates the exercise of these rights.

Platform hokibet uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions correctly. Cookies are small text files stored on your device.

HokiBet retains your personal data only for as long as necessary to fulfil the purposes described in this policy, or in accordance with applicable legal requirements in Malaysia.

• Active account data: For the duration your account remains active, plus 5 years following account closure (for audit and compliance purposes).
• Financial transaction records: Minimum 7 years, in line with Malaysian financial regulatory requirements.
• KYC data (identity verification): 5 years after account closure or in accordance with regulatory authority directives.
• Customer support communication logs: 3 years from the date of last communication.
• Cookie and analytics data: Between 30 days and 2 years, depending on the cookie type.

Once the retention period expires, hokibet will securely delete or destroy the data using methods that prevent recovery.

Platform hokibet is intended exclusively for individuals aged 21 years and above. We do not intentionally collect or store personal data of individuals under the age of 21.

HokiBet reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements or service improvements. Any changes will take effect upon publication of the updated version on the hokibet platform.

For significant changes, we will provide reasonable advance notice via email to your registered address, or through a prominent notification on the hokibet platform, at least 14 days before the changes take effect. Your continued use of the platform after changes are published constitutes your acceptance of the latest version of the Privacy Policy.

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by hokibet, you may reach us through the following channels:

• Privacy Email: support@hokibet.ws
• Live Chat: Available 24/7 on the hokibet platform
• Response Time: Within 5 business days for privacy enquiries
• Language of Communication: Bahasa Malaysia and English

If you are not satisfied with our response, you also have the right to lodge a complaint with Department of Personal Data Protection Malaysia responsible for overseeing PDPA compliance in Malaysia.