Privacy Policy — hao78

1 Introduction

This Privacy Policy ("Policy") is issued by hao78 ("hao78", "we", "us", "our") and applies to all personal data collected through the hao78 website at https://hao78.lat and all associated services, games, betting products, account management tools, and customer support channels.

hao78 is an online gaming and sports betting platform serving adult players primarily based in Indonesia. We understand that our Indonesian players — across Jakarta, Surabaya, Bandung, Medan, Bali, Semarang, and beyond — place significant trust in us when they share personal information to create and operate their accounts. That trust is something we take seriously.

By registering an account or using any part of the hao78 platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree with this Policy, please do not use the hao78 platform.

This Policy should be read together with our Terms & Conditions and Responsible Gaming Policy, both of which form part of your overall agreement with hao78.

2 Personal Data We Collect

hao78 collects the following categories of personal data about you during the course of your relationship with us:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is strictly required for identity document verification under KYC obligations.

3 How We Collect Your Data

hao78 collects personal data through the following means:

1. Direct Collection: When you register an account on hao78, complete the KYC verification process, make a deposit or withdrawal, contact our support team, or respond to a survey or promotion, you provide personal data directly to us.
2. Automated Collection: When you access and use the hao78 platform, we automatically collect technical data about your device, browser, IP address, and session activity through server logs, cookies, and similar tracking technologies. See Section 9 for full details on our cookies practices.
3. Third-Party Sources: We may receive personal data about you from third-party service providers who assist us in operating the platform. These include:
   • Payment processors and Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) — for transaction verification and fraud screening.
   • Identity verification service providers — for KYC document validation and age confirmation.
   • Third-party game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) — for game session data and fairness audit logs.
   • Fraud detection and cybersecurity service providers — for risk scoring and account security monitoring.

4 How We Use Your Personal Data

hao78 uses your personal data for the following specific purposes:

1. Account Management: To create, maintain, and administer your hao78 player account, including processing your registration, verifying your identity and age (21+), and managing your account settings and preferences.
2. Payment Processing: To process deposits and withdrawals in Indonesian Rupiah (IDR) via your chosen local bank or e-wallet, to verify that payment accounts are registered in your own name, and to maintain accurate financial records for each transaction.
3. Regulatory and Legal Compliance: To meet our obligations under applicable Know Your Customer (KYC) and Anti-Money Laundering (AML) standards, to respond to lawful requests from regulatory or law enforcement authorities, and to maintain records for the retention periods required under applicable law.
4. Platform Security and Fraud Prevention: To monitor for suspicious activity, detect and prevent fraud, identify unauthorised account access, and protect the integrity of the platform for all players.
5. Responsible Gaming: To monitor gaming behaviour for indicators of problem gambling, to enforce deposit limits and self-exclusion requests, to send responsible gaming alerts where behaviour patterns warrant them, and to ensure compliance with our Responsible Gaming Policy.
6. Customer Support: To respond to your support queries via live chat, email (support@hao78.lat), or WhatsApp, and to maintain records of communications for quality assurance and dispute resolution purposes.
7. Service Improvement: To analyse aggregated and anonymised usage data to improve the performance, design, and functionality of the hao78 platform, and to develop new features and game categories that are relevant to Indonesian players.
8. Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have given your consent or where we have a legitimate interest in communicating with you as an active player. You may opt out of marketing communications at any time via your account settings or by contacting support.
9. Dispute Resolution: To investigate and resolve disputes arising from game outcomes, payment transactions, or bonus claims, using transaction records, game logs, and communications data as the primary evidence base.

5 Legal Basis for Processing

hao78 processes your personal data on the following legal bases:

1. Contractual Necessity: Much of the data processing described in this Policy is necessary for hao78 to perform its obligations under the Terms & Conditions that form the contract between hao78 and you as a registered player. This includes account registration, payment processing, and game access.
2. Legal Obligation: Certain data processing activities — particularly KYC identity verification, AML transaction monitoring, and the retention of financial records — are required by applicable law and regulatory standards. hao78 has no discretion to omit these processing activities.
3. Legitimate Interests: hao78 processes some data on the basis of its legitimate business interests, provided those interests are not overridden by your fundamental privacy rights. This includes fraud prevention, platform security monitoring, service improvement analytics, and responsible gaming monitoring.
4. Consent: Where hao78 relies on your consent as a legal basis for processing — primarily for direct marketing communications and the use of non-essential cookies — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. You may manage consent preferences via your account settings.

6 Data Sharing & Third Parties

hao78 does not sell your personal data to any third party. We share your data only in the following limited circumstances, and only to the extent strictly necessary:

1. Payment Service Providers: We share financial data with our Indonesian banking and e-wallet partners — including BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja — solely for the purpose of processing your deposits and withdrawals. These providers are bound by their own privacy and security obligations.
2. Identity Verification Providers: We share identity document data with our KYC verification service partners for the purpose of confirming your identity and age (21+). These providers process data under strict confidentiality agreements and are prohibited from using your data for any other purpose.
3. Game Studio Partners: Third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — receive limited game session data as required to operate their game software on the hao78 platform. These studios are subject to their own privacy policies and data processing agreements with hao78.
4. Regulatory and Law Enforcement Authorities: hao78 may disclose personal data to competent regulatory bodies or law enforcement agencies where required to do so by law, court order, or lawful regulatory request. We will notify you of such disclosures where permitted by law.
5. Fraud Prevention and Cybersecurity Providers: We share technical data (IP addresses, device fingerprints, session data) with our fraud detection and cybersecurity service partners for the purpose of protecting the platform and all players from fraudulent activity.
6. Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of hao78's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the identity of the new data controller prior to the transfer taking effect.

7 Data Retention

hao78 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting, and reporting requirements. The following general retention principles apply:

1. Active Account Data: All personal data associated with your active hao78 account — including identity data, contact data, financial data, and gaming history — is retained for the duration of your account relationship with hao78.
2. Post-Closure Retention: Following account closure (whether initiated by you or by hao78), we retain your personal data for a minimum of five (5) years to comply with applicable AML regulations, financial record-keeping obligations, and to support the resolution of any outstanding disputes or regulatory inquiries that may arise after closure.
3. KYC Documentation: Identity verification documents (KTP, passport, SIM copies) are retained for a minimum of five (5) years following account closure, in accordance with internationally recognised AML and KYC retention standards.
4. Marketing Data: Where you have opted out of marketing communications, we retain a record of your opt-out status indefinitely to ensure we do not inadvertently contact you again. We do not retain marketing preference data beyond what is needed to honour your preferences.
5. Technical and Log Data: Server logs, IP address records, and session data are retained for a maximum of twelve (12) months for the purposes of platform security and fraud investigation, after which they are anonymised or deleted.
6. Support Communications: Live chat transcripts and email correspondence are retained for three (3) years from the date of the communication for quality assurance and dispute resolution purposes.

When personal data is no longer required for any active purpose, it is securely deleted or anonymised in accordance with hao78's data disposal procedures.

8 Data Security

hao78 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security framework includes:

1. Encryption in Transit: All data transmitted between your browser or device and hao78 servers is protected by 256-bit SSL/TLS encryption. You can verify this by checking for the padlock icon and "https://" prefix in your browser's address bar when accessing hao78.lat.
2. Encryption at Rest: Sensitive data stored in our databases — including KYC documents, financial records, and account credentials — is encrypted at rest using AES-256 encryption. Passwords are stored as salted cryptographic hashes and are never stored in plain text.
3. Access Controls: Access to personal data within hao78's internal systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of access required to perform their specific job function. All internal access is logged and subject to regular audit review.
4. Two-Factor Authentication: hao78 supports and encourages the use of two-factor authentication (2FA) on player accounts to provide an additional layer of security beyond username and password alone.
5. Regular Security Audits: hao78's platform and data infrastructure undergo regular independent security audits and penetration testing to identify and remediate vulnerabilities proactively.
6. Data Breach Response: In the event of a confirmed personal data breach that is likely to result in a risk to the rights and freedoms of affected players, hao78 will notify affected players without undue delay and will take all necessary steps to contain and remediate the breach.

9 Cookies & Tracking Technologies

hao78 uses cookies and similar technologies (including local storage and session tokens) on the hao78.lat website. A cookie is a small text file placed on your device by a website you visit. Cookies enable us to recognise your device on subsequent visits, maintain your session state, and gather usage analytics.

Types of Cookies We Use

You can control cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in to your hao78 account or using the platform's core features. hao78 does not use third-party advertising cookies or behavioural targeting cookies for cross-site advertising.

10 Your Privacy Rights

As a player on the hao78 platform, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact our support team via live chat or email at support@hao78.lat.

hao78 will respond to all verified rights requests within 30 calendar days. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reasons for it. There is no charge for submitting a privacy rights request.

11 International Data Transfers

1. The hao78 platform serves players primarily located in Indonesia. Some of our third-party service providers — including game studios, fraud detection providers, and cloud infrastructure partners — may be located outside Indonesia and may process your personal data in jurisdictions where data protection standards differ from those applicable in Indonesia.
2. Where personal data is transferred to a third country or international organisation, hao78 takes steps to ensure that appropriate safeguards are in place to protect the data. These safeguards may include contractual data processing agreements that incorporate internationally recognised data protection clauses equivalent to those required under applicable law.
3. Your financial transactions with Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) are processed domestically within Indonesia and are therefore not subject to international transfer provisions.
4. By using the hao78 platform, you acknowledge and consent to the international transfers of your personal data as described in this Section, subject to the safeguards described herein.

12 Minors & Age Restriction

If you have reason to believe that a person under the age of 21 has registered an account on hao78 using your payment details or personal information, please contact our support team immediately at support@hao78.lat. We will investigate and take appropriate action without delay.

13 Amendments to This Policy

1. hao78 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the services we offer. The current version of this Policy, together with its effective date, will always be accessible at https://hao78.lat/privacy-policy.
2. Where amendments are material — for example, changes that affect how we use your data, who we share it with, or the rights available to you — hao78 will provide reasonable advance notice to registered players via email notification or a prominent in-platform announcement at least 14 days before the changes take effect.
3. Your continued use of the hao78 platform following the publication of any amended Policy constitutes your acceptance of the updated terms. If you do not accept the amended Policy, you must cease using the platform and may request account closure in accordance with our Terms & Conditions.
4. We recommend that you review this Policy periodically to stay informed of how hao78 protects your personal data. The "Last Updated" date at the top of this page indicates when this Policy was most recently revised.

14 Contact & Privacy Enquiries

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or have a concern about how hao78 handles your personal data, please reach out to us through any of the following channels:

For formal data subject access requests or erasure requests, please contact us via email with the subject line "Data Subject Request — [Your Full Name]" and include a copy of your identity document so we can verify your identity before processing your request. hao78 will not process data rights requests from unverified individuals to protect the security of all player accounts.