hao188 Privacy Policy

hao188 ("we", "us", "our") operates the online gaming and sports betting platform accessible at https://hao188.pro ("Platform"). We are committed to protecting the privacy and personal data of all Members and visitors who interact with the Platform. This Privacy Policy sets out in plain, transparent terms the categories of personal data we collect, the purposes for which it is processed, the parties with whom it may be shared, the safeguards we apply to protect it, and the rights available to you as a data subject.

hao188 serves players primarily based in Indonesia and takes its obligations regarding responsible data handling seriously. All personal data processing described in this Policy is conducted in a manner consistent with internationally recognised data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, and integrity and confidentiality.

If you have questions about how your data is handled at any point, our Data Protection contact is reachable at [email protected]. Details are also provided in the Contact section of this Policy.

The following terms carry the meanings assigned to them throughout this Privacy Policy:

hao188 collects only the Personal Data that is necessary for the purposes described in this Policy. The categories of data we collect include:

We do not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond what is contained in a standard identity document photograph), or health data, unless you voluntarily disclose such information through a responsible gaming self-exclusion request.

hao188 collects Personal Data through the following channels:

• Direct submission: Information you provide when completing the registration form, updating your account profile, submitting KYC documents, initiating deposits or withdrawals, or contacting customer support.
• Automated technical collection: Data gathered automatically when you access the Platform, including IP addresses, session logs, clickstream data, and cookie-stored preferences.
• Transaction records: Financial data generated when you deposit or withdraw funds via Indonesian payment providers (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, OVO, DANA, GoPay, ShopeePay, LinkAja).
• Gaming platform logs: Bet placement records, game session data, and RNG outcome logs generated by hao188's gaming engine and third-party software providers (Pragmatic Play, Evolution Gaming, Spribe, Pocket Games Soft, and others).
• Third-party verification services: Identity verification and fraud-screening data returned to hao188 by KYC service providers as part of the account verification process.
• Customer support interactions: Chat logs, email exchanges, and call records created when you contact hao188 for assistance.

hao188 processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform the contract between you and hao188, including account creation, game operation, payment processing, and customer support delivery.
• Consent: Processing based on your freely given, informed consent — for example, the collection of optional preference data or the sending of marketing communications. You may withdraw consent at any time by contacting support or adjusting your account notification settings.
• Legitimate interests: Processing necessary for hao188's legitimate business interests, including fraud detection and prevention, security monitoring, platform improvement, and responsible gaming compliance, provided such interests are not overridden by your fundamental rights and freedoms.
• Legal obligation: Processing necessary to comply with applicable legal obligations, including anti-money laundering (AML) requirements, financial record-keeping mandates, and law enforcement requests from competent authorities.

hao188 uses the Personal Data it collects for the following specific purposes:

• Account management: Creating and maintaining your hao188 account, authenticating your identity at login, and managing your account settings and preferences.
• Service delivery: Processing bets and wagers, settling games and sporting event markets, crediting winnings in IDR, and facilitating deposit and withdrawal transactions via local Indonesian banks and e-wallets.
• Identity verification (KYC): Verifying your identity, age (21+), and payment method ownership before processing withdrawal requests, in accordance with our Terms & Conditions and applicable compliance standards.
• Fraud prevention and security: Detecting and preventing fraudulent account activity, multi-accounting, bonus abuse, money laundering, and unauthorised access attempts.
• Responsible gaming: Monitoring gaming behaviour to identify patterns that may indicate problem gambling, applying self-imposed deposit limits and session restrictions, and reaching out to Members who may need support.
• Customer support: Responding to enquiries, resolving disputes, processing complaints, and maintaining a record of support interactions for quality and training purposes.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to Members who have opted in to receive such communications. You may unsubscribe at any time.
• Platform analytics and improvement: Analysing aggregated usage data to improve the performance, design, and product range of the Platform.
• Legal and regulatory compliance: Meeting hao188's obligations under applicable laws, responding to lawful requests from regulatory or law enforcement authorities, and maintaining required financial records.

hao188 does not sell, rent, or trade your Personal Data to any third party for their own commercial purposes. We share Personal Data only in the following limited and controlled circumstances:

• Payment processors: Financial data is shared with Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) solely to facilitate your deposit and withdrawal transactions.
• KYC and fraud-screening providers: Identity documents and verification data may be submitted to specialist third-party KYC service providers under strict contractual data processing agreements to fulfil our identity verification obligations.
• Gaming software providers: Gameplay and session data is shared with licensed third-party game studios (including Pragmatic Play, Evolution Gaming, Spribe, and Pocket Games Soft) to the extent necessary for game operation, auditing, and dispute resolution.
• IT infrastructure and cloud hosting: Technical data and account records are stored on servers managed by trusted infrastructure partners who process data solely on hao188's instructions and are bound by confidentiality obligations.
• Legal and regulatory authorities: hao188 may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts when required to do so by a binding legal obligation, court order, or lawful government request. We will notify the affected Member of any such disclosure where we are legally permitted to do so.
• Business restructuring: In the event of a merger, acquisition, or sale of substantially all of hao188's assets, Member data may be transferred to the acquiring entity as part of the transaction, subject to equivalent privacy protections.

All third-party Processors engaged by hao188 are required to implement appropriate technical and organisational security measures and are prohibited from using Member data for any purpose beyond the specific processing activities authorised by hao188.

The hao188 Platform uses cookies and similar tracking technologies to deliver a functional, personalised, and secure user experience. The categories of cookies we deploy are as follows:

Strictly necessary cookies cannot be disabled as they are essential for Platform functionality. You may manage functional and analytics cookies through your browser settings; however, disabling these cookies may impair certain features of the Platform. hao188 does not use third-party advertising or retargeting cookies.

hao188 retains Personal Data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Active account data: Retained for the duration of your membership and for a period of five years following account closure, to satisfy anti-money laundering record-keeping obligations and to respond to any post-closure disputes.
• Transaction and financial records: Retained for a minimum of five years from the date of the transaction, in line with standard financial compliance requirements.
• KYC documents: Retained for five years following the closure of the associated account or the completion of the last transaction to which the documents relate, whichever is later.
• Customer support records: Live chat transcripts and email correspondence are retained for three years from the date of the interaction.
• Marketing consent records: Retained for as long as you remain opted in, and for three years following any opt-out, to demonstrate compliance with consent obligations.
• Technical and log data: Server access logs and security event logs are retained for a maximum of 12 months, after which they are deleted or anonymised.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised in accordance with hao188's internal data disposal procedures.

hao188 implements a layered approach to data security, combining technical controls, organisational policies, and ongoing staff training. Key measures include:

• Encryption in transit: All communications between your device and the Platform are encrypted using TLS 1.2 or higher.
• Encryption at rest: Sensitive data fields — including passwords (stored as salted hashes), financial account details, and KYC document files — are encrypted in the database at rest.
• Access controls: Internal access to Member Personal Data is restricted to authorised personnel on a strict need-to-know basis. Access rights are reviewed regularly and revoked immediately upon staff departure.
• Intrusion detection: Automated monitoring systems are deployed to detect and alert on suspicious access patterns, brute-force login attempts, and anomalous data queries in real time.
• Penetration testing: The Platform undergoes regular third-party security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident response: hao188 maintains a documented security incident response plan. In the event of a data breach that is likely to result in risk to affected individuals, hao188 will notify impacted Members without undue delay and take immediate remediation action.

While hao188 takes all reasonable steps to protect your Personal Data, no online system can be guaranteed to be 100% secure. You are responsible for maintaining the confidentiality of your own login credentials and for logging out of the Platform when using shared or public devices.

As a data subject, you have the following rights with respect to your Personal Data held by hao188. To exercise any of these rights, contact us at [email protected] with your registered username and a clear description of your request. We will respond within 30 days.

Please note that certain rights may be limited or overridden where hao188 is required to retain or process data to comply with a legal obligation, to protect the rights of third parties, or to establish, exercise, or defend legal claims.

hao188 requires all Members to declare that they are at least 21 years of age at the time of registration and to provide identity documentation confirming their date of birth as part of the KYC process. If hao188 discovers that Personal Data has been submitted by or on behalf of a person under the age of 21, the associated account will be closed immediately, all funds will be handled in accordance with our Terms & Conditions, and the relevant data will be securely deleted as soon as practicable.

If you believe that a minor has registered an account on the Platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

hao188 primarily stores and processes Member data on servers located within or serving the Asia-Pacific region. In certain circumstances — for example, when engaging specialist KYC verification providers or cloud infrastructure partners — Personal Data may be transferred to and processed in jurisdictions outside Indonesia.

Where such transfers occur, hao188 ensures that adequate safeguards are in place to protect your Personal Data, including contractual data processing agreements that incorporate internationally recognised standard contractual clauses or equivalent protections. hao188 does not transfer Personal Data to jurisdictions that do not provide a comparable level of data protection without first implementing appropriate transfer mechanisms.

hao188 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When material changes are made, we will update the "Last Updated" date at the top of this page and, where reasonably practicable, notify active Members via the contact details associated with their account.

Your continued use of the Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically to stay informed about how hao188 protects your personal information. If you disagree with any changes to this Policy, you may request account closure in accordance with clause 3.5 of our Terms & Conditions.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please reach out to the hao188 support team through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 via the hao188 website
• WhatsApp: 62-811-xxxx-xxxx
• Support Hours: 24 hours a day, 7 days a week (WIB, UTC+7)

Our Indonesian-speaking support agents are available around the clock and will acknowledge all privacy-related requests within one business day. Complex requests — such as Subject Access Requests or data deletion requests — will be responded to in full within 30 calendar days of receipt.

When submitting a privacy request, please include your registered username and a clear description of your request so that we can verify your identity and respond efficiently. We may ask for additional verification information to protect your account from unauthorised access requests.