At hoki9, your privacy is not a legal formality — it is a foundational commitment. This Privacy Policy explains exactly what personal data hoki9 collects from Indonesian platform members, why we collect it, how we use and protect it, who we share it with, and what rights you hold over your own information. Please read it in full before registering an account.
Throughout this Privacy Policy, the following terms carry the meanings set out below:
| Term | Meaning |
|---|---|
| "hoki9" / "We" / "Us" / "Our" | The online gaming and sportsbook platform operated at hoki9.asia and its affiliated operating entities. |
| "Member" / "You" / "Your" | Any individual who registers an account on hoki9 or accesses the Platform in any capacity. |
| "Personal Data" | Any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, residential address, email address, mobile number, payment account details, and device identifiers. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, transfer, restriction, erasure, or destruction. |
| "Platform" | The hoki9 website, mobile-optimised site, any native applications, and all associated services accessible at hoki9.asia. |
| "KYC" | Know Your Customer — the identity verification process hoki9 uses to confirm a Member's identity, age, and source of funds in compliance with applicable anti-money laundering standards. |
| "Cookies" | Small text files placed on a Member's device by the Platform to recognise returning visitors, remember preferences, and support analytics and security functions. |
| "Third-Party Processors" | External service providers engaged by hoki9 to process Personal Data on its behalf — for example, payment processors (BCA, BRI, OVO, DANA, GoPay), identity verification vendors, and analytics platforms. |
hoki9 acts as the Data Controller with respect to all Personal Data collected from Members via the Platform. As Data Controller, hoki9 determines the purposes for which Personal Data is processed and the means by which that processing is carried out.
hoki9 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and applicable data protection laws. The DPO may be contacted via the details provided in Clause 16 of this document.
Our commitment: hoki9 processes Personal Data only to the extent necessary to deliver the Services, comply with applicable legal obligations, and protect the security of the Platform and our Members. We do not sell, rent, or trade your Personal Data to unaffiliated third parties for their own marketing purposes — ever.
hoki9 collects Personal Data across several categories, depending on the nature of your interaction with the Platform. The categories are set out below:
When you register a hoki9 account, we collect: your legal full name, date of birth, gender (optional), Indonesian National Identity Card number (NIK / KTP) or passport number, residential address (including city, province, and postal code — covering all major Indonesian cities such as Jakarta, Surabaya, Bandung, Medan, Semarang, Bali, and Makassar), email address, and mobile phone number.
To facilitate deposits and withdrawals in Indonesian Rupiah (IDR / Rp), hoki9 collects: bank account number and bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, or Bank Danamon), e-wallet account identifier (OVO, DANA, GoPay, ShopeePay, or LinkAja), transaction history, deposit and withdrawal amounts, and currency conversion records where applicable. hoki9 does not store full card numbers, CVV codes, or PIN codes. Payment card tokenisation is handled exclusively by PCI-DSS-compliant third-party processors.
During identity verification, we may collect copies of government-issued photo identification, proof-of-address documents, selfie or liveness-check images, and documentary evidence of payment method ownership. These documents are stored in an encrypted KYC vault and are accessible only to authorised compliance personnel.
hoki9 records all gaming and betting activity on the Platform, including: game sessions and results (slots from Pragmatic Play, NetEnt, Microgaming, Pocket Games Soft, and Spribe; live dealer tables from Evolution Gaming), sportsbook wagers and settlement outcomes (BRI Liga 1, EPL, La Liga, Champions League, MotoGP Mandalika, and others), bonus balances and wagering progress, and responsible gaming tool settings such as deposit limits, session reminders, and self-exclusion status.
When you access the Platform, our servers automatically log: IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, referring URL, pages visited, and timestamps of each request. This data is used for security monitoring, fraud detection, and Platform performance optimisation.
We retain records of all communications between you and hoki9 support — including live chat transcripts, email correspondence, and any documents you submit — to maintain service continuity, train support staff, and resolve disputes. Support is available in both English and Bahasa Indonesia around the clock.
hoki9 collects Personal Data through the following means:
hoki9 processes Personal Data under the following lawful bases:
| Processing Activity | Lawful Basis |
|---|---|
| Account registration and management | Performance of a contract (the Terms & Conditions you agreed to at registration) |
| Deposit and withdrawal processing | Performance of a contract; compliance with financial regulations |
| KYC identity verification | Legal obligation (AML / counter-terrorism financing compliance) |
| Fraud detection and security monitoring | Legitimate interests of hoki9 and its Members |
| Responsible gaming monitoring | Legitimate interests; legal obligation where applicable |
| Promotional communications (email / SMS) | Consent (you may withdraw consent at any time — see Clause 12) |
| Platform analytics and performance optimisation | Legitimate interests of hoki9 |
| Compliance with law-enforcement requests | Legal obligation |
hoki9 uses the Personal Data it collects for the following purposes:
No automated life-affecting decisions: hoki9 does not use fully automated decision-making that produces legal or similarly significant effects on Members (for example, permanent account bans) without human review. Automated systems may flag accounts for review, but the final determination is always made by a qualified human compliance officer.
hoki9 does not sell, rent, or trade your Personal Data. We may share your data only in the following strictly defined circumstances:
hoki9 engages a limited set of regulated third-party service providers who process Personal Data solely on our behalf and under data processing agreements that obligate them to apply security standards equivalent to, or stricter than, those maintained by hoki9. These processors include: payment gateways and local bank partners (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and others), identity verification and KYC vendors, cybersecurity and fraud prevention platforms, cloud infrastructure providers, and customer support tooling.
Game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) receive a pseudonymous session token to authenticate your game session. They do not receive your name, address, payment details, or KTP number. RNG audit firms receive only aggregate game-round data with no Member-identifying fields.
hoki9 will disclose Personal Data where required to do so by a binding court order, subpoena, regulatory directive, or other lawful legal process. Where permitted by law, hoki9 will notify the affected Member before complying. hoki9 may also voluntarily disclose data to law enforcement authorities where it has credible reason to believe that doing so is necessary to prevent an imminent crime, protect national security, or protect the safety of any individual.
In the event of a merger, acquisition, restructuring, or sale of all or substantially all of hoki9's assets, Member Personal Data may be transferred to the acquiring entity as part of that transaction. hoki9 will provide affected Members with at least thirty (30) calendar days' advance notice of any such transfer and will ensure that the acquiring entity is bound by a privacy policy offering at least equivalent protections to this one.
Some of hoki9's Third-Party Processors operate servers located outside Indonesia. Where Personal Data is transferred to a country that does not maintain an equivalent standard of data protection law, hoki9 ensures adequate safeguards are in place — including contractual clauses, binding corporate rules, or transfer impact assessments — before any such transfer is authorised.
hoki9 does not transfer KYC documents, KTP numbers, or Indonesian bank account details to jurisdictions outside the processing locations required by our licensed payment partners (BCA, BRI, BNI, Mandiri, and their regulatory environments) without your explicit consent.
hoki9 retains Personal Data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention schedule applies:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of account plus 5 years after closure |
| KYC and identity documents | Duration of account plus 7 years after closure |
| Financial transaction records | 7 years from transaction date (AML compliance) |
| Gameplay and betting logs | 5 years from session date |
| Support communication records | 3 years from last contact |
| Technical / server logs | 12 months on a rolling basis |
| Marketing consent records | Until consent is withdrawn, plus 2 years |
| Self-exclusion records | Minimum 7 years from exclusion date |
On expiry of the applicable retention period, Personal Data is securely erased or irreversibly anonymised using industry-standard deletion protocols. Anonymised aggregate data may be retained indefinitely for statistical purposes.
hoki9 applies a defence-in-depth security architecture to protect all Personal Data stored on and transmitted through the Platform. Key technical and organisational measures include:
Data breach response: In the event of a confirmed data breach that is likely to result in a high risk to Members' rights and freedoms, hoki9 will notify affected Members without undue delay and in any case within 72 hours of becoming aware of the breach, to the extent that individual notification is practicable.
hoki9 uses Cookies and similar tracking technologies (pixel tags, local storage objects) to operate and improve the Platform. The categories of cookies in use are as follows:
These cookies are essential for the Platform to function and cannot be disabled. They authenticate your session, maintain your login state, route traffic across servers, and remember items in your deposit queue. No personally identifying information is transmitted to third parties via these cookies.
These cookies collect anonymised data about how Members navigate the Platform — which pages are visited most, how long sessions last, and where error messages occur. This information is used exclusively to improve Platform performance. Analytics data is aggregated and does not identify individual Members.
These cookies remember your preferences — such as your preferred sportsbook market (e.g., BRI Liga 1 or EPL), your chosen display language, and whether you have dismissed certain informational banners. Disabling functional cookies may reduce the quality of your experience but will not prevent you from using the Platform.
You may control cookie settings through your browser's privacy preferences at any time. Please note that disabling strictly necessary cookies will prevent you from logging in or completing transactions. Instructions for managing cookies in all major browsers are available from the respective browser's support documentation.
As a hoki9 Member, you hold the following rights with respect to your Personal Data. Requests may be submitted at any time to [email protected] with the subject line "Data Rights Request":
hoki9 will respond to all verified data rights requests within thirty (30) calendar days. Where the complexity or volume of requests requires an extension, hoki9 will notify you within the initial thirty-day window and provide a revised completion date, not exceeding ninety (90) days in total.
hoki9 strictly prohibits access by individuals under the age of 21. The Platform does not knowingly collect Personal Data from any person under 21 years of age. If hoki9 discovers or is notified that Personal Data belonging to a minor has been collected — whether through fraudulent age representation during registration or any other means — hoki9 will immediately:
If you are a parent or guardian and believe that a minor in your care has registered a hoki9 account, please contact [email protected] immediately. hoki9 treats all such reports as a matter of the highest urgency and will acknowledge receipt within two (2) hours.
The Platform may contain references to or integrations with third-party services — including game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) and payment providers (BCA, BRI, OVO, DANA, GoPay, ShopeePay, LinkAja). Where your interaction with the Platform requires a data handoff to a third-party processor — such as initiating a bank transfer via BCA or an e-wallet deposit via GoPay — that processor's own privacy and data security policies will govern the processing it performs on its own systems.
hoki9 is not responsible for the privacy practices of third-party entities operating under their own brand names, even where those entities are integrated within the Platform's interface. hoki9 recommends that all Members review the privacy policies of any third-party service provider before sharing personal or financial data with them.
hoki9 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, our data processing activities, or the services we offer. When material changes are made — for example, adding a new category of Personal Data or a new category of third-party processor — hoki9 will:
Your continued use of the Platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the changes, you must cease using the Platform and may request account closure and data erasure in accordance with Clause 12.
For all privacy-related enquiries, data rights requests, or concerns about how hoki9 handles your Personal Data, please contact our Data Protection Officer through the following channel:
Email: [email protected] — subject line: "Privacy / DPO Request"
Response Time: Acknowledgement within 24 hours; full response within 30 calendar days
Live Support: 24/7 via on-site live chat (WIB, UTC+7)
Languages: English and Bahasa Indonesia — native Indonesian-speaking agents are available around the clock
Our privacy commitments are backed by real technical and organisational measures — not just policy language. Here is a plain-English summary of the six pillars that keep your data safe on hoki9.
Every byte of data you transmit to hoki9 — login credentials, KTP details, bank account numbers for BCA, BRI, or Mandiri withdrawals — travels over a 256-bit SSL/TLS encrypted channel. Data at rest is protected with AES-256 encryption. Your information is unreadable to anyone who intercepts it.
KYC documents — your KTP, passport, and bank statements — are stored in an isolated, encrypted vault accessible only to authorised compliance officers. These documents are never shared with game studios, marketing partners, or analytics vendors. Retention follows a strict seven-year schedule aligned with international AML obligations.
hoki9 will never sell, rent, or trade your Personal Data to unaffiliated third parties for their own commercial purposes. The only data sharing that occurs is strictly necessary to deliver the Services — for example, passing a pseudonymous session token to Pragmatic Play or Evolution Gaming to authenticate your game session. Your identity remains yours alone.
Our 24/7 intrusion detection system analyses millions of Platform events per day, flagging anomalous login attempts, unusual withdrawal patterns, and potential account takeovers in real time. Independent penetration tests are conducted at least annually, with critical vulnerabilities remediated within 72 hours of discovery.
You hold seven distinct data rights over your Personal Data — access, rectification, erasure, restriction, portability, objection, and consent withdrawal. Submit any request to [email protected] and receive a full response within 30 calendar days. Marketing preferences can be updated or revoked instantly at any time.
hoki9 publishes clear, category-by-category data retention periods (see Clause 9). When the applicable retention period expires, data is securely erased using industry-standard deletion protocols — not archived indefinitely. You always know exactly how long hoki9 holds each type of your information and why.
hoki9 combines world-class security with a premium Indonesian gaming experience — thousands of slots, live sportsbook odds on BRI Liga 1 and the EPL, and live dealer tables, all backed by the privacy protections you just read about.
Have questions about your data? Visit our FAQ or review our Responsible Gaming page. Adults only (21+).