hk777 Privacy Policy

hk777 ("we", "us", "our", "the Platform") operates the online gaming website available at hk777.cam, serving players primarily based in Indonesia. We are committed to protecting the privacy and security of our members' personal data and to being transparent about how that data is handled.

This Privacy Policy describes the types of personal data hk777 collects from members and visitors, the purposes for which that data is processed, the circumstances under which it may be shared, the security measures we maintain, and the rights available to you regarding your own data. This policy applies to all personal data collected through the hk777 website, mobile-optimised platform, live chat support system, and any other digital touchpoints operated under the hk777.cam domain.

This policy should be read alongside the hk777 Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated herein by reference.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person. An identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, or one or more factors specific to that person.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, or deletion.
• "Data Controller" means hk777, the entity that determines the purposes and means of processing Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of hk777, subject to a data processing agreement.
• "Member" / "You" means any individual who has registered an account on the hk777 platform.
• "KYC" (Know Your Customer) refers to the identity and age verification process hk777 is required to conduct in accordance with internationally recognised anti-money laundering standards.
• "Cookies" means small data files placed on your device by a website to store information about your browsing session and preferences.

hk777 collects the following categories of personal data from members and, in limited cases, from visitors to the platform:

hk777 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information. If any such data is incidentally included in documents submitted for KYC purposes, it is used only to the extent necessary to complete identity verification and is not processed for any other purpose.

hk777 collects personal data through the following means:

• Direct submission: Data you actively provide when registering an account, completing KYC verification, making deposits or withdrawals, updating your profile, or contacting customer support.
• Automated collection: Technical and gameplay data collected automatically when you access and use the hk777 platform, including through cookies, server logs, and similar tracking technologies. See Section 12 (Cookies) for full details.
• Third-party payment processors: Transaction confirmation data received from Indonesian payment processors and e-wallet providers (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) when you initiate a deposit or withdrawal. hk777 does not store full bank account numbers; only masked references sufficient to process transactions are retained.
• Game providers: Aggregated or session-level gameplay data from licensed game studios (including Pragmatic Play, Evolution Gaming, PG Soft, and Spribe) integrated into the hk777 platform, used for account management, dispute resolution, and responsible gaming monitoring.
• Identity verification services: Where hk777 uses a third-party KYC verification provider, confirmation of identity check outcomes may be received from that provider, though original document data is processed in accordance with that provider's own privacy standards and applicable data processing agreements.

hk777 processes your personal data for the following defined purposes:

• Account management: To create, maintain, and administer your hk777 member account, including authentication, password resets, and account preference settings.
• Service delivery: To enable you to access and use the full suite of hk777 gaming services — including sportsbook markets, live casino tables, slot titles, Capsa Susun, and Live Roulette — and to process all associated financial transactions in IDR.
• KYC and regulatory compliance: To verify your identity and age (minimum 21 years), satisfy internationally recognised anti-money laundering (AML) requirements, and respond to lawful requests from regulatory or law enforcement bodies.
• Fraud prevention and platform security: To detect, investigate, and prevent fraudulent activity, account takeovers, multi-accounting, bonus abuse, and other violations of the hk777 Terms & Conditions.
• Responsible gaming: To monitor gameplay patterns for indicators of problem gambling, to enable and enforce deposit limits, loss limits, session reminders, and self-exclusion requests, and to fulfil our duty-of-care obligations to members.
• Customer support: To respond to your enquiries, resolve disputes, and handle formal complaints through our 24/7 support channels with Indonesian-speaking agents.
• Platform improvement: To analyse aggregated and anonymised usage data to improve platform performance, game selection, user experience, and localisation for the Indonesian market.
• Marketing communications: To send you promotional offers, bonus notifications, and tournament announcements by email or platform notification, where you have consented to receive such communications. You may withdraw consent at any time through your account notification settings.

hk777 relies on the following legal bases to process your personal data, consistent with internationally recognised data protection principles:

• Contractual necessity: Processing required to perform the contract between hk777 and you as a member — including account registration, transaction processing, and service delivery — is carried out on the basis that it is necessary for the performance of that contract.
• Legal obligation: Processing necessary to comply with applicable legal obligations, including KYC identity verification, AML reporting, and responses to lawful regulatory or law enforcement requests.
• Legitimate interests: Processing carried out for the purpose of fraud prevention, platform security, responsible gaming monitoring, and aggregated analytics, where hk777's legitimate interests are not overridden by your data protection rights.
• Consent: Processing of your data for marketing communications and optional personalisation features, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

hk777 does not sell your personal data. We share personal data only in the following limited and controlled circumstances:

• Payment processors: Financial data is shared with Indonesian bank and e-wallet payment processors (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, LinkAja) solely to execute your deposit and withdrawal transactions.
• Game providers: Session identifiers and gameplay data are shared with licensed game studios integrated into hk777 (including Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, and Spribe) to facilitate game delivery, round reconciliation, and dispute resolution. These providers process data under their own privacy frameworks and in accordance with data processing agreements with hk777.
• KYC verification providers: Identity documents and verification requests are processed by third-party KYC service providers engaged by hk777 under strict contractual data processing terms. These providers act as Data Processors and may not use your data for any purpose beyond the scope of the verification service.
• Customer support infrastructure: Support ticket and live chat data may be processed through third-party customer service platform providers, again governed by data processing agreements.
• Regulatory and law enforcement authorities: hk777 will disclose personal data to competent regulatory bodies, courts, or law enforcement authorities where required to do so by law, court order, or in connection with the prevention of financial crime.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of hk777's assets, personal data held by hk777 may be transferred to the acquiring entity, subject to equivalent data protection obligations.

hk777 operates as an internationally licensed platform. Some of the third-party service providers we engage — including game studios, KYC verification providers, and infrastructure partners — may process personal data in jurisdictions outside Indonesia. Where such transfers occur, hk777 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that described in this policy.

Such safeguards include contractual clauses imposing data protection obligations on the receiving party, requirements to implement technical and organisational security measures consistent with industry standards, and restrictions on onward transfer of data to further third parties without hk777's written authorisation.

hk777 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, subject to any longer retention periods required by applicable law or regulation. The following indicative retention periods apply:

• Account and Identity Data: Retained for the duration of your active membership and for a minimum of five years following permanent account closure, in accordance with AML and record-keeping obligations.
• KYC Documents: Retained for a minimum of five years from the date of submission or from the date of account closure, whichever is later, as required by internationally recognised AML standards.
• Financial Transaction Records: Retained for a minimum of five years from the date of the transaction, consistent with financial record-keeping requirements.
• Gameplay Data: Retained for the duration of your active membership plus two years following account closure for dispute resolution purposes.
• Communications Data (support tickets, live chat): Retained for up to three years from the date of the interaction, unless the data relates to an unresolved dispute, in which case it is retained until final resolution.
• Technical and Cookie Data: Session data is retained for the duration of your browsing session. Persistent cookie data is retained for the period specified in the individual cookie settings, typically between 30 days and 12 months.
• Marketing Consent Records: Retained for the duration of your consent plus a reasonable period thereafter to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

hk777 implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the hk777 platform, covering account logins, financial transactions, and form submissions.
• Encrypted storage of sensitive data fields, including passwords (stored as salted cryptographic hashes) and financial identifiers.
• Access controls: Role-based access restrictions limiting exposure of personal data to hk777 staff and contractors who require it for a specific operational purpose. Access is logged and regularly audited.
• Network security: Firewalls, intrusion detection systems, and regular vulnerability assessments to protect the platform's underlying infrastructure.
• Incident response: A documented data breach response procedure that includes internal escalation, containment, and — where required by applicable obligations — notification to affected members.
• Staff training: All hk777 personnel with access to personal data receive regular training on data protection responsibilities and secure data handling practices.

As a member of hk777, you have the following rights with respect to your personal data. To exercise any of these rights, please contact hk777 support using the contact details in Section 15.

• Right of Access: You have the right to request confirmation of whether hk777 holds personal data about you and, if so, to receive a copy of that data along with information about how it is processed.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data held by hk777. Some data fields can be updated directly within your account settings; others require a formal request to our support team.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent and no other legal basis applies, or where the data has been processed unlawfully. This right is subject to hk777's legal and regulatory retention obligations, which may require certain data to be retained beyond your request.
• Right to Restriction: You have the right to request that hk777 restricts the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or where processing is unlawful but you prefer restriction over deletion.
• Right to Object: You have the right to object to the processing of your personal data where hk777 relies on legitimate interests as the legal basis, including for direct marketing purposes. Where you object to marketing processing, hk777 will cease that processing immediately.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.

hk777 will respond to all rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 30 days, with notification to you of the extension and the reason for it. Rights requests are processed free of charge unless manifestly unfounded or excessive.

hk777 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small data files stored on your device when you visit the hk777 website. They enable core functionality, support security measures, and help us understand how members interact with the platform.

hk777 uses the following categories of cookies:

• Essential Cookies: Required for the platform to function correctly. They include session authentication cookies, security tokens, and load-balancing identifiers. These cookies cannot be disabled without rendering parts of the platform unusable.
• Functional Cookies: Used to remember your preferences such as language settings, last visited game category, and notification preferences, so you do not need to re-enter them on subsequent visits.
• Analytics Cookies: Used to collect aggregated, anonymised data about how visitors navigate the platform — such as which pages are visited most frequently, how long sessions last, and where users typically exit. This data is used to improve platform structure and performance.
• Responsible Gaming Cookies: Used to support session time tracking and reality-check reminder functionality for members who have enabled these tools in their account settings.

You may manage cookie preferences through your browser settings. Disabling certain cookie categories may affect the functionality of the hk777 platform. Browser-level cookie management instructions vary by browser and are available in your browser's help documentation.

The hk777 platform is strictly intended for adults aged 21 years and older. hk777 does not knowingly collect personal data from any individual under the age of 21. The KYC verification process is designed to confirm that all members meet this minimum age requirement before real-money gaming activity is permitted.

If hk777 becomes aware that personal data has been collected from an individual under the age of 21, the associated account will be immediately suspended, all funds will be returned to the originating payment method (net of any withdrawals already made), and the personal data will be deleted from our systems as promptly as possible, subject to any legal retention obligations.

Parents and guardians who believe a minor may have registered on the hk777 platform should contact our support team immediately at [email protected] so that the matter can be investigated and resolved without delay.

hk777 reviews this Privacy Policy periodically and may update it to reflect changes in applicable data protection law, regulatory guidance, platform functionality, or our internal data practices. The "Last updated" date at the top of this page will be revised to reflect each new version.

Where an update is material — meaning it significantly alters the way hk777 processes your personal data or affects your rights — we will provide advance notice via a platform notification or by email to your registered address, with a minimum notice period of 14 days before the revised policy takes effect.

Your continued use of the hk777 platform following the effective date of a policy update constitutes your acknowledgement of and agreement to the revised Privacy Policy. If you do not agree with any material change, you may close your account by contacting our support team prior to the effective date.

For all privacy-related enquiries, including requests to exercise your data rights, questions about this policy, or concerns about the way hk777 has handled your personal data, please contact our support team through the following channels:

• Email: [email protected] (plain text only — not a clickable link)
• Live Chat: Available 24/7 via the hk777 platform, staffed by Indonesian-speaking agents across WIB (UTC+7), WITA (UTC+8), and WIT (UTC+9) time zones.

hk777 will acknowledge all privacy-related requests within 5 business days and aims to resolve them within 30 days. Where additional time is required due to the complexity or volume of requests, we will notify you with an updated timeline.