Privacy Policy

hah788 is committed to protecting the privacy and personal data of every Player who uses our online gaming and sports betting platform. We recognize that the trust you place in us when providing personal information is significant, and we take that responsibility seriously.

This Policy applies to all personal data collected through the hah788 website at https://hah788.cam, our mobile-optimized interfaces, customer support interactions, and any other service touchpoints associated with the hah788 brand. It governs data collected from Players located in Indonesia and any other jurisdictions where the Platform is accessible.

We collect and process personal data only to the extent necessary to deliver our services, comply with legal obligations, prevent fraud, and continuously improve the quality and security of the Platform. We do not sell your personal data to third parties for marketing purposes.

If you have questions about any aspect of this Policy or wish to exercise your privacy rights, please contact our Data Protection team at [email protected].

We collect personal data through several channels and in several categories. The information we collect depends on how you interact with the hah788 Platform:

Registration and Account Data

• Full legal name as it appears on official identity documents
• Date of birth (used to verify you are at least 21 years of age)
• Residential address, city (e.g., Jakarta, Surabaya, Bandung, Medan), and postal code
• Email address and mobile phone number
• Username and encrypted password
• Preferred currency (IDR / Rp) and language preferences

Identity Verification (KYC) Data

• Copies of government-issued identity documents (KTP, passport, driver's license)
• Proof of address documents (utility bills, bank statements)
• Selfie photographs taken alongside identity documents
• Source of funds declarations where required by enhanced due diligence procedures

Financial Transaction Data

• Bank account details for payment methods you register (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata)
• E-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja)
• Deposit and withdrawal history, amounts, timestamps, and transaction references
• Bonus claims, wagering activity, and Account balance history

Technical and Usage Data

• IP address and approximate geographic location derived therefrom
• Device type, operating system, and browser version
• Session timestamps, page navigation paths, and feature usage patterns
• Cookies and similar tracking technologies (see Section 6)
• Game activity logs, bet histories, and gaming session durations

Communications Data

• Records of customer support interactions via live chat and email
• Feedback, complaints, and dispute correspondence
• Responses to surveys and promotional communications

hah788 uses the personal data we collect for the following specific, lawful purposes:

• Account Administration: Creating and managing your Account, verifying your identity, and maintaining accurate records of your profile and preferences.
• Service Delivery: Processing deposits and withdrawals, facilitating access to casino games, live dealer tables, and sports betting markets, and delivering the full functionality of the hah788 Platform.
• KYC and Compliance: Fulfilling Know Your Customer obligations, age verification (21+), anti-money laundering (AML) checks, and enhanced due diligence where required.
• Fraud Prevention and Security: Detecting, investigating, and preventing unauthorized access, fraudulent transactions, bonus abuse, collusion, and other prohibited conduct as defined in our Terms & Conditions.
• Customer Support: Responding to your enquiries, resolving disputes, and providing technical assistance in both English and Indonesian.
• Responsible Gaming: Monitoring gaming behavior to identify patterns consistent with problem gambling; implementing deposit limits, time-outs, and self-exclusion tools at your request or where our assessment warrants intervention.
• Marketing Communications: Sending promotional offers, bonus notifications, and seasonal campaign information to Players who have opted in to receive such communications. You may opt out at any time.
• Platform Improvement: Analyzing usage data, game performance metrics, and navigation patterns to improve the user experience, introduce new features, and resolve technical issues.
• Legal Obligations: Maintaining records required by applicable international gaming regulations, responding to lawful requests from competent authorities, and enforcing our Terms & Conditions.

hah788 processes your personal data on the following lawful grounds:

• Contractual Necessity: Processing your registration data, transaction history, and KYC documents is necessary for the performance of our contract with you as set out in the Terms & Conditions.
• Legal Obligation: Identity verification, AML screening, and record retention are required by our licensing obligations and applicable financial crime prevention regulations.
• Legitimate Interests: Fraud detection, security monitoring, platform analytics, and responsible gaming interventions are conducted on the basis of hah788's legitimate interest in maintaining a safe, fair, and commercially viable platform.
• Consent: Marketing communications and non-essential cookies are processed only with your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

hah788 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients under strictly controlled conditions:

• Payment Processors and Banking Partners: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum necessary payment data to process your transactions.
• Identity Verification Providers: Third-party KYC and AML screening services receive identity document data solely for the purpose of verifying your identity and conducting required compliance checks.
• Game Technology Providers: Studios including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft may receive session and gameplay data necessary to deliver their games and resolve technical disputes.
• Customer Support Platforms: Authorized technology partners who provide live chat and ticketing infrastructure may process support correspondence on our behalf under strict data processing agreements.
• Legal and Regulatory Authorities: Where required by law, court order, or at the request of competent regulatory or law enforcement authorities, we will disclose personal data. We will notify affected Players of such disclosures where legally permitted to do so.
• Corporate Transactions: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to a successor entity, subject to equivalent privacy protections.

hah788 uses cookies and similar tracking technologies to operate the Platform effectively, maintain session security, and understand how Players use the site. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without impairing Platform functionality.
• Performance and Analytics Cookies: Collect anonymized or aggregated data about how Players navigate the Platform — which pages are visited most often, how long sessions last, and where technical errors occur. This data helps us improve the Platform experience.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and responsible gaming tool configurations, so you do not need to re-enter them each session.
• Marketing Cookies: Used to deliver promotional content and bonus offers that are relevant to your gaming activity and location. These are only set with your explicit consent.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the performance or functionality of specific Platform features. Most modern browsers allow you to view, block, or delete cookies through the browser's privacy or settings menu.

hah788 retains personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our standard retention periods are as follows:

• Account and Registration Data: Retained for the duration of your active Account relationship, plus a minimum of 5 years following Account closure, in accordance with international AML record-keeping requirements.
• KYC Documentation: Retained for a minimum of 5 years from the date of verification or from the date of the last transaction, whichever is later.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction.
• Customer Support Records: Retained for 3 years from the date of the most recent interaction, or longer if the interaction relates to an unresolved dispute or legal matter.
• Technical and Usage Logs: Retained for up to 12 months for operational purposes, after which they are aggregated or anonymized.
• Marketing Preferences: Retained until you withdraw consent or request erasure, subject to the overriding retention periods above.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that ensures it can no longer be associated with any identifiable individual.

Subject to applicable law and certain limited exceptions, you have the following rights with respect to your personal data held by hah788:

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is being processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data in your Account.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obliga tions.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances, such as while a dispute about its accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or a contract, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing. Where you object to marketing, we will cease processing immediately.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please submit a written request to [email protected] from the email address associated with your Account. We will respond within 30 days of receiving your request. In some cases, we may need to verify your identity before processing your request.

hah788 implements a comprehensive set of technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. Our security framework includes:

• Encryption in Transit: All data transmitted between your device and the hah788 Platform is protected using industry-standard 256-bit SSL/TLS encryption. Look for the padlock icon in your browser's address bar as confirmation.
• Encryption at Rest: Sensitive data stored on our servers — including KYC documents, financial records, and Account credentials — is encrypted at rest using AES-256 encryption.
• Access Controls: Personal data is accessible only to authorized hah788 personnel on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Two-Factor Authentication: Players are encouraged to enable two-factor authentication (2FA) on their Accounts for an additional layer of security. Sensitive Account changes require additional verification steps.
• Intrusion Detection: We operate 24/7 security monitoring systems to detect and respond to unauthorized access attempts, abnormal traffic patterns, and other security events.
• Penetration Testing: The Platform undergoes regular independent security audits and penetration testing to identify and address vulnerabilities before they can be exploited.
• Incident Response: In the event of a data breach that is likely to result in risk to your rights and freedoms, hah788 will notify affected Players without undue delay and take immediate steps to contain and remediate the breach.

While we apply robust security measures, no digital system can guarantee absolute security. You are responsible for maintaining the confidentiality of your Account credentials. Do not share your password with anyone, and notify us immediately at [email protected] if you suspect unauthorized access to your Account.

The hah788 Platform integrates services provided by carefully selected third-party technology and payment partners. These integrations are essential to delivering a complete gaming experience and processing financial transactions securely. Key categories of third-party service involvement include:

• Game Studios: Providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft operate their own game environments within the Platform. When you play their games, limited session and gameplay data may be processed by these studios under their own privacy policies. hah788 maintains contractual oversight of these integrations.
• Payment Infrastructure: Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja) process payment instructions independently in accordance with their own privacy and security frameworks, which are governed by Bank Indonesia regulations.
• KYC and AML Providers: Specialist compliance technology providers verify identity documents and screen against sanctions and PEP (Politically Exposed Person) lists. These providers are subject to strict contractual data processing obligations and regulatory oversight in their own jurisdictions.
• Analytics Platforms: We use anonymized, aggregated analytics tools to understand Platform usage. These tools do not receive personally identifiable information in a form that would allow individual Players to be identified.

hah788 is not responsible for the privacy practices of third-party websites or services that are not operating under a contract with us. We recommend reviewing the privacy policies of any external services you use independently.

The hah788 Platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from any individual under the age of 21, and we take active steps to prevent underage access through our age verification processes at registration.

If we become aware that personal data has been collected from a person under the age of 21 without verifiable parental or guardian consent, we will take immediate steps to delete that data and close the associated Account.

hah788 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable laws, regulatory requirements, or Platform features. We will notify you of material changes through one or more of the following channels:

• A prominent notice displayed on the hah788 Platform upon your next login
• An email notification sent to your registered email address
• An update to the "Last Updated" date displayed at the top of this page

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. Your continued use of the hah788 Platform following the effective date of any amendment constitutes your acceptance of the revised Policy.

If you disagree with any material change to this Policy, you have the right to close your Account before the change takes effect by contacting our support team. Residual data will be retained only to the extent required by our legal and regulatory obligations as described in Section 7.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way hah788 handles your personal data, please do not hesitate to reach out to our dedicated Data Protection team:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 directly through the hah788 Platform
• Response Time: Email enquiries are typically answered within 24 hours (WIB). Live chat responses are immediate during staffed hours.
• Languages: Our support team can assist you in both English and Indonesian.
• Subject Line: For privacy-related enquiries, please use the subject line "Privacy Request — [Your Username]" to ensure your message is routed to the correct team.

We are committed to resolving all privacy-related concerns promptly and transparently. If you are not satisfied with our response, you may escalate your concern to the relevant data protection authority in your jurisdiction.