Privacy Policy — Hoki368

This Privacy Policy ("Policy") is published by Hoki368 ("we", "us", "our", "hoki368"), the operator of the online gaming and sports betting platform accessible at https://hoki368.cam. This Policy applies to all users of the platform ("you", "Player", "data subject") regardless of the device or method used to access our services.

hoki368 is committed to handling your personal data with care, transparency, and respect. This Policy describes in detail: what personal data we collect; the purposes for which we process it; the lawful bases on which processing is conducted; how long we retain data; who we may share it with; the security measures we employ to protect it; and the rights you hold as a data subject.

Our platform serves players primarily located across Malaysia — including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, Subang Jaya, and other cities and states. While hoki368 is designed for the Malaysian market, users should be aware that our infrastructure and data processing arrangements may involve systems located outside Malaysia.

For the purposes of this Privacy Policy, the following terms shall have the meanings ascribed to them below:

hoki368 collects personal data in the following categories, each tied to a specific operational or legal purpose:

3.1 Registration and Identity Data. When you create an account, we collect your full legal name, date of birth, email address, Malaysian mobile number, and the username you choose. This data is necessary to establish and maintain your account.

3.2 KYC and Verification Data. To comply with anti-money laundering and identity verification requirements, we collect copies of government-issued identification documents (such as your Malaysian MyKad, Passport, or Driver's Licence), proof of address documents (such as utility bills or bank statements issued within the past three months), and in certain cases a selfie photograph holding your identification document.

3.3 Financial and Transaction Data. We collect records of all deposits, withdrawals, and wagers made through your account. This includes the payment method used (e.g., Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, BTC, USDT), transaction amounts in MYR (or cryptocurrency equivalent), timestamps, and transaction reference numbers.

3.4 Gaming and Betting Activity Data. Records of games played, bets placed, odds accepted, wagering history, bonus usage, and platform navigation paths are collected to operate the gaming services, detect fraud, and comply with responsible gambling obligations.

3.5 Technical and Device Data. We collect IP addresses, browser type and version, operating system, device identifiers, time zone settings, and pages visited. This data is used for security monitoring, fraud prevention, and platform optimisation.

3.6 Communications Data. Records of correspondence between you and hoki368 support — including live chat transcripts, email exchanges, and any supporting materials submitted — are retained for quality assurance and dispute resolution purposes.

hoki368 collects personal data through the following methods:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, respond to surveys, or participate in promotions.
• Automatically through your use of the platform — via cookies, log files, and tracking technologies that collect technical and device data as you browse and interact with the site.
• From third-party payment processors — transaction confirmation data and payment method identifiers received from Malaysian e-wallet and banking partners when you make deposits or withdrawals.
• From identity verification services — document verification results and fraud signals provided by third-party KYC service providers engaged by hoki368 to process identity checks.
• From fraud detection and risk management tools — device fingerprinting, behavioural analytics, and IP geolocation data aggregated from specialised security service providers.

hoki368 processes your personal data for the following specific and documented purposes:

• Account Registration and Management: To create, maintain, authenticate, and administer your hoki368 account, including password reset, account recovery, and profile updates.
• Identity Verification (KYC): To verify your identity and age in accordance with applicable anti-money laundering regulations and our platform's eligibility requirements.
• Payment Processing: To facilitate deposits and withdrawals via your chosen Malaysian payment method, maintain accurate financial records, and reconcile account balances.
• Gaming Services Delivery: To operate the gaming platform, settle bets, process game outcomes, and manage bonus allocations and wagering requirements.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, money laundering, unauthorised account access, and other forms of abuse.
• Responsible Gambling Monitoring: To identify patterns of play that may indicate problem gambling and to administer self-exclusion, deposit limit, and reality check tools where requested.
• Customer Support: To respond to your enquiries, resolve disputes, and maintain a record of communications for quality assurance purposes.
• Legal and Regulatory Compliance: To meet obligations under applicable anti-money laundering, counter-terrorism financing, and gaming regulations, including the retention of transaction records for the periods required by law.
• Platform Improvement: To analyse aggregate usage patterns, identify technical issues, and improve the performance, design, and content of the hoki368 platform.
• Marketing Communications (with consent): To send promotional offers, bonus notifications, and product updates via email or in-platform messaging where you have opted in to receive such communications. You may withdraw marketing consent at any time by contacting support.

hoki368 processes your personal data on the following lawful bases, as applicable to each processing activity:

• Contractual Necessity: Processing required to perform the contract between you and hoki368 — including account creation, payment processing, and gaming services delivery — is conducted on the basis that such processing is necessary to fulfil our contractual obligations to you.
• Legal Obligation: Processing necessary to comply with applicable legal and regulatory requirements — including KYC verification, transaction record retention, and anti-money laundering reporting — is conducted on the basis of compliance with a legal obligation.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gambling monitoring, and service improvement is conducted on the basis of hoki368's legitimate business interests, where those interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and certain cookie-based tracking is conducted on the basis of your explicit consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

hoki368 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients only where necessary and proportionate to the purpose:

• Payment Service Providers: Malaysian e-wallet operators, banking partners (including FPX network participants), and cryptocurrency processing services, as required to execute deposit and withdrawal transactions.
• Identity Verification Providers: Third-party KYC and document verification service providers engaged to process identity checks on hoki368's behalf.
• Fraud Detection and Security Services: Third-party risk management and fraud analytics providers who process device and behavioural data to detect and prevent fraudulent activity.
• Game Studio Operators: Licensed third-party game studios whose products are hosted within the hoki368 platform, to the extent that game session data must be shared to operate individual game rounds.
• Regulatory Authorities: Government agencies, financial intelligence units, or law enforcement bodies where disclosure is required by applicable law, court order, or regulatory direction.
• Professional Advisers: Legal counsel, auditors, and compliance consultants where necessary to obtain professional advice, conduct audits, or manage regulatory inquiries — subject to confidentiality obligations.

All third-party processors engaged by hoki368 are subject to written data processing agreements that impose appropriate data protection, confidentiality, and security obligations consistent with this Policy.

hoki368's operational infrastructure may involve data processing in jurisdictions outside Malaysia. Where personal data is transferred internationally, hoki368 ensures that appropriate safeguards are in place to protect the data in a manner consistent with this Policy.

Safeguards for international transfers may include: contractual clauses that impose binding data protection obligations on the recipient; transfer to jurisdictions that provide an adequate level of data protection as determined by relevant authorities; or other legally recognised mechanisms appropriate to the specific transfer.

By using hoki368, you acknowledge that your personal data may be processed in jurisdictions outside Malaysia. If you require further information about the specific safeguards in place for any international transfer, please contact us using the details in Section 15.

hoki368 uses cookies and similar tracking technologies to operate, maintain, and improve the platform. Cookies are small data files stored on your device that help us recognise your session, remember your preferences, and collect analytics data.

The following categories of cookies are used on hoki368:

• Strictly Necessary Cookies: Essential for the platform to function. These include session cookies that maintain your login state and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without materially impairing platform functionality.
• Functional Cookies: Used to remember your preferences and settings, such as language preferences and display options. Disabling these cookies may affect the personalisation of your experience.
• Analytics Cookies: Used to collect aggregated information about how players navigate and interact with the platform. This data is used to identify technical issues and improve platform usability. Analytics data is processed in anonymised or pseudonymised form where possible.
• Security and Fraud Prevention Cookies: Used to support fraud detection and account security systems by identifying unusual patterns of behaviour across sessions.

hoki368 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of the account relationship and for a period of up to five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years from the date of submission or account closure, whichever is later, as required by applicable financial crime regulations.
• Transaction and Financial Records: Retained for a minimum of seven (7) years to comply with financial record-keeping obligations under applicable law.
• Communications Records: Live chat transcripts and email correspondence are retained for a period of up to three (3) years for dispute resolution and quality assurance purposes.
• Gaming Activity Logs: Individual betting and game outcome records are retained for up to five (5) years to support dispute resolution and regulatory audit requirements.
• Technical and Device Data: IP logs and access records are retained for up to two (2) years for fraud prevention and security monitoring purposes.

Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where anonymisation is not possible, data is placed in restricted access storage pending secure deletion.

hoki368 implements a range of technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our platform servers.
• Encryption at rest for sensitive data categories, including KYC documents and financial records stored on hoki368 infrastructure.
• Two-factor authentication (2FA) available to all players as an optional but strongly recommended account security measure.
• Role-based access controls ensuring that internal personnel may only access personal data where strictly required for their job function.
• Regular independent security assessments and penetration testing of platform infrastructure.
• Automated monitoring systems for anomalous account activity, unusual transaction patterns, and potential intrusion events.
• Documented incident response procedures that include prompt notification obligations where a personal data breach is detected.

Subject to applicable law and certain limited exceptions, you have the following rights with respect to your personal data held by hoki368. These rights may be exercised by contacting us using the details provided in Section 15.

hoki368 will respond to all valid data subject requests within a reasonable timeframe. In complex cases or where the volume of requests is high, we may extend the response period, in which case we will notify you of the extension and the reason for it.

hoki368 is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 21. Our registration process and KYC procedures include age verification steps specifically designed to prevent underage access.

If hoki368 becomes aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete that data, close the associated account, and return any deposited funds to the original payment source in accordance with our responsible gambling obligations.

Parents or guardians who have reason to believe that a minor has registered an account or submitted personal data to hoki368 should contact us immediately using the details in Section 15 so that appropriate action can be taken without delay.

hoki368 reserves the right to update or amend this Privacy Policy at any time. Material changes — such as the introduction of new categories of data collection, significant changes to data sharing arrangements, or changes to your rights — will be communicated to registered players via the email address associated with your account and/or via a prominent notice on the platform.

The "Last Updated" date at the top of this page reflects when the most recent revision was made. We recommend checking this page periodically to stay informed of any changes. Your continued use of hoki368 following the publication of a revised Policy constitutes your acknowledgement of the updated terms.

Where a change requires your fresh consent — for example, a new processing purpose that relies on consent as its lawful basis — we will request that consent separately and will not process your data for the new purpose until it has been obtained.

If you wish to exercise any of your data subject rights, have a question about this Privacy Policy, or wish to raise a concern about how hoki368 handles your personal data, please contact us through the following channels:

For questions specifically about responsible gambling, account self-exclusion, or deposit limits, please visit our dedicatedResponsible Gambling page. For broader platform terms, please refer to our Terms & Conditions.