Privacy Policy hoki78 — Personal Data Protection for Malaysian Players

1 Introduction and Scope of This Policy

Welcome to the hoki78 Privacy Policy. This document explains how we collect, use, store, and protect your personal information as a user of the hoki78 platform. We understand that your privacy is not just a fundamental right, but also the foundation of trust between you and us as your online entertainment provider in Malaysia.

This Privacy Policy applies to all users who register, browse, or use any part of the hoki78 platform, including the website, mobile app, and any related services. By registering or using our platform, you agree to the terms set out in this Privacy Policy.

Hoki78 operates as a licensed online entertainment platform and complies with all applicable data protection laws in Malaysia, including the Personal Data Protection Act 2010 (PDPA). We take this responsibility seriously and ensure every aspect of your data handling is carried out with full transparency.

2 Personal Information We Collect

To provide a secure, legitimate, and high-quality service, hoki78 needs to collect certain categories of personal information from our users. This collection is carried out transparently and only for the purposes stated in this policy.

We only collect information that is strictly necessary for the stated purposes. We do not request sensitive information such as your medical details, religious beliefs, or political views.

3 Data Collection Method

Hoki78 collects personal information through a variety of legitimate and transparent channels. It is important that you understand how your data reaches us so you can make informed decisions.

• Account Registration: When you register a new account, you voluntarily provide basic information such as your name, email, and password.
• KYC Verification: To meet anti-money laundering (AML) legal requirements, we require identity verification documents during your first withdrawal.
• Financial Transactions: Every time you make a deposit or withdrawal, our system records the transaction details for audit and security purposes.
• Platform Usage: Usage data is collected automatically via cookies and similar tracking technologies as you browse our platform.
• Support Communications: When you contact our support team via live chat or email, conversations may be recorded for quality control purposes.
• Third-Party Partners: In limited cases, we may receive information from licensed identity verification providers or payment processors to ensure data accuracy.

4 How We Use Your Information

Every piece of information we collect has a clear purpose. hoki78 does not use your data for any undisclosed purpose without first obtaining your consent.

• Account Management: Verifying your identity, processing registration, and securely maintaining your account.
• Payment Processing: Facilitating fast and secure deposits and withdrawals via DuitNow, FPX, Touch 'n Go eWallet, GrabPay, and Boost.
• Platform Security: Detecting and preventing fraud, hacking, and account abuse through continuous monitoring.
• Legal Compliance: Meeting reporting obligations to the relevant authorities in accordance with applicable Malaysian law.
• Service Improvement: Analyzing usage patterns to improve platform design, speed, and overall user experience.
• Marketing Communications: Sending information about promotions, bonuses, and platform updates — only if you have given consent to receive such communications.
• Customer Support: Handling your complaints, enquiries, and support requests more efficiently based on your account records.

5 Data Sharing and Disclosure

Hoki78 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. This is our absolute commitment to all platform users.

However, in certain limited situations, we may share your information with the following parties:

• Licensed Payment Processor: Transaction information that must be shared with banks, DuitNow operators, or e-wallet providers to process your payments.
• Identity Verification Provider: The KYC and AML companies we use to verify identity documents as part of our regulatory compliance process.
• Technology Provider: Server infrastructure and cloud service partners that store your data under strict confidentiality agreements.
• Legal Authorities: Information required by courts, police, securities commissions, or other regulatory bodies pursuant to a lawful order under Malaysian law.
• Business Transfer: In the event of a merger, acquisition, or asset sale, users will be notified in advance and given the option to delete their accounts.

6 Data Security & Protection

Hoki78 continuously invests in the latest security infrastructure to keep your personal data safe at all times. The following layers of protection are in place:

• 256-bit SSL Encryption: All communications between your browser and hoki78 servers are encrypted using the latest TLS 1.3 protocol, ensuring no third party can intercept your data in transit.
• PCI-DSS Compliance: Our payment infrastructure complies with Payment Card Industry Data Security Standard (PCI-DSS) Level 1, the highest level for handling financial data.
• Two-Factor Authentication (2FA): We encourage and support the use of 2FA on user accounts for an additional layer of protection against unauthorized access.
• 24/7 Threat Monitoring: Our automated intrusion detection system monitors all platform activity around the clock and will trigger an immediate alert if any suspicious activity is detected.
• Periodic Security Audits: hoki78 undergoes independent security audits at least twice a year by internationally accredited cybersecurity firms.
• Data Segregation: Sensitive data such as financial information is stored separately from general profile data in a restricted-access environment.

7 Data Retention Period

Hoki78 retains your personal data only for as long as necessary for the stated purposes or as required by law. We have a clear and systematic data retention policy:

• Active Account Data: Retained for the duration your account is active plus 7 years after account closure for anti-money laundering compliance purposes.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian tax and financial legal requirements.
• Support Communication Logs: Retained for 3 years for quality control purposes and reference in the event of a dispute.
• Anonymised Analytics Data: Anonymised usage data may be retained indefinitely as it can no longer be linked to any individual.
• KYC Documents: Retained for 5 years after the business relationship ends in accordance with AMLA (Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001) requirements.

Upon expiry of the retention period or upon a valid user request, data will be permanently deleted or anonymised in a manner that prevents recovery.

8 Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 and the international privacy principles we uphold, you have the following rights regarding personal data held by hoki78:

• Right of Access: You may request a copy of all personal data we hold about you at any time.
• Right to Rectification: If any of your data is inaccurate or outdated, you have the right to request its immediate correction.
• Right to Erasure: Under certain circumstances, you may request that your personal data be deleted, subject to our legal obligations.
• Right to Object to Marketing: You may withdraw consent to receive marketing communications at any time through your account settings.
• Right to Data Portability: You may request your data in a machine-readable format for transfer to another platform.
• Right to Lodge a Complaint: If you are dissatisfied with how we handle your data, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia.

To exercise any of the above rights, please contact the hoki78 support team, available 24 hours a day via live chat on the platform. We will process your request within 30 business days.

9 Children's Privacy

Hoki78 is an entertainment platform restricted to users aged 18 and above only. We do not knowingly collect, use, or disclose personal information from individuals under the age of 18.

Our registration process includes age verification, and any account suspected of belonging to a minor will be suspended immediately until identity verification is completed. Should we discover that we have inadvertently collected data from a child, we will take immediate steps to delete that information from our systems.

10 Changes to This Privacy Policy

Hoki78 reserves the right to modify this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or service improvements. The latest update date will always be displayed at the top of this page.

For significant changes, we will notify users via an in-platform notice or email at least 7 days before the changes take effect. Continued use of the hoki78 platform after the effective date of any changes constitutes acceptance of the updated terms.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Any enquiries can be directed to our support team, available in English and Bahasa Malaysia 24/7.