hit69 Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all users of the hit69 online gaming platform accessible at https://hit69.cam and all associated services. It governs the collection and processing of personal information provided during account registration, gameplay, payment transactions, customer support interactions, and all other uses of our platform.

hit69 operates as a data controller, meaning we determine the purposes and means of processing your personal data. We collect and process personal information only for legitimate business purposes related to providing our gaming services, maintaining platform security, complying with legal obligations, and improving user experience.

This policy should be read in conjunction with our Terms & Conditions, which govern your use of the hit69 platform. If you have questions about how we handle your data, please contact our Data Protection Officer using the contact details provided at the end of this document.

2. Information We Collect

2.1 Information You Provide Directly

When you register an account with hit69 and use our services, we collect the following categories of personal information that you provide directly:

• Identity Information: Full name, date of birth, nationality, identity document number (KTP/e-KTP), and identity verification documents
• Contact Information: Email address, mobile phone number, residential address in Indonesia
• Account Credentials: Username, password (stored in encrypted form), security questions and answers
• Financial Information: Bank account details (account number, bank name, account holder name), e-wallet details (OVO, DANA, GoPay, ShopeePay account identifiers), payment transaction history
• Communication Data: Messages sent to customer support, chat conversations, survey responses, feedback submissions
• Marketing Preferences: Communication preferences, promotional opt-in/opt-out choices

2.2 Information Collected Automatically

When you access and use the hit69 platform, we automatically collect certain technical and usage information:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers
• Connection Data: IP address, internet service provider, connection timestamps, geographic location (city/region level)
• Usage Data: Pages visited, features used, games played, bet history, session duration, navigation patterns, click behavior
• Cookies and Tracking Technologies: Session cookies, persistent cookies, web beacons, and similar technologies (see Section 9 for detailed cookie information)
• Game Data: Bets placed, games played, outcomes, winnings, losses, bonus usage, wagering progress

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment Processors: Transaction verification data from Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet providers
• Identity Verification Services: Age verification, identity authentication, fraud prevention checks
• Game Providers: Game results, session data, RTP statistics from our casino game partners
• Marketing Partners: Anonymized traffic source data from advertising platforms (no personal identifiers shared)

3. How We Use Your Information

hit69 processes your personal information for the following legitimate business purposes:

3.1 Service Provision and Account Management

• Creating, maintaining, and securing your user account
• Verifying your identity and age (21+ requirement)
• Processing deposits, withdrawals, and payment transactions
• Providing access to casino games, sports betting markets, and live dealer tables
• Tracking bets, game outcomes, bonuses, and account balances
• Enabling communication between you and our customer support team

3.2 Legal and Regulatory Compliance

• Complying with Indonesian anti-money laundering (AML) and counter-terrorism financing (CTF) regulations
• Conducting Know Your Customer (KYC) verification as required by law
• Maintaining records for regulatory reporting and audit purposes
• Responding to legal requests, court orders, and law enforcement inquiries
• Enforcing our Terms & Conditions and detecting violations
• Preventing underage gambling and self-excluded individuals from accessing the platform

3.3 Security and Fraud Prevention

• Detecting, preventing, and investigating fraudulent activity, collusion, and bonus abuse
• Monitoring transactions for suspicious patterns indicative of money laundering
• Protecting against unauthorized access, hacking attempts, and cyber attacks
• Implementing risk-based authentication and account security measures
• Maintaining logs for security audits and incident investigation

3.4 Platform Improvement and Analytics

• Analyzing usage patterns to improve user experience and platform functionality
• Testing new features, games, and service enhancements
• Conducting market research and understanding player preferences
• Optimizing platform performance, speed, and reliability
• Generating aggregated, anonymized statistics for business intelligence

3.5 Marketing and Communication

• Sending account notifications, transaction confirmations, and service updates
• Delivering promotional offers, bonuses, and special campaigns (with your consent)
• Providing personalized game recommendations based on your play history
• Communicating responsible gaming reminders and self-exclusion information
• Conducting customer satisfaction surveys and feedback collection

4. Legal Basis for Processing

Under Indonesian data protection law, hit69 processes your personal information based on the following legal grounds:

• Contractual Necessity: Processing required to perform our contract with you (Terms & Conditions), including providing gaming services, processing payments, and managing your account.
• Legal Obligation: Processing required to comply with Indonesian laws, including AML/CTF regulations, age verification requirements, tax reporting, and regulatory oversight.
• Legitimate Interests: Processing necessary for our legitimate business interests, such as fraud prevention, security monitoring, platform improvement, and direct marketing (where not overridden by your privacy rights).
• Consent: Processing based on your explicit consent, such as optional marketing communications, cookies for analytics, and personalized content (you may withdraw consent at any time).

5. Data Sharing and Disclosure

5.1 Third-Party Service Providers

hit69 shares your personal information with trusted third-party service providers who assist in operating our platform. These providers are contractually bound to protect your data and use it only for the specific purposes we authorize:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP), e-wallet providers (OVO, DANA, GoPay, ShopeePay), and payment gateway operators for deposit and withdrawal processing
• Identity Verification Services: KYC/AML verification providers for age and identity authentication
• Game Providers: Casino game studios and sports data providers who deliver gaming content through our platform
• Cloud Hosting: Secure data centers that host our platform infrastructure and databases
• Customer Support Tools: Live chat software, email systems, and ticketing platforms
• Analytics Providers: Website analytics tools (with anonymized data where possible)

5.2 Legal and Regulatory Authorities

We may disclose your personal information to Indonesian government agencies, regulatory bodies, and law enforcement when:

• Required by Indonesian law, court order, or legal process
• Necessary to report suspicious transactions under AML/CTF obligations
• Requested by tax authorities for tax compliance purposes
• Essential to protect our legal rights, prevent fraud, or ensure platform security
• Required to enforce our Terms & Conditions or investigate violations

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity. You will be notified of any such change in ownership and your data protection rights will continue to be honored under this Privacy Policy or a successor policy.

5.4 What We Do NOT Do

hit69 does NOT:

• Sell your personal information to third parties for their marketing purposes
• Share your data with third-party advertisers for targeted advertising without your consent
• Disclose your gameplay history, betting patterns, or winnings publicly
• Transfer your data outside Indonesia without adequate safeguards (see Section 6)

6. International Data Transfers

Your personal information is primarily stored and processed on servers located in Indonesia. However, some of our third-party service providers (such as cloud hosting infrastructure and game providers) may process data outside Indonesia.

When international transfers occur, we ensure adequate protection through:

• Contractual clauses requiring equivalent data protection standards
• Verification that recipient countries provide adequate data protection laws
• Technical measures including encryption for data in transit and at rest
• Regular audits of third-party data handling practices

All international data transfers comply with Indonesian data protection regulations and international standards.

7. Data Security Measures

hit69 implements comprehensive security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction:

7.1 Technical Security

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using industry-standard protocols
• Secure Data Storage: Personal information stored in encrypted databases with access controls
• Firewall Protection: Multi-layer firewalls protecting against unauthorized network access
• DDoS Protection: Distributed denial-of-service attack mitigation systems
• Regular Security Audits: Independent third-party security assessments and penetration testing
• Intrusion Detection: Real-time monitoring for suspicious activity and automated threat response

7.2 Organizational Security

• Access Controls: Strict role-based access limiting employee access to personal data on a need-to-know basis
• Employee Training: Regular data protection and security awareness training for all staff
• Confidentiality Agreements: All employees and contractors bound by confidentiality obligations
• Incident Response Plan: Documented procedures for detecting, responding to, and recovering from data breaches
• Vendor Management: Due diligence and ongoing monitoring of third-party service provider security practices

7.3 Your Security Responsibilities

While we implement robust security measures, you also play a crucial role in protecting your account:

• Use a strong, unique password and change it regularly
• Enable two-factor authentication (2FA) for enhanced account security
• Never share your login credentials with anyone
• Log out after each session, especially on shared devices
• Keep your contact information current for security notifications
• Report any suspicious account activity immediately to [email protected]

8. Data Retention

hit69 retains your personal information only as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

8.1 Retention Periods

• Account Information: Retained while your account is active, plus 7 years after account closure for regulatory compliance
• Transaction Records: Retained for 7 years after transaction date for AML/CTF and tax compliance
• Identity Verification Documents: Retained for 7 years after account closure or last transaction
• Communication Records: Customer support interactions retained for 3 years for quality assurance and dispute resolution
• Marketing Data: Retained until you withdraw consent or request deletion, whichever comes first
• Game History: Retained for 7 years for dispute resolution and regulatory requirements

8.2 Data Deletion

After the applicable retention period expires, we securely delete or anonymize your personal information. Anonymized data (with all personal identifiers removed) may be retained indefinitely for statistical analysis and business intelligence purposes.

9. Cookies and Tracking Technologies

hit69 uses cookies and similar tracking technologies to enhance your experience, analyze platform usage, and deliver personalized content.

9.1 Types of Cookies We Use

• Essential Cookies: Required for platform functionality, including session management, security, and load balancing. These cannot be disabled.
• Functional Cookies: Remember your preferences, language settings, and customization choices.
• Analytics Cookies: Help us understand how visitors use our platform, which pages are most popular, and where improvements are needed.
• Marketing Cookies: Used to deliver relevant promotional content and measure campaign effectiveness (requires your consent).

9.2 Managing Cookies

You can control cookie settings through your browser preferences. Note that disabling certain cookies may limit platform functionality. Most browsers allow you to block third-party cookies while still accepting first-party cookies from hit69.

10. Your Privacy Rights

Under Indonesian data protection law, you have the following rights regarding your personal information:

10.1 Right of Access

You have the right to request a copy of the personal information we hold about you. You can access most of your information directly through your account dashboard, or contact our support team to request a comprehensive data export.

10.2 Right to Rectification

If your personal information is inaccurate or incomplete, you have the right to request correction. You can update most information through your account settings, or contact support for assistance with protected fields like identity documents.

10.3 Right to Erasure ("Right to be Forgotten")

You have the right to request deletion of your personal information in certain circumstances, such as when the data is no longer necessary for the purposes collected, or when you withdraw consent. Note that we may retain certain information where required by law (e.g., AML/CTF compliance requires 7-year retention of transaction records).

10.4 Right to Restrict Processing

You can request that we limit how we use your personal information in certain situations, such as when you contest data accuracy or object to processing.

10.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly-used, machine-readable format and transmit it to another service provider where technically feasible.

10.6 Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.

10.7 Right to Withdraw Consent

Where processing is based on consent, you can withdraw that consent at any time. This does not affect the lawfulness of processing before withdrawal.

10.8 Exercising Your Rights

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with "Privacy Rights Request" in the subject line. We will respond within 30 days of receiving your request. Identity verification may be required to protect your privacy.

11. Children's Privacy

hit69 does not knowingly collect personal information from individuals under 21 years of age. Our platform is restricted to adults aged 21 and older. If we discover that we have inadvertently collected information from a minor, we will delete it immediately and close any associated account.

Parents or guardians who believe a minor has provided personal information to hit69 should contact us immediately at [email protected] so we can investigate and take appropriate action.

12. Changes to This Privacy Policy

hit69 reserves the right to update this Privacy Policy periodically to reflect changes in our practices, technologies, legal requirements, or business operations. When we make material changes that affect your rights, we will notify you via email (to your registered address) and/or through a prominent notice on our platform.

The "Last Updated" date at the bottom of this document indicates when the policy was last revised. Continued use of the hit69 platform after changes become effective constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy regularly to stay informed about how we protect your information.

13. Contact Information and Data Protection Officer

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer: