Section 1
Introduction
hoki108 ("Platform", "we", "us", "our") is committed to protecting the privacy
and personal data of every individual who accesses or registers on the hoki108
website at hoki108.cam and any associated subdomains or
mobile interfaces (collectively, the "Platform").
This Privacy Policy describes the categories of personal information that hoki108
collects from users, the purposes for which that information is processed, the
conditions under which it may be shared, the measures taken to protect it, and the
rights available to data subjects in relation to their personal information.
By accessing the hoki108 Platform, completing account registration or submitting
any personal information, you acknowledge that you have read and understood this
Privacy Policy in full and consent to the processing of your data as described
herein. If you do not accept this policy, you must discontinue use of the Platform
immediately.
Malaysian users: hoki108 recognises that Malaysian data subjects
may have rights under applicable personal data protection frameworks. This policy
is drafted to align with internationally recognised privacy principles. Players
from Malaysia are encouraged to review this policy carefully and to contact support
with any queries.
Section 2
Definitions
The following terms carry the meanings assigned below throughout this Privacy Policy:
| Term |
Meaning |
| Personal Data |
Any information that identifies or could reasonably be used to identify a living natural person, directly or indirectly. |
| Processing |
Any operation performed on personal data, including collection, storage, use, disclosure or deletion. |
| Data Controller |
hoki108, which determines the purposes and means of processing personal data submitted through the Platform. |
| Data Subject |
The identified or identifiable natural person to whom personal data relates — in this context, the registered hoki108 user. |
| KYC |
Know Your Customer — identity and document verification required before withdrawal processing. |
| Cookie |
A small text file stored on a user's device by the Platform for session management, analytics or preference storage. |
| Third Party |
Any individual or entity other than hoki108 or the data subject, including payment processors, game content providers and fraud prevention services. |
Section 3
Data We Collect
hoki108 collects personal data through several channels, including account
registration, payment processing, KYC verification, platform activity and
direct communications with support. The categories of data collected are as follows:
3.1 Account Registration Data
- Full legal name
- Date of birth (to confirm minimum age of 21 years)
- Email address
- Selected username and encrypted account password
- Country and city of residence (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya)
- Contact mobile number where provided
3.2 Identity Verification (KYC) Data
- Scanned copy or photograph of a valid Malaysian identity document (MyKad, passport or driving licence)
- Proof of residential address (utility bill, bank statement issued within the last three months)
- Selfie photograph holding the identity document, where required
- Payment method ownership evidence where requested
3.3 Financial Transaction Data
- Deposit and withdrawal amounts in MYR or digital asset equivalents
- Payment method identifiers (masked bank account numbers, e-wallet reference IDs)
- Transaction timestamps and processing status records
- Payment method types used: Maybank2u, CIMB Clicks, Public Bank Online, Hong Leong Connect, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and selected digital assets
3.4 Platform Usage Data
- IP address and approximate geographic location derived from IP
- Device type, operating system and browser information
- Session duration, pages visited and navigation patterns
- Game activity records, bet histories and wagering patterns
- Login timestamps and access frequency
3.5 Support Communications
- Content of messages submitted to hoki108 support via official email
- Complaint and dispute records
- Responsible-gambling self-exclusion requests and their outcomes
Section 4
Data Processing
Personal data collected by hoki108 is processed exclusively for the following
defined purposes. We do not process personal data for purposes incompatible with
those stated without obtaining additional consent from the data subject.
| Purpose |
Data Categories Used |
| Account creation and management |
Registration data, login credentials |
| Age and identity verification (KYC) |
Identity documents, selfie photographs, address proof |
| Deposit and withdrawal processing |
Financial transaction data, payment method identifiers |
| Fraud prevention and security monitoring |
IP address, device data, transaction patterns, login history |
| Responsible gambling controls |
Account activity, deposit history, self-exclusion records |
| Legal and regulatory compliance |
All categories as required by applicable law |
| Platform improvement and analytics |
Anonymised usage data, session behaviour (no individual profiling for advertising) |
| Customer support and dispute resolution |
Support communication records, account history |
Section 5
Legal Basis for Processing
hoki108 processes personal data under one or more of the following legal bases,
depending on the specific processing activity:
-
Contractual necessity: Processing required to provide the
hoki108 platform services to a registered account holder, including account
management, deposits, withdrawals and game access.
-
Legal obligation: Processing required to comply with applicable
regulatory obligations including anti-money laundering checks, age verification
and identity confirmation.
-
Legitimate interests: Processing undertaken for fraud
prevention, platform security, abuse detection and anonymised performance
analytics, where these interests are not overridden by the data subject's rights.
-
Consent: Where hoki108 relies on consent as the legal basis —
such as the use of non-essential cookies — data subjects may withdraw consent
at any time without affecting prior processing.
Section 6
Data Sharing
hoki108 does not sell, rent or trade personal data to unaffiliated third parties
for any commercial or marketing purpose. Personal data may be shared in the
following limited circumstances only:
-
Payment processors: Financial data is shared with Malaysian
banking institutions and payment service providers (including those operating
DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank
and Hong Leong channels) solely to process transactions initiated by the account
holder.
-
Identity verification providers: KYC documents may be processed
by third-party identity verification services operating under binding data
processing agreements with hoki108.
-
Fraud and security services: Relevant technical data may be
shared with fraud detection and cybersecurity partners to protect platform
integrity and account holders.
-
Legal and regulatory authorities: hoki108 may disclose personal
data to law enforcement, regulators or courts when required to do so by a valid
legal order or to protect against unlawful activity.
-
Group entities: Personal data may be shared with affiliated
entities within the hoki108 corporate group for internal administrative and
compliance purposes, under equivalent data protection standards.
No advertising data sales: hoki108 does not share identifiable
player profiles with advertising networks, data brokers or marketing aggregators
under any circumstances.
Section 7
Data Retention
hoki108 retains personal data for as long as necessary to fulfil the purposes for
which it was collected, including meeting legal, regulatory, audit and dispute
resolution obligations. Retention periods are determined by the category of data:
| Data Category |
Indicative Retention Period |
| Account registration data |
Duration of account plus up to 5 years post-closure |
| KYC identity documents |
Duration of account plus minimum 5 years post-closure |
| Financial transaction records |
Minimum 5 years from transaction date |
| Platform usage and session logs |
Up to 24 months from session date |
| Support communication records |
Up to 3 years from last communication |
| Self-exclusion records |
Indefinitely or as required by applicable regulation |
Where personal data is no longer required and no legal obligation requires its
retention, hoki108 will securely delete or anonymise it in a manner that prevents
re-identification.
Section 8
Cookies & Tracking Technologies
The hoki108 Platform uses cookies and similar technologies including local storage
and session identifiers to support core platform functionality and to collect
anonymised usage analytics.
8.1 Essential Cookies
These cookies are strictly necessary for platform operation, including maintaining
login sessions, preserving game state and processing secure transactions. They
cannot be disabled without disrupting platform functionality.
8.2 Analytics Cookies
hoki108 may use anonymised analytics tools to understand aggregate navigation
patterns, identify technical issues and improve platform performance. Analytics
data does not identify individual users and is not shared with advertising networks.
8.3 Managing Cookies
Non-essential cookies may be managed through your browser settings. Disabling
certain cookies may limit some Platform functionality. Clearing cookies will
end active sessions, requiring you to log in again.
Section 9
Data Security
hoki108 implements technical and organisational security measures appropriate to
the nature and sensitivity of personal data held. These measures include:
- Encrypted data transmission via HTTPS/TLS protocols across all Platform interfaces.
- Encrypted storage of sensitive personal data including passwords and KYC documents.
- Restricted internal access to personal data based on role-based access controls.
- Regular security assessments and monitoring of platform infrastructure.
- Procedures for detecting, reporting and responding to personal data incidents.
While hoki108 takes reasonable precautions to protect personal data, no electronic
transmission or storage system is entirely immune to security risk. Players are
advised to keep their account credentials confidential, use strong unique passwords
and report any suspected unauthorised access to hoki108 support immediately.
Security reminder for Malaysian players: Only submit KYC documents
through the official verified hoki108 account portal accessible over HTTPS. Never
share identity documents via unsecured email, social messaging apps or unverified
external websites.
Section 10
Your Rights
Subject to applicable law and certain conditions, hoki108 players have the following
rights in relation to their personal data:
Right of Access
Request confirmation of whether hoki108 holds your personal data and obtain a copy of that data.
Right to Rectification
Request correction of inaccurate or incomplete personal data held by hoki108.
Right to Erasure
Request deletion of personal data where processing is no longer necessary, subject to legal retention obligations.
Right to Restriction
Request that hoki108 limits processing of your personal data in certain defined circumstances.
Right to Portability
Receive personal data you have provided to hoki108 in a structured, machine-readable format where technically feasible.
Right to Object
Object to processing based on legitimate interests where your personal circumstances warrant it.
Right to Withdraw Consent
Where processing relies on consent, withdraw that consent at any time without affecting prior lawful processing.
Right to Complain
Lodge a complaint with a relevant data protection authority if you believe your rights have been infringed.
To exercise any of the above rights, contact hoki108 support using the official
email address listed in Section 14 of this policy. We will respond to verified
requests within a reasonable timeframe. Identity verification may be required before
a request is actioned.
Section 11
Minors
The hoki108 Platform is strictly intended for adults aged 21 years and
above. hoki108 does not knowingly collect personal data from individuals
below the age of 21. Where hoki108 identifies that personal data has been submitted
by or on behalf of a minor, the associated account will be suspended and all
personal data relating to that individual will be deleted promptly, subject only to
any legal obligation to retain evidence of the breach.
If you have reason to believe that a minor has registered on hoki108, please
contact our support team immediately so that appropriate action can be taken without
delay.
Section 12
Third-Party Services
The hoki108 Platform may integrate with or link to third-party service providers
for payment processing, identity verification and game content delivery. These
third-party services operate under their own privacy policies and data handling
practices.
hoki108 is not responsible for the privacy practices of third-party payment
networks including Maybank2u, CIMB Clicks, DuitNow, FPX, Touch 'n Go eWallet,
Boost or GrabPay. When you initiate a transaction through these channels, the
relevant provider's terms and privacy practices apply to the data you submit to
them directly. hoki108 receives only the transaction reference data necessary to
confirm and process your deposit or withdrawal.
Third-party game content providers integrated with hoki108 are contracted under
data processing agreements that prohibit the use of any player data for purposes
outside of game delivery and platform fraud prevention.
Section 13
Policy Amendments
hoki108 may update this Privacy Policy periodically to reflect changes in platform
functionality, data processing practices or applicable legal requirements. Material
changes will be communicated to registered account holders via an in-platform
notification or email to the address on file prior to the changes taking effect.
The date of the most recent review is displayed at the top of this page. Continued
use of the hoki108 Platform following the effective date of any amendment
constitutes acceptance of the revised Privacy Policy. Players who do not accept an
amended policy should contact support to arrange account closure.