h888 Privacy Policy

1. Introduction and Definitions

This Privacy Policy ("Policy") describes how h888 ("we", "us", "our", or "the Platform") collects, processes, stores, and protects the personal data of users ("you", "your", or "Player") who access and use our online betting services at https://h888.beer. This Policy applies to all services offered by h888, including sports betting, live casino, slot games, togel (Indonesia's traditional numbers lottery), and all associated customer support and promotional communications.

By registering an account with h888, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with this Policy, you must not use the h888 platform.

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information that directly or indirectly identifies a natural person, including but not limited to name, email address, phone number, date of birth, bank account details, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, or deletion.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, h888.
• "Data Processor" means any third party that processes Personal Data on behalf of h888 under a contractual data processing agreement.
• "KYC" means Know Your Customer, the identity verification procedures required by anti-money-laundering regulations.

2. Data Controller Information

h888 is the data controller responsible for your personal data collected through the Platform. Our designated Data Protection Officer (DPO) oversees all data protection activities and can be contacted at:

• Email: [email protected] (subject line: "Data Protection / Privacy")
• Response Time: We commit to responding to all data-related inquiries within 30 calendar days of receipt.

3. Personal Data We Collect

h888 collects personal data through several channels and at various stages of your interaction with the Platform:

3.1 Registration Data

When you create an h888 account, we collect:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify you are at least 21 years of age)
• Residential address (city, province, country — Indonesia)
• Email address
• Mobile phone number
• Username and password (password is stored as a one-way cryptographic hash)
• Currency preference (Indonesian Rupiah / IDR)

3.2 Identity Verification (KYC) Data

To comply with anti-money-laundering (AML) regulations and verify your eligibility to use h888, we collect the following documents:

• Government-issued photo ID (Indonesian KTP, passport, or driver's license) — including ID number, full name, date of birth, and photograph
• Proof of residential address — recent utility bill, bank statement, or official government document
• Proof of payment method — bank statement, e-wallet account screenshot, or cryptocurrency wallet verification
• Selfie with ID photograph (required for high-value accounts or when identity cannot be verified automatically)

3.3 Financial and Transaction Data

In connection with deposits, withdrawals, and betting activity, we collect:

• Bank account numbers and account holder names (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI)
• E-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja)
• Cryptocurrency wallet addresses (USDT, BTC, ETH)
• Transaction amounts, dates, and reference numbers
• Betting history, including game type, stake amounts, odds, and outcomes
• Bonus and promotional credit usage records

3.4 Technical and Usage Data

When you use our Platform, we automatically collect technical data including:

• IP address and approximate geolocation (country and city level)
• Device type, operating system, and browser version
• Session duration, pages visited, and features used
• Login timestamps and session activity logs
• Error logs and crash reports (to improve platform stability)
• Referral source (how you arrived at h888 — organic search, referral link, etc.)

3.5 Communications Data

When you contact our support team or communicate with h888, we retain:

• Live chat transcripts
• Email correspondence
• Feedback forms and survey responses
• Complaint records and resolution notes

4. Legal Basis for Processing

h888 processes your personal data under one or more of the following legal bases:

• Contract Performance: Processing is necessary to provide you with the services described in our Terms & Conditions — including account management, deposits, withdrawals, and betting services.
• Legal Obligation: Processing is required to comply with applicable laws, including anti-money-laundering (AML) regulations, KYC requirements, tax reporting obligations, and responsible gambling mandates.
• Legitimate Interests: Processing is necessary for h888's legitimate business interests, including fraud prevention, platform security, improving user experience, and responsible gaming monitoring — provided these interests do not override your fundamental rights.
• Consent: For optional marketing communications (email newsletters, promotional SMS, push notifications), we process your data based on your explicit consent, which you can withdraw at any time.

5. How We Use Your Personal Data

h888 uses your personal data for the following specific purposes:

• Account management: Creating, maintaining, and administering your h888 account, including processing login requests and account settings changes.
• Identity verification: Conducting KYC checks to verify your identity, confirm you are at least 21 years of age, and ensure you are eligible to use the Platform.
• Transaction processing: Processing deposits, withdrawals, and bet settlements accurately and efficiently via Indonesian banks, e-wallets, and cryptocurrency networks.
• Fraud and AML compliance: Monitoring transactions and betting patterns to detect and prevent money laundering, fraud, bonus abuse, and other prohibited activities.
• Responsible gaming: Monitoring your gambling behavior to identify potential problem gambling patterns, provide appropriate interventions, and administer self-exclusion and limit-setting tools.
• Customer support: Providing timely and effective assistance for account queries, technical issues, and complaints in Indonesian and English.
• Platform improvement: Analyzing usage data to identify areas for improvement, fix bugs, optimize performance, and develop new features.
• Marketing communications: Sending you promotional offers, bonus notifications, and news about h888, with your consent and subject to easy opt-out at any time.
• Legal compliance: Fulfilling legal and regulatory obligations, including responding to lawful requests from government authorities and law enforcement agencies.

6. Cookies and Tracking Technologies

h888 uses cookies and similar tracking technologies to improve your experience on the Platform. Cookies are small text files stored on your device that help us recognize returning visitors, maintain session state, and analyze site usage.

We use the following categories of cookies:

• Essential Cookies: Required for the Platform to function correctly. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery (CSRF). These cannot be disabled without breaking core Platform functionality.
• Analytics Cookies: Help us understand how visitors use the Platform by collecting anonymized data on page views, session duration, and user journeys. This data informs platform improvements and performance optimization.
• Preference Cookies: Remember your settings and preferences — such as language, currency display, and notification preferences — so you do not need to reconfigure them on each visit.
• Marketing Cookies: Used (with your consent) to track the effectiveness of marketing campaigns and measure the return on h888's promotional spending. These cookies do not sell your data to third parties.

You can manage cookie preferences through your browser settings or through h888's in-app privacy settings. Disabling non-essential cookies will not affect your ability to use core Platform features.

7. Sharing Your Personal Data

h888 does not sell your personal data. We share your data only in the following limited circumstances, all subject to strict contractual data protection obligations:

• Payment Processors: We share payment-related data with authorized payment processors to facilitate deposits and withdrawals (Indonesian banks, e-wallet operators, and cryptocurrency payment gateways). These processors are bound by PCI-DSS and equivalent data security standards.
• Identity Verification Providers: We use third-party KYC service providers to verify the authenticity of identity documents and check users against sanctions and politically exposed persons (PEP) databases.
• Game Content Providers: Game providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) may receive anonymized session data to improve game performance and detect irregular gameplay patterns. They do not receive your full personal profile.
• Fraud Prevention and Security: We share data with fraud detection and cybersecurity service providers to identify and prevent fraudulent activity, account takeovers, and other security threats.
• Legal and Regulatory Authorities: We may disclose your personal data to government authorities, law enforcement agencies, or regulatory bodies when required to do so by law, court order, or regulatory directive. We will notify you of such disclosures where legally permitted.
• Business Transfers: In the event of a merger, ac quisition, or sale of all or substantially all of h888's assets, your personal data may be transferred to the successor entity. We will provide notice of any such transfer and the opportunity to opt out where applicable law permits.

8. International Data Transfers

h888 operates server infrastructure across multiple jurisdictions to ensure platform reliability and low-latency access for players in Indonesia. As a result, your personal data may be transferred to and processed in countries outside of Indonesia. Where such transfers occur, h888 implements appropriate safeguards to ensure your data receives a level of protection consistent with applicable data protection standards, including:

• Standard contractual clauses (SCCs) incorporated into data processing agreements with third-party service providers.
• Data processing agreements that require recipient entities to implement technical and organizational security measures equivalent to those applied by h888.
• Transfer impact assessments conducted where required to evaluate the data protection laws of recipient jurisdictions.

By using the h888 Platform, you acknowledge and consent to the transfer of your personal data across international borders as described in this section. If you have questions about specific data transfer arrangements, please contact our Data Protection Officer at [email protected].

9. Data Retention

h888 retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, comply with our legal obligations, resolve disputes, and enforce our agreements. The following general retention periods apply:

• Account and Registration Data: Retained for the duration of your account plus a minimum of 5 years after account closure, in accordance with anti-money-laundering record-keeping requirements.
• KYC and Identity Documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later, as required by applicable AML regulations.
• Transaction and Betting Records: Retained for a minimum of 5 years from the transaction date to comply with financial record-keeping obligations.
• Customer Support Communications: Retained for 2 years from the date of the last interaction, or longer if related to an unresolved dispute or regulatory inquiry.
• Marketing Preferences: Retained until you withdraw consent or request deletion, whichever is earlier.
• Technical and Usage Logs: Typically retained for 12 months, after which they are anonymized or deleted.

When personal data is no longer required, it is securely deleted using industry-standard data erasure methods, or anonymized such that it can no longer be attributed to any individual. Anonymized aggregate data may be retained indefinitely for statistical analysis and platform improvement purposes.

10. Your Data Rights

As a user of the h888 platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 calendar days of receiving your request.

• Right of Access: You have the right to request a copy of the personal data h888 holds about you, along with information about how it is used and with whom it is shared. We will provide this information free of charge in a commonly used digital format.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it promptly. You may update basic account details (email address, phone number, residential address) directly through your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to legal retention obligations — for example, we cannot delete transaction records that we are legally required to retain for AML compliance.
• Right to Restriction of Processing: You may request that we temporarily suspend processing of your personal data in certain circumstances — for example, while we investigate the accuracy of your data or evaluate an objection you have raised.
• Right to Data Portability: Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another data controller.
• Right to Object: You have the right to object to processing based on our legitimate interests, including profiling for fraud detection or responsible gaming monitoring. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time by clicking the "unsubscribe" link in any marketing email, adjusting your notification preferences in your account settings, or contacting our support team directly.

11. Children's Privacy and Age Restriction

h888 is strictly an adult-only service. We do not knowingly collect personal data from individuals under the age of 21. All accounts are subject to mandatory age verification during the KYC process, and any account found to belong to a person under 21 will be immediately suspended, all funds returned where possible, and the account permanently closed.

If you are a parent or guardian and believe that a minor under your care has registered an account with h888, please contact us immediately at [email protected]. We will investigate the matter promptly and take all appropriate action, including account closure and data deletion, in accordance with applicable child protection laws.

12. Security Measures

h888 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, loss, destruction, or disclosure. Our security framework includes, but is not limited to:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or app and our servers is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Encrypted Data Storage: Sensitive data fields (including KYC documents, financial account details, and session tokens) are encrypted at rest using AES-256 encryption.
• Two-Factor Authentication (2FA): Available and strongly recommended for all player accounts to prevent unauthorized login.
• Role-Based Access Control: Internal access to personal data is restricted on a strict need-to-know basis. Customer support agents can access only the data necessary to resolve your query; no single employee has unrestricted access to all data.
• Intrusion Detection Systems: Continuous monitoring of our servers and network infrastructure for anomalous activity, attempted breaches, and unauthorized access attempts.
• Regular Security Audits: h888 conducts periodic penetration testing and third-party security audits to identify and remediate vulnerabilities before they can be exploited.
• Incident Response Plan: In the event of a data breach, h888 has a documented incident response plan that includes notification to affected users and regulatory authorities within the timeframes required by applicable law.

While we employ rigorous security measures, no online platform can guarantee absolute security. You also play a role in protecting your account — use a strong unique password, enable 2FA, never share your login credentials, and contact us immediately if you notice suspicious activity on your account.

13. Third-Party Links and Services

The h888 platform may contain references to or integrations with third-party services, including game providers, payment processors, and analytics tools. This Privacy Policy applies solely to data collected and processed by h888 directly. Third-party services operate under their own privacy policies, over which h888 has no control. We encourage you to review the privacy policies of any third-party services you interact with through the Platform.

h888 is not responsible for the privacy practices or data security of third-party providers. Any personal data you provide directly to a third-party service (for example, a cryptocurrency exchange when funding your wallet) is subject to that party's terms and privacy policy, not ours.

14. Changes to This Privacy Policy

h888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will notify you by:

• Posting the updated Policy on this page with a revised "Last Updated" date.
• Sending a notification to your registered email address at least 14 days before the changes take effect, where the changes materially affect your rights.
• Displaying a prominent notice on the Platform login page or dashboard for a period of at least 30 days following the update.

Your continued use of the h888 platform following the effective date of any changes constitutes your acceptance of the revised Policy. If you disagree with a material change, you have the right to close your account before the change takes effect by contacting our support team.

15. Contact and Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or h888's data protection practices, please contact us using the following details:

• Email: [email protected] (subject line: "Privacy Policy Inquiry")
• Live Chat: Available 24/7 on the Platform in Indonesian and English
• Response Time: We aim to acknowledge all privacy inquiries within 2 business days and provide a full response within 30 calendar days.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction. h888 cooperates fully with all lawful regulatory investigations and takes all privacy complaints seriously.