Privacy Policy

This Privacy Policy ("Policy") describes how Hoki78 ("Platform", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at hoki78.cam, collects, processes, stores, and protects the personal data of its users ("Player", "User", "you", "your") in connection with the services offered on the Platform.

This Policy applies to all personal data collected through the Hoki78 website, mobile interface, customer support channels, and any promotional or registration activities associated with the Platform. It should be read in conjunction with the Hoki78 Terms & Conditions, which form a binding part of your agreement with us.

By registering an account on Hoki78, depositing funds, placing bets, or otherwise interacting with the Platform, you confirm that you have read and understood this Privacy Policy and that you consent to the processing of your personal data as described herein. Where we rely on consent as the legal basis for processing, you retain the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

The following definitions apply throughout this Privacy Policy:

Hoki78 collects personal data through several channels depending on how you interact with the Platform. We apply a data minimisation principle — we collect only what is genuinely necessary for the stated purpose.

3.1 Registration Data

When you create a Hoki78 account, we collect the following information:

• Full legal name;
• Date of birth (to verify the 21+ age requirement);
• Email address and mobile phone number;
• Country of residence;
• Username and encrypted password (passwords are hashed and never stored in plain text).

3.2 Identity Verification (KYC) Data

Before processing withdrawals, we are required to verify your identity. This involves the collection of:

• A copy of a government-issued identity document (e.g. Malaysian MyKad, passport);
• A selfie or live photo for facial verification purposes (processed by a certified third-party KYC provider);
• Proof of address (where required for enhanced due diligence);
• Proof of payment method ownership (e.g. screenshot of your registered e-wallet or bank account).

3.3 Financial Transaction Data

When you make deposits or request withdrawals, we record:

• The payment method used (e.g. Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, cryptocurrency wallet address);
• Transaction amounts in MYR or cryptocurrency equivalent;
• Transaction timestamps and reference numbers;
• Partial payment instrument identifiers (e.g. last four digits of a bank account number) — full account numbers are never stored by Hoki78.

3.4 Gaming & Betting Activity Data

• Game session logs, bet history, and wager amounts;
• Sports betting selections, odds accepted, and outcomes;
• Bonus and promotion usage records;
• VIP loyalty tier progression and cashback accrual.

3.5 Technical & Device Data

• IP address and approximate geolocation derived therefrom;
• Browser type, version, and operating system;
• Device model and unique device identifier;
• Session duration and page interaction data collected via analytics cookies.

3.6 Customer Support Communications

When you contact our support team via live chat or email, we retain records of the communication, including its content, timestamps, and any attachments you provide. These records are used for quality assurance, training, and dispute resolution purposes.

Hoki78 processes personal data only where a recognised lawful basis exists. The applicable bases for our primary processing activities are as follows:

The personal data collected by Hoki78 is used exclusively for the following purposes:

• Account Administration: To create, maintain, and manage your player account, including processing login requests, updating account details, and handling account closures.
• Service Delivery: To provide access to games, process bets, calculate and pay out winnings, and administer loyalty programme benefits including VIP tier rewards and cashback.
• Payment Processing: To execute deposit and withdrawal transactions via your chosen Malaysian payment method (e-wallet, FPX, DuitNow, bank transfer, or cryptocurrency) and to reconcile your wallet balance.
• Identity and Age Verification: To confirm that you are a natural person aged 21 or above and that the payment methods used are registered in your name, in compliance with KYC requirements.
• Fraud Prevention and Security: To detect and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, and other forms of platform abuse.
• Responsible Gambling Compliance: To monitor for indicators of problem gambling, enforce self-exclusion and deposit limit requests, and fulfil our duty-of-care obligations.
• Customer Support: To respond to your enquiries, process complaints, and resolve account disputes.
• Legal Compliance: To retain records as required by applicable legal, regulatory, or licensing obligations and to respond to lawful information requests.
• Platform Improvement: To analyse aggregated usage data and improve the performance, stability, and features of the Hoki78 Platform.
• Marketing Communications (with consent): To send you promotional offers, bonus notifications, and updates about new games or betting markets. You may opt out at any time.

Hoki78 will not use your personal data for any purpose materially different from those listed above without providing prior notice and, where required, obtaining fresh consent.

Hoki78 does not sell, rent, or otherwise trade your personal data to third parties. We share personal data only in the following limited circumstances:

6.1 Service Providers (Data Processors)

We engage trusted third-party service providers who process personal data solely on our behalf and strictly in accordance with our documented instructions. These include:

• KYC / Identity Verification Providers: Certified identity verification services that perform age and document checks during the onboarding and withdrawal process;
• Payment Processors: Licensed payment gateways and e-wallet operators (including Malaysian providers such as Touch 'n Go eWallet, Boost, and GrabPay, as well as DuitNow and FPX network participants) necessary to process your transactions;
• Cryptocurrency Processors: Digital asset transaction facilitators for BTC, ETH, and USDT TRC20 deposits and withdrawals;
• Cloud Infrastructure Providers: Secure hosting and data storage services operating under appropriate data processing agreements;
• Analytics Providers: Anonymised or pseudonymised usage analytics services used for platform performance monitoring.

All service providers are contractually bound to maintain the confidentiality and security of personal data and to process it only as instructed by Hoki78.

6.2 Legal and Regulatory Disclosure

We may disclose personal data to governmental authorities, law enforcement agencies, or regulatory bodies where we are legally required to do so — for example, in response to a court order, subpoena, or statutory information request. We will notify you of any such disclosure where legally permissible to do so.

6.3 Business Transfers

In the event of a merger, acquisition, reorganisation, or sale of substantially all of Hoki78's assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer in advance, and the acquiring entity will be required to honour the commitments set out in this Policy.

As an internationally operating platform, Hoki78 may process and store personal data on servers or with service providers located outside of Malaysia. When personal data is transferred internationally, Hoki78 ensures that appropriate safeguards are in place to maintain a level of protection equivalent to that described in this Policy.

Such safeguards include:

• Contractual data processing agreements incorporating standard data protection clauses;
• Transfer to jurisdictions recognised as providing an adequate level of data protection;
• Technical and organisational security measures applied at the receiving end.

For Malaysian players specifically, your data is processed in accordance with the commitments set out in this Policy regardless of where the processing infrastructure is physically located.

Hoki78 uses cookies and similar tracking technologies to operate the Platform efficiently, remember your preferences, and understand how players interact with the site. We use the following categories of cookies:

You may adjust your cookie preferences at any time through your browser settings or via the cookie consent controls available on the Platform. Disabling strictly necessary cookies will impair your ability to use the Platform.

Hoki78 retains personal data for as long as is necessary to fulfil the purposes described in this Policy, unless a longer retention period is required by applicable legal, regulatory, or licensing obligations.

The following general retention guidelines apply:

• Active Account Data: Retained for the duration of your account relationship with Hoki78, plus a post-closure retention period of up to 7 years to satisfy AML, tax, and gaming compliance requirements.
• KYC Documents: Retained for a minimum of 5 years from the date of verification, in accordance with internationally applicable anti-money-laundering standards.
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date for audit and compliance purposes.
• Customer Support Communications: Retained for up to 3 years from the date of the interaction, or longer if related to an ongoing dispute.
• Analytics Data: Anonymised and aggregated after 26 months, at which point it no longer constitutes personal data.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction.

Hoki78 implements a layered set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure.

These measures include, but are not limited to:

• Encryption in Transit: All data transmitted between your device and Hoki78 servers is protected by 256-bit TLS/SSL encryption.
• Encryption at Rest: Sensitive personal data fields (including KYC documents and financial identifiers) are stored in encrypted form on our database infrastructure.
• Password Security: User passwords are stored as salted cryptographic hashes. Hoki78 staff cannot read your password.
• Access Controls: Internal access to personal data is restricted on a need-to-know basis and enforced through role-based access controls and multi-factor authentication for staff.
• Security Monitoring: Platform traffic is continuously monitored for anomalous activity, attempted intrusions, and fraud indicators.
• Incident Response: Hoki78 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights, affected Players will be notified without undue delay.

Subject to applicable law and any overriding legal obligations, you have the following rights in respect of your personal data held by Hoki78. Requests may be submitted to [email protected] and will be responded to within a reasonable period.

To exercise any of the above rights, please contact us at [email protected] with the subject line "Data Rights Request — [Your Name]". We will verify your identity before processing the request and will respond within 30 days. Complex requests may require additional time, in which case we will notify you of the expected timeline.

Hoki78 is an online gaming platform intended exclusively for adults aged 21 years and above. We do not knowingly collect personal data from persons under the age of 21, and we actively take steps to prevent underage access through our KYC verification process.

All new accounts are required to complete age verification before withdrawal access is granted. Where we have reason to believe that a registered account belongs to a person under 21, the account will be immediately suspended, all funds will be held pending investigation, and the account will be closed. Any winnings accumulated during a period of underage use are not payable.

Hoki78 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will provide reasonable advance notice to registered Players via the Platform or by email to the registered account address. The "Last Updated" date displayed at the top of this page will be revised to reflect the effective date of any changes.

Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with the revised terms, you should cease using the Platform and contact support to arrange account closure.

We encourage you to review this Policy periodically to stay informed about how your personal data is being handled. Minor editorial or clarifying changes may be made without specific notification.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the handling of your personal data by Hoki78, please contact us through the following channel:

For data rights requests specifically (access, deletion, portability, etc.), please use the subject line "Data Rights Request — [Your Name]" and include your registered email address and account username so we can verify your identity efficiently.

For responsible gambling-related data requests — such as self-exclusion records or deposit limit history — please use the subject line "Responsible Gambling Data Request" for priority handling. More information is available on our Responsible Gambling page.