Privacy Policy

1. Introduction

haha88 ("we," "us," "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, store, and protect information about you when you use our online sports betting and casino platform ("Platform") accessible at haha88.cam and through our mobile applications.

This Privacy Policy applies to all users who access or use our Platform, whether or not they register for an account. By accessing or using haha88, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with our privacy practices, you must not use the Platform.

We operate in compliance with applicable data protection laws and regulations, including those governing the collection and processing of personal data in Indonesia and internationally. We implement industry-standard security measures to safeguard your information and ensure it is handled with the utmost care and confidentiality.

2. Information We Collect

We collect various types of information to provide, maintain, improve, and secure our services. The categories of information we collect include:

2.1 Information You Provide Directly

When you register for an account or use our Platform, you voluntarily provide us with the following information:

• Account Registration Data: Full legal name, date of birth, gender, residential address (street, city, province, postal code), email address, mobile phone number, username, and password.
• Identity Verification (KYC) Documents: Government-issued identification such as Indonesian KTP (Kartu Tanda Penduduk), passport, driver's license; proof of address documents such as utility bills, bank statements, or government correspondence; selfie photographs holding your identification document.
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet account information (OVO, DANA, GoPay, ShopeePay, LinkAja), credit or debit card numbers (last four digits only; full card numbers are processed securely by third-party payment processors and not stored on our servers).
• Transaction History: Records of all deposits, withdrawals, bets placed, games played, bonuses claimed, and account balance changes.
• Communication Records: Content of messages you send to our customer support team via live chat, email, WhatsApp, or in-app messaging; feedback, complaints, or inquiries you submit.
• Responsible Gaming Settings: Deposit limits, loss limits, session time limits, self-exclusion periods, and reality-check preferences you configure.

2.2 Information We Collect Automatically

When you access or use the Platform, we automatically collect certain technical and usage information:

• Device Information: Device type (smartphone, tablet, desktop computer), operating system (Android, iOS, Windows, macOS), browser type and version, screen resolution, device identifiers (IMEI, UDID, Advertising ID).
• Connection Data: IP address, internet service provider (ISP), geographic location (country, city), time zone, connection type (Wi-Fi, mobile data).
• Usage Data: Pages viewed, features used, time spent on each page, navigation paths, clicks, scrolls, games played, bets placed (including bet type, amount, odds, outcome), login and logout times, session duration.
• Cookies and Tracking Technologies: Information collected through cookies, web beacons, pixels, and similar technologies as described in Section 9 of this Privacy Policy.

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment Processors: Transaction confirmations, payment status updates, and fraud detection signals from banks, e-wallet providers, and payment gateway operators.
• Identity Verification Services: Verification results from third-party KYC and anti-money laundering (AML) screening providers.
• Game Providers: Game session data, game outcomes, and technical performance metrics from casino and slots game suppliers.
• Fraud Prevention Services: Risk scores, device fingerprints, and behavioral analytics from security partners who help us detect and prevent fraudulent activity.

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Service Provision and Account Management

• Create, maintain, and manage your haha88 account
• Process deposits, withdrawals, and other financial transactions
• Enable you to place bets and play casino games
• Track your transaction history and account balance
• Provide customer support and respond to your inquiries
• Send transactional notifications (deposit confirmations, withdrawal approvals, account updates)

3.2 Legal and Regulatory Compliance

• Verify your identity and age (21+ requirement)
• Comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
• Detect and prevent fraud, money laundering, collusion, and other illegal activities
• Enforce our Terms and Conditions and other policies
• Respond to legal requests, court orders, and regulatory inquiries
• Maintain records required by law

3.3 Responsible Gaming

• Monitor your gambling activity for signs of problem gambling
• Enforce deposit limits, loss limits, and self-exclusion settings
• Provide responsible gaming tools and resources
• Intervene proactively if we detect concerning gambling patterns

3.4 Platform Improvement and Personalization

• Analyze usage patterns to improve platform functionality and user experience
• Personalize content, recommendations, and promotional offers based on your preferences and gaming history
• Conduct internal research and analytics to optimize our services
• Test new features and functionalities

3.5 Marketing and Communications (With Your Consent)

• Send promotional emails about bonuses, tournaments, and new game releases (you can opt out anytime)
• Provide personalized bonus offers and VIP rewards based on your activity level
• Send push notifications (if you have enabled them on your device)

3.6 Security and Fraud Prevention

• Detect and prevent unauthorized access, account takeovers, and security breaches
• Identify suspicious betting patterns, collusion, and bonus abuse
• Protect the integrity of our games and sports betting markets
• Safeguard against cyberattacks, hacking attempts, and technical vulnerabilities

4. Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill our contractual obligations to you under our Terms and Conditions (e.g., processing transactions, providing customer support).
• Legal Obligation: Processing is required to comply with applicable laws and regulations (e.g., KYC verification, AML compliance, age verification, record-keeping requirements).
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, security, platform improvement, and analytics, provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: For certain activities such as marketing communications and non-essential cookies, we process your information based on your explicit consent, which you may withdraw at any time.

5. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information in the following circumstances:

5.1 Service Providers

We engage trusted third-party service providers who perform services on our behalf, including:

• Payment processors (banks, e-wallet providers, payment gateways)
• Identity verification and KYC/AML screening services
• Casino and sports betting software providers
• Customer support platform providers
• Cloud hosting and data storage providers
• Fraud detection and cybersecurity services
• Email and communications platforms

These service providers are contractually obligated to protect your information, use it only for the purposes we specify, and comply with applicable data protection laws.

5.2 Legal and Regulatory Authorities

We may disclose your information to government authorities, law enforcement agencies, regulatory bodies, or courts when required by law or when we believe disclosure is necessary to:

• Comply with legal obligations, court orders, subpoenas, or regulatory requests
• Protect the rights, property, or safety of haha88, our users, or the public
• Investigate or prevent illegal activities, fraud, or security threats
• Enforce our Terms and Conditions or other agreements

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity or successor, subject to the same privacy protections outlined in this Privacy Policy.

5.4 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you with third parties for analytics, research, or marketing purposes.

6. Data Security Measures

We implement comprehensive technical and organizational security measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data transmission between your device and our servers is encrypted using industry-standard SSL/TLS protocols. Sensitive data stored on our servers is encrypted at rest.
• Access Controls: Access to personal information is restricted to authorized personnel only, based on role-based access controls and the principle of least privilege.
• Authentication: User accounts are protected by secure passwords and optional two-factor authentication (2FA).
• Firewalls and Intrusion Detection: Our network infrastructure is protected by firewalls, intrusion detection systems, and continuous security monitoring.
• Regular Security Audits: We conduct regular security assessments, penetration testing, and vulnerability scans to identify and address potential weaknesses.
• Secure Payment Processing: Payment card information is processed through PCI DSS-compliant payment processors. We do not store full card numbers on our servers.
• Employee Training: Our employees receive regular training on data protection, security best practices, and confidentiality obligations.

While we strive to protect your information using industry best practices, no method of transmission or storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials and notifying us immediately if you suspect unauthorized access.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Active Accounts: Personal and transactional data is retained for the duration of your active account.
• Closed Accounts: After account closure, we retain certain information for a period of 5-7 years to comply with financial record-keeping and AML regulations.
• KYC Documents: Identity verification documents are retained for at least 5 years after account closure as required by law.
• Transaction Records: Financial transaction records are retained for 7 years for auditing and regulatory purposes.
• Communication Records: Customer support communications are retained for 2-3 years for quality assurance and dispute resolution.
• Marketing Data: If you opt out of marketing communications, we retain your contact information on a suppression list to honor your opt-out preference.

After the applicable retention period expires, we securely delete or anonymize your personal information in accordance with our data deletion protocols.

8. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Right to Access: Request a copy of the personal information we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete information.
• Right to Erasure: Request deletion of your personal information, subject to legal retention obligations.
• Right to Restriction: Request that we limit the processing of your information in certain circumstances.
• Right to Data Portability: Request a machine-readable copy of your information to transfer to another service provider.
• Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Withdraw consent for processing activities that require consent (e.g., marketing communications).

To exercise any of these rights, please contact us using the contact details provided in Section 14. We will respond to your request within 30 days. Please note that certain rights may be limited by legal obligations or legitimate business needs.

9. Cookies and Tracking Technologies

haha88 uses cookies, web beacons, pixels, and similar technologies to enhance your experience, analyze usage patterns, and deliver personalized content. Cookies are small text files stored on your device that help us recognize you and remember your preferences.

Types of Cookies We Use:

• Essential Cookies: Required for the Platform to function properly (e.g., session management, authentication, security).
• Performance Cookies: Collect anonymous usage data to help us improve the Platform (e.g., page load times, error tracking).
• Functional Cookies: Remember your preferences and settings (e.g., language, currency, display options).
• Marketing Cookies: Track your browsing activity to deliver personalized advertisements and promotions (with your consent).

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect Platform functionality. For more details, see our Cookie Policy (if applicable).

10. Third-Party Links and Services

The haha88 Platform may contain links to third-party websites, applications, or services (e.g., game providers, payment processors, social media platforms). We are not responsible for the privacy practices or content of these third parties. We encourage you to review their privacy policies before providing any personal information.

11. International Data Transfers

haha88 operates internationally and may transfer your personal information to countries outside Indonesia for processing and storage. Some of these countries may have data protection laws that differ from Indonesian law. When transferring data internationally, we ensure appropriate safeguards are in place, such as:

• Contractual clauses requiring third parties to protect your information
• Compliance with international data transfer frameworks
• Encryption and other security measures during transmission

12. Children's Privacy

haha88 is intended for adults aged 21 and over only. We do not knowingly collect personal information from individuals under 21. If we become aware that a user is under 21, we will immediately suspend the account, prevent further access, and delete all associated personal information. If you believe a minor has accessed our Platform, please contact us immediately at the email address provided below.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. Material changes will be communicated via email or prominent notice on the Platform. The "Last Updated" date at the top of this page indicates when the policy was last revised. Your continued use of the Platform after changes become effective constitutes your acceptance of the revised Privacy Policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: [email protected]
• Live Chat: Available 24/7 on the haha88 Platform
• WhatsApp: +62 812-3456-7890

Our Customer Support team is available 24 hours a day, 7 days a week, and is fluent in English and Bahasa Indonesia. We aim to respond to all privacy inquiries within 48 hours.