Privacy Policy

At hah303, we are committed to protecting your privacy and safeguarding your personal information. This Privacy Policy ("Policy") explains how hah303 ("Company", "we", "us", "our") collects, uses, stores, shares, and protects personal data obtained from users ("you", "your", "User") of our website, mobile applications, and related services (collectively, the "Service"). This Policy applies to all Indonesian residents and international users accessing hah303 services.

By creating an account with hah303, depositing funds, or using any part of our Service, you acknowledge that you have read, understood, and consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy. If you do not agree with any provision of this Policy, you must immediately cease using the Service and contact us to request account closure and data deletion.

1. Information We Collect

1.1 Personal Information You Provide

When you register for a hah303 account, verify your identity, or use our services, we collect the following categories of personal information directly from you:

• Account Registration Data: Full legal name, date of birth, residential address, email address, mobile phone number, preferred username, and password.
• Identity Verification (KYC) Documents: Government-issued identification documents such as Indonesian national ID card (KTP), passport, or driver's license; proof of address documents (utility bills, bank statements); selfie photographs holding your ID; and any additional documentation required to comply with Know Your Customer (KYC) and anti-money laundering (AML) regulations.
• Financial Information: Bank account details (bank name, account number, account holder name) for Indonesian banks including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, Bank Permata, BSI; e-wallet account information (OVO, DANA, GoPay, ShopeePay, LinkAja account numbers); cryptocurrency wallet addresses for deposits and withdrawals; transaction history including deposits, withdrawals, bets placed, and winnings.
• Communication Data: Records of your communications with our customer support team via live chat, email, WhatsApp, or Telegram, including the content of messages, timestamps, and any attachments or screenshots you provide.
• Marketing Preferences: Your consent to receive promotional emails, SMS messages, push notifications, or other marketing communications from hah303, and your preferences regarding the types of offers you wish to receive.

1.2 Information Collected Automatically

When you access or use the hah303 Service, we automatically collect certain technical and behavioral information through cookies, web beacons, and similar tracking technologies:

• Device Information: Device type (smartphone, tablet, desktop computer), operating system (Android, iOS, Windows, macOS), browser type and version, screen resolution, device identifiers (IMEI, advertising ID), and hardware model.
• Usage Data: Pages visited on the hah303 website or app, features used, bets placed (sport/event, bet type, stake amount, odds, outcome), games played (game titles, session duration, bet amounts, RTP), time spent on each page or game, navigation paths, and clickstream data.
• Location Data: IP address, geolocation data (country, city, postal code derived from IP address), and GPS coordinates (if you grant location permissions on mobile devices). This information helps us comply with jurisdictional restrictions and detect fraudulent activity.
• Connection Data: Internet service provider (ISP), connection speed, network type (WiFi, mobile data), referral source (how you arrived at hah303, such as search engines, affiliate links, or direct navigation).
• Cookies and Tracking Technologies: Session cookies (expire when you close your browser), persistent cookies (remain on your device for a specified period), functional cookies (remember your preferences like language or currency), analytics cookies (track usage patterns to improve our service), and advertising cookies (deliver targeted promotional content). You can manage cookie preferences through your browser settings, but disabling certain cookies may limit functionality.

1.3 Information from Third Parties

In certain circumstances, hah303 may receive personal information about you from external sources:

• Payment Processors: Financial institutions, banks, e-wallet providers, and payment gateways provide transaction confirmation, fraud detection signals, and compliance data when you deposit or withdraw funds.
• Identity Verification Services: Third-party KYC and AML verification providers help us confirm your identity, age, and address by cross-referencing your submitted documents against official government databases and watchlists.
• Affiliate Partners: If you register through an affiliate referral link, we may receive information about the referring affiliate (affiliate ID, campaign source) but typically do not receive additional personal information about you beyond what you provide during registration.
• Social Media Platforms: If you choose to link your hah303 account to social media accounts (Facebook, Google, Twitter) for simplified login, we may receive basic profile information such as your name, email address, and profile photo, subject to the privacy settings and permissions you have configured on those platforms.

2. How We Use Your Information

hah303 processes your personal information for the following purposes, all of which are necessary to provide our online gambling services, comply with legal obligations, and improve user experience:

2.1 Service Provision and Account Management

• Create, maintain, and manage your hah303 account.
• Verify your identity, age (21+ requirement), and residential address to comply with gambling regulations.
• Process deposits, withdrawals, and other financial transactions securely.
• Enable you to place bets on sports events, play casino games, participate in togel lottery draws, and access all features of the Service.
• Settle bets, credit winnings to your account, and process bonus awards.
• Provide customer support and respond to your inquiries, complaints, or technical issues.

2.2 Security, Fraud Prevention, and Legal Compliance

• Detect, prevent, and investigate fraudulent activities, including multi-accounting, collusion, bonus abuse, payment fraud, and identity theft.
• Monitor betting patterns and gameplay to identify problem gambling behaviors and enforce responsible gaming policies.
• Comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations as required by our gaming licenses and international financial crime prevention standards.
• Respond to legal requests, court orders, subpoenas, or government investigations.
• Enforce our Terms and Conditions, resolve disputes, and protect the rights, property, and safety of hah303, our users, and the public.

2.3 Service Improvement and Personalization

• Analyze usage patterns, betting preferences, and game performance to improve website functionality, user interface design, and overall service quality.
• Personalize your experience by recommending sports events, games, or promotions based on your betting history and stated preferences.
• Conduct internal research, analytics, and statistical studies to understand user behavior, optimize odds pricing, and develop new products and features.
• Test new features, conduct A/B testing, and gather feedback to enhance platform performance.

2.4 Marketing and Communications

• Send you promotional offers, bonus notifications, tournament announcements, and other marketing communications via email, SMS, push notifications, or in-app messages, subject to your consent and communication preferences.
• Deliver personalized advertising on the hah303 platform and through third-party advertising networks based on your interests and activity.
• Inform you of important account updates, policy changes, security alerts, and service announcements (transactional communications, which you cannot opt out of as they are necessary for service provision).

3. How We Share Your Information

hah303 does not sell your personal data to third parties for their own marketing purposes. However, we may share your information with the following categories of recipients under specific circumstances:

3.1 Service Providers and Business Partners

We engage trusted third-party service providers to perform functions on our behalf, including:

• Payment Processing: Banks, payment gateways, e-wallet providers, and cryptocurrency exchanges process your deposits and withdrawals. These providers have access to your financial information only to the extent necessary to complete transactions.
• Identity Verification: KYC/AML compliance services verify your identity documents and screen against fraud databases and sanctions lists.
• Cloud Hosting and Data Storage: Secure server providers host our databases and store your account information, encrypted to industry standards.
• Customer Support Tools: Live chat platforms, helpdesk software, and CRM systems enable our support team to assist you efficiently.
• Analytics and Marketing: Web analytics services (Google Analytics), email marketing platforms, and advertising networks help us understand user behavior and deliver targeted promotions.

All third-party service providers are contractually bound to protect your data, use it only for specified purposes, and comply with applicable data protection laws.

3.2 Legal and Regulatory Authorities

We may disclose your personal information to government agencies, law enforcement, regulators, or courts when required by law or when we believe in good faith that disclosure is necessary to:

• Comply with legal obligations, court orders, subpoenas, or regulatory requests.
• Investigate and prevent illegal activities, fraud, or violations of our Terms and Conditions.
• Protect the rights, property, or safety of hah303, our users, or the public.
• Respond to claims that content or activities on our platform violate third-party rights.

3.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets involving hah303, your personal information may be transferred to the acquiring entity or successor organization. We will notify you via email and/or prominent notice on our website of any such change in ownership or control of your personal data, and you will have the opportunity to delete your account if you do not consent to the transfer.

3.4 With Your Consent

We may share your information with other third parties when you have explicitly consented to such sharing, for example when you authorize us to share your betting history with responsible gaming organizations or when you participate in third-party promotions or tournaments.

4. Data Security

hah303 employs industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction:

• Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL (Secure Sockets Layer) technology, the same encryption standard used by banks and financial institutions worldwide.
• Secure Data Storage: Personal information is stored on secure servers located in certified data centers with physical security controls (24/7 surveillance, biometric access restrictions, fire suppression systems). Sensitive data such as passwords and financial information is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorized hah303 employees and contractors who require access to perform their job functions. All personnel with data access are bound by confidentiality agreements and trained in data protection practices.
• Two-Factor Authentication (2FA): We offer optional 2FA for user accounts, adding an extra layer of security beyond passwords.
• Regular Security Audits: Our systems undergo regular security assessments, penetration testing, and vulnerability scans conducted by independent cybersecurity firms.
• Incident Response: In the unlikely event of a data breach affecting your personal information, we will notify you promptly in accordance with applicable data breach notification laws and take immediate steps to mitigate harm and prevent future incidents.

While we implement robust security measures, no system is completely secure. You play a critical role in protecting your account by choosing a strong, unique password, enabling 2FA, not sharing your login credentials, and logging out of your account when using shared or public devices.

5. Data Retention

hah303 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements:

• Active Accounts: While your account remains active, we retain all account data, transaction history, and betting records to provide ongoing service.
• Closed Accounts: After you close your account, we retain certain information for a minimum of 7 years to comply with financial record-keeping requirements, AML regulations, and gaming license obligations. This includes identity verification documents, transaction history, and betting records.
• Marketing Data: If you opt out of marketing communications, we retain your email address or phone number on a suppression list to ensure we do not contact you again.
• Legal Holds: If your information is subject to a legal hold, regulatory investigation, or ongoing dispute, we will retain relevant data until the matter is resolved, even if this exceeds standard retention periods.

After the applicable retention period, personal data is securely deleted or anonymized such that it can no longer be associated with you.

6. Your Privacy Rights

Under applicable data protection laws, including principles derived from GDPR (General Data Protection Regulation) and Indonesian data protection regulations, you have the following rights regarding your personal information:

6.1 Right to Access

You have the right to request confirmation of whether hah303 processes your personal data and to obtain a copy of your data. You can access most of your account information directly through your hah303 account dashboard. For additional data or a comprehensive data export, contact our support team.

6.2 Right to Rectification

If any of your personal information is inaccurate or incomplete, you have the right to request correction. You can update most information (email, phone number, address) directly in your account settings. For changes to legal name or date of birth, contact customer support with supporting documentation.

6.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, or when you withdraw consent. However, we may be legally required to retain certain information for regulatory compliance (7-year retention for financial records), and we cannot delete data that is necessary for ongoing legal obligations or to defend legal claims.

6.4 Right to Restrict Processing

You have the right to request that we limit how we use your personal data in certain situations, such as when you contest the accuracy of your data or object to processing. During the restriction period, we will store the data but not actively use it except with your consent or for legal claims.

6.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) and to transmit that data to another service provider. This right applies to data you have provided to us with your consent or for contract performance.

6.6 Right to Object

You have the right to object to processing of your personal data for direct marketing purposes at any time. You can unsubscribe from marketing emails using the link in each email, or manage your communication preferences in your account settings.

6.7 Exercising Your Rights

To exercise any of these rights, contact our Data Protection Officer via email at [email protected] (plain text) or through the customer support channels listed in Section 10. We will respond to your request within 30 days and may require verification of your identity before fulfilling the request.

7. International Data Transfers

hah303 operates globally and may transfer your personal information to countries outside Indonesia for processing and storage. Some of these countries may have data protection laws that differ from Indonesian law. When we transfer your data internationally, we ensure appropriate safeguards are in place:

• Data is transferred only to jurisdictions recognized as providing adequate data protection, or to recipients that have implemented standard contractual clauses approved by data protection authorities.
• Our service providers are contractually obligated to protect your data in accordance with international data protection standards.
• Data centers and servers meet ISO 27001 information security certification standards.

8. Children's Privacy

hah303 services are strictly for adults aged 21 years or older. We do not knowingly collect personal information from individuals under 21. If we become aware that we have inadvertently collected data from a minor, we will take immediate steps to delete that information and close the associated account. Parents or guardians who believe their child has provided personal information to hah303 should contact us immediately.

9. Cookies and Tracking Technologies

hah303 uses cookies and similar tracking technologies to enhance your experience, analyze usage patterns, and deliver personalized content. You can control cookies through your browser settings:

• Essential Cookies: Required for basic site functionality (login, session management). These cannot be disabled without affecting service availability.
• Functional Cookies: Remember your preferences (language, currency, display settings). You can disable these, but you will need to reconfigure preferences on each visit.
• Analytics Cookies: Help us understand how users interact with our site. Disabling these does not affect functionality.
• Advertising Cookies: Deliver targeted promotions based on your interests. You can opt out through browser settings or third-party opt-out tools.

For detailed information about the cookies we use, please refer to our Cookie Policy available on request from customer support.

10. Changes to This Privacy Policy

hah303 may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service offerings. The "Last Updated" date at the top of this document indicates when the Policy was most recently revised. Material changes will be communicated via email or prominent notice on our website at least 30 days before taking effect. Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy.

11. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or how hah303 handles your personal information, please contact us:

• Data Protection Officer: [email protected] (plain text)
• Customer Support: Available 24/7 via live chat on the hah303 website
• WhatsApp: Available 24/7 (number provided in your account dashboard)
• Telegram: Available 24/7 (handle provided in your account dashboard)

We are committed to resolving privacy concerns promptly and transparently. We will acknowledge your inquiry within 48 hours and provide a substantive response within 30 days.