Privacy Policy

Scope & Application

This Privacy Policy ("Policy") is issued by hg0909 and governs the collection, processing, storage, sharing, and protection of personal data relating to all individuals who visit, register on, or interact with the hg0909 platform accessible at https://hg0909.cam and any associated mobile-optimized interfaces (collectively, "the Platform").

This Policy applies to all registered players, prospective players who browse the Platform without registering, and any individual who contacts hg0909 via email, live chat, or any other communication channel. By accessing the Platform or submitting personal information to hg0909 in any form, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

This Policy should be read alongside the hg0909 Terms & Conditions, which together form the complete agreement governing your use of the Platform.

Definitions

In this Privacy Policy, the following terms carry the meanings defined below:

• "Personal Data" means any information that identifies or can reasonably be used to identify a living natural person, directly or indirectly.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion.
• "Data Controller" means hg0909, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of hg0909 under a contractual obligation.
• "KYC Data" means identity and residency verification documents submitted by a Player in fulfilment of Know Your Customer obligations.
• "Cookies" means small text files placed on your device by the Platform to enable functionality, analytics, and session management.
• "Player", "you", or "your" refers to any individual who has registered or is seeking to register an account on the Platform.
• "IDR" / "Rp" means Indonesian Rupiah, the transaction currency used on the Platform.

Data We Collect

hg0909 collects the following categories of Personal Data:

3.1 Identity & Registration Data

• Full legal name as it appears on your government-issued identification.
• Date of birth (used to verify that you are 21 years of age or older).
• Gender (optional, provided at your discretion).
• Username and encrypted password.
• Nationality and country of residence (Indonesia).

3.2 Contact Data

• Email address.
• WhatsApp or mobile phone number (where provided for two-factor authentication or support).
• Residential address, including province, city (e.g., Jakarta, Surabaya, Bandung, Medan, Bali), and postal code.

3.3 KYC & Verification Data

• Copies of government-issued photo identification (KTP — Kartu Tanda Penduduk — or valid passport).
• Proof of residential address (utility bill, bank statement, or official correspondence dated within the last three months).
• Selfie photographs holding identification documents, where requested by our compliance team.
• Bank account details (account holder name, account number, and bank name — e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga) or e-wallet details (OVO, DANA, GoPay, ShopeePay, LinkAja) for payment processing and withdrawal verification.

3.4 Financial & Transaction Data

• Deposit amounts, timestamps, and payment method references.
• Withdrawal requests, amounts, processing times, and status records.
• Bonus credits, wagering activity, and promotion participation history.
• Account balance history.

3.5 Gaming & Behavioral Data

• Game session logs, including games played, bet amounts, outcomes, and session duration.
• Sports betting selections, including football (BRI Liga 1, EPL, La Liga, Champions League), badminton, MotoGP, and e-sports markets.
• Togel number selections and draw participation records.
• Responsible Gaming Tool settings and self-limit configurations.

3.6 Technical & Device Data

• IP address and approximate geographic location derived from IP.
• Device type, operating system, and browser version.
• Session timestamps, login history, and access logs.
• Cookie identifiers and analytics event data (see Clause 12).

How We Collect Data

hg0909 collects Personal Data through the following means:

4.1 Directly from You

When you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact customer support, or update your account profile, you provide data directly to hg0909.

4.2 Automatically During Platform Use

The Platform automatically collects technical and behavioral data through server logs, cookies, and analytics systems as you browse, play games, and place bets. This collection is necessary for Platform functionality, security monitoring, and service improvement.

4.3 From Third-Party Payment Providers

When you initiate a deposit or withdrawal through Indonesian bank transfer or e-wallet services (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja), relevant transaction confirmation data is shared with hg0909 by those payment providers to reconcile your account balance.

4.4 From Identity Verification Partners

Where hg0909 uses third-party KYC verification services to assist with document authentication, those partners may return identity confirmation data to hg0909. All KYC partners operate under strict data processing agreements consistent with this Policy.

Legal Basis for Processing

hg0909 processes your Personal Data on the following legal bases:

How We Use Your Data

hg0909 uses the Personal Data we collect for the following specific purposes:

6.1 Account Administration

To create, verify, maintain, and secure your player account; to authenticate your identity on login; to apply account-level settings including Responsible Gaming Tool configurations such as deposit limits, session time-outs, and self-exclusion periods.

6.2 Payment Processing

To facilitate deposits and withdrawals via your nominated Indonesian bank account (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja); to verify that payment methods are registered in your own name; and to maintain accurate financial records of all transactions denominated in IDR.

6.3 KYC & Compliance

To verify that you are at least 21 years of age and a resident of Indonesia; to satisfy anti-money laundering (AML) and counter-terrorism financing (CTF) obligations; and to comply with requests from competent regulatory or law enforcement authorities where legally required.

6.4 Customer Support

To respond to your enquiries submitted via email at [email protected] or via the Platform's live chat system; to investigate and resolve disputes relating to your account, deposits, withdrawals, or game outcomes; and to maintain records of communications for quality assurance purposes.

6.5 Security & Fraud Prevention

To detect, investigate, and prevent fraudulent activity, bonus abuse, multi-accounting, unauthorized access, money laundering, and other prohibited conduct as defined in the hg0909 Terms & Conditions; to monitor session activity for anomalies that may indicate account compromise.

6.6 Service Improvement

To analyze aggregated, anonymized behavioral data to improve Platform performance, game selection, payment method availability, and user experience for players across Jakarta, Surabaya, Bandung, Medan, Bali, and other regions of Indonesia.

6.7 Marketing Communications

Where you have expressly opted in, to send promotional offers, bonus notifications, and updates about new games or features relevant to your preferences. You may unsubscribe from marketing communications at any time by contacting support or following the unsubscribe link in any marketing email. Withdrawal of marketing consent does not affect your ability to use the Platform.

Data Sharing & Disclosure

hg0909 does not sell, rent, or trade your Personal Data to any third party for commercial purposes. We share your data only in the following limited circumstances:

7.1 Service Providers & Data Processors

We engage third-party service providers who process data strictly on our behalf and under contractual obligations consistent with this Policy. These include:

• Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive anonymized session tokens necessary to deliver game content. They do not receive your full identity data.
• Payment processors: Indonesian banking partners and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive transaction data necessary to execute your deposits and withdrawals.
• KYC verification partners: Identity document authentication services receive copies of your KYC documents solely for the purpose of verifying their authenticity.
• IT infrastructure providers: Cloud hosting and cybersecurity providers who maintain the technical environment of the Platform under strict confidentiality agreements.

7.2 Legal & Regulatory Disclosure

hg0909 may disclose Personal Data to competent governmental, regulatory, or law enforcement authorities where required to do so by applicable law, court order, or in response to a valid legal process. We will endeavor to notify you of such disclosure where permitted by law.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets involving hg0909, your Personal Data may be transferred to the relevant successor entity. You will be notified of any such transfer and of any material changes to this Policy that may result from it.

International Data Transfers

hg0909 operates as an internationally licensed gaming platform. As a result, your Personal Data may be transferred to, stored in, or processed in countries outside Indonesia where our service providers and infrastructure partners are located. Not all of these countries provide the same level of data protection as Indonesian law.

Where Personal Data is transferred internationally, hg0909 ensures that appropriate safeguards are in place, which may include:

• Contractual data processing agreements that incorporate internationally recognized data protection standards.
• Technical security measures including encryption at rest and in transit.
• Access controls limiting personnel who can access your data to those with a strict operational need.

By registering an Account and using the Platform, you acknowledge and consent to such international transfers subject to the safeguards described above.

Data Retention

hg0909 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. The following indicative retention periods apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized so that it can no longer be associated with any individual.

Data Security

hg0909 implements a comprehensive set of technical and organizational security measures to protect your Personal Data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform.
• Encryption at rest for all sensitive data fields including passwords (stored as salted hashes), KYC documents, and financial records.
• Role-based access controls ensuring that only authorized hg0909 personnel with a verified operational need can access specific categories of Personal Data.
• Multi-factor authentication (MFA) enforced for all internal systems accessed by hg0909 staff.
• Regular penetration testing and security audits conducted by independent cybersecurity professionals.
• Real-time intrusion detection systems monitoring for anomalous activity on the Platform infrastructure.
• Automated backup systems with encrypted off-site storage to ensure data resilience and business continuity.

While hg0909 takes every reasonable precaution, no digital system can guarantee absolute security. You are also responsible for maintaining the confidentiality of your own account credentials and for using a strong, unique password for your hg0909 account.

Your Privacy Rights

hg0909 respects your rights over your Personal Data. Subject to applicable legal limitations, you have the following rights:

11.1 Right of Access

You may request a copy of the Personal Data hg0909 holds about you, along with information about how it is being used and with whom it has been shared.

11.2 Right to Rectification

If any Personal Data we hold about you is inaccurate or incomplete, you may request that we correct or update it without undue delay.

11.3 Right to Erasure

You may request the deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where processing is unlawful. Note that certain data must be retained for the minimum periods specified in Clause 9 to satisfy legal obligations; in such cases, your erasure request will be applied to the extent legally permissible.

11.4 Right to Restrict Processing

You may request that hg0909 restrict the processing of your Personal Data in certain circumstances — for example, while the accuracy of the data is being contested, or where you have objected to processing based on legitimate interests pending verification of whether our grounds override yours.

11.5 Right to Data Portability

Where processing is based on consent or contractual necessity and is carried out by automated means, you may request that your Personal Data be provided to you in a structured, commonly used, machine-readable format.

11.6 Right to Object

You may object at any time to the processing of your Personal Data for direct marketing purposes, or to processing based on hg0909's legitimate interests, on grounds relating to your particular situation.

11.7 Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.

11.8 Exercising Your Rights

To exercise any of the rights listed above, please contact hg0909 support by email at [email protected] (plain text — not a clickable link), including your registered username and a clear description of your request. We will respond within 30 calendar days. Complex requests may be extended by a further 60 days with notification to you.

Cookies & Tracking

The hg0909 Platform uses cookies and similar tracking technologies to ensure its proper functioning, maintain your session, analyze usage patterns, and improve the overall experience. The following categories of cookies are used:

You may configure your browser to block or delete cookies; however, doing so may impair certain Platform features, including the ability to stay logged in across sessions. Strictly necessary cookies cannot be disabled without affecting Platform functionality.

Minors & Age Restriction

By registering an account, you warrant that you are at least 21 years of age. If hg0909 discovers or has reasonable grounds to suspect that an account is held by or on behalf of an individual under 21, the account will be suspended immediately, all balances will be frozen pending investigation, and any winnings generated will be forfeited. KYC verification will be requested to resolve the matter.

If you believe that a minor has registered an account on the Platform, or if you are a parent or guardian concerned about a minor's access to online gaming, please contact our support team immediately at [email protected]. We take underage gambling extremely seriously and will act on all credible reports without delay.

We also recommend that parents and guardians make use of freely available parental control software to restrict access to gambling websites on shared devices. For further guidance on protecting minors, please visit our Responsible Gaming page.

Policy Amendments

hg0909 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data processing practices, or the services we offer. Material changes to this Policy will be communicated to registered Players by email to the address on file and/or by a prominent notice on the Platform, no less than 14 days before the changes take effect, except where an immediate change is required for legal or security reasons.

The "Last Updated" date at the top of this Policy will be revised with each amendment. We encourage you to review this Policy periodically. Your continued use of the Platform after the effective date of any amended Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you must cease using the Platform and may request Account closure in accordance with the Terms & Conditions.

Contact & Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or the way in which hg0909 handles your Personal Data, please contact our Data Protection team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Please include "Privacy Enquiry" or "Data Rights Request" in the subject of your email to ensure your message is routed to the correct team.
• Response Time: We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 calendar days.
• Live Chat: Available 24/7 via the Platform for general privacy questions and guidance on exercising your data rights.