Privacy Policy Hoki108 – Your Personal Data Protection

Hoki108 collects personal information from you in several situations – when you register an account, use our platform, contact the support team, or interact with any of our service features. The following are the main categories of information we collect:

Every piece of information we collect has a clear purpose and is not used beyond the scope described in this policy. The following outlines the key ways Hoki108 uses your personal data:

• Account Management: Creating and maintaining your member account, processing registrations, verifying identity, and ensuring the security of your login.
• Transaction Processing: Processing deposits and withdrawals accurately and securely, and sending transaction statements to you.
• Legal Compliance: Meeting KYC (Know Your Customer), AML (Anti-Money Laundering), and reporting obligations to the relevant authorities in Malaysia.
• Fraud Detection: Identifying and investigating suspicious activity, protecting your account from unauthorised access, and preventing platform abuse.
• Service Improvement: Analysing aggregated usage patterns to improve user experience, platform performance, and the game portfolio.
• Service Communications: Sending important account-related notifications, security alerts, terms updates, and transaction information.
• Customer Support: Resolving your enquiries, complaints, and requests more effectively using records of previous interactions.
• Marketing (with Consent): Sending hoki108 promotions, special offers, and the latest news only if you have consented to receive them. You may withdraw this consent at any time.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), Hoki108 processes your personal data on valid legal grounds. Depending on the type of processing carried out, the bases we rely on are as follows:

• Contract Performance: Processing required to deliver the services you have requested — such as transaction processing and account management — carried out on the basis of a contract between you and Hoki108.
• Legal Obligation: Processing required to comply with applicable Malaysian laws, including KYC requirements and anti-money laundering reporting obligations.
• Legitimate Interests: Processing for fraud detection, network security, and product improvement purposes, where our legitimate interests do not override your fundamental rights.
• Consent: For marketing communications and the use of non-essential cookies, we require your explicit consent. You may withdraw this consent at any time.

Hoki108 does not sell or disclose your personal data to third parties for marketing purposes. However, in the course of our business operations, there are limited situations where we need to share your information with certain parties:

• Payment Service Providers: Payment gateways and authorised financial institutions that process your deposit and withdrawal transactions. All such providers are bound by strict confidentiality agreements.
• Identity Verification Provider: Trusted third-party KYC services used to verify your identity documents in order to meet compliance requirements.
• Technology Infrastructure Providers: Server hosting companies and cloud services that store our data, subject to strict data processing agreements.
• Relevant Authorities: Law enforcement agencies, regulatory bodies, or courts when required by applicable Malaysian law.
• Fraud Investigators: Fraud prevention agencies that help us identify and prevent illegal activity on our platform.

Hoki108 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website or use our app.

• Essential Cookies: Required for core platform functionality – including login authentication, session security, and transaction handling. These cookies cannot be disabled.
• Performance Cookies: Helps us understand how you interact with the platform – pages visited, time spent, and any errors encountered. This information is used for continuous improvement.
• Functional Cookies: Saving your preferences such as language, location, and display settings so you do not need to reconfigure them each time you log in.
• Marketing Cookies: Used only with your consent to display more relevant content and promotions. You may opt out of this type of cookie.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality of some Hoki108 platform features.

Protecting your personal data is hoki108's highest priority. We continuously invest in the latest security infrastructure to ensure your data is always protected against unauthorised access, disclosure, alteration, or destruction.

• End-to-End Encryption: All communications between your app and Hoki108's servers are encrypted using TLS 1.3 — the latest encryption protocol meeting current industry standards.
• Two-Factor Authentication (2FA): An additional security layer for your account that requires identity verification through a second method beyond your password.
• 24/7 Security Monitoring: Our IT security team monitors the platform continuously around the clock to detect and respond to any threats.
• Regular Penetration Testing: Independent security audits and penetration testing are conducted regularly by trusted third-party security experts.
• Internal Access Control: Access to members' personal data is restricted to staff who genuinely require it, with a full audit log maintained for every access.
• Incident Response Plan: Hoki108 has a comprehensive incident response procedure to react swiftly and effectively in the event of a security breach.

Hoki108 retains your personal data only for as long as necessary to fulfil the purposes stated in this policy, or as required by applicable Malaysian law. Once the retention period expires, data will be securely deleted or anonymised.

• Active Account Data: Retained for the duration your account remains active. This data is required to provide uninterrupted service.
• Financial Transaction Data: Retained for a minimum of 7 years from the transaction date in accordance with Malaysian financial compliance legal requirements.
• KYC Records: Retained for a minimum of 5 years after account closure to meet anti-money laundering requirements.
• Security Logs: Retained for 12 months for security investigation and fraud detection purposes.
• Closed Account Data: Basic information is retained for 5 years after account closure for legal compliance purposes and to resolve any outstanding claims.

As a data subject, you have certain rights under Malaysia's Personal Data Protection Act 2010. Hoki108 is committed to helping you exercise these rights through a straightforward and transparent process:

In operating the Hoki108 platform, your personal data may be transferred to, stored in, or processed in countries other than Malaysia. Such transfers only occur where there is a legitimate operational need and with adequate safeguards in place.

• Contractual Guarantee: All international data transfers are protected by standard contractual clauses, ensuring your data receives a level of protection equivalent to Malaysian standards.
• Suitability Assessment: We only transfer data to jurisdictions assessed as having adequate data protection standards.
• Data Processing Agreement: Every overseas service provider that receives your data is required to sign a comprehensive data processing agreement.

The Hoki108 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18.

If you believe we have inadvertently collected personal data from a minor, please contact us immediately. We will take prompt action to delete that information from our systems as quickly as possible.

The Hoki108 platform may contain links to third-party websites or services. This Privacy Policy applies solely to the Hoki108 platform and does not cover the privacy practices of any external sites you may visit through links provided.

Hoki108 is not responsible for the content, privacy policies, or security practices of third-party websites. We encourage you to read the privacy policy of every site you visit and to exercise caution when sharing personal information on external sites.

Hoki108 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. Each amendment takes effect as soon as the latest version is published on this page.

For amendments that materially affect how we use your data, we will notify you via your registered email or in-platform notification at least 14 days before the changes take effect. Your continued use of the Hoki108 platform after the effective date constitutes your acceptance of the amended Privacy Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, our data protection team is ready to assist. You may reach us through the following channels:

• Data Protection Email: [email protected]
• Live Chat: Available 24/7 via the Hoki108 app or website
• Target Response Time: We will acknowledge receipt of your enquiry within 3 business days and provide a full response within 21 business days.

If you are dissatisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory authority.