hakimtoto Privacy Policy

This page describes what data we collect when you use hakimtoto and how we keep that data protected. We collect your email, password, identity documents (ID, selfie, address proof), payment information, and bet history to provide account access, process deposits and withdrawals, and comply with anti-money-laundering law. All data is encrypted in transit and at rest; we do not sell or share your personal information with third parties except where required by law enforcement or regulatory bodies.

Our privacy practices are designed to be transparent and minimal. We collect only data necessary to operate hakimtoto and verify your identity. You have the right to request access to your data, correct inaccuracies, and ask us to delete your account and associated records. This policy applies to all users of hakimtoto regardless of jurisdiction.

Read below for detailed information about our data handling practices.

Data Collection and Use on hakimtoto

What We Collect

When you register for hakimtoto, we collect your email address and password. When you complete KYC verification, we collect your full name, date of birth, national ID number, a photo of your ID, a selfie of your face, and proof of address (utility bill, bank statement, or official letter). We store these documents securely and use them only for account verification and regulatory compliance.

When you deposit or withdraw funds, we collect transaction information including the payment method (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet account details), amount, timestamp, and transaction status. We tokenize payment details and do not store plaintext card numbers or account credentials. We collect your betting history (game type, stake, outcome, settlement time) to operate hakimtoto, prevent fraud, and detect problem patterns.

We collect device information (phone model, operating system, IP address, browser type) to diagnose technical issues and detect fraudulent login attempts. We collect cookies and session tokens to keep you logged in and to remember your game preferences and language choice.

How We Use Your Data

We use your identity and payment data to verify your account, prevent fraud, and comply with anti-money-laundering (AML) and know-your-customer (KYC) regulations. We use your betting history to settle your bets, process payouts, and detect suspicious patterns (rapid account creation, coordinated betting, bonus abuse). We use device and login data to secure your account, detect unauthorized access, and block fraudulent login attempts.

We do not use your data for marketing to third parties. We send communications only regarding your account (password resets, security alerts, deposit confirmations, payout notifications) and platform updates. We do not sell your data to advertisers, data brokers, or any external party. The only exceptions are: (1) law enforcement or regulatory bodies may request data via court order or statutory authority, and we comply with those requests; (2) payment processors receive necessary transaction data to process your deposits and withdrawals; and (3) fraud-detection vendors may receive anonymized behavioral data to improve our security systems.

Data Retention and Deletion

We retain your identity documents and KYC records for as long as your account is active, plus five years after account closure to comply with AML regulations. We retain transaction records (deposits, withdrawals, bets) indefinitely to support dispute resolution and regulatory audit. You may request deletion of non-regulatory data (preferences, device history) at any time, and we will comply within 30 days. You cannot request deletion of identity, payment, or betting records while your account is active, as these are necessary for account operation and legal compliance.

If you close your account voluntarily, your account access is terminated immediately, but your data remains in our systems for the retention periods described above. We do not share closed-account data with third parties except in response to lawful regulatory requests.

Your Rights and Our Obligations

Your Rights on hakimtoto

You have the right to request access to all personal data we hold about you. Contact our support team with a data-access request and we will provide a complete record of your stored information within 14 days. You have the right to correct inaccurate information—if your address or phone number has changed, update it in your account settings or contact support. You have the right to request deletion of non-regulatory data (device history, preferences, session records) within 30 days of request.

You have the right to withdraw consent from marketing communications at any time. You may adjust notification settings in your account to receive only essential alerts (security, settlement, withdrawal confirmation). You cannot withdraw consent for regulatory data processing, as that is required by law to operate hakimtoto.

Security Practices

We encrypt all data in transit using TLS 1.2 or higher. We encrypt all stored data at rest using AES-256 encryption. Payment information is tokenized and never stored in plaintext. We conduct monthly security audits and penetration tests to identify vulnerabilities. Our team undergoes regular security training. If we detect a data breach, we notify affected users within 72 hours and cooperate with authorities as required by law.

You are responsible for keeping your password confidential and for all activity on your account. If you suspect unauthorized access, contact our support team immediately. We can disable your account, review your login history, and reverse fraudulent transactions.

Cookies and Tracking

We use session cookies to keep you logged in and functional cookies to remember your game preferences and language choice. We do not use tracking cookies or pixels to monitor your behavior across other websites. Our analytics system (if deployed) collects aggregate usage data (page visits, feature usage) but does not track individual users across sessions. You may disable non-essential cookies in your browser settings, though this may affect your ability to log in or access certain features on hakimtoto.

During major holidays (Idul Fitri, Idul Adha, Imlek, Nyepi), our support team may experience reduced availability. Data-access requests submitted during holidays may be processed with slight delays, but we guarantee completion within 14 days of request.

Contact and Updates

If you have questions about our privacy practices or wish to request access to your data, contact our support team via in-app chat or email. We respond to privacy inquiries within 4 business hours. We may update this policy periodically; updates take effect 7 days after publication. Continued use of hakimtoto after policy updates constitutes acceptance of the revised policy. If you disagree with any update, you may close your account and request deletion of non-regulatory data.