Privacy Policy — Hoki99

This Privacy Policy (the "Policy") is published by Hoki99 (the "Platform", "we", "us", or "our"), the operator of the online gaming and sports betting platform accessible at hoki99.cam. This Policy applies to all individuals ("Users", "you", or "your") who visit, register with, or use the Platform in any capacity.

Hoki99 is committed to protecting the privacy and personal data of its Users. We process personal data in accordance with internationally recognised data protection principles and the requirements of our international gaming licence. This Policy explains what data we collect, why we collect it, how we use it, who we may share it with, and what rights you have in relation to your data.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which form part of your overall agreement with Hoki99.

In this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or can be used to identify a natural person, directly or indirectly, including but not limited to name, identification number, contact details, location data, and online identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transmission, deletion, or any combination thereof.
• "Data Controller" means Hoki99, the entity that determines the purposes and means of Processing of Personal Data.
• "Data Processor" means a third party that processes Personal Data on behalf of Hoki99 in accordance with our instructions and this Policy.
• "KYC Data" means identity and age verification documents submitted by a User in accordance with our Know Your Customer process.
• "Transaction Data" means records of deposits, withdrawals, wagers, bonuses, and all financial activity associated with a User's Account.
• "Technical Data" means device identifiers, IP addresses, browser types, operating systems, and session data collected automatically when you use the Platform.
• "Cookie" means a small data file placed on your device by the Platform for functional, analytical, or preference-retention purposes.

Hoki99 collects the following categories of personal data in connection with your use of the Platform. The data collected varies depending on the nature of your interaction with us:

Hoki99 does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, genetic data, or health data, except where necessary to comply with a responsible gambling self-exclusion or health-related support request initiated by the User.

We collect personal data through the following methods:

• Direct submission: Information you voluntarily provide during account registration, KYC verification, deposit and withdrawal requests, or when contacting our support team via live chat or email at [email protected].
• Automated collection: Technical Data is collected automatically as you browse and interact with the Platform, including through cookies and similar tracking technologies described in Section 8.
• Third-party payment processors: When you make a deposit via Maybank2u, CIMB Clicks, Touch 'n Go eWallet, DuitNow, FPX, Boost, GrabPay, or cryptocurrency channels, limited transaction confirmation data is passed to us by the payment provider to reconcile your Account.
• Identity verification partners: Where we engage third-party KYC service providers to assist with document verification, those providers may return verification status results to us. We do not store raw document images beyond the minimum period required for compliance.
• Analytics and fraud detection tools: Aggregated and anonymised data from Platform usage may be processed through analytical tools to detect suspicious patterns, improve performance, and enhance security.

Hoki99 processes your personal data for the following purposes:

• Account management: To create, maintain, and administer your Account, including processing deposits (via Maybank2u, DuitNow, Touch 'n Go eWallet, FPX, and other supported methods), processing withdrawals, and applying bonuses to your Account.
• Identity and age verification: To verify that you are aged 21 or above and that the identity information you have provided is accurate, in compliance with our KYC obligations under our international gaming licence.
• Service delivery: To provide access to our full range of games, sports betting markets (including Liga Super Malaysia, EPL, and UFC events), live dealer products, and customer support services.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-account abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Regulatory compliance: To fulfil our obligations under our international gaming licence, including record-keeping, AML (Anti-Money Laundering) screening, and responding to regulatory or law enforcement requests where legally required.
• Responsible gambling: To administer self-exclusion requests, deposit limits, session reminders, and other responsible gambling tools requested by or applied to a User's Account.
• Marketing communications: Where you have opted in, to send you promotional offers, bonus notifications, and platform updates. You may withdraw consent for marketing communications at any time via your Account settings.
• Platform improvement: To analyse usage patterns, identify technical issues, and improve the performance, usability, and content of the Platform.

6.1 CONTRACT PERFORMANCE
The majority of data processing undertaken by Hoki99 is necessary to perform our contract with you — specifically, to provide the services described in our Terms & Conditions. This includes account management, payment processing, and game access.

6.2 LEGAL OBLIGATION
Certain processing is required to comply with our legal and regulatory obligations, including KYC identity verification, AML screening, and record retention requirements under our international gaming licence.

6.3 LEGITIMATE INTEREST
We process Technical Data and usage analytics on the basis of our legitimate interest in operating a secure, high-performance platform and detecting fraudulent activity that could harm both Hoki99 and our users.

6.4 CONSENT
Marketing communications are sent only where you have provided explicit opt-in consent. You may withdraw this consent at any time via your Account settings or by contacting our support team. Withdrawal of marketing consent does not affect the lawfulness of processing based on other grounds.

Hoki99 does not sell your personal data. We share personal data with third parties only where necessary and only in the following circumstances:

• Payment processors: Transaction data is shared with payment service providers (including those facilitating Maybank2u, CIMB Clicks, Touch 'n Go eWallet, DuitNow, FPX, GrabPay, Boost, and cryptocurrency transactions) strictly to process financial transactions on your behalf.
• KYC and identity verification providers: Where third-party services assist with document verification and age confirmation, your KYC documents are shared with those providers under strict data processing agreements.
• Game studio and platform technology providers: Where game software or live dealer technology is provided by third-party studios, your account identifiers (but not full personal data) may be passed to those providers to enable game session management.
• Fraud detection and security services: Aggregated and pseudonymised data may be processed by third-party security and fraud prevention tools.
• Legal and regulatory authorities: We may disclose personal data to competent authorities, regulators, or law enforcement bodies where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of Hoki99 or its users.

8.1 WHAT WE USE
Hoki99 uses cookies and similar tracking technologies (including session tokens, local storage, and pixel tags) to operate and improve the Platform. These technologies enable functions such as keeping you logged in, remembering your language preference, and measuring page performance.

8.2 TYPES OF COOKIES

• Strictly necessary cookies: Required for the Platform to function. These cannot be disabled. Examples include session authentication tokens and security cookies.
• Functional cookies: Remember your preferences such as language selection (English, Bahasa Melayu, or Mandarin Chinese) and interface settings across sessions.
• Analytical cookies: Collect aggregated, anonymised data on how Users navigate the Platform. Used to identify performance issues and improve user experience.
• Marketing cookies: Used to measure the effectiveness of promotional campaigns where you have consented to receive marketing communications. These cookies do not track your activity across external websites.

8.3 MANAGING COOKIES
You may control cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the Platform, but may limit certain functionality or require you to re-enter preferences on each visit. Strictly necessary cookies cannot be disabled without affecting core Platform function.

Hoki99 retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by our regulatory obligations. The following general retention periods apply:

• Account and Registration Data: Retained for the duration of your Account and for a period of five (5) years following account closure, in accordance with standard AML record-keeping requirements under our gaming licence.
• KYC Documents: Retained for a minimum of five (5) years from the date of verification, as required under our international licensing obligations.
• Transaction Data: Retained for five (5) years from the date of each transaction.
• Communication Data: Live chat transcripts and email correspondence retained for two (2) years from the date of the interaction.
• Technical and Analytical Data: Retained in aggregated or pseudonymised form for up to two (2) years. Raw IP and session logs retained for up to twelve (12) months.
• Marketing Data: Retained until you withdraw consent or for two (2) years from your last active interaction with a marketing communication, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

Subject to applicable law and the limitations described below, you have the following rights in relation to your personal data held by Hoki99:

Hoki99 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encryption of personal data and payment records stored on our systems at rest.
• Role-based access controls limiting staff access to personal data strictly to those with a legitimate operational need.
• Regular penetration testing and security audits conducted by independent third-party specialists.
• Multi-factor authentication on all internal systems that access personal data.
• Incident response procedures designed to detect, contain, and report security breaches within a defined timeframe.

While Hoki99 employs industry-standard security measures, no transmission over the internet or method of electronic storage is completely secure. We encourage all Users to maintain strong, unique passwords and to enable two-factor authentication on their Accounts.

The Hoki99 Platform is strictly restricted to individuals aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. All accounts are subject to mandatory KYC age verification before a first withdrawal is processed.

Parents and guardians who believe their minor may have accessed or registered on the Platform should contact us immediately at [email protected] so that we can take appropriate action.

Hoki99 operates under an international gaming licence and engages service providers in multiple jurisdictions, including payment processors, technology providers, and cloud infrastructure partners. As a result, your personal data may be transferred to and stored in countries outside Malaysia.

Where personal data is transferred internationally, Hoki99 takes reasonable steps to ensure that appropriate safeguards are in place, including entering into data processing agreements with third-party processors that require them to implement appropriate technical and organisational protections for your data.

By creating an Account and using the Platform from Malaysia or any other location, you acknowledge and consent to the transfer of your personal data to our international service infrastructure as described in this Policy.

Hoki99 reserves the right to update this Privacy Policy at any time. Changes will be reflected in an updated "Last Updated" date at the top of this page. Where changes are material — meaning they substantively affect your rights or how your data is used — we will notify registered Users by email or via a prominent notice on the Platform at least seven (7) days before the changes take effect.

We encourage you to review this Policy periodically to stay informed about how Hoki99 protects your data. Continued use of the Platform after the effective date of an updated Policy constitutes acceptance of the revised terms.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how Hoki99 has handled your personal data, please contact us through any of the following channels:

• Live Chat: Available 24/7 directly on the Platform — average response time under 5 minutes.
• Email: [email protected] — responses provided within 24 hours for general queries, and within 30 days for formal data rights requests.
• Languages: Our support team handles privacy queries in English, Bahasa Melayu, and Mandarin Chinese.

For concerns specifically related to responsible gambling data — such as self-exclusion records, deposit limit settings, or session history — please also refer to our Responsible Gambling Policy.