Privacy Policy

1. Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that identifies or can reasonably be used to identify a natural person, including name, identification number, contact details, financial information, and online identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Subject" means you, the individual whose Personal Data is being processed by hgi909.
• "Platform" means the hgi909 website (hgi909.cam), mobile-optimized site, and all associated services.
• "Cookies" means small text files stored on your device by the Platform that record preferences, session information, and analytical data.
• "Third-Party Service Providers" means companies engaged by hgi909 to provide services such as payment processing, identity verification, fraud detection, and analytics.

2. Information We Collect

hgi909 collects Personal Data through multiple channels in order to provide, operate, and continuously improve our gaming services. The categories of data we collect are described below.

2.1 Registration and Account Information

When you create an account with hgi909, we collect:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify you meet our 21+ age requirement)
• Residential address in Indonesia (including city, province, and postal code)
• Email address and mobile phone number
• Chosen username and encrypted password
• Preferred currency (Indonesian Rupiah, IDR)
• Referral source (how you discovered hgi909)

2.2 Identity Verification (KYC) Documents

To comply with anti-money laundering (AML) requirements and verify your identity before processing withdrawals, we collect:

• Government-issued photo identification (Indonesian KTP, passport, or SIM driver's license)
• Proof of residential address (utility bill, bank statement, or official correspondence dated within the last three months)
• Payment method verification (screenshot or statement confirming ownership of your BCA, BRI, BNI, Mandiri, or e-wallet account registered under your legal name)
• Source of funds documentation for large withdrawals (employment letter, tax return, business registration, or other supporting evidence)

2.3 Financial Transaction Data

We collect records of all financial activity on your account, including:

• Deposit transactions: amount, timestamp, payment method used (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja), and transaction reference numbers
• Withdrawal requests and processing records
• Bonus credits, wagering activity, and bonus forfeitures
• Account balance history

2.4 Gaming Activity Data

We collect detailed records of your gaming behavior, including:

• Sports bets placed (event, market, stake amount, odds, outcome)
• Casino games played (game title, provider, bet size, win/loss outcome, session duration)
• Togel (Indonesia's traditional numbers lottery) draws participated in and results
• Live dealer session records
• Gaming session timestamps, durations, and frequency patterns

2.5 Technical and Device Data

When you access the Platform, we automatically collect:

• IP address and approximate geolocation (city-level)
• Device type (desktop, Android smartphone, iOS device, tablet)
• Operating system and version
• Browser type and version
• Platform access timestamps and session logs
• Referring URL and navigation paths within the Platform

2.6 Communications Data

We retain records of your communications with hgi909, including:

• Live chat transcripts
• Email correspondence with our support team
• Feedback, complaints, and dispute records
• Responsible gaming requests and self-exclusion communications

3. How We Use Your Information

hgi909 processes your Personal Data for the following purposes, each grounded in a lawful basis:

Purpose	Data Used	Lawful Basis
Account creation and management	Registration data, KYC documents	Contract performance
Identity and age verification (21+)	KYC documents, date of birth	Legal obligation
Processing deposits and withdrawals	Financial data, payment method details	Contract performance
Fraud detection and AML compliance	Transaction data, device data, IP address	Legal obligation / Legitimate interest
Responsible gaming monitoring	Gaming activity, session data	Legal obligation / Legitimate interest
Customer support	Communications data, account data	Contract performance
Promotional communications	Email address, gaming preferences	Consent
Platform analytics and improvement	Technical data, gaming activity	Legitimate interest
Legal and regulatory compliance	All categories as required	Legal obligation

We do not use your Personal Data for automated decision-making that produces legal or similarly significant effects on you, except where such processing is required by law or is necessary for fraud prevention.

4. Cookies and Tracking Technologies

hgi909 uses cookies and similar tracking technologies to operate the Platform, personalize your experience, and analyze usage patterns. Below is a summary of the cookie categories we deploy:

4.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function. They enable core services such as session authentication, security features, load balancing, and maintaining your logged-in state. You cannot opt out of these cookies while continuing to use the Platform.

4.2 Functional Cookies

These cookies remember your preferences — such as language settings, display options, and last-visited game categories — to provide a more personalized experience on return visits.

4.3 Analytics Cookies

We use analytics tools to understand how players navigate and use the Platform. This data is collected in aggregate form and helps us identify areas for improvement. Analytics cookies track pages visited, time on site, and interaction events. Individual users are not identified in analytics reports.

4.4 Security Cookies

Security cookies help us detect and prevent fraudulent activity, bot access, and account takeover attempts. They record device fingerprints, behavioral signals, and session anomalies that our fraud detection systems analyze.

4.5 Managing Cookies

You can configure your browser to refuse or delete cookies. However, disabling strictly necessary cookies will prevent you from logging into your account and using Platform features. Instructions for managing cookies vary by browser — consult your browser's help documentation for guidance.

5. Sharing Your Information

hgi909 does not sell or rent your Personal Data to third parties. We may share your data with the following categories of recipients only where necessary and in accordance with this Privacy Policy:

5.1 Payment Processors

To process your deposits and withdrawals via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, and LinkAja, we share transaction data with licensed payment processors and financial institutions. These parties receive only the data required to complete the specific transaction.

5.2 Identity Verification Providers

We engage specialist KYC and identity verification services to authenticate your Indonesian KTP, passport, or driver's license documents. These providers process your identity documents on our behalf under strict data processing agreements.

5.3 Fraud Detection and Security Services

We share technical and behavioral data with fraud prevention platforms to protect all hgi909 users from fraudulent accounts, unauthorized access, and money laundering activity.

5.4 Game Content Providers

To deliver games from providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft, limited technical data (session tokens, game results) is exchanged with these providers through secure APIs. Game providers do not receive your full personal profile.

5.5 Legal and Regulatory Authorities

We may disclose your Personal Data to law enforcement, regulatory bodies, courts, or other government authorities when required to do so by law, court order, or where we believe disclosure is necessary to protect hgi909's legal rights, prevent fraud, or protect the safety of users or the public.

5.6 Business Transfers

In the event of a merger, acquisition, sale of assets, or corporate restructuring, your Personal Data may be transferred to the acquiring entity. We will notify affected users before their data becomes subject to a materially different privacy policy.

6. Data Security

hgi909 implements industry-standard technical and organizational security measures to protect your Personal Data against unauthorized access, accidental loss, disclosure, alteration, or destruction. Our security infrastructure includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted in transit using Transport Layer Security (TLS 1.3).
• Data Encryption at Rest: Sensitive data stored on our servers — including financial records, KYC documents, and password hashes — is encrypted at rest using AES-256 encryption.
• Two-Factor Authentication (2FA): We offer 2FA for all player accounts, adding a second layer of authentication beyond your password.
• Access Controls: Internal access to your Personal Data is restricted to authorized hgi909 personnel on a strict need-to-know basis. All staff with data access are subject to confidentiality obligations.
• Penetration Testing: We conduct regular independent security audits and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: We maintain a documented data breach response plan. In the event of a significant data breach affecting your rights, we will notify you within 72 hours of discovery.

While we employ robust security measures, no online system is completely immune to security threats. You are responsible for maintaining the confidentiality of your account credentials and should contact us immediately at [email protected] if you suspect unauthorized access to your account.

7. Data Retention

We retain your Personal Data for as long as your account is active and for a period thereafter as required by our legal and regulatory obligations. Specific retention periods are:

• Account and registration data: Retained for the duration of your account, plus 5 years after account closure to comply with anti-money laundering reporting requirements.
• KYC verification documents: Retained for 5 years after account closure or the last transaction, whichever is later.
• Financial transaction records: Retained for 5 years in accordance with financial record-keeping obligations.
• Gaming activity logs: Retained for 3 years from the date of activity.
• Customer support communications: Retained for 2 years from the date of the last communication.
• Marketing consent records: Retained for 3 years from the date of consent, or until you withdraw consent, whichever is earlier.

After applicable retention periods expire, your data is securely deleted or anonymized so that it can no longer be associated with your identity.

8. Your Rights as a Data Subject

As a user of hgi909, you have the following rights with respect to your Personal Data:

• Right of Access: You may request a copy of the Personal Data we hold about you at any time.
• Right to Rectification: If your data is inaccurate or incomplete, you may request that we correct or update it through your account settings or by contacting support.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data. This right is subject to our legal retention obligations; we may need to retain certain data even after account closure.
• Right to Restriction of Processing: In certain circumstances, you may request that we restrict the processing of your data while a dispute or concern is being investigated.
• Right to Data Portability: You may request a structured, machine-readable copy of your Personal Data to transfer to another service provider.
• Right to Object: You may object to processing based on our legitimate interests, including profiling for marketing purposes. You may opt out of marketing communications at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact our Data Protection team at [email protected] with the subject line "Data Subject Request". We will respond within 30 days of receiving your request. For complex requests, this period may be extended by an additional 60 days, of which we will notify you.

9. International Data Transfers

hgi909 operates servers and engages service providers in multiple countries. Your Personal Data may be transferred to and processed in countries outside Indonesia. Where such transfers occur, we ensure that appropriate safeguards are in place to protect your data to a standard equivalent to protections available in Indonesia. Safeguards may include contractual data protection clauses, data processing agreements, and transfers to jurisdictions recognized as providing adequate data protection.

By using the Platform and consenting to this Privacy Policy, you acknowledge and agree to your Personal Data being transferred and processed internationally as described in this section.

10. Children's Privacy

hgi909 is strictly intended for adults aged 21 years and older. We do not knowingly collect Personal Data from individuals under the age of 21. If we discover that a user under 21 has registered an account or provided us with Personal Data, we will immediately close the account, delete the associated data, and return any deposited funds (subject to fraud investigation). If you are a parent or guardian and believe your child has accessed hgi909, please contact us immediately at [email protected].

11. Marketing Communications

With your consent, hgi909 may send you promotional emails, SMS messages, and in-Platform notifications about new games, bonuses, special offers, and platform updates relevant to Indonesian players. You may receive notifications about seasonal promotions aligned with Indonesian cultural events such as Idul Fitri, Independence Day (17 August), Ramadan (Ramadhan), and Chinese New Year (Imlek).

You may opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link in any marketing email
• Adjusting your notification preferences in your account settings
• Contacting our support team at [email protected] with "Marketing Opt-Out" in the subject line

Opting out of marketing communications will not affect transactional communications such as deposit confirmations, withdrawal notifications, account security alerts, and KYC verification requests.

12. Links to Third-Party Content

The Platform may reference third-party services such as payment providers and game studios. hgi909 is not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you interact with through the Platform. This Privacy Policy applies exclusively to data processed by hgi909 on the hgi909.cam Platform.

13. Amendments to This Privacy Policy

hgi909 reserves the right to update this Privacy Policy at any time. Changes will be posted on this page with an updated "Last Updated" date. Material changes will be communicated to you via email or through a prominent notice on the Platform. Your continued use of the Platform after any changes are posted constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed about how we are protecting your data.

14. Contact and Data Protection Inquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or how hgi909 handles your Personal Data, please contact us:

• Email: [email protected]
• Subject Line for Data Requests: "Data Subject Request" or "Privacy Inquiry"
• 24/7 Live Chat: Available through the Platform for urgent concerns
• Response Time: We aim to respond to all privacy inquiries within 30 days

Our Indonesian-speaking support team is available around the clock to assist with any questions about your account data, consent preferences, or data rights requests.