Data Protection Statement

hoki188 Privacy Policy

This Privacy Policy explains what personal information hoki188 collects from users in Malaysia and elsewhere, why that information is collected, how it is processed and stored, what choices you have, and how to reach us with data-related requests. Please read this document carefully before using the hoki188 platform.

Last updated: 1 January 2026

hoki188 is an adult-only platform. All data processing activities described herein apply to eligible users aged 21 and above only.

class="section-header"> Privacy at a Glance

How hoki188 Handles Your Data

These cards summarise the most important data-handling principles. They are a reading aid only — the full legally binding text appears in the clauses below.

What We Collect

hoki188 collects registration details, identity verification documents, transaction records, device and session information, and customer support communications. We collect only what is necessary for the purpose stated at the time of collection.

Why We Use It

Personal data is used to administer your Account, process MYR deposits and withdrawals, complete KYC checks, prevent fraud, comply with legal obligations, and improve the hoki188 platform experience for Malaysian users.

Who We Share With

We share data only with verified payment processors (including providers supporting DuitNow, FPX, Touch 'n Go eWallet, Maybank and CIMB), KYC and fraud-prevention partners, and regulatory authorities where required. We do not sell your data to third-party marketers.

How We Protect It

hoki188 applies encryption, access controls, secure infrastructure and periodic security reviews to protect personal data from unauthorised access, alteration, disclosure or destruction throughout the data lifecycle.

Your Rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal data. You may also withdraw consent for certain non-essential processing activities at any time by contacting hoki188 support.

How to Contact Us

For data-related queries, corrections or complaints, contact hoki188 at the support email address listed in Section 12 of this policy. We aim to respond within five business days of receiving a written data request.

Full Privacy Policy

Section 1

Introduction

hoki188 ("we", "us", "our") is the operator of the online platform accessible at https://hoki188.cam ("Platform"). We are committed to handling personal data responsibly, transparently and in accordance with applicable data protection legislation, including the Personal Data Protection Act 2010 of Malaysia ("PDPA 2010") where applicable to our Malaysian users.

This Privacy Policy ("Policy") describes our practices regarding the collection, use, storage, sharing and protection of personal information submitted by or collected from users ("you", "User") who access or register on the Platform. It applies to all personal data processed in connection with the hoki188 Platform, including data collected through the website, customer support channels and payment processing flows.

By accessing the Platform or submitting personal information to hoki188, you acknowledge that you have read this Policy and consent to the data practices described herein. If you do not agree with this Policy, please discontinue use of the Platform immediately.

Malaysian Users: The Personal Data Protection Act 2010 (PDPA 2010) grants Malaysian individuals specific rights regarding commercial personal data processing. This Policy is designed to reflect the core principles of the PDPA 2010, including the General Principle, Notice and Choice Principle, and Security Principle, among others.

Section 2

Definitions

The following terms carry the meanings given below throughout this Policy:

Personal Data

Any information that identifies or can reasonably identify a natural person, whether directly or in combination with other information accessible to hoki188.

Sensitive Data

A subset of Personal Data warranting heightened protection, including identity document details, financial account information, and data relating to health or responsible gambling status.

Processing

Any operation performed on Personal Data, including collection, recording, storage, alteration, retrieval, use, disclosure, erasure or destruction, whether automated or manual.

Data Controller

hoki188, as the entity that determines the purposes and means by which Personal Data collected through the Platform is processed.

Data Processor

A third party that processes Personal Data on behalf of hoki188 under a written data processing agreement, such as payment service providers, KYC vendors and cloud infrastructure providers.

KYC

Know Your Customer — the identity and age verification process mandated by hoki188 before permitting withdrawals, certain deposit thresholds or access to specific Platform features.

Platform

The hoki188 website at https://hoki188.cam, its associated subdomains and all services, pages and features made available thereunder.

Section 3

Personal Data We Collect

3.1 hoki188 collects the following categories of Personal Data, depending on the nature of your interaction with the Platform:

Data Category	Examples	When Collected
Identity Data	Full name, date of birth, MyKad or passport number, nationality	Registration and KYC verification
Contact Data	Email address, Malaysian mobile number, residential address (including city — e.g. Kuala Lumpur, Penang, Johor Bahru, Shah Alam, Petaling Jaya)	Registration and account updates
Financial Data	Bank account numbers, e-wallet account identifiers (e.g. Touch 'n Go eWallet, Boost, GrabPay), DuitNow registered number, FPX bank selection, deposit and withdrawal amounts in MYR	Payment transactions
Identity Documents	Scanned copies of MyKad, passport, utility bills, bank statements provided for KYC	KYC verification requests
Technical Data	IP address, device type, operating system, browser type, session timestamps, login history	Automatically on Platform access
Usage Data	Pages visited, game categories browsed, time on page, features interacted with	Automatically during Platform use
Support Data	Content and timestamps of live chat, email and ticket communications submitted to hoki188 support	Customer support interactions
Responsible Gambling Data	Deposit limit settings, self-exclusion elections, cooling-off requests and related account restriction history	Where responsible gambling tools are used

3.2 hoki188 does not intentionally collect Personal Data from individuals under the age of 21. If we become aware that data has been submitted by a person below this age threshold, we will take prompt steps to delete that data and close any associated account.

Section 4

How We Collect Personal Data

4.1 Directly from you: When you complete the Platform registration form, submit KYC documents, make a deposit or withdrawal request, contact customer support or participate in any Platform promotion, you provide Personal Data directly to hoki188.

4.2 Automatically: When you access the Platform, our servers and analytics tools automatically record Technical Data and Usage Data. This includes session metadata, device fingerprinting for fraud prevention purposes, and geolocation data derived from your IP address.

4.3 From third parties: hoki188 may receive identity verification results from KYC and anti-fraud service providers, transaction confirmation data from payment processors (including those supporting Maybank, CIMB, Public Bank, Hong Leong, DuitNow and FPX), and, where applicable, data from social login providers if such a feature is enabled.

Payment data handling: hoki188 does not store full payment card numbers or online banking passwords. Payment transactions are routed through certified payment gateways and e-wallet providers. hoki188 retains only the reference information necessary to match transactions to user accounts and to support dispute resolution.

Section 5

Purposes of Processing

5.1 hoki188 processes Personal Data for the following stated purposes:

Account administration: Creating, maintaining and managing your hoki188 Account, verifying eligibility, and providing access to Platform features;
Identity and age verification: Fulfilling KYC obligations to confirm that Users are aged 21 or above and that their identity details are accurate;
Payment processing: Facilitating MYR deposits and withdrawals through Malaysian payment methods and maintaining transaction records;
Fraud and security: Detecting, investigating and preventing fraudulent transactions, money laundering, account sharing, bonus abuse and other prohibited conduct;
Legal compliance: Meeting obligations under applicable law, responding to lawful regulatory requests, and maintaining records as required by law;
Customer support: Responding to and resolving enquiries, complaints and technical issues submitted by Users;
Platform improvement: Analysing Usage Data in aggregate to improve Platform design, content organisation and feature availability;
Responsible gambling: Administering deposit limits, self-exclusion elections and other responsible gambling tools, and flaging account patterns that may indicate gambling-related harm;
Communications: Sending account notifications, security alerts, promotional updates (where consent has been obtained) and policy change notices.

5.2 hoki188 does not process Personal Data for purposes incompatible with those listed above without first providing updated notice and, where required by law, obtaining fresh consent.

Section 6

Legal Bases for Processing

6.1 hoki188 relies on the following legal bases when processing your Personal Data:

Consent: Where you have expressly agreed to specific processing, such as receiving promotional communications or the use of non-essential cookies. Consent may be withdrawn at any time without affecting the lawfulness of prior processing;
Contractual necessity: Where processing is required to perform or prepare a contract with you, such as administering your Account, processing deposits and withdrawals, and fulfilling KYC obligations;
Legal obligation: Where we must process data to comply with applicable laws, regulatory requirements or lawful orders from competent authorities;
Legitimate interests: Where hoki188 has a legitimate business interest in processing data — for example, fraud prevention, platform security, and aggregate usage analytics — provided those interests do not override your fundamental privacy rights.

Section 7

Data Sharing and Disclosure

7.1 hoki188 does not sell, rent or trade your Personal Data to third-party advertisers or data brokers under any circumstances.

7.2 We share Personal Data only with the following categories of recipient, and only to the extent necessary for the stated purpose:

Payment service providers: Entities facilitating Malaysian payment processing, including providers supporting Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, DuitNow and FPX. These providers receive only the data required to process your specific transaction;
KYC and identity verification providers: Third-party services that verify the authenticity of identity documents and confirm user eligibility. Shared data is limited to what is required for the verification task;
Fraud prevention and security vendors: Services that assist in detecting irregular account activity, unauthorised access attempts and financial crime;
Cloud infrastructure and hosting providers: Entities providing the technical environment in which the Platform operates, under contractual data protection obligations;
Legal and regulatory authorities: Courts, government bodies, law enforcement agencies or regulators where hoki188 is legally required to disclose data in response to a lawful order or request;
Successors interest: In the event of a merger, acquisition or asset sale involving hoki188, Personal Data may be transferred as part of that transaction, subject to continued application of this Policy.

7.3 All third-party Data Processors engaged by hoki188 are required to process Personal Data only on documented instructions from hoki188 and to maintain appropriate technical and organisational security measures.

Section 8

International Data Transfers

8.1 hoki188 operates in an international context. Personal Data collected from Malaysian users may be transferred to, stored in, or processed in jurisdictions outside Malaysia, including countries where hoki188's hosting infrastructure, KYC partners or payment processors are located.

8.2 Where Personal Data is transferred outside Malaysia, hoki188 takes steps to ensure that an equivalent level of data protection is maintained, which may include contractual safeguards, standard data protection clauses or reliance on the adequacy of the receiving jurisdiction's data protection framework.

                                Note for Malaysian users: The PDPA 2010 restricts the transfer of personal data outside Malaysia except where the destination country offers adequate protection or where specific exceptions apply. hoki188 applies contractual measures to support compliant cross-border transfers where applicable.
                            

Section 9

Data Retention Periods

9.1 hoki188 retains Personal Data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law or regulatory obligation. The following indicative retention periods apply:

Account data: Retained for the duration of the active Account relationship and for a period of up to seven (7) years following Account closure, in order to meet legal record-keeping obligations;
KYC and identity documents: Retained for a minimum period consistent with applicable anti-money laundering and counter-terrorism financing regulations, typically five (5) to seven (7) years from the date of verification;
Transaction records: Retained for a minimum of seven (7) years to support financial audit trails, dispute resolution and regulatory compliance;
Customer support records: Retained for a period of three (3) years following resolution of the relevant support case, unless a longer period is required by an ongoing legal matter;
Technical and usage logs: Retained for up to twelve (12) months for security, fraud prevention and platform performance purposes, after which logs are anonymised or deleted;
Responsible gambling records: Self-exclusion and deposit limit histories are retained for a minimum of five (5) years to prevent circumvention of responsible gambling measures.

9.2 When Personal Data is no longer required for any stated purpose and no legal obligation compels its retention, hoki188 will securely delete or anonymise that data.

Section 10

Your Data Rights

10.1 Subject to applicable data protection law, including the PDPA 2010 for Malaysian users, you may exercise the following rights in relation to your Personal Data held by hoki188:

Right of access: Request confirmation of whether hoki188 holds Personal Data about you and receive a copy of that data;
Right of correction: Request correction of inaccurate, incomplete or outdated Personal Data relating to you;
Right to withdraw consent: Where processing is based on consent, withdraw that consent at any time without affecting prior lawful processing. Note that withdrawal of consent for essential processing (e.g. KYC, payment processing) may result in Account restrictions;
Right to restrict processing: Request that hoki188 limits processing of your Personal Data in certain circumstances, such as where you contest the accuracy of the data;
Right to object: Object to processing based on legitimate interests, including profiling for fraud prevention purposes, where you have grounds relating to your particular situation;
Right of erasure: Request deletion of Personal Data where it is no longer necessary for the original collection purpose, subject to overiding legal obligations that may require retention.

10.2 To exercise any of the above rights, submit a written request to hoki188 at the contact details in Section 12. We will acknowledge receipt within three (3) business days and endeavour to respond substantively within twenty-eight (28) calendar days.

10.3 hoki188 may request additional identity verification before processing certain data requests to prevent unauthorised access to another person's Personal Data.

Section 11

Cookies and Tracking Technologies

11.1 The hoki188 Platform uses cookies and similar technologies to support Platform functionality, maintain session state, prevent fraud, and collect aggregate usage analytics. The main categories of cookies used are:

Strictly necessary cookies: Required for the Platform to function, including session authentication, security tokens and load balancing. These cannot be disabled without impairing Platform access;
Analytics cookies: Used to collect aggregated, anonymised data about how users navigate the Platform so that hoki188 can improve information architecture and content presentation. These are deployed subject to your consent where required by law;
Fraud prevention cookies: Used to identify unusual session patterns, bot traffic and account takeover attempts. These serve a security function and are treated as necessary cookies.

11.2 hoki188 does not deploy advertising or cross-site tracking cookies. Third-party tracking pixels intended for audience retargeting on external platforms are not used.

11.3 You may manage cookie preferences through your browser settings. Disabling cookies may affect the functionality of certain Platform features, particularly those requiring session authentication.

Section 12

Contact Us

12.1 For questions about this Privacy Policy, to exercise your data rights, or to raise a data protection concern, please contact the hoki188 privacy team using the details below. All privacy-related correspondence should reference the subject "Privacy Request" to assist with prompt routing.

Contact (plain text — not a clickable link):
[email protected]
Response time: hoki188 aims to acknowledge data requests within three (3) business days and to respond substantively within twenty-eight (28) calendar days.

12.2 If you are a Malaysian user and believe that hoki188 has not adequately addressed your data protection concern, you may consider contacting the Department of Personal Data Protection (JPDP) Malaysia, which oversees enforcement of the PDPA 2010. hoki188 encourages users to first raise concerns directly with us to allow for resolution before escalation.

12.3 This Policy may be updated periodically. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the Platform after a material Policy change constitutes acceptance of the revised terms.