Privacy Policy

The following definitions apply throughout this Privacy Policy:

• "Company" / "We" / "Us" — hao787, the internationally licensed operator of the online gaming platform accessible at https://hao787.cam.
• "Platform" — the hao787 website, mobile interface, and all associated digital services operated by the Company.
• "Member" / "You" — any natural person who has registered an account on the Platform.
• "Personal Data" — any information that identifies or can reasonably be used to identify a living natural person, directly or in combination with other data.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, and deletion.
• "KYC" — Know Your Customer; the identity and document verification procedures required under the Company's international gaming licence.
• "Third Party" — any natural or legal person other than the Member and the Company, including payment processors, game studios, and technology service providers.
• "Applicable Law" — all statutes, regulations, and codes of practice that govern the Company's data processing activities in the relevant jurisdiction.

hao787 collects the following categories of Personal Data from its members, prospective members, and platform visitors:

We do not collect sensitive special-category data (such as racial or ethnic origin, religious beliefs, or health data) unless you voluntarily disclose it in the context of a responsible gaming support request, and only to the extent necessary to provide appropriate assistance.

hao787 collects Personal Data through the following channels:

• Direct submission: Information you provide when registering an account, completing KYC, making a deposit or withdrawal request, contacting customer support, or activating responsible gaming tools.
• Automated technical collection: Data gathered automatically when you access the Platform, including IP address, device fingerprint, browser metadata, and session activity logs, collected via server logs, cookies, and similar tracking technologies.
• Payment service providers: Transaction confirmation data shared by your Indonesian bank (BCA, BRI, BNI, Mandiri, and others) or e-wallet provider (OVO, DANA, GoPay, ShopeePay, LinkAja) when you initiate a deposit or withdrawal.
• Identity verification services: Where the Company uses a third-party KYC provider to validate identity documents, that provider may return verification results and risk scores to hao787.
• Fraud and security tools: Risk management systems that analyse behavioural signals and transaction patterns to detect suspicious activity, bonus abuse, or multiple account registration attempts.

hao787 processes your Personal Data for the following clearly defined purposes:

1. Account creation and management: To register your account, verify your identity, and maintain accurate records of your membership.
2. KYC and anti-money laundering (AML) compliance: To fulfil the identity verification obligations imposed by our international gaming licence and to prevent financial crime on the Platform.
3. Payment processing: To execute deposits and withdrawals in Indonesian Rupiah (IDR) via local banks and e-wallets, and to maintain accurate transaction records.
4. Service delivery: To provide access to sports betting, live casino, and slot gaming services, including recording wagers, settling bets, and crediting winnings.
5. Customer support: To respond to your enquiries, resolve disputes, and improve the overall quality of our support interactions.
6. Responsible gaming: To administer the self-management tools you activate (deposit limits, self-exclusion, cooling-off periods) and to identify members who may require responsible gaming intervention.
7. Platform security and fraud prevention: To detect and prevent unauthorised account access, bonus abuse, multi-accounting, money laundering, and other prohibited conduct described in our Terms & Conditions.
8. Legal and regulatory compliance: To meet record-keeping, reporting, and disclosure obligations under Applicable Law and the conditions of our gaming licence.
9. Marketing communications: To send promotional offers and platform updates to members who have consented to receiving such communications. You may withdraw consent at any time by contacting customer support.
10. Platform improvement: To analyse aggregated, anonymised usage data to improve platform performance, game selection, and user experience.

Each processing activity carried out by hao787 rests on one or more of the following legal bases:

• Contractual necessity: Processing required to perform our agreement with you as a registered Member — including account management, payment processing, bet settlement, and KYC verification.
• Legal obligation: Processing required to comply with Applicable Law and our licensing conditions — including AML record-keeping, identity verification, and regulatory reporting.
• Legitimate interests: Processing carried out to protect the Platform's integrity, prevent fraud, maintain security, and improve our services — where those interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications, where we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

hao787 does not sell, rent, or trade your Personal Data to third parties for their own commercial purposes. We share data only in the following strictly controlled circumstances:

• Payment processors and banks: Financial data necessary to execute your deposit or withdrawal is shared with your chosen Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI) or e-wallet provider (OVO, DANA, GoPay, ShopeePay, LinkAja) solely to complete the transaction.
• KYC and identity verification providers: Identity document data is shared with our licensed KYC partners for the sole purpose of verifying your identity in accordance with our AML obligations. These partners are contractually prohibited from using your data for any other purpose.
• Game content providers: Where game providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, or Pocket Games Soft) operate their own game servers, limited session and wagering data may be shared with them to facilitate gameplay and resolve disputes.
• Fraud prevention and risk management services: Anonymised or pseudonymised technical and behavioural data may be shared with fraud detection platforms to protect the integrity of the Platform and its members.
• Legal and regulatory authorities: Where required by a court order, regulatory directive, or Applicable Law, the Company will disclose Personal Data to competent authorities without prior notice to the Member.
• Corporate transactions: In the event of a merger, acquisition, or sale of the Company's assets, Personal Data may be transferred to the successor entity, subject to equivalent privacy protections.

hao787 retains Personal Data only for as long as is necessary for the purpose for which it was collected, or for as long as required by Applicable Law and our licensing obligations. The following retention guidelines apply:

• Account and identity data: Retained for the duration of your membership plus a minimum of five (5) years following account closure, in accordance with standard AML and gaming licence record-keeping requirements.
• Transaction and wagering records: Retained for a minimum of five (5) years from the date of the transaction.
• KYC documents: Retained for the duration of your membership plus five (5) years, or longer where required by applicable financial crime regulations.
• Customer support communications: Retained for three (3) years from the date of the interaction, or longer if the interaction relates to an unresolved dispute.
• Self-exclusion and responsible gaming records: Retained for the duration of the exclusion period plus five (5) years, to prevent re-registration in breach of a self-exclusion request.
• Marketing consent records: Retained until consent is withdrawn, plus two (2) years as evidence of the consent history.
• Technical and log data: Retained for up to twelve (12) months in active systems, then archived for a further period as required for security audit purposes.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be associated with a specific individual.

hao787 implements a multi-layered security architecture to protect Personal Data against unauthorised access, disclosure, alteration, and destruction. Our core security measures include:

• 256-bit SSL/TLS encryption applied to all data in transit between your device and our servers.
• AES-256 encryption at rest for all sensitive Personal Data and KYC documents stored in our database infrastructure.
• Access controls: Personal Data is accessible only to authorised hao787 personnel on a strict need-to-know basis, enforced by role-based access control (RBAC) and multi-factor authentication (MFA) for all internal systems.
• Regular security audits: Independent penetration testing and vulnerability assessments are conducted on the Platform at regular intervals.
• Incident response plan: In the event of a confirmed data breach that poses a risk to Members, hao787 will notify affected individuals and, where required, relevant regulatory authorities, within the timeframes prescribed by Applicable Law.

While hao787 employs industry-standard security measures, no online platform can guarantee absolute security. Members are responsible for maintaining the confidentiality of their own account credentials and for logging out of shared or public devices after each session.

hao787 uses cookies and similar tracking technologies to ensure the Platform functions correctly, to remember your preferences, and to analyse how the Platform is used. The following cookie categories are in use:

• Strictly necessary cookies: Required for the Platform to operate. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without preventing core Platform functionality.
• Functional cookies: Store your preferences such as language settings, preferred payment method, and session timeout preferences, so you do not need to re-enter them on each visit.
• Analytics cookies: Collect anonymised or pseudonymised data on how Members navigate the Platform, which pages are visited most frequently, and where errors occur. This data is used to improve Platform performance and user experience.
• Security and fraud-detection cookies: Assist in identifying suspicious login patterns, unusual session behaviour, and potential multi-account registrations.

hao787 does not use third-party advertising cookies to serve targeted advertisements to Members on external websites. You may manage cookie preferences through your browser settings, though disabling strictly necessary cookies will impair your ability to use the Platform.

As a Member of hao787, you hold the following rights in respect of your Personal Data. Requests may be submitted by contacting our customer support team using the details in Clause 14:

The hao787 Platform is strictly for adults aged 21 years and over. We do not knowingly collect Personal Data from any person under the age of 21. Registration by persons under the age of 21 is prohibited, and any account found to be held by a minor will be immediately closed, with all associated balances forfeited.

If you believe that a minor has submitted Personal Data to hao787, please contact us immediately at the details provided in Clause 14. We will take prompt steps to investigate and, where confirmed, delete any data associated with the minor's submission.

Parents and guardians of minors are encouraged to use parental control software to restrict access to online gaming platforms. hao787 supports national responsible gaming initiatives and cooperates with operators of third-party parental control tools.

hao787 is operated by an internationally licensed entity, and your Personal Data may be processed on servers located outside Indonesia. Where data is transferred to a jurisdiction that does not provide an equivalent level of data protection to the standards applied by the Company, hao787 will implement appropriate safeguards — such as contractual data processing agreements incorporating standard data protection clauses — to ensure that your data remains protected to a consistent standard regardless of where it is processed.

All third-party processors who handle Personal Data on behalf of hao787 are bound by data processing agreements that require them to implement appropriate technical and organisational security measures and to process data only on hao787's documented instructions.

hao787 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. Where a material change is made — meaning a change that substantively affects how your Personal Data is used or the rights available to you — we will notify active Members via email to the address registered on their account, or via an on-screen notification on their next login, at least fourteen (14) days before the change takes effect.

Continued use of the Platform following the effective date of any revised Privacy Policy constitutes acceptance of the updated terms. The effective date at the top of this document always reflects the version currently in force. We recommend reviewing this page periodically to stay informed of any updates.

The current version of this Privacy Policy is always accessible at https://hao787.cam/privacy-policy.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact hao787's Data Protection team. Our support agents — including Indonesian-speaking staff — are available 24 hours a day, 7 days a week.

• Email: support at hao787 dot cam (plain text — not a clickable link)
• Subject line for data requests: "Privacy Request — [Your Registered Email Address]"
• Response target: Within 1 business hour for live chat; within 30 calendar days for formal data rights requests submitted by email
• Languages: English and Indonesian (Bahasa Indonesia)
• Support hours: 24/7, including Indonesian public holidays (Idul Fitri, Idul Adha, Indonesian Independence Day, Nyepi, Christmas, and others)

If you are not satisfied with our response to a privacy-related complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction. hao787 will cooperate fully with any such authority in the investigation of a complaint.