Privacy Policy

1 Introduction & Scope

htt789 ("we", "us", "our") is the operator of the online betting and gaming platform accessible at https://htt789.net (the "Platform"). We are committed to processing the personal data of our Members in a lawful, fair, and transparent manner, and to implementing appropriate technical and organisational measures to safeguard that data against unauthorised access, loss, or disclosure.

This Privacy Policy applies to all personal data collected from individuals who access or use the htt789 Platform, including registered Members, individuals who browse the Platform without registering, and individuals who contact our Customer Support team. It covers data collected through the website, any associated mobile interfaces, and all other digital touchpoints operated by htt789.

This policy does not extend to third-party websites or services that may be referenced on the Platform. We are not responsible for the privacy practices of external operators, and we encourage you to review the privacy policies of any third-party service you access independently of htt789.

2 Definitions

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person. An identifiable person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, identification number, location data, online identifier, or one or more factors specific to their physical, physiological, genetic, mental, economic, cultural, or social identity.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, consultation, use, disclosure, erasure, or destruction, whether automated or manual.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data. For the purposes of this policy, htt789 is the Data Controller in respect of all Member Personal Data collected through the Platform.
• "Data Processor" — a third party that processes Personal Data on behalf of htt789 under a written agreement and under our documented instructions. Examples include payment processors, KYC verification providers, and cloud infrastructure providers.
• "Member" — any individual who has completed the htt789 account registration process and holds an active or inactive account on the Platform.
• "Sensitive Data" — a subset of Personal Data that warrants enhanced protection, including government-issued identification documents, financial account details, and any data that could facilitate identity fraud if disclosed.
• "Cookies" — small text files placed on a Member's device by the Platform for the purposes of session management, preference storage, analytics, and fraud prevention.

3 Data We Collect

htt789 collects Personal Data across several categories. The specific data points collected depend on the nature of your interaction with the Platform.

3.1 Registration & Account Data

When you create an account on htt789, we collect the following information as part of the registration process:

• Full legal name (as it appears on your government-issued identification document)
• Date of birth (for age verification — you must be 21 or older)
• Email address
• Mobile telephone number registered in Indonesia
• Username and encrypted password
• Residential address (city and province level; full address may be required during KYC)
• Preferred currency (Indonesian Rupiah, IDR)

3.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process — which is mandatory before withdrawals are processed — we collect:

• Scanned copies or photographs of government-issued photo identification (Indonesian National ID Card / KTP, passport, or SIM driver's licence)
• Selfie photographs or video taken for liveness verification
• Proof of payment method ownership (bank account statements from BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata; or e-wallet account screenshots from OVO, DANA, GoPay, ShopeePay, or LinkAja)
• Proof of residential address (utility bill, bank statement, or official government document dated within the past 90 days)

3.3 Financial Transaction Data

We collect records of all financial transactions conducted through your account, including:

• Deposit amounts, dates, timestamps, and payment method references
• Withdrawal requests, processed amounts, and destination account details
• Bonus credits received and wagering requirement progress
• Account balance history

We do not store full bank account numbers or full e-wallet account credentials. Payment references are stored in tokenised or masked form where technically feasible.

3.4 Gaming & Betting Activity Data

We maintain a comprehensive record of all gaming and betting activity conducted through your account, including game session logs, bet placement data, wager amounts, game outcomes, and win/loss records. This data is used for account integrity, dispute resolution, responsible gaming monitoring, and regulatory compliance purposes.

3.5 Technical & Device Data

When you access the Platform, we automatically collect certain technical information from your device and browser, including:

• IP address and approximate geolocation (country and city level)
• Device type, operating system, and browser version
• Session timestamps and duration
• Pages visited and navigation paths within the Platform
• Referring URL (if you arrived at htt789 via an external link)

3.6 Customer Support Communications

When you contact htt789 Customer Support — whether by live chat or email — we retain records of those communications, including the content of messages, timestamps, and any attachments submitted. These records are used to resolve disputes, improve service quality, and for training purposes.

4 How We Collect Your Data

htt789 collects Personal Data through the following primary mechanisms:

• Directly from you: when you complete the account registration form, submit KYC documents, initiate a deposit or withdrawal, configure account preferences, or contact Customer Support.
• Automatically: through server logs, session management systems, and cookies placed on your device when you access the Platform, as detailed in Section 8 of this policy.
• From third-party verification providers: where we engage specialist KYC and identity verification services to cross-reference the documents you submit against authoritative data sources.
• From payment processors: transaction confirmation data, payment reference codes, and account validation signals returned by Indonesian banks and e-wallet operators when you initiate financial transactions.
• From fraud prevention services: device fingerprinting signals, risk scores, and anomaly flags generated by automated fraud-detection systems to protect the integrity of the Platform and our Members.

5 Purposes of Processing

htt789 processes your Personal Data exclusively for the following documented purposes:

1. Account creation and management — to register your account, authenticate your identity at login, maintain your account preferences, and communicate account-related information to you.
2. Service delivery — to provide access to all htt789 products including sportsbook markets, live casino tables, slot games, crash games, and card game variants.
3. Financial transaction processing — to process deposits and withdrawals via Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), and to maintain accurate transaction records.
4. KYC and identity verification — to verify that Members are who they claim to be, confirm that they meet the 21+ age requirement, and satisfy our compliance obligations under applicable anti-money-laundering frameworks.
5. Fraud prevention and platform integrity — to detect and prevent account takeover, bonus abuse, multi-accounting, money laundering, and other prohibited conduct as defined in our Terms & Conditions.
6. Responsible gaming — to monitor gaming behaviour for signs of problem gambling, apply self-imposed limits and exclusions requested by Members, and fulfil our duty-of-care obligations.
7. Customer support — to respond to enquiries, resolve disputes, process complaints, and maintain records of interactions for quality-assurance purposes.
8. Legal and regulatory compliance — to retain records as required by applicable law, respond to lawful requests from competent authorities, and enforce our Terms & Conditions.
9. Platform improvement and analytics — to analyse aggregated, anonymised usage data in order to improve the functionality, performance, and user experience of the Platform.
10. Promotional communications — where you have provided explicit consent, to send you information about promotions, bonuses, and new products offered by htt789. You may withdraw this consent at any time through your account settings or by contacting support.

6 Legal Bases for Processing

htt789 processes Personal Data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform our contractual obligations to you as a Member — including account creation, service delivery, and financial transaction processing — is carried out on the basis that it is necessary for the performance of the agreement between you and htt789.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC verification, transaction record-keeping, and responding to lawful authority requests, is carried out on the basis of legal obligation.
• Legitimate interests: Processing for fraud prevention, platform security, dispute resolution, and aggregated analytics is carried out on the basis of htt789's legitimate interests in operating a secure, fair, and high-quality platform, balanced against Member privacy interests.
• Consent: Processing for optional promotional communications is carried out on the basis of your explicit, freely given consent. You may withdraw this consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

7 Sharing Your Personal Data

htt789 does not sell, rent, or trade your Personal Data. We share Personal Data with third parties only where it is necessary for the purposes described in Section 5, and only under contractual arrangements that require those parties to protect your data to a standard consistent with this policy.

7.1 Categories of Third-Party Recipients

• Payment processors and banking partners: Indonesian banks and e-wallet operators (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum data necessary to process your requested financial transactions.
• KYC and identity verification providers: Specialist third-party services engaged to assist with the verification of identity documents, liveness checks, and address confirmation. These providers act as Data Processors under written agreements with htt789.
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive session tokens and anonymised player identifiers necessary to deliver game content. These providers do not receive your full name, contact details, or financial account information.
• Fraud prevention and cybersecurity services: Providers of device fingerprinting, bot detection, and risk-scoring services receive technical data (IP address, device signals) for the purpose of protecting the Platform against fraudulent activity.
• Cloud infrastructure and hosting providers: htt789 uses reputable international cloud service providers to host the Platform and store data securely. These providers operate as Data Processors under data processing agreements and do not access Personal Data beyond what is required for infrastructure management.
• Legal and regulatory authorities: htt789 may disclose Personal Data to competent governmental, law enforcement, or regulatory authorities where required to do so by applicable law, court order, or binding regulatory directive. We will notify you of any such disclosure where legally permitted to do so.

8 Cookies & Tracking Technologies

htt789 uses cookies and similar tracking technologies on the Platform for the following purposes:

8.1 Essential Cookies

These cookies are strictly necessary for the operation of the Platform and cannot be disabled without impairing core functionality. They include session authentication cookies that maintain your logged-in state, CSRF tokens that protect against cross-site request forgery, and load-balancing cookies that ensure consistent server routing during your session.

8.2 Functional Cookies

These cookies store preferences that improve your experience on the Platform, such as your selected game lobby view, display settings, and language preferences. They persist across sessions so that your preferences are remembered between visits.

8.3 Analytics Cookies

htt789 uses privacy-respecting analytics tools to collect aggregated, anonymised data about how Members navigate and use the Platform. This information helps us identify performance issues, understand feature usage, and prioritise improvements. Analytics data does not identify you individually.

8.4 Fraud Prevention Cookies

These cookies support our fraud detection systems by recording device and browser characteristics that help identify suspicious activity patterns, multi-accounting attempts, and automated bot access. They are essential to maintaining the integrity and fairness of the Platform for all Members.

8.5 Managing Cookies

You may configure your browser to block or delete cookies at any time. However, disabling essential cookies will prevent you from logging in and using the core features of the Platform. Instructions for managing cookies in major browsers are available in your browser's help documentation. htt789 does not currently support a cookie preference centre, but we review this capability periodically.

9 Data Security

htt789 implements a layered security architecture to protect your Personal Data against unauthorised access, alteration, disclosure, or destruction. Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your device and the Platform.
• AES-256 encryption at rest for stored identity documents, financial records, and account credentials.
• Role-based access controls ensuring that htt789 staff can only access the categories of Member data necessary for their specific role. All staff access to sensitive data is logged and subject to periodic audit.
• Multi-factor authentication required for all htt789 staff accounts with access to production systems containing Personal Data.
• Regular penetration testing and vulnerability assessments conducted by independent security professionals.
• Intrusion detection systems monitoring the Platform infrastructure for anomalous access patterns and potential security incidents in real time.
• Incident response procedures that activate immediately upon detection of any suspected data breach, including containment, root-cause analysis, and Member notification where required.

10 Data Retention

htt789 retains Personal Data for the minimum period necessary to fulfil the purposes for which it was collected, subject to the following retention standards:

Upon expiry of the applicable retention period, Personal Data is securely destroyed or irreversibly anonymised so that it can no longer be attributed to an identified or identifiable individual. Anonymised aggregated data may be retained indefinitely for statistical and analytical purposes.

11 Your Data Subject Rights

As a data subject, you have the following rights in relation to the Personal Data that htt789 holds about you. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Subject Request" and include your registered email address and a brief description of your request.

• Right of Access: You have the right to request a copy of the Personal Data that htt789 holds about you, along with information about how that data is processed. htt789 will respond to access requests within 30 days.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request correction. You may update basic account details directly through your account settings; corrections to KYC data must be requested through Customer Support.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis applies. This right is subject to overriding legal obligations that require us to retain certain data (as detailed in Section 10).
• Right to Restriction of Processing: You may request that htt789 restrict the processing of your Personal Data in certain circumstances, such as while a dispute regarding accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contractual basis, you may request a structured, machine-readable copy of the Personal Data you have provided to htt789, for the purpose of transferring it to another controller.
• Right to Object: You have the right to object to processing based on legitimate interests. htt789 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based solely on your consent (such as marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

htt789 will acknowledge all data subject requests within 5 business days and provide a substantive response within 30 calendar days. Where a request is complex or numerous, we may extend this period by a further 30 days and will notify you accordingly.

12 Children & Minors

If you are a parent or guardian and believe that a minor under your care has registered an account or submitted Personal Data to htt789, please contact us immediately at [email protected]. We will investigate and take appropriate action promptly.

13 Third-Party Links & Services

The htt789 Platform may contain references to third-party game studios and payment providers whose services are integrated into the Platform experience. While these integrations are carefully selected and governed by contractual data processing agreements, htt789 is not responsible for the independent privacy practices of those third parties in respect of data they collect through their own systems outside of the htt789 integration context.

htt789 does not include external hyperlinks to third-party websites on the Platform. Any external references are provided for informational context only. If you choose to access any external service independently, you do so at your own risk and subject to the privacy policy of that service.

14 International Data Transfers

htt789 operates internationally and, as a result, your Personal Data may be transferred to and processed on servers located outside of Indonesia. Where such transfers occur, htt789 ensures that adequate safeguards are in place to protect your Personal Data to a standard that is consistent with this policy and with internationally recognised data protection principles, including:

• Contractual data transfer agreements incorporating standard contractual clauses with all international Data Processors.
• Selection of cloud infrastructure and service providers with independently audited security certifications (such as ISO 27001 or SOC 2 Type II).
• Restrictions on cross-border data transfers to jurisdictions that do not provide an adequate level of data protection, unless appropriate supplementary safeguards are applied.

By using the htt789 Platform, you acknowledge and accept that your Personal Data may be transferred internationally as described in this section.

15 Amendments to This Policy

htt789 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. When material changes are made — changes that affect the nature or scope of how your Personal Data is used — we will notify you via your registered email address or by displaying a prominent notice on the Platform, with at least 7 days' advance notice before the changes take effect.

Minor clarifications or corrections that do not materially alter the substance of this policy may take effect immediately upon publication. The effective date at the top of this document reflects the date of the most recent revision. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

We encourage you to review this policy periodically. The current version is always available at https://htt789.net/privacy-policy.

16 Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or have concerns about how htt789 handles your Personal Data, please contact our dedicated privacy team through the following channels:

• Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Subject Request" as appropriate
• Live Chat: Available 24 hours a day, 7 days a week through the Platform interface
• Response Commitment: All privacy-related enquiries are acknowledged within 24 hours and receive a substantive response within 5 business days