At hbk77, your privacy is not a formality — it is a core platform commitment. This Privacy Policy explains in plain terms exactly what personal data we collect, why we collect it, how we use it, and what rights you hold over your information as a Member of our platform.
Last Updated: January 2026The following terms carry specific meanings throughout this Privacy Policy:
hbk77 operates as the Data Controller in respect of all Personal Data collected from Members and visitors to the hbk77.vip platform. As Data Controller, hbk77 is responsible for determining the purposes for which your Personal Data is used and for ensuring that those purposes are pursued lawfully, fairly, and transparently.
hbk77 is an internationally licensed online gaming and sports betting platform serving users across Indonesia, including in Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, Semarang, and beyond. For all privacy-related enquiries, the designated point of contact is our Data Protection team, reachable at [email protected].
hbk77 collects only the Personal Data that is necessary for the purposes described in this Policy. The categories of data we collect are set out below.
When you create an account on hbk77, we collect your full legal name, date of birth, gender (optional), email address, mobile phone number, and your residential address in Indonesia. This data is required to establish your Member account and to confirm that you meet the minimum age requirement of 21 years.
To process withdrawals and to comply with our anti-money-laundering obligations, we may collect copies of your Indonesian KTP (Kartu Tanda Penduduk — national identity card), valid passport, proof of residential address (bank statement or utility bill dated within 90 days), proof of payment method ownership, and selfie images taken alongside your identity document. KYC documents are stored in encrypted form and are accessible only to authorised compliance personnel.
We collect records of all deposit and withdrawal transactions on your account, including the payment method used (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, LinkAja), the transaction amount in IDR, transaction timestamps (WIB), and any reference numbers assigned by your bank or e-wallet provider. We do not store your full bank account credentials or e-wallet login passwords.
We maintain a complete record of your activity on the platform, including bets placed (sportsbook pre-match and live markets, mix parlay accumulators), game sessions (slots, live casino, fish shooting), wager amounts, outcomes, and account balance movements. This data is used for account management, responsible gaming monitoring, dispute resolution, and product improvement.
When you access hbk77, our servers automatically collect your IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, referring URL, pages visited, time spent on each page, and session identifiers. This data is used for security monitoring, fraud prevention, and platform performance optimisation.
When you contact hbk77 support via live chat or email, we retain a record of that correspondence, including the content of your messages, the date and time of contact, and the resolution provided. This data is used for quality assurance, training, and to maintain a history of your support interactions.
Where you have opted in to receive promotional communications from hbk77, we record your marketing preferences, the promotional messages sent to you, and your engagement with those messages (open rates, click-throughs). You may update or withdraw your marketing consent at any time via your account settings.
hbk77 collects your Personal Data through the following channels:
hbk77 processes your Personal Data only for the specific, explicit, and legitimate purposes listed in the table below. We do not process your data in ways that are incompatible with these stated purposes.
| Purpose | Categories of Data Used |
|---|---|
| Account creation and management | Registration data, device data |
| Identity verification (KYC) | KYC documents, registration data |
| Processing deposits and withdrawals | Financial data, KYC data |
| Providing gaming and betting services | Gameplay data, account data |
| Responsible gaming monitoring | Gameplay data, session data |
| Fraud prevention and security | Device data, financial data, KYC data |
| Customer support and dispute resolution | Communications data, account data, gameplay data |
| Regulatory compliance and AML obligations | KYC data, financial data, gameplay data |
| Marketing communications (with consent) | Registration data, marketing preferences |
| Platform analytics and improvement | Technical data, gameplay data (aggregated/anonymised) |
hbk77 relies on the following legal bases to process your Personal Data lawfully:
hbk77 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for each purpose.
To facilitate deposits and withdrawals in IDR, hbk77 shares the minimum required transaction data with our payment processing partners who operate the connections to Indonesian bank transfer networks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja). These processors are bound by contractual data protection obligations and are not permitted to use your data for any purpose other than executing the specified transaction.
Third-party KYC service providers may receive copies of your identity documents and registration data solely for the purpose of verifying your identity and confirming your eligibility to hold an account. All KYC partners are subject to strict confidentiality agreements and appropriate data security standards.
Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and Pocket Games Soft may receive a pseudonymised session token and wager data necessary to operate the game you are playing. These studios do not receive your full name, contact details, or financial account information.
hbk77 may disclose your Personal Data to regulatory bodies, law enforcement agencies, or courts of competent jurisdiction where required to do so by applicable law, regulation, or a binding legal order. In such cases, hbk77 will disclose only the minimum data necessary to satisfy the legal requirement and will notify you of the disclosure where legally permitted to do so.
In the event of a merger, acquisition, reorganisation, or sale of all or substantially all of hbk77's business assets, Member Personal Data may be transferred to the successor entity as part of that transaction. hbk77 will provide advance notice of any such transfer via the platform or by email, and the successor entity will be bound by this Privacy Policy with respect to your data.
hbk77 uses cookies and similar technologies to operate the platform, remember your preferences, maintain your logged-in session, and gather analytics data that helps us improve the Member experience.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Maintain your login session, secure account access, prevent cross-site request forgery | Session |
| Functional | Remember your language preference, display settings, and last-visited game lobby | 30 days |
| Analytics | Measure page visits, feature usage, and platform performance (data aggregated and anonymised) | Up to 12 months |
| Security & Fraud Detection | Device fingerprinting, IP reputation scoring, behavioural anomaly detection | Session – 90 days |
You can control non-essential cookies through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in or using the platform. Most modern browsers — including those commonly used in Indonesia on Android and iOS devices — provide cookie management options under Settings > Privacy or Settings > Site Settings.
hbk77 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or our regulatory licence conditions.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of membership + 5 years after closure | Legal and regulatory obligation |
| KYC documents | Duration of membership + 5 years after closure | AML compliance requirements |
| Financial transaction records | 7 years from transaction date | International gaming licence obligation |
| Gameplay and betting history | 5 years from each session date | Dispute resolution, responsible gaming audit |
| Customer support records | 3 years from last interaction | Quality assurance, dispute resolution |
| Technical / device logs | 90 days (rolling) | Security monitoring |
| Marketing preferences | Until consent withdrawn or account closed | Consent-based processing |
When data is no longer required for any stated purpose or legal obligation, hbk77 will securely delete or anonymise it in accordance with our internal data disposal procedures. Anonymised, aggregated analytics data may be retained indefinitely as it no longer constitutes Personal Data.
hbk77 applies technical and organisational security measures commensurate with the risk profile of the Personal Data we process. Our current security infrastructure includes the following safeguards:
As a Member of hbk77, you hold the following rights in respect of your Personal Data. To exercise any of these rights, submit a written request to [email protected] from the email address registered on your account. hbk77 will acknowledge your request within 5 business days and respond substantively within 30 calendar days.
Please note that some rights are qualified: hbk77 may decline a deletion request, for example, where retention is required by our regulatory licence conditions or AML obligations. In such cases, we will explain the reason in our response.
hbk77 does not knowingly collect Personal Data from individuals under the age of 21. The platform's registration flow requires users to confirm their date of birth, and accounts are subject to KYC age verification prior to withdrawal. If hbk77 discovers that a person under 21 years of age has created an account, we will immediately suspend that account, void any bets or transactions associated with it, and securely delete the Personal Data collected, retaining only the minimum records required to document the violation and prevent re-registration.
If you are a parent or guardian and you believe that a minor in your care may have accessed hbk77, please contact us immediately at [email protected]. We will investigate and take appropriate action within 24 hours (WIB).
hbk77 operates on cloud infrastructure and uses service providers that may be located outside Indonesia. Where your Personal Data is transferred to servers or processors in other jurisdictions, hbk77 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy.
Safeguards for international transfers include contractual data protection clauses incorporated into agreements with all third-party Data Processors, ensuring that they are bound to process your data only in accordance with our instructions and to maintain security standards consistent with those applied by hbk77 directly.
hbk77 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, platform features, or applicable legal requirements. When material changes are made, we will notify registered Members by displaying a prominent notice within the platform and, where appropriate, by sending an email to the address on your account.
The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Policy periodically. Your continued use of hbk77 following the effective date of any update constitutes acceptance of the revised terms. If you object to any change, you may close your account by contacting our support team.
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a complaint about hbk77's data handling practices, please contact our Data Protection team through the following channels:
We take all privacy complaints seriously and will work constructively to resolve any concern you raise. Where a complaint cannot be resolved through our internal process, you retain the right to escalate the matter to any applicable supervisory authority in your jurisdiction.
hbk77's approach to data protection is built on six core principles that guide every decision we make about your personal information.
Every data transmission between your device and hbk77 is protected by the same bank-grade SSL encryption used by Indonesia's leading financial institutions.
hbk77 never sells, rents, or trades your personal data to third-party advertisers or data brokers. Your information is used solely to operate and improve the platform.
Access, correct, export, or request deletion of your data at any time. hbk77 honours all Member data rights requests within 30 calendar days.
Identity documents submitted during KYC are stored in AES-256 encrypted form, accessible only to authorised compliance personnel — never shared without legal obligation.
We keep your data only as long as legally required. Transaction records are held for 7 years per licence obligations; technical logs are purged on a rolling 90-day cycle.
Our Indonesian-speaking support team is available around the clock to assist with any privacy concern, data request, or account security issue — every day of the year.
Now that you understand exactly how hbk77 safeguards your personal data, explore everything the platform has to offer — from live sportsbook markets and mix parlay accumulators to premium slots and live casino tables.