Privacy Policy

1. Information We Collect

haba88 collects various types of personal information to provide, maintain, and improve our services, comply with legal obligations, and ensure platform security. The categories of data we collect include:

1.1 Information You Provide Directly

When you register for an account or interact with our services, you voluntarily provide the following information:

• Account Registration Data: Full legal name (as it appears on your Indonesian national ID/KTP), date of birth, gender, email address, mobile phone number with Indonesian country code (+62), residential address (street, city, postal code, province), nationality, and preferred username and password.
• Identity Verification (KYC) Data: Clear photographs or scans of your Indonesian national identity card (KTP), proof of address documents (utility bills, bank statements dated within last 3 months), and selfie photographs holding your KTP for identity confirmation. This data is required to comply with anti-money laundering (AML) regulations and prevent fraud.
• Financial Data: Bank account details (bank name, account number, account holder name) for Indonesian banks including BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, and other supported institutions. E-wallet account identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja. Payment card details (when applicable) are tokenized and processed by third-party payment processors; haba88 does not store complete card numbers in our systems.
• Transaction Data: Complete records of all deposits, withdrawals, bets placed, winnings, bonuses claimed, and account balance changes. This includes timestamps (in Western Indonesia Time/WIB), amounts in Indonesian Rupiah (IDR), payment methods used, and transaction reference numbers.
• Communication Data: Contents of messages, emails, and live chat conversations when you contact haba88 customer support. Phone call recordings when you contact us via telephone (you will be notified at the start of recorded calls).
• Responsible Gaming Data: Deposit limits, loss limits, session time limits, self-exclusion preferences, and reality check settings you configure in your account dashboard.

1.2 Information We Collect Automatically

When you access and use haba88, our systems automatically collect certain technical and behavioral data:

• Device Information: Device type (desktop, mobile, tablet), operating system and version (Windows, macOS, iOS, Android), browser type and version (Chrome, Safari, Firefox, Edge), screen resolution, device identifiers (IP address, device fingerprint), and mobile carrier information.
• Usage Data: Pages visited, features used, games played, bets placed, time spent on platform, click patterns, navigation paths, referral sources (how you found haba88), and session duration. This data helps us understand user behavior and improve platform experience.
• Location Data: IP address geolocation to verify you are accessing from an authorized jurisdiction (Indonesia or other permitted regions). Precise GPS location may be collected with your explicit consent when required for legal compliance or fraud prevention.
• Cookies and Similar Technologies: We use cookies (small text files stored on your device), web beacons, pixel tags, and local storage to recognize returning users, maintain login sessions, remember preferences, deliver targeted content, and analyze platform performance. See Section 8 for detailed cookie information.
• Performance Data: Error logs, crash reports, page load times, and system diagnostics to identify and resolve technical issues affecting service quality.

1.3 Information From Third Parties

haba88 may receive information about you from external sources including:

• Payment Processors: Transaction confirmation, payment status updates, and fraud screening results from Indonesian banks, e-wallet providers, and payment gateway partners.
• Identity Verification Services: Results of automated KYC checks, document authentication services, facial recognition verification, and sanctions list screening from third-party compliance providers.
• Marketing Partners: If you access haba88 through an affiliate link or promotional campaign, we may receive anonymized campaign tracking data to attribute referrals and calculate commissions. We do not receive your personal information from affiliates unless you explicitly consent.
• Fraud Detection Services: Shared databases of known fraudulent users, suspicious IP addresses, device fingerprints associated with fraud, and patterns indicative of account takeover or bonus abuse.
• Public Databases: Information from publicly available sources such as government registries, social media profiles you have made public, or other legal public records when necessary for enhanced due diligence or legal compliance.

2. How We Use Your Information

haba88 uses the personal data we collect for the following purposes, all of which are necessary to provide our services, comply with legal obligations, or pursue our legitimate business interests:

2.1 Service Provision and Account Management

• Creating, maintaining, and managing your haba88 user account.
• Processing deposits, withdrawals, and other financial transactions in Indonesian Rupiah (IDR).
• Enabling you to place bets on sports events (including BRI Liga 1, EPL, La Liga, Champions League), play live casino games, slot machines, and other gambling activities.
• Calculating winnings, settling bets, updating account balances, and crediting bonuses.
• Providing customer support via email, live chat, WhatsApp, and telephone in both English and Bahasa Indonesia.
• Sending transactional notifications including deposit confirmations, withdrawal status updates, bet settlement results, bonus notifications, and security alerts via email, SMS, or push notifications.

2.2 Legal Compliance and Security

• Verifying your identity and age (21+ requirement) to comply with Indonesian and international gambling regulations.
• Conducting Know Your Customer (KYC) and Anti-Money Laundering (AML) checks as required by our gaming license and financial regulations.
• Detecting, preventing, and investigating fraud, bonus abuse, multi-accounting, collusion, money laundering, and other prohibited activities.
• Enforcing our Terms & Conditions and Responsible Gaming policies.
• Responding to legal requests from government authorities, regulatory bodies, law enforcement agencies, or courts when legally obligated.
• Protecting haba88's legal rights and defending against claims or legal proceedings.
• Maintaining audit trails and records required by gaming regulators (typically retained for 5-7 years post-account closure).

2.3 Platform Improvement and Analytics

• Analyzing user behavior to understand which games, features, and betting markets are most popular among Indonesian users.
• Identifying technical issues, bugs, and performance bottlenecks to improve platform stability and speed.
• Conducting A/B testing to optimize user interface design, game placement, and promotional strategies.
• Developing new features, games, and payment methods based on user feedback and usage patterns.
• Creating aggregated, anonymized statistical reports for internal business analysis (these reports do not contain personally identifiable information).

2.4 Marketing and Communications (With Your Consent)

• Sending promotional offers, bonus announcements, tournament invitations, and special campaigns via email, SMS, or push notifications when you have opted in to marketing communications.
• Personalizing promotional content based on your betting preferences, favorite games, and activity patterns (e.g., football bettors receive bandar bola promotions, slot players receive free spin offers).
• Informing you about new game releases, platform updates, policy changes, and industry news relevant to Indonesian online gambling.
• Conducting surveys, requesting feedback, and inviting participation in loyalty programs or VIP schemes.

Important: You can opt out of marketing communications at any time by clicking "unsubscribe" links in emails, adjusting notification preferences in your account settings, or contacting customer support. Opting out of marketing does not affect transactional messages (deposit confirmations, withdrawal notifications, security alerts) which are necessary for service operation.

2.5 Responsible Gaming and Player Protection

• Implementing deposit limits, loss limits, session time limits, and self-exclusion periods you request.
• Monitoring betting patterns to identify signs of problem gambling behavior (significant losses, chasing behavior, increased bet sizes beyond normal patterns).
• Proactively contacting users who show potential signs of gambling problems to offer responsible gaming resources and support.
• Enforcing cooling-off periods when users attempt to remove or increase responsible gaming limits.
• Preventing underage gambling by verifying all users are at least 21 years old during KYC verification.

3. Legal Basis for Processing (GDPR and International Standards)

For users in jurisdictions covered by the General Data Protection Regulation (GDPR) or equivalent data protection laws, haba88 processes personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our contract with you (providing betting services, processing transactions, managing your account) as outlined in our Terms & Conditions.
• Legal Obligation: Processing is required to comply with legal requirements including KYC/AML regulations, tax reporting, gaming license conditions, and law enforcement requests.
• Legitimate Interests: Processing serves our legitimate business interests including fraud prevention, platform security, service improvement, debt collection, and defending legal claims, provided these interests do not override your fundamental rights and freedoms.
• Consent: For marketing communications, optional cookies, and other non-essential processing, we obtain your explicit consent which you may withdraw at any time.
• Vital Interests: In rare cases, processing may be necessary to protect your vital interests or those of another person (e.g., responding to emergency situations or self-harm concerns).

4. Data Sharing and Disclosure

haba88 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your data with the following categories of recipients when necessary for service provision, legal compliance, or business operations:

4.1 Service Providers and Business Partners

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri), e-wallet providers (OVO, DANA, GoPay, ShopeePay), and payment gateway companies that facilitate deposit and withdrawal transactions. These parties receive only the financial data necessary to process payments.
• Game Providers: Software studios including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Spribe, and others receive limited data (username, game session ID, bet amounts) necessary to operate their games on our platform. They do not receive your identity documents or financial details.
• Identity Verification Services: Third-party KYC providers that verify identity documents, perform facial recognition checks, screen against sanctions lists, and conduct enhanced due diligence. These providers operate under strict confidentiality agreements.
• Cloud Hosting Providers: Secure data centers and cloud infrastructure providers that host haba88's servers, databases, and backup systems. All data is encrypted in transit and at rest.
• Customer Support Tools: Live chat software, email management systems, and customer relationship management (CRM) platforms used by our support team to respond to inquiries and resolve issues.
• Analytics and Optimization Services: Tools that help us analyze user behavior, track marketing campaign performance, and optimize platform functionality. We use anonymization and aggregation techniques to minimize personal data exposure.

4.2 Legal and Regulatory Authorities

• Gaming Regulators: Our licensing authority may audit our operations and request access to user data, transaction records, and game logs to verify compliance with license conditions.
• Law Enforcement: We may disclose information to police, prosecutors, or other law enforcement agencies when legally required by court orders, subpoenas, search warrants, or other valid legal processes.
• Tax Authorities: Financial data may be reported to Indonesian or international tax authorities as required by tax laws and information exchange agreements.
• Fraud Prevention Networks: We participate in industry-wide fraud prevention databases to share information about confirmed fraudulent users, stolen payment methods, and security threats (shared data is limited to fraud indicators, not full personal profiles).

4.3 Corporate Transactions

If haba88 undergoes a merger, acquisition, restructuring, sale of assets, or bankruptcy, your personal data may be transferred to the acquiring entity or successor company as part of business assets. You will be notified via email and/or prominent notice on our platform of any such change in ownership or control of your personal data, along with choices you may have regarding your data.

4.4 With Your Explicit Consent

We may share your information with other third parties not listed above if you provide specific consent for such sharing (e.g., participating in co-branded promotions with partners, social media integrations you authorize).

5. Data Security Measures

haba88 implements comprehensive technical and organizational security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data transmitted between your device and haba88 servers is protected by 256-bit SSL/TLS encryption (the same standard used by banks). Sensitive data stored in our databases (passwords, financial details, identity documents) is encrypted at rest using AES-256 encryption.
• Access Controls: Personal data is accessible only to authorized haba88 employees and contractors who require access to perform their job functions. Access is granted based on role-based permissions, with monitoring and audit logs tracking all data access.
• Authentication Security: Passwords are hashed using industry-standard algorithms (bcrypt or Argon2) with salting, making them irreversible even if databases are compromised. Two-factor authentication (2FA) is available to add extra login protection.
• Network Security: Firewalls, intrusion detection systems (IDS), intrusion prevention systems (IPS), and DDoS protection safeguard our infrastructure from cyber attacks.
• Regular Security Audits: Independent third-party security firms conduct penetration testing and vulnerability assessments on our systems at least annually. Critical vulnerabilities are remediated immediately.
• Employee Training: All haba88 staff undergo mandatory data protection and security awareness training. Confidentiality agreements bind employees to strict data handling requirements.
• Secure Development: Our software development follows secure coding practices including input validation, output encoding, and regular code reviews to prevent vulnerabilities like SQL injection, cross-site scripting (XSS), and cross-site request forgery (CSRF).
• Backup and Disaster Recovery: Regular automated backups ensure data can be restored in case of system failures. Backup data is encrypted and stored in geographically separate locations.

While we employ industry-leading security measures, no system can guarantee 100% security. You play a critical role in protecting your account by choosing strong passwords, never sharing login credentials, logging out after sessions on shared devices, and promptly reporting suspicious activity to our support team.

6. Data Retention

haba88 retains your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements:

• Active Accounts: Data for active accounts is retained indefinitely while your account remains open and in use.
• Closed Accounts: After you voluntarily close your account, we retain most personal data for 5-7 years to comply with gaming license requirements, anti-money laundering regulations, and tax laws. After this retention period, data is securely deleted or anonymized unless longer retention is legally required.
• Transaction Records: Financial transaction data (deposits, withdrawals, bets, winnings) is retained for 7-10 years to meet audit, tax, and regulatory obligations.
• Identity Documents: KYC documents (KTP scans, proof of address, selfies) are retained for 5 years post-account closure as required by anti-money laundering regulations.
• Communication Records: Customer support chat transcripts, emails, and phone call recordings are retained for 2-3 years for quality assurance and dispute resolution.
• Marketing Data: If you opt out of marketing communications, your email address and opt-out preference are retained indefinitely to honor your request and prevent re-subscription.
• Self-Excluded Users: Data for self-excluded users is retained for the duration of the exclusion period plus 5 years to prevent circumvention and ensure exclusions are honored.

When personal data is no longer needed, it is securely deleted using methods that prevent recovery (multi-pass overwriting for electronic data, physical destruction for physical documents). Alternatively, data may be aggregated and anonymized such that it can no longer identify individuals.

7. Your Privacy Rights

Depending on your jurisdiction, you may have certain rights regarding your personal data held by haba88. These rights typically include:

• Right to Access: You can request a copy of the personal data we hold about you. We will provide this data in a structured, commonly used, machine-readable format (e.g., CSV, PDF) within 30 days of your request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you can request corrections. Update your profile information directly in your account dashboard or contact customer support for assistance.
• Right to Erasure ("Right to be Forgotten"): You can request deletion of your personal data in certain circumstances (e.g., data no longer necessary for original purpose, you withdraw consent, data was unlawfully processed). Note that we cannot delete data we are legally required to retain for regulatory compliance (typically 5-7 years post-account closure).
• Right to Restriction of Processing: You can request that we limit how we use your data in certain situations (e.g., while verifying data accuracy, when processing is unlawful but you prefer restriction over deletion).
• Right to Data Portability: You can request a copy of your data in a portable format to transfer to another service provider where technically feasible.
• Right to Object: You can object to processing based on legitimate interests (e.g., direct marketing, profiling). We will cease processing unless we can demonstrate compelling legitimate grounds that override your rights.
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing emails), you can withdraw consent at any time without affecting the lawfulness of processing conducted before withdrawal.
• Right to Lodge a Complaint: If you believe haba88 has violated your privacy rights, you can file a complaint with your local data protection authority or the supervisory authority in the jurisdiction where haba88 operates.

To exercise any of these rights, contact our Data Protection Officer at [email protected] or via live chat. We will respond to requests within 30 days and may require verification of your identity before fulfilling certain requests to prevent unauthorized access to your data.

8. Cookies and Tracking Technologies

haba88 uses cookies and similar technologies to enhance user experience, analyze platform performance, and deliver relevant content. Cookies are small text files stored on your device when you visit our website. Types of cookies we use:

• Strictly Necessary Cookies: Essential for platform operation, enabling you to log in, maintain sessions, and access secure areas. These cookies cannot be disabled without breaking core functionality.
• Performance Cookies: Collect anonymized data about how you use haba88 (pages visited, time spent, errors encountered) to identify and fix technical issues.
• Functional Cookies: Remember your preferences (language selection, display settings, favorite games) to provide a personalized experience on return visits.
• Marketing Cookies: Track your interaction with promotional content and campaigns to deliver targeted offers and measure campaign effectiveness. These cookies may be set by third-party advertising partners.

You can manage cookie preferences in your browser settings. Disabling non-essential cookies may impact certain features but will not prevent core betting functionality. For detailed cookie information, see our Cookie Policy (available in your account dashboard).

9. International Data Transfers

haba88 operates internationally, and your personal data may be transferred to, stored in, or processed in countries outside Indonesia where data protection laws may differ from Indonesian regulations. When transferring data internationally, we implement safeguards including:

• Standard Contractual Clauses (SCCs) approved by relevant data protection authorities.
• Ensuring recipient countries have adequate data protection laws recognized as equivalent to international standards.
• Requiring third-party processors to implement security measures equivalent to those we maintain.

By using haba88, you consent to the transfer of your data as described in this Privacy Policy.

10. Children's Privacy

haba88 is strictly an adult-only platform. We do not knowingly collect personal data from individuals under 21 years of age. Our Terms & Conditions explicitly prohibit account registration by anyone under 21. Age verification is conducted during KYC review. If we discover that we have inadvertently collected data from a minor, we will immediately delete such data, close the account, void all bets, and forfeit any winnings. Parents or guardians who believe a minor has accessed haba88 should contact us immediately at [email protected].

11. Changes to This Privacy Policy

haba88 reserves the right to update this Privacy Policy to reflect changes in our data practices, legal requirements, or business operations. When material changes are made, we will notify you via email to your registered email address and post a prominent notice on the haba88 homepage and in your account dashboard. The "Last Updated" date at the top of this document will reflect the date of the most recent revision. Your continued use of haba88 after notification of changes constitutes acceptance of the updated Privacy Policy. We recommend reviewing this Privacy Policy periodically to stay informed about how we protect your data.

12. Contact Information and Data Protection Officer

If you have questions, concerns, or requests regarding this Privacy Policy or how haba88 handles your personal data, please contact us:

• Data Protection Officer Email: [email protected]
• Customer Support Email: [email protected]
• Live Chat: Available 24/7 via your account dashboard
• Mailing Address: haba88 Data Protection Officer, [Registered Address] (available upon request)

We are committed to addressing your privacy concerns promptly and transparently. Our Data Protection Officer oversees compliance with this Privacy Policy and applicable data protection laws, investigates privacy complaints, and coordinates responses to data subject requests.