Contents
- 1. Introduction
- 2. Definitions
- 3. Data We Collect
- 4. How We Collect Data
- 5. How We Use Your Data
- 6. Legal Basis for Processing
- 7. Sharing Your Data
- 8. International Transfers
- 9. Data Retention
- 10. Security Measures
- 11. Cookies & Tracking
- 12. Your Rights
- 13. Minors & Age Restriction
- 14. Third-Party Services
- 15. Changes to This Policy
- 16. Contact & Complaints
Your Privacy Matters: This Privacy Policy applies to all personal data collected by hiubet through the website https://hiubet.cam, its associated mobile platform, and any customer communications. By registering an Account, you acknowledge that you have read and understood this policy in full.
1 Introduction
hiubet ("we", "us", "our") operates the online sports betting and casino platform accessible at https://hiubet.cam. As the data controller responsible for the personal information of our registered members, we are committed to processing that information in a transparent, fair, and lawful manner consistent with applicable data protection standards.
This Privacy Policy applies to all individuals who visit our website, register an Account, make a deposit or withdrawal, interact with our customer support team, or otherwise provide personal information to hiubet in any form. It covers data collected through our website, our mobile-optimized platform, email correspondence, live chat sessions, and any other communication channel through which you interact with hiubet.
Please read this policy carefully. If you have any questions about how we handle your personal data, you may contact our Data Protection team at [email protected] at any time.
2 Definitions
- "Personal Data" means any information that identifies or can be used to identify a living individual, directly or in combination with other data. This includes name, email address, phone number, date of birth, IP address, payment details, and account activity records.
- "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, transfer, deletion, and all steps in between.
- "Data Controller" means the entity that determines the purposes and means of processing personal data — in this case, hiubet.
- "Data Processor" means a third party that processes personal data on behalf of hiubet under a contractual obligation (e.g., payment gateways, KYC verification providers, game studios).
- "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a defined purpose.
- "Account" means the registered user profile maintained on the hiubet Platform.
3 Data We Collect
hiubet collects personal data across several categories, depending on how you interact with our Platform:
3.1 Identity and Contact Data
- Full legal name (as it appears on your government-issued identification)
- Date of birth (for age verification — you must be 21 or older)
- Residential address, city, and province (e.g., Jakarta, Surabaya, Bandung, Bali, Medan)
- Email address and mobile phone number
- National identity number (NIK from KTP, where collected for KYC purposes)
3.2 Financial and Payment Data
- Bank account details including account holder name and account number for BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, or BSI
- E-wallet identifiers for OVO, DANA, GoPay, ShopeePay, or LinkAja
- Transaction history including deposit and withdrawal amounts in IDR (Rp), dates, and payment method used
- Source of funds documentation where required for enhanced due diligence
3.3 Gaming and Behavioral Data
- Betting history — markets, stakes, odds, outcomes, and win/loss records
- Casino game history — game titles, session durations, results, and average stakes
- Bonus and promotion usage history
- Login timestamps, session durations, and pages visited within the Platform
3.4 Technical and Device Data
- IP address and approximate geolocation derived from IP
- Browser type, operating system, and device type (desktop, mobile, tablet)
- Cookie identifiers and session tokens (see Section 11)
- Referring URL and navigation path within the site
3.5 Communications Data
- Records of all communications between you and hiubet's support team, including live chat transcripts and email correspondence
- Complaint and feedback records
- Responses to surveys or promotional questionnaires, where you voluntarily participate
4 How We Collect Data
hiubet collects personal data through the following channels:
- Direct submission: When you register an Account, complete KYC verification, make a deposit or withdrawal request, contact customer support, or participate in a promotion.
- Automated collection: Through cookies, session tracking, server logs, and analytics tools that operate automatically when you visit or use the Platform.
- Third-party sources: From identity verification providers, payment processors (including local banks and e-wallet platforms), fraud prevention services, and publicly available data sources used to verify your identity or assess risk.
- KYC documentation: Copies of identity documents (KTP, Passport, SIM), proof-of-address documents, and bank statement screenshots submitted during account verification.
5 How We Use Your Data
hiubet uses the personal data we collect for the following specific purposes:
| Purpose | Data Categories Used |
|---|---|
| Account registration and ongoing management | Identity, contact, device data |
| Age verification (21+ requirement) and KYC compliance | Identity, KYC documents |
| Processing deposits and withdrawals via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, and others | Financial, identity data |
| Fraud detection, anti-money laundering (AML), and security monitoring | Financial, behavioral, technical data |
| Providing customer support and resolving complaints | Identity, communications, account data |
| Responsible gaming monitoring and self-exclusion management | Behavioral, gaming, account data |
| Sending transactional communications (deposit confirmations, withdrawal notifications, account alerts) | Contact, financial data |
| Sending promotional communications and personalized offers (where you have opted in) | Contact, behavioral, gaming data |
| Platform analytics and product improvement | Technical, behavioral data |
| Legal and regulatory compliance, including responding to lawful requests from authorities | All categories as required |
6 Legal Basis for Processing
hiubet processes your personal data on one or more of the following legal grounds:
- Contractual necessity: Processing required to fulfill our obligations under the Terms & Conditions you accepted at registration — including Account management, payment processing, and game provision.
- Legal obligation: Processing required to comply with applicable laws and licensing conditions, including KYC identity verification, AML transaction monitoring, age verification, and responding to lawful regulatory requests.
- Legitimate interests: Processing carried out in furtherance of hiubet's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided those interests are not overridden by your own rights and interests.
- Consent: Where we rely on your consent — for example, for sending marketing communications or for the use of non-essential cookies — you may withdraw that consent at any time without affecting the lawfulness of prior processing. Withdrawal of consent does not affect processing carried out on other legal grounds.
7 Sharing Your Data
hiubet does not sell your personal data to any third party. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to binding confidentiality and data protection obligations:
7.1 Payment Processors and Banking Partners
To process your deposits and withdrawals, we share relevant financial and identity data with our banking and e-wallet partners including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI, OVO, DANA, GoPay, ShopeePay, and LinkAja. These institutions are independently regulated and maintain their own privacy and security standards.
7.2 Identity Verification and KYC Providers
We engage licensed third-party KYC and AML screening providers to verify your identity documents, check sanctions lists, and assess source-of-funds declarations. These providers process your data only for the purpose of verification and are contractually prohibited from using it for any other purpose.
7.3 Game Studios and Content Providers
Games on the hiubet Platform are supplied by third-party studios including Evolution Gaming, Pragmatic Play, PG Soft (Pocket Games Soft), Microgaming, NetEnt, and Spribe. These providers may receive limited session and gameplay data to deliver game functionality, enforce fair-play rules, and resolve game disputes. They do not receive your full identity profile.
7.4 Regulatory and Law Enforcement Authorities
hiubet may disclose your personal data to regulators, licensing authorities, law enforcement agencies, or courts where required to do so by law, court order, or regulatory direction. We will notify you of such disclosures where permitted by law.
7.5 Professional Advisors
We may share data with our lawyers, auditors, accountants, or insurers where strictly necessary for professional advice or the conduct of legal proceedings. All such parties are bound by professional confidentiality obligations.
No Sale of Data: hiubet will never sell, rent, or trade your personal data to advertising networks, data brokers, or any commercial third party for their own marketing or profiling purposes.
8 International Transfers
As an internationally licensed platform serving Indonesian players, hiubet may transfer your personal data to servers and service providers located outside of Indonesia. Where such transfers occur, we ensure appropriate safeguards are in place, including:
- Standard contractual clauses approved by the relevant data protection authority, binding our overseas processors to equivalent privacy protections.
- Transfers only to jurisdictions that maintain an adequate level of data protection as assessed by our Data Protection Officer.
- Encryption of all data in transit using TLS 1.2 or higher, so that personal data is protected regardless of the transfer route.
If you would like further information about the specific safeguards applied to any international data transfer, please contact us at [email protected].
9 Data Retention
hiubet retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law and licensing obligations. Our standard retention periods are as follows:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of Account + 5 years after closure | Licensing compliance and dispute resolution |
| KYC identity documents | 5 years from submission or Account closure | AML regulatory obligation |
| Financial transaction records | 7 years from transaction date | Financial record-keeping requirements |
| Betting and gaming history | 5 years from Account closure | Dispute resolution and regulatory audit |
| Customer support communications | 3 years from last interaction | Quality assurance and complaint management |
| Technical and device data (logs) | 12 months from collection | Security monitoring and fraud detection |
| Marketing preference records | Until consent is withdrawn + 1 year | Proof of consent for regulatory purposes |
When the applicable retention period expires, your data is securely deleted or anonymized so that it can no longer be linked to your identity. Anonymized, aggregated data may be retained indefinitely for statistical and analytical purposes.
10 Security Measures
hiubet implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, or disclosure. These measures include:
- 256-bit SSL/TLS encryption on all data transmitted between your device and our servers, ensuring that login credentials, payment details, and personal information cannot be intercepted in transit.
- AES-256 encryption at rest for all sensitive personal data and financial records stored on our servers.
- Access controls: Personal data is accessible only to hiubet staff who require it in order to perform their duties. Access is governed by role-based permissions, multi-factor authentication, and audit logging.
- Regular penetration testing and vulnerability assessments conducted by qualified independent security specialists.
- Fraud detection systems that monitor account activity in real time to identify and flag suspicious behavior, unauthorized login attempts, and unusual transaction patterns.
- Incident response procedures: In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant regulatory authority and, where required, affected individuals within the timeframe prescribed by applicable law.
Your Responsibility: While hiubet maintains robust security infrastructure, you are also responsible for safeguarding your Account. Use a strong, unique password, do not share your login credentials, and contact us immediately at [email protected] if you suspect unauthorized access to your Account.
11 Cookies & Tracking Technologies
hiubet uses cookies and similar tracking technologies to provide a functional, personalized, and secure experience on our Platform. A cookie is a small text file placed on your device when you visit our site.
11.1 Types of Cookies We Use
- Strictly necessary cookies: Essential for the basic operation of the Platform, including session management, login authentication, and security tokens. These cannot be disabled.
- Functional cookies: Remember your preferences such as language settings and display options to improve your experience across sessions.
- Analytics cookies: Collect aggregated, anonymized data about how visitors use the Platform — including pages visited, session duration, and navigation paths — to help us improve the site. We use privacy-respecting analytics tools and do not share raw analytics data with third parties.
- Fraud-prevention cookies: Used to detect and prevent fraudulent activity, multi-account abuse, and suspicious login patterns.
11.2 Managing Cookies
You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling certain cookies may affect the functionality of the hiubet Platform — for example, you may be unable to remain logged in across sessions if session cookies are blocked. For full instructions on managing cookies in your browser, refer to your browser's help documentation.
12 Your Rights
As a data subject, you hold the following rights over your personal data held by hiubet. To exercise any of these rights, contact us at [email protected] with your full name, registered email address, and a clear description of your request. We will respond within 30 days.
Right of Access
Request a copy of the personal data hiubet holds about you, along with information on how it is used and with whom it is shared.
Right to Rectification
Ask us to correct any inaccurate or incomplete personal data held in your Account profile.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations.
Right to Restriction
Ask us to restrict processing of your data in certain circumstances, such as while a dispute about its accuracy is being resolved.
Right to Portability
Receive your personal data in a structured, machine-readable format so that you can transfer it to another service provider.
Right to Object
Object to processing of your data based on legitimate interests, including for direct marketing purposes. We will honor all valid marketing opt-out requests promptly.
13 Minors & Age Restriction
The hiubet Platform is strictly intended for adults aged 21 years or older. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in our registration and KYC process, and we apply rigorous document checks to confirm that all registered members meet this requirement.
If hiubet becomes aware that personal data has been collected from an individual who is under 21 years of age, we will take immediate steps to close the relevant Account, return any deposits made (less any bonuses already utilized), and permanently delete all personal data associated with that Account from our records.
If you are a parent or guardian and believe that a minor in your care has registered an Account with hiubet, please contact us immediately at [email protected] so that we can take appropriate action without delay.
21+ Only: Creating an Account on behalf of a minor, or allowing a minor to use your Account, is a serious breach of our Terms & Conditions and may result in permanent Account closure and referral to relevant authorities.
14 Third-Party Services
The hiubet Platform may contain references to third-party services, including game studios, payment platforms, and sporting event providers. These third parties operate their own independent privacy policies, which govern the data they collect through their own platforms and services. hiubet is not responsible for the privacy practices of any third party.
We recommend reviewing the privacy policies of any third-party service you interact with independently, including those of your chosen bank (BCA, BRI, BNI, Mandiri, etc.) or e-wallet provider (OVO, DANA, GoPay, ShopeePay, LinkAja) when making payments to or from your hiubet Wallet.
15 Changes to This Policy
hiubet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or the services we provide. When we make material changes, we will notify registered members by email or through a prominent notice on the Platform prior to the changes taking effect.
The date at the top of this policy indicates when it was last updated. We encourage you to review this Privacy Policy periodically. Your continued use of the hiubet Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the revised policy, you must cease using the Platform and contact us to request Account closure.
16 Contact & Complaints
If you have any questions, concerns, or requests relating to this Privacy Policy or the way hiubet handles your personal data, please contact our Data Protection team using the details below:
- Email: [email protected]
- Response Time: We aim to acknowledge all privacy-related inquiries within 48 hours and to provide a full response within 30 calendar days.
- Support Hours: 24 hours a day, 7 days a week — Indonesian-speaking agents are available at all times.
If you are not satisfied with hiubet's response to your privacy inquiry or complaint, you have the right to escalate your complaint to the data protection supervisory authority in the jurisdiction in which hiubet holds its operating licence. We will provide you with the relevant contact details upon request.