Your privacy is how we build trust
We keep your account details, payment information and gaming activity secure. This policy explains exactly what we collect, how we protect it, and your rights over your data...
Privacy policy scope and jurisdiction
hibikiwin operates in supported regions of Indonesia where local law permits online gaming. This policy covers all personal data we collect when you open an account, make deposits via QRIS, DANA, OVO or GoPay, play in our lobbies, and interact with our support team. We comply with Indonesian data protection standards and international best practices. Your data is stored securely and never
shared with third parties without your consent, except where required by law or payment processors need access to complete your transaction.
Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.
How we earn privacy trust
Encryption Standard
All data transmitted between your device and our servers uses TLS 1.2+ encryption. Stored account and payment information is encrypted at rest.
Third-Party Audits
We undergo annual security reviews by independent firms to verify our data handling practices meet or exceed industry standards for player protection.
Payment Partner Vetting
QRIS, DANA, OVO and GoPay integrations are audited before launch. We only work with providers meeting strict data segregation and compliance requirements.
Clear Retention Schedules
We delete inactive account data after 24 months unless you request otherwise. Payment records are retained only as long as law or audit requirements demand.
No Data Brokering
We never sell your gaming history, payment details or personal information to marketers, brokers or external analytics firms without explicit written consent.
Breach Response Plan
If unauthorized access occurs, we notify affected players within 48 hours and provide guidance on account recovery, payment fraud checks and next steps.
Consistency across our policy pages
| Terms of Service | Our ToS and Privacy Policy align on data use, account ownership and dispute resolution. Both apply when you open an account and deposit via QRIS, DANA, OVO or GoPay. |
|---|---|
| Cookie Policy | Separate policy details how we use cookies and pixels. We track lobby navigation only; we do not use cookies to build profiles for sale to third parties. |
| Payment Security Addendum | Payment-specific privacy protections are outlined here: card and e-wallet data handling, PCI DSS compliance, and your rights if a deposit fails or is disputed. |
| Account Recovery Policy | If your account is locked or compromised, our recovery process is documented separately. Data access during recovery is logged and disclosed to you. |
| Support Ticket Confidentiality | When you contact support, your message and any personal data shared is encrypted and visible only to our support team. Transcripts are kept for 90 days. |
| Affiliate & Referral Privacy | If you refer a friend or join as an affiliate, referral tracking is governed by a separate addendum. Your referral data is not merged with your gaming profile without consent. |
| Mobile App Data Collection | Our iOS and Android apps collect device identifiers and location signals only to deliver lobby and payment notifications. Full policy available in-app settings. |
Privacy framework: what defines our approach
Minimal Collection
We collect only what's necessary: name, email, phone, payment details and gaming activity. No requests for credit history, employment data or unnecessary ID verification.
Purpose Limitation
Data collected for account creation is used for that purpose only. Payment info stays siloed from marketing; gaming activity is separate from payment records.
User Rights Dashboard
Export your data, update personal details, pause data collection for marketing, or request full anonymization—all from your account settings in one click.
Vendor Accountability
Every third party we work with (QRIS processor, analytics tool, email service) signs a Data Processing Agreement. We audit their practices annually.
Transparent Logging
Your account access history is visible to you: login times, deposit timestamps, support interactions, and any data exports are logged and downloadable.
Regular Policy Updates
When we change this policy, we email you 30 days beforehand and post updates clearly. You can object or request account closure before changes take effect.