Last updated: 1 January 2026. This Privacy Policy supersedes all previous versions. Continued use of hoki138 services constitutes acceptance of the current version.
Section 1
Introduction
hoki138 ("the Company", "we", "our", or "us") is committed to protecting the privacy and personal data of all users ("you", "the Player", "the User") who access hoki138 services, games, promotions, payment features, and customer support resources through hoki138.cam.
This Privacy Policy is issued in accordance with applicable data protection principles and describes the types of personal information we collect, the purposes for which we process it, the conditions under which we share it, how long we retain it, and the rights available to you. It applies to all personal data collected through the hoki138 website, mobile-optimised platform, and any related communication channels, including email and live chat.
This document forms part of the hoki138 legal framework alongside the Terms and Conditions and the Responsible Gambling Policy. By creating a hoki138 account or otherwise providing personal information to us, you acknowledge that you have read and understood this Privacy Policy and consent to the practices described herein to the extent required by applicable law.
Section 2
Definitions
The following terms carry the meanings set out below throughout this Privacy Policy.
"Personal Data"
Any information that identifies or could reasonably identify a living natural person, whether alone or in combination with other data.
"Processing"
Any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
"Data Controller"
The entity that determines the purposes and means of processing Personal Data — in this context, hoki138.
"Data Processor"
A third party that processes Personal Data on behalf of hoki138 under a contractual arrangement and in accordance with this Policy.
"KYC"
Know Your Customer — the identity and address verification process required before certain account activities are permitted.
"Consent"
A freely given, specific, informed, and unambiguous indication of agreement to the processing of Personal Data for a stated purpose.
"Services"
All entertainment products, account features, payment tools, support channels, and promotional content accessible via hoki138.
"Sensitive Data"
A subset of Personal Data attracting heightened protection, including financial account details, government-issued identity numbers, and health information.
Section 3
Data Collection
hoki138 collects Personal Data through multiple channels depending on how you interact with our Services. The categories of data we may collect include:
| Category |
Examples |
Collection Method |
| Identity Data |
Full legal name, date of birth, nationality, government-issued ID number |
Registration form, KYC document upload |
| Contact Data |
Email address, phone number, residential address including city (Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, etc.) |
Registration form, account settings |
| Financial Data |
Payment method type, account name, MYR transaction values, DuitNow/FPX/eWallet identifiers, cryptocurrency wallet addresses |
Deposit and withdrawal flows |
| Technical Data |
IP address, device type, operating system, browser, session duration, login timestamps |
Automatic collection via platform logs |
| Usage Data |
Games played, stakes, outcomes, markets accessed, bonus claims, responsible-gambling tool interactions |
Platform activity logs |
| Communication Data |
Live chat transcripts, email correspondence, support ticket content |
Customer support interactions |
| Verification Documents |
Copies of MyKad, passport, utility bills, bank statements submitted for KYC |
KYC document upload portal |
hoki138 does not intentionally collect Personal Data from persons under the age of 21. If we become aware that data has been collected from an individual below this age, that data will be deleted promptly and the associated account closed.
Section 4
Data Processing & Use
hoki138 processes Personal Data for the following purposes, each of which is tied to a specific lawful basis described in Section 5:
- Account creation and management: Creating, maintaining, verifying, and administering hoki138 player accounts, including authentication and session management.
- Payment processing: Facilitating MYR deposits and withdrawals via methods including Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and selected cryptocurrency channels.
- Identity verification (KYC): Confirming the age, identity, and address of account holders to satisfy legal and regulatory requirements and to prevent underage access.
- Fraud prevention and security: Detecting and investigating suspicious transactions, multiple-account activity, bonus abuse, money laundering, or other prohibited conduct.
- Responsible gambling monitoring: Identifying patterns of play that may indicate problem gambling and enabling the application of self-exclusion, deposit limit, and cooling-off controls.
- Service improvement: Analysing aggregated platform usage to improve navigation, game category structure, payment flows, and customer support quality.
- Legal and regulatory compliance: Retaining records as required by applicable law, responding to regulatory inquiries, and resolving formal disputes.
- Direct service communications: Sending transactional notifications regarding account status, payment updates, KYC requests, and responsible-gambling reminders.
Section 5
Legal Basis for Processing
hoki138 processes Personal Data under one or more of the following legal bases, depending on the nature and purpose of each processing activity:
- Contractual necessity: Processing required to perform the agreement between hoki138 and the Player, including account management, payment execution, and KYC verification.
- Legal obligation: Processing necessary to comply with applicable anti-money laundering, counter-terrorism financing, age verification, and data retention requirements.
- Legitimate interests: Processing carried out for hoki138's legitimate interests in fraud prevention, security monitoring, platform improvement, and responsible-gambling compliance, where those interests are not overridden by the Player's fundamental rights.
- Consent: Processing based on the Player's freely given, specific, and informed agreement, particularly for optional promotional communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.
Section 6
Data Sharing
hoki138 does not sell, rent, or trade Personal Data to unaffiliated third parties for their own independent commercial purposes. We may share data in the following limited circumstances:
- Operational service providers: Payment processors, KYC verification platforms, fraud detection providers, cloud infrastructure operators, and customer support tools that process data on our behalf under binding confidentiality and data protection obligations.
- Regulatory and legal authorities: Competent governmental or regulatory bodies where hoki138 is under a legal obligation or valid court order to disclose information.
- Anti-fraud and security networks: Industry-wide fraud prevention databases or responsible-gambling exclusion registries where participation is required by regulation or licensing conditions.
- Corporate transactions: In the event of a merger, acquisition, or asset sale, Personal Data may be transferred to the acquiring entity subject to equivalent privacy protections.
Where data is shared with third-party processors, hoki138 requires those parties to implement appropriate technical and organisational security measures and to process data solely for the agreed purpose.
Section 7
Retention & Deletion
hoki138 retains Personal Data only for as long as necessary to achieve the purpose for which it was collected, to fulfil applicable legal or regulatory retention obligations, or to resolve outstanding account, payment, or dispute matters.
- Active account data: Retained throughout the life of the account and for a minimum period following account closure, as required by applicable regulations.
- KYC and identity documents: Retained for the duration required by anti-money laundering legislation, typically between five and seven years from the end of the customer relationship.
- Transaction records: Retained in accordance with applicable financial record-keeping requirements.
- Support and communication records: Retained for a reasonable period following closure of the relevant support matter to allow for dispute escalation review.
- Technical and usage logs: Aggregated or anonymised within a defined operational window where retention of identifiable data is no longer required.
When Personal Data is no longer required under the applicable retention schedule, hoki138 will securely delete or irreversibly anonymise it.
Section 8
Security Measures
hoki138 implements a layered approach to data security including the following technical and organisational controls:
- Transport Layer Security (TLS/SSL) encryption for all data transmitted between the user's device and hoki138 platform infrastructure.
- Restricted staff access to Personal Data on a role-based, need-to-know basis, with access logs maintained for audit purposes.
- Regular security assessments and vulnerability reviews of platform infrastructure and third-party integrations.
- Multi-factor authentication requirements for administrative access to systems holding Personal Data.
- Incident response procedures including breach notification protocols consistent with applicable regulatory requirements.
hoki138 will never contact players by email, live chat, or phone to request a password, full banking PIN, one-time verification code, or government ID number via an unsolicited communication. If you receive such a request claiming to be from hoki138, do not comply and report it immediately via the support email.
Section 9
Cookies & Tracking Technologies
hoki138 uses cookies and similar tracking technologies to operate the platform, maintain session states, detect fraud, and analyse aggregate usage patterns. The principal categories are:
- Essential cookies: Required for login sessions, security tokens, and core platform functionality. These cannot be disabled without affecting service access.
- Functional cookies: Store preferences such as language settings and responsible-gambling reminder states to improve the user experience on return visits.
- Analytical cookies: Collect anonymised or pseudonymised data on page navigation, feature usage, and session duration to support internal platform improvement activities.
- Security and fraud-prevention cookies: Used to identify unusual access patterns, repeated failed login attempts, and other indicators of account compromise or prohibited activity.
Players may manage non-essential cookie preferences through standard browser settings. Disabling certain cookies may affect platform functionality. hoki138 does not use cookies to serve advertising to users on third-party websites.
Section 10
User Rights
Subject to applicable law, regulatory obligations, and any overriding legitimate interest, hoki138 account holders may exercise the following rights in respect of their Personal Data. Requests should be submitted in writing to the contact address in Section 14.
Right of Access
Request confirmation of whether hoki138 holds Personal Data about you and obtain a copy of the data, together with information about how it is used.
Right of Rectification
Request correction of inaccurate or incomplete Personal Data held on your account. Certain changes may require supporting documentation.
Right of Erasure
Request deletion of Personal Data where it is no longer necessary for its original purpose, subject to legal retention obligations that override this right.
Right to Restrict Processing
Request that hoki138 suspend certain processing activities while a data accuracy dispute or objection is being investigated.
Right to Data Portability
Request a copy of Personal Data provided to hoki138 in a structured, commonly used, machine-readable format where technically feasible and legally applicable.
Right to Withdraw Consent
Where processing is based on consent, withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
hoki138 will acknowledge rights requests within a reasonable period and aim to respond fully within thirty (30) calendar days. Complex or multiple requests may require an extended response window, in which case the Player will be informed.
Section 11
Minors & Age Policy
hoki138 Services are strictly intended for natural persons aged 21 years and above. hoki138 does not knowingly collect, store, or process Personal Data from individuals under this age threshold.
During account registration and KYC verification, hoki138 takes reasonable steps to confirm age eligibility. Where hoki138 becomes aware that Personal Data relating to a person under 21 has been collected, it will take prompt action to delete that data and close the associated account, forfeiting any balance in accordance with the Terms and Conditions.
If you believe that a minor has opened a hoki138 account, please contact us immediately using the details in Section 14.
Section 12
Cross-Border Data Transfers
The nature of hoki138's platform operations may necessitate the transfer of Personal Data to infrastructure or service providers located outside Malaysia. Where such transfers occur, hoki138 takes steps to ensure that an adequate level of data protection is maintained, which may include:
- Contractual clauses requiring the recipient to apply data protection standards equivalent to those applied by hoki138.
- Transfers to jurisdictions recognised as providing an adequate level of data protection under applicable frameworks.
- Binding corporate rules or equivalent internal data transfer mechanisms where applicable.
Players who have questions about specific cross-border transfer arrangements may direct inquiries to the contact address in Section 14.
Section 13
Policy Amendments
hoki138 reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. Material amendments will be communicated to account holders through the registered email address or a prominent platform notice prior to the change taking effect.
The "last updated" date at the top of this document will be revised with each published amendment. We encourage all hoki138 users to review this Policy periodically. Continued use of hoki138 Services following notice of a material change constitutes acceptance of the revised Privacy Policy.