Privacy Policy

1 Introduction

hehuyk ("we", "us", "our", "the Company") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, store, and safeguard your personal data when you access or use our online gaming platform at https://hehuyk.cam, including all associated services, mobile applications, and customer support channels.

This Privacy Policy applies to all users of hehuyk services, including prospective customers, registered players, and visitors to our website. By accessing hehuyk, creating an account, or using any of our services, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy.

hehuyk operates in compliance with applicable data protection laws and regulations, including international privacy standards such as the General Data Protection Regulation (GDPR) principles, adapted to the Indonesian market context. We are committed to transparency in our data handling practices and respect your rights regarding your personal information.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer using the contact details provided in Section 11 of this document. We aim to respond to all privacy inquiries within 30 days.

2 Information We Collect

hehuyk collects various types of personal information to provide, maintain, and improve our gaming services, ensure regulatory compliance, prevent fraud, and deliver a secure and personalized user experience. The information we collect falls into the following categories:

2.1 Information You Provide Directly

• Account Registration Data: Full legal name, date of birth, gender, residential address, email address, mobile phone number, username, and password.
• Identity Verification (KYC) Documents: Government-issued identification (KTP or passport), proof of address (utility bills, bank statements), selfie photographs holding identification documents, and bank account details for withdrawal purposes.
• Financial Transaction Data: Deposit and withdrawal amounts, payment method details (bank account numbers, e-wallet identifiers), transaction history, and financial institution information.
• Communication Data: Correspondence with customer support, chat messages, emails, survey responses, and feedback submissions.
• Preference Settings: Language preferences, notification settings, game favorites, responsible gaming limits, and marketing consent choices.

2.2 Information Collected Automatically

• Device and Browser Information: IP address, device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, advertising ID), and mobile network information.
• Usage and Activity Data: Pages visited, games played, bet history, session duration, click patterns, navigation paths, timestamps, and in-platform behaviors.
• Location Data: Geolocation information derived from IP addresses to verify your jurisdiction and comply with licensing requirements. We do not collect precise GPS coordinates unless you explicitly grant permission.
• Cookies and Tracking Technologies: Session cookies, persistent cookies, web beacons, pixels, and similar technologies to remember your preferences, analyze site usage, and deliver targeted content. See Section 9 for detailed cookie information.

2.3 Information from Third Parties

• Payment Processors: Transaction confirmation, payment status, and fraud detection signals from banks (BCA, BRI, BNI, Bank Mandiri) and payment gateway providers.
• Identity Verification Services: KYC verification results, document authenticity checks, and fraud risk assessments from third-party verification vendors.
• Marketing Partners: Referral source information, campaign effectiveness data, and aggregated demographic insights (no personally identifiable information is received without your consent).

3 How We Use Your Information

hehuyk processes your personal information for the following legitimate business purposes:

3.1 Service Provision and Account Management

• Create, maintain, and secure your gaming account
• Verify your identity and age (21+ requirement) to comply with legal obligations
• Process deposits, withdrawals, and other financial transactions
• Enable gameplay, bet placement, and winnings distribution
• Deliver customer support and respond to your inquiries
• Manage your account preferences and responsible gaming settings

3.2 Security and Fraud Prevention

• Detect and prevent fraudulent activities, money laundering, and unauthorized access
• Monitor for collusion, bonus abuse, and violations of Terms & Conditions
• Conduct risk assessments and security audits
• Enforce our policies and protect the integrity of our gaming platform
• Comply with anti-money laundering (AML) and counter-terrorism financing (CTF) regulations

3.3 Legal and Regulatory Compliance

• Fulfill obligations under gaming licenses and regulatory requirements
• Respond to legal requests, court orders, and government inquiries
• Maintain records required by law for audit and reporting purposes
• Implement and enforce responsible gaming measures
• Report suspicious transactions to relevant authorities when legally required

3.4 Service Improvement and Personalization

• Analyze usage patterns to optimize platform performance and user experience
• Develop new features, games, and services based on player feedback
• Personalize game recommendations and promotional offers
• Conduct research, statistical analysis, and market studies
• Test new technologies and improve security measures

3.5 Marketing and Communications (With Your Consent)

• Send promotional emails about bonuses, tournaments, and special offers
• Deliver targeted advertising based on your gaming preferences
• Provide service updates, platform news, and account notifications
• Conduct surveys and request feedback on your experience

You may opt out of marketing communications at any time through your account settings or by contacting customer support. Transactional and service-related communications (account verification, withdrawal confirmations, security alerts) cannot be opted out of as they are essential to service provision.

4 Data Sharing and Disclosure

hehuyk does not sell, rent, or trade your personal information to third parties for their marketing purposes. We only share your data in the following limited circumstances:

4.1 Service Providers and Business Partners

We engage trusted third-party service providers to perform essential functions on our behalf, including:

• Payment Processors: Banks (BCA, BRI, BNI, Bank Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) and payment gateway providers to facilitate deposits and withdrawals.
• KYC Verification Vendors: Identity verification services that authenticate your documents and conduct fraud checks.
• Cloud Hosting Providers: Secure data storage and server infrastructure providers.
• Customer Support Platforms: Live chat, email, and ticketing system providers that assist in delivering support services.
• Marketing and Analytics Tools: Email service providers, analytics platforms, and advertising networks (only with your consent).

All service providers are bound by strict confidentiality agreements and are permitted to use your data only to perform services on behalf of hehuyk. They may not use your information for their own purposes.

4.2 Legal Obligations and Law Enforcement

We may disclose your personal information when required by law or when we believe in good faith that disclosure is necessary to:

• Comply with legal obligations, court orders, subpoenas, or regulatory requests
• Respond to lawful requests from government authorities and law enforcement
• Report suspicious transactions under anti-money laundering regulations
• Protect hehuyk's legal rights, property, and safety
• Prevent fraud, security breaches, or harm to users

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the successor entity. You will be notified via email and prominent website notice of any such change in ownership or control of your personal data.

4.4 With Your Explicit Consent

We may share your information with third parties for purposes not covered above only with your explicit, informed consent. You have the right to withdraw such consent at any time.

5 Data Retention

hehuyk retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Active Account Data: Retained for the duration of your account activity plus 7 years after account closure to comply with regulatory record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date as required by anti-money laundering regulations and tax laws.
• KYC Documents: Retained for 7 years after account closure or as required by applicable licensing authorities.
• Communication Records: Customer support interactions retained for 3 years for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Retained until you withdraw consent, plus an additional 3 years to demonstrate compliance with marketing regulations.
• Website Usage Data: Aggregated analytics data retained indefinitely in anonymized form; identifiable logs retained for 12 months.

After the applicable retention period expires, we securely delete or anonymize your personal information using industry-standard data destruction methods. Anonymized data that can no longer identify you may be retained indefinitely for statistical and analytical purposes.

6 Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal information:

• Right to Access: Request a copy of the personal data we hold about you, including data sources, processing purposes, and recipients.
• Right to Rectification: Correct inaccurate or incomplete personal information through your account settings or by contacting support.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data, subject to legal retention obligations and legitimate business interests.
• Right to Restriction: Request that we limit the processing of your data in certain circumstances, such as while disputing data accuracy.
• Right to Data Portability: Receive your personal data in a structured, commonly used, machine-readable format and transmit it to another service provider where technically feasible.
• Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Withdraw consent for data processing activities that rely on your consent (does not affect processing based on other legal grounds).
• Right to Lodge a Complaint: File a complaint with your local data protection authority if you believe we have violated your privacy rights.

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with "Privacy Rights Request" in the subject line. We will respond to verified requests within 30 days. Some requests may require identity verification to prevent unauthorized disclosure of personal information.

7 Data Security Measures

hehuyk implements comprehensive technical, physical, and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction:

• Encryption: 256-bit SSL/TLS encryption for all data transmitted between your device and our servers. All sensitive data is encrypted at rest using AES-256 encryption.
• Secure Data Centers: Personal information is stored in ISO 27001-certified data centers with 24/7 monitoring, physical access controls, and redundant backup systems.
• Access Controls: Role-based access controls ensure that only authorized employees with legitimate business needs can access personal data. All access is logged and audited.
• Authentication: Multi-factor authentication options for account access. Strong password requirements and automatic session timeouts.
• Regular Security Audits: Independent third-party security assessments, penetration testing, and vulnerability scans conducted regularly.
• Employee Training: All staff members handling personal data receive mandatory privacy and security training and sign confidentiality agreements.
• Incident Response: Comprehensive data breach response plan to detect, contain, and notify affected users in compliance with regulatory requirements.

While we employ industry-leading security measures, no system is completely invulnerable. You are responsible for maintaining the confidentiality of your login credentials and for any activities under your account. If you suspect unauthorized access to your account, contact us immediately.

8 International Data Transfers

hehuyk primarily serves Indonesian residents, and your personal information is stored within secure data centers located in jurisdictions with adequate data protection standards. In certain circumstances, your data may be transferred to, processed, or stored in countries outside Indonesia to enable service provision by our international service providers (payment processors, cloud hosting, KYC verification vendors).

When we transfer your personal data internationally, we ensure appropriate safeguards are in place through:

• Standard Contractual Clauses approved by data protection authorities
• Vendor certifications demonstrating compliance with international privacy frameworks
• Explicit consent for transfers where required by law
• Contractual obligations requiring equivalent data protection standards

If you have concerns about international data transfers, please contact our Data Protection Officer for detailed information about the safeguards applicable to your data.

9 Cookies and Tracking Technologies

hehuyk uses cookies and similar tracking technologies to enhance your browsing experience, analyze site usage, and deliver personalized content. A cookie is a small text file stored on your device that helps our website recognize your browser and remember your preferences.

9.1 Types of Cookies We Use

9.2 Managing Cookies

You can control cookie settings through your browser preferences. Most browsers allow you to refuse cookies, delete existing cookies, or receive notifications before cookies are stored. However, disabling essential cookies may affect core functionality and prevent you from using certain features.

For marketing cookies, you can manage your preferences through your hehuyk account settings. You may also opt out of interest-based advertising through industry opt-out tools provided by the Digital Advertising Alliance or Network Advertising Initiative.

10 Children's Privacy

hehuyk services are strictly for adults aged 21 years or older. We do not knowingly collect, use, or disclose personal information from individuals under 21. Our age verification processes are designed to prevent minors from accessing our platform.

If we discover that we have inadvertently collected personal information from someone under 21, we will immediately delete such data from our systems and terminate the associated account. Parents or guardians who believe their child has provided personal information to hehuyk should contact us immediately at [email protected].

We encourage parents and guardians to monitor their children's internet usage and educate them about the risks of sharing personal information online. Consider using parental control software to prevent minors from accessing gambling websites.

11 Changes to This Privacy Policy

hehuyk reserves the right to modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated through:

• Email notification to your registered email address
• Prominent notice on the hehuyk homepage and account dashboard
• Update to the "Last Updated" date at the top of this document

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of hehuyk services after any modification constitutes acceptance of the updated Privacy Policy. If you do not agree with the changes, you must discontinue using our services and may request account closure.

12 Contact Our Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy, our data practices, or your privacy rights, please contact our Data Protection Officer:

• Email: [email protected] (Subject: Privacy Inquiry)
• Live Chat: Available 24/7 through your hehuyk account dashboard
• Response Time: We aim to respond to all privacy inquiries within 30 days

For privacy rights requests (access, rectification, erasure, portability), please provide your full name, registered email address, and account username to facilitate verification. We may request additional identification documents to prevent unauthorized disclosure of personal information.