h89apk Privacy Policy

1. Definitions

The following terms carry specific meanings throughout this Privacy Policy:

• "h89apk", "we", "us", or "our" refers to the operator of the h89apk platform, accessible at h89apk.pro and any associated subdomains or mobile interfaces.
• "Member", "you", or "your" refers to any individual who has registered an account on h89apk or who browses the Platform without a registered account.
• "Personal Data" means any information that identifies or could reasonably identify a natural person, either directly (such as a full name or national identity number) or indirectly (such as a device fingerprint combined with behavioral data).
• "Processing" means any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, erasure, or destruction.
• "Platform" refers to the h89apk website, mobile-optimized interface, APIs, and all associated digital services.
• "KYC" (Know Your Customer) refers to the identity verification procedures h89apk conducts to confirm a Member's identity, age, and payment method ownership.
• "Third-Party Service Provider" means any external entity engaged by h89apk to supply technology, payment processing, game content, fraud detection, or other services necessary for Platform operation.
• "IDR" refers to Indonesian Rupiah, the sole transactional currency on h89apk.

2. Data Controller

h89apk is the data controller in respect of all Personal Data collected through the Platform. As data controller, h89apk determines the purposes for which Personal Data is processed and the means by which such processing is carried out.

h89apk operates under an internationally recognized gaming license and is subject to the anti-money-laundering (AML), counter-terrorist-financing (CTF), and data-protection standards mandated by that licensing framework. h89apk's primary member base consists of residents of Indonesia, and all data-handling practices described in this Policy are designed with the needs and expectations of Indonesian members in mind.

For all data-related inquiries, the primary point of contact is h89apk's support team, reachable via live chat on the Platform or by email at [email protected]. Contact details are also set out in full in Clause 14.

3. Data We Collect

h89apk collects Personal Data in three ways: data you provide directly, data generated automatically by your use of the Platform, and data received from third parties in the course of providing Services.

3.1 Data You Provide Directly

• Registration Data: Full legal name, date of birth, residential address in Indonesia (including city — Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, or elsewhere), valid mobile phone number, and email address.
• KYC Documents: Copies of government-issued photo identification (KTP, passport, or SIM), proof of residential address, and proof of payment method ownership (such as a bank card image or mobile banking screenshot for BCA, BRI, BNI, Mandiri, CIMB Niaga, or BSI accounts).
• Payment Data: Bank account numbers, e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), and transaction references. Full card numbers and bank PINs are never collected or stored by h89apk.
• Support Communications: Content of live chat conversations, emails sent to [email protected], and any supporting files or screenshots you submit as part of a support request.
• Responsible Gaming Preferences: Deposit limits, loss limits, session duration settings, cooling-off requests, and self-exclusion elections you configure in your Account dashboard.

3.2 Data Collected Automatically

• Device & Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and device language setting.
• Usage Data: Pages viewed, time spent per page, navigation paths, game sessions initiated, bet amounts, game outcomes, login and logout timestamps, and session duration.
• Cookie & Tracking Data: Information collected via cookies, local storage, and similar technologies as described in detail in Clause 9.
• Geolocation Data: General geographic location derived from your IP address. h89apk does not collect precise GPS coordinates.

3.3 Data Received from Third Parties

• Payment Providers: Transaction confirmation data, payment status, and fraud-risk signals received from Indonesian banks and e-wallet operators when you make deposits or receive withdrawals.
• Identity Verification Services: Supplementary identity verification signals from third-party KYC service providers engaged by h89apk to accelerate document review.
• Fraud & AML Screening: Watch-list and sanctions-screening results from third-party compliance databases consulted as part of h89apk's AML obligations.

4. How We Use Your Data

h89apk processes Personal Data only for the purposes described below. We do not use Personal Data for purposes that are incompatible with those stated at the time of collection.

• Account Administration: Creating and maintaining your h89apk account, authenticating your identity at login, enforcing the one-account-per-person rule, and managing account settings including responsible gaming preferences.
• Service Delivery: Processing deposits and withdrawals in IDR via supported Indonesian banking channels, settling bets and game outcomes, awarding bonuses, and providing access to the full h89apk game library including sportsbook, live casino, slots, Sic Bo, and video poker.
• KYC and Compliance: Verifying your identity and age (21+ requirement), confirming ownership of payment methods, screening against sanctions and watch lists, and fulfilling h89apk's AML and CTF obligations under its licensing framework.
• Fraud Prevention and Security: Detecting suspicious login patterns, identifying duplicate accounts, monitoring for unusual transaction behavior, and protecting the integrity of the Platform and its members.
• Customer Support: Responding to your inquiries via live chat and email, resolving disputes, processing responsible gaming requests such as self-exclusion, and maintaining support-interaction records.
• Responsible Gaming: Enforcing deposit limits, loss limits, session timers, cooling-off periods, and self-exclusion elections you have configured; monitoring for behavioral patterns that may indicate problem gambling and initiating welfare checks where appropriate.
• Platform Improvement: Analyzing aggregated, anonymized usage data to identify technical issues, optimize game loading performance, improve navigation, and prioritize new feature development based on actual member behavior.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform update emails to members who have opted in to receive marketing communications. Members may unsubscribe at any time via the Account dashboard or by contacting support.
• Legal Obligations: Retaining transaction records, KYC documents, and communications logs for the periods required by applicable law and licensing regulations.

5. Legal Basis for Processing

h89apk processes Personal Data on the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform the contract between h89apk and the Member — including account creation, transaction processing, bet settlement, and customer support — is carried out on the basis that it is necessary to deliver the Services the Member has requested.
• Legal Obligation: Processing carried out to comply with h89apk's regulatory requirements under its gaming license — including KYC verification, AML screening, sanctions checking, and mandatory record retention — is carried out on the basis of legal obligation.
• Legitimate Interests: Processing carried out for fraud prevention, platform security, abuse detection, and aggregated analytics is based on h89apk's legitimate interest in maintaining a safe and fair platform for all Members, provided that such interests are not overridden by the Member's fundamental rights and freedoms.
• Consent: Processing carried out for optional marketing communications and non-essential cookies is based on the Member's freely given, specific, and informed consent. Consent may be withdrawn at any time by adjusting Account settings or contacting support; withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

6. Data Sharing

h89apk shares Personal Data with third parties only in the circumstances described below. In all cases, data sharing is governed by written agreements that impose data-protection obligations consistent with this Privacy Policy.

6.1 Payment Processors and Banks

Transaction data — including your name, registered account number, and transaction amount — is shared with the Indonesian bank or e-wallet operator you use for deposits and withdrawals (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, or LinkAja) to the extent necessary to execute each transaction. These entities are independent data controllers in respect of their own processing activities.

6.2 KYC and Compliance Providers

Identity document data and screening queries may be shared with third-party KYC verification services and AML compliance database providers engaged by h89apk. These providers are bound by strict confidentiality agreements and are prohibited from using Member data for any purpose beyond performing the services contracted by h89apk.

6.3 Game Content Providers

Game studios — including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, PG Soft, and Spribe — receive anonymized or pseudonymized session data (such as a hashed Member identifier and bet amounts) necessary to deliver game content, calculate outcomes, and return results. These providers do not receive your full personal identity details.

6.4 Regulatory and Law Enforcement Authorities

h89apk will disclose Personal Data to regulatory bodies, law enforcement agencies, or courts where required by applicable law, valid legal process, or in response to a lawful request by a public authority. h89apk will make reasonable efforts to notify you of any such disclosure unless prohibited from doing so by law.

6.5 Business Transfers

In the event that h89apk undergoes a merger, acquisition, asset sale, or restructuring, Member Personal Data may be transferred as part of that transaction. Members will be notified via email and an in-platform notice before their Personal Data becomes subject to a materially different privacy policy as a result of any such transfer.

7. Data Retention

h89apk retains Personal Data for the minimum period necessary to fulfill the purposes described in this Policy and to comply with applicable legal and regulatory retention obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, Personal Data is either securely deleted from h89apk's systems or irreversibly anonymized so that it can no longer be linked to an individual Member. Self-exclusion records are retained for the full duration of the exclusion period plus a reasonable post-exclusion buffer to prevent re-registration in violation of the exclusion.

8. Security Measures

h89apk implements a multi-layered security architecture to protect Member Personal Data against unauthorized access, accidental loss, alteration, or destruction. Key security measures in place include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and h89apk's servers is encrypted using Transport Layer Security (TLS 1.2 or higher), ensuring that login credentials, payment data, and personal information cannot be intercepted in transit.
• Hashed Credential Storage: Member passwords are stored exclusively as salted cryptographic hashes. h89apk staff cannot retrieve your plain-text password under any circumstances — if you lose access to your Account, password reset is handled through a verified identity confirmation flow.
• Two-Factor Authentication (2FA): Members are encouraged to enable 2FA on their accounts. When enabled, account access requires both a password and a one-time verification code sent to the Member's registered mobile number.
• Access Controls: Internal access to Member Personal Data is restricted to h89apk personnel who require it for their specific job function. All internal access is logged and subject to regular audit review.
• Intrusion Detection and Monitoring: h89apk's systems are monitored on a continuous basis for unusual access patterns, brute-force attempts, and other indicators of unauthorized access. Automated alerts are triaged by the security team around the clock.
• Regular Security Reviews: h89apk conducts periodic security assessments of its platform infrastructure, including penetration testing and vulnerability scanning, to identify and remediate potential weaknesses before they can be exploited.

Despite these measures, no digital platform can guarantee absolute security. In the event of a data breach that poses a material risk to Member rights, h89apk will notify affected Members and relevant regulatory authorities within the timeframes required by applicable law.

9. Cookies & Tracking Technologies

h89apk uses cookies and similar tracking technologies on its Platform to deliver core functionality, improve performance, and — with your consent — to understand how Members use the site. The following categories of cookies are in use:

9.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function correctly. They enable session management (keeping you logged in across pages), security token validation, and load balancing. Without these cookies, key Platform features — including account access and transaction processing — would not work. These cookies cannot be disabled.

9.2 Performance and Analytics Cookies

These cookies collect anonymized information about how visitors interact with h89apk — which pages are most visited, where Members spend the most time, and where technical errors occur. This data is used exclusively to improve Platform performance and user experience. No personally identifiable information is collected by these cookies without your consent.

9.3 Functional Cookies

These cookies remember your preferences — such as language settings, display preferences, and last-used game categories — to provide a more personalized experience on return visits. These cookies are active by default but can be disabled via your browser settings without affecting core Platform functionality.

9.4 Managing Cookies

You can control and delete cookies through your browser settings. Most modern browsers allow you to block third-party cookies, clear all cookies, or configure per-site cookie permissions. Note that disabling strictly necessary cookies will impair your ability to use the Platform. Instructions for managing cookies in the most widely used browsers are available from each browser's official support documentation.

10. Your Rights

As a Member of h89apk, you hold the following rights in respect of your Personal Data. To exercise any of these rights, contact h89apk's support team via live chat or email as described in Clause 14. h89apk will respond to all valid requests within 30 calendar days.

• Right of Access: You have the right to request confirmation of whether h89apk holds Personal Data about you and, if so, to receive a copy of that data together with information about how it is being processed.
• Right of Rectification: You have the right to request correction of any inaccurate or incomplete Personal Data h89apk holds about you. For changes to core account information such as your registered name or date of birth, supporting documentation may be required.
• Right of Erasure: You have the right to request deletion of your Personal Data in certain circumstances — for example, where the data is no longer needed for the purposes for which it was collected and h89apk has no overriding legal obligation to retain it. Note that regulatory retention requirements (see Clause 7) may mean h89apk cannot fulfil an erasure request in full.
• Right to Restriction: You have the right to request that h89apk restrict its processing of your Personal Data in certain circumstances, such as while a rectification request is being reviewed.
• Right to Data Portability: Where processing is based on consent or contract and is carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including direct marketing. Objections to direct marketing are honored immediately and unconditionally.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time by contacting support or adjusting your Account settings. Withdrawal does not affect the lawfulness of consent-based processing carried out before withdrawal.

11. Minors

h89apk's Services are strictly restricted to individuals who are 21 years of age or older. h89apk does not knowingly collect Personal Data from any person under the age of 21. Age is verified as part of the KYC process for all Members.

If h89apk becomes aware that it has inadvertently collected Personal Data from a person under the age of 21, the relevant account will be suspended immediately, all associated Personal Data will be deleted or anonymized without delay, and any funds held in the account will be dealt with in accordance with h89apk's Terms & Conditions and applicable regulatory requirements.

If you are a parent or guardian and believe that a person under your care has registered an account on h89apk, please contact our support team immediately at [email protected] so that the account can be reviewed and closed without delay.

12. International Data Transfers

h89apk's primary member base is located in Indonesia, and the Platform is designed with Indonesian members in mind. In the course of delivering Services, certain Personal Data may be transferred to or accessed from servers or service providers located outside Indonesia — for example, game content studio infrastructure hosted in Europe or Southeast Asia, or KYC verification services with processing centers in multiple jurisdictions.

Wherever Personal Data is transferred internationally, h89apk ensures that appropriate safeguards are in place to maintain a level of protection consistent with this Privacy Policy. Such safeguards may include contractual clauses requiring the recipient to protect the data, or reliance on the recipient's adherence to an internationally recognized data-protection framework.

By registering an account on h89apk and accepting these terms, you acknowledge that your Personal Data may be processed outside Indonesia as described above, subject to the safeguards described in this clause.

13. Policy Amendments

h89apk reserves the right to update this Privacy Policy at any time to reflect changes in data-processing practices, legal requirements, or Platform features. The current version of the Privacy Policy, along with its effective date and version number, is always published on this page.

Where amendments are material — meaning they represent a substantive change to how Member Personal Data is collected, used, or shared — h89apk will notify affected Members via their registered email address at least 14 calendar days before the revised Policy takes effect. Continued use of the Platform following the effective date of an updated Policy constitutes acceptance of the amended terms.

Members who do not accept an amended Privacy Policy should cease using the Platform and contact support to request account closure before the effective date of the amendment.

14. Contact

For any questions, concerns, or requests relating to this Privacy Policy or to your Personal Data, please contact h89apk through the following channels:

• Live Chat: Available 24/7 via the h89apk platform. Staffed by native Indonesian-speaking agents around the clock. Average first-response time is under two minutes. Live chat is the fastest channel for urgent data-related concerns.
• Email: [email protected] — please include "Privacy Request" or "Data Subject Request" in the subject line, along with your registered username or Account ID, to allow prompt routing to the appropriate team. Non-urgent data requests are typically resolved within 30 calendar days.

h89apk will verify your identity before acting on any data access, rectification, erasure, or portability request to ensure that such requests are fulfilled only in favor of the legitimate account holder and not as a result of unauthorized third-party requests.

For complaints about h89apk's handling of your Personal Data that have not been resolved satisfactorily through the support process, you may have the right to lodge a complaint with the relevant data-protection supervisory authority in your jurisdiction.