hepi8 Casino & Sportsbook Data Care

This page describes what data we collect when you use hepi8, how we use it, who has access to it, and what rights you have. We at hepi8 collect personal information during account creation, deposit, withdrawal, and gameplay—your email, identity documents, payment details, and transaction history. We keep this data protected under encryption and access controls; we share it only with payment processors, compliance partners, and law enforcement when legally required.

Our servers may sit outside your jurisdiction; your data travels internationally during processing. By using hepi8, you consent to this cross-border transfer. We do not sell your personal information to advertisers or third-party marketers. We do use cookies and analytics to improve our service and detect fraud. This policy is binding on both you and hepi8; if you disagree with any term, you must stop using our platform.

Our privacy practices reflect Indonesian data-protection principles and international standards. Read the sections below to understand what we collect, how we handle it, and how to contact us if you have concerns.

Data Collection on hepi8

What We Collect During Account Creation

When you open an account on hepi8, we collect your email address, password (hashed and salted, never stored in plain text), date of birth, and residential address. You must provide a government-issued photo ID (KTP, passport, or driver's license) and proof of residence (utility bill, bank statement, or rental agreement). We may request a selfie for identity verification. We also collect your chosen payment method(s) during deposit setup—for DANA, e-wallet, mobile banking, local payment, or online payment, we receive a reference ID and transaction logs from the payment processor; for bank transfers (e-wallet, mobile banking, local payment, online payment), we record your account number and bank name. We do not store full credit card numbers; payment processors handle card data under their own security standards.

What We Collect During Gameplay

We at hepi8 log every transaction, bet, and game outcome. For live-dealer tables, we record the dealer's name, table identifier, your position at the table, bet amount, cards dealt (or wheel outcome), and settlement amount. For slots, we log your spin start, RNG seed, result, and payout. For sportsbook bets, we record the match (e.g., Liga 1 round, Piala AFF semi-final), odds offered, your stake, settlement, and outcome. We also collect your IP address, device type (mobile / desktop), browser or app version, and general location (city-level, not GPS-precise). We track login times, account balance changes, and support interactions (chat transcripts, email).

What We Collect via Cookies and Analytics

Our hepi8 website and app use cookies to remember your login, language preference, and table favorites. We use analytics (Google Analytics or similar) to understand how players navigate our platform—which games are popular, which payment methods are most used, average session length. These cookies do not identify you personally; they track aggregate behavior. You can disable cookies in your browser settings, but this may impair hepi8 functionality (e.g., you will be logged out frequently). We do not use cookies for targeted advertising; we do not sell your behavioral data to advertisers.

How We Use Your Data on hepi8

For Account Management and Compliance

We use your personal information to create and maintain your hepi8 account, process deposits and withdrawals, verify your identity (KYC), and comply with financial regulations. We cross-check your name, ID number, and address against fraud databases and financial sanctions lists. If we detect a match, we may freeze your account and request additional verification. We also monitor for suspicious patterns—rapid account creation and large deposits, multiple withdrawals in short periods, use of different payment methods from different locations—which may trigger enhanced due diligence (asking for proof of funds source, employment verification, etc.).

For Fraud Prevention and Security

We at hepi8 use your login IP address, device fingerprint, and transaction history to detect unauthorized access. If we notice a login from an unusual location or multiple failed password attempts, we temporarily lock your account and send a verification request to your registered email. We analyze your betting patterns for suspicious behavior (e.g., always betting on the same outcome regardless of odds, using bots). We also use your data to prevent money laundering and terrorist financing—if we detect transactions consistent with these activities, we may freeze your account and report to authorities as required by law.

For Service Improvement

We analyze gameplay data to improve hepi8 services. We may study which games are popular (e.g., Aviator vs. Sweet Bonanza vs. Mahjong Ways), which payment methods process fastest (DANA vs. e-wallet transfer), and which table limits attract players. We review support tickets to identify recurring complaints and improve dealer training or software. We do not use this data to identify individuals; we aggregate it to spot trends. We may conduct surveys asking you to rate your experience; these are optional and unlinked to your identity.

Who We Share Your Data With

We share your data with the following parties:

• Payment processors: mobile banking, local payment, online payment, e-wallet, mobile banking, local payment networks, and your bank (online payment, e-wallet, mobile banking, local payment) receive your transaction details to process deposits and withdrawals.
• Our compliance partners: Third-party KYC and sanctions-screening vendors verify your identity.
• Live-dealer studios: If you play live tables, the dealer studio operator may see your nickname, table position, and bet (for gameplay purposes only).
• Law enforcement: If served with a legal warrant, court order, or government request, we disclose account information to authorities.
• Our service providers: Cloud hosting providers, email services, analytics platforms may process your data on our behalf under confidentiality agreements.

We do not sell your personal information to marketers, advertisers, or data brokers. We do not share your data with other gaming operators or affiliates for marketing purposes.

Data Retention on hepi8

We retain your account information as long as your account is active. After you close your account, we retain transaction records, login logs, and gameplay history for seven years (per Indonesian financial audit requirements). We then purge or anonymize the data. Identity documents (ID photos) are retained in encrypted form for two years post-closure, then deleted. If you request deletion before closure, we may deny the request if it violates financial regulations or an ongoing dispute resolution process.

Your Rights on hepi8

You have the right to:

• Access: Request a copy of all data we hold about you. We provide this within 14 days.
• Correction: Ask us to correct inaccurate personal information (e.g., misspelled name, wrong address).
• Deletion: Request deletion of your account and associated data, subject to legal holds or active disputes.
• Portability: Request your data in a machine-readable format (e.g., CSV) for transfer to another service.
• Opt-out: Unsubscribe from marketing emails and newsletters at any time.
• Lodge a complaint: Contact our privacy officer if you believe we mishandled your data.

To exercise these rights, email us at the address listed below. We respond within 30 days. Some requests may be delayed if they conflict with legal obligations or ongoing investigations.

Your data at hepi8 is protected by encryption, access controls, and regular security audits. We do not sell it, and we share it only as necessary for your gaming experience and legal compliance.

Cookies and Tracking Technology on hepi8

We use the following types of cookies:

• Essential cookies: Required for login, session management, and security. Cannot be disabled without breaking hepi8 functionality.
• Preference cookies: Remember your language, theme, and table favorites. Optional; you can delete them anytime.
• Analytics cookies: Track aggregate usage patterns (page views, bounce rate, time-on-page). Anonymized; not linked to your identity.
• Third-party cookies: Google Analytics may set cookies; review Google's privacy policy for details.

You can manage cookies in your browser settings. Most browsers allow you to disable all cookies or receive a warning before a cookie is set. Note: disabling essential cookies will log you out and impair your ability to use hepi8.

International Data Transfers

Our hepi8 servers are located outside Indonesia. Your data travels internationally during processing. By using hepi8, you consent to this transfer. We ensure that international transfers comply with data-protection principles (e.g., encryption, contractual safeguards with recipients). If you object to international transfer, you must not use hepi8.

Children and Age Verification

We at hepi8 do not knowingly collect data from minors. By creating an account, you confirm you are of legal age in your jurisdiction. If we discover that an account belongs to someone underage, we immediately suspend it and forfeit any balance. Parents or guardians who believe a minor has accessed hepi8 should contact us immediately; we will assist with account closure.

Policy Changes

We may update this privacy policy at any time. Changes take effect upon posting to this page. If we make material changes (e.g., we begin selling your data, we change our data retention period significantly), we will notify you via email. Continued use of hepi8 after an update constitutes acceptance of the revised policy.

Contact hepi8

If you have questions about our privacy practices or wish to exercise your rights, contact us:

• Email: [email protected]
• Mailing Address: hepi8 Privacy Officer, Jakarta, Indonesia (full address available upon request)
• Response time: 30 days for data access requests; 7 days for general inquiries

If you are unsatisfied with our response, you may lodge a complaint with your local data-protection authority or pursue legal remedies in your jurisdiction.