At hgo99, your privacy is not an afterthought — it is built into everything we do. This Privacy Policy explains exactly what personal data we collect from Indonesian players, why we collect it, how it is stored and protected, and what rights you hold over your own information. We encourage you to read this document in full before registering an account.
These six cards summarise how hgo99 approaches player data. They complement — but do not replace — the full legal text further down this page.
Every byte of data exchanged between your browser and the hgo99 platform travels over a TLS-encrypted connection. This protects your account credentials, payment details, and personal information from interception at the network level.
hgo99 does not sell, rent, or trade your personal information to third-party marketers under any circumstances. Your data is used solely to operate the platform, verify your identity, process payments, and comply with our licensing obligations.
We collect only the personal data that is strictly necessary for the purpose for which it is gathered. If a piece of information is not needed to deliver our services, verify your identity, or fulfil a legal obligation, we do not ask for it.
You have the right to request a copy of the personal data hgo99 holds about you, to correct any inaccurate information, and — subject to legal retention obligations — to request deletion of your data when you close your account. Requests can be submitted to [email protected].
hgo99 does not store payment card numbers on its own servers. All payment processing — including bank transfers via BCA, BRI, BNI, and Mandiri, and e-wallet transactions via OVO, DANA, GoPay, ShopeePay, and LinkAja — is handled by PCI-DSS-compliant third-party payment processors operating under strict data security standards.
hgo99 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by our licensing authority and applicable law. Account records are retained for a minimum of five years following account closure to satisfy anti-money-laundering and KYC audit requirements.
hgo99 serves players across Indonesia — from Jakarta and Surabaya to Medan, Bandung, Bali, and Yogyakarta — and we take our responsibility to protect your personal information seriously. Indonesian players who register on our platform share sensitive data including their national identity details (KTP), banking information, and transaction history. This Privacy Policy establishes a transparent, enforceable framework for how that data is handled.
This policy applies to all information collected through the hgo99 website at hgo99.vu, including via desktop browsers, mobile browsers, and any related platform interfaces. It covers data collected directly from you during registration and gameplay, data collected automatically through our systems, and data received from third-party service providers such as our KYC verification partners and payment processors.
By creating an account and using the hgo99 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this policy, you should not register an account or continue to use the platform.
In this Privacy Policy, the following terms carry the meanings defined below. Capitalised terms used but not defined here carry the meanings given to them in the hgo99 Terms & Conditions.
2.1 Registration Data. When you create an account on the hgo99 platform, we collect the following information directly from you:
2.2 KYC Verification Data. To comply with our licensing obligations and anti-money-laundering requirements, we collect the following documents and data points during the identity verification process:
2.3 Transactional Data. hgo99 automatically records all financial and gaming activity associated with your account, including:
2.4 Technical Data. When you access the Platform, our systems automatically collect technical information about your device and connection:
2.5 Communications Data. If you contact hgo99 support, submit a complaint, or interact with our customer service team, we retain records of those communications including email correspondence, live chat transcripts, and any documents you attach.
3.1 Directly from You. The majority of the Personal Data hgo99 holds about you is provided directly by you — during the account registration process, during KYC document submission, when you update your account profile, when you contact customer support, or when you respond to a survey or promotional offer.
3.2 Automatically. Technical Data (Section 2.4) is collected automatically through server logs, session management systems, and first-party cookies placed on your device when you visit the Platform. This data collection begins when you first load any page on hgo99.vu, whether or not you are a registered member.
3.3 From Third Parties. hgo99 may receive Personal Data about you from authorised third-party service providers, including:
hgo99 processes your Personal Data on one or more of the following lawful bases, depending on the specific Processing activity involved:
| Processing Purpose | Lawful Basis |
|---|---|
| Account registration and ongoing account management | Performance of a contract — necessary to provide the services you have requested |
| KYC identity and age verification | Legal obligation — required by our international gaming license and anti-money-laundering compliance framework |
| Processing deposits and withdrawals via Indonesian banks and e-wallets | Performance of a contract — necessary to execute financial transactions on your behalf |
| Fraud detection and security monitoring | Legitimate interests — protecting the platform and its members from fraudulent activity and financial crime |
| Sending transactional communications (account alerts, withdrawal confirmations, security notifications) | Performance of a contract — necessary to keep you informed of activity on your account |
| Sending promotional communications about bonuses, events, and seasonal promotions (e.g., Idul Fitri, Ramadhan offers) | Consent — you may opt out at any time from your account notification settings or by emailing [email protected] |
| Responsible gaming monitoring and self-exclusion enforcement | Legitimate interests and legal obligation — player protection mandated by our licensing authority |
| Record retention following account closure | Legal obligation — anti-money-laundering and audit record-keeping requirements |
5.1 Service Delivery. The primary use of your Personal Data is to deliver the hgo99 platform services to you — opening and managing your account, accepting bets and game wagers, crediting winnings, processing deposits via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, or LinkAja, and processing withdrawal requests to your verified Indonesian bank account or e-wallet.
5.2 Identity Verification. We use your KYC data to verify that you are who you claim to be, that you are at least 21 years of age, that you are a resident of Indonesia, and that the payment accounts linked to your profile belong to you personally. This verification is mandatory before any withdrawal is processed.
5.3 Security and Fraud Prevention. hgo99 analyses transactional patterns, IP address data, and device fingerprint information to detect and prevent fraudulent activity, including the creation of duplicate accounts, unauthorised account access, bonus abuse, and potential money-laundering activity. Accounts flagged by our automated systems are reviewed by our compliance team.
5.4 Responsible Gaming. We use your betting history, session data, and self-declared information to monitor for indicators of problem gambling behaviour. Where our responsible gaming algorithms flag a concern, our player protection team may reach out proactively to offer support tools, including deposit limits, cooling-off periods, and self-exclusion options.
5.5 Platform Improvement. Anonymised and aggregated technical data — such as page performance metrics, feature usage rates, and error logs — is used to improve the hgo99 platform experience. This data is not linked back to individual player profiles.
5.6 Marketing Communications. With your consent, we may send you personalised promotional emails and notifications about new bonuses, upcoming sports events (BRI Liga 1, EPL, Champions League), seasonal offers tied to Idul Fitri, Ramadhan, or Indonesian Independence Day (17 August), and new game launches from providers such as Pragmatic Play, Evolution Gaming, and PG Soft. You may withdraw consent for marketing communications at any time.
5.7 Legal and Regulatory Compliance. hgo99 may use your Personal Data to respond to requests from law enforcement authorities, regulatory bodies, or our licensing authority where required by law, or to establish, exercise, or defend legal claims.
6.1 Service Providers. hgo99 shares Personal Data with carefully selected third-party Data Processors who assist in the delivery of the platform services. These include:
All third-party Data Processors engaged by hgo99 are bound by contractual data processing agreements that require them to process your data only on hgo99's documented instructions, to maintain appropriate technical and organisational security measures, and to delete or return data when the processing engagement concludes.
6.2 Regulatory and Legal Disclosure. hgo99 may disclose your Personal Data to governmental authorities, law enforcement agencies, tax authorities, or our licensing regulator when required to do so by law, by court order, or by the terms of our operating license. Such disclosures will be limited to the minimum data necessary to comply with the applicable legal requirement.
6.3 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of all or a material part of hgo99's business assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material change to this Privacy Policy that results from it, with at least 30 days' advance notice.
7.1 Encryption in Transit. All data transmitted between your device and the hgo99 platform is encrypted using Transport Layer Security (TLS 1.2 or higher) with 256-bit AES encryption. Our SSL certificate is maintained and renewed continuously to ensure there is no gap in encrypted communication coverage.
7.2 Encryption at Rest. Sensitive Personal Data stored on hgo99's servers — including identity document data, KYC records, and financial account information — is encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the encrypted data and rotated on a scheduled basis.
7.3 Password Security. Account passwords are never stored in plaintext. hgo99 uses bcrypt hashing with unique per-account cryptographic salts, ensuring that even in the event of a data breach, raw password values cannot be recovered from stored hashes.
7.4 Access Controls. Access to Personal Data within hgo99's internal systems is governed by a strict role-based access control (RBAC) policy. Only staff members with a documented operational need to access specific data categories are granted access. All internal access to Personal Data is logged and subject to periodic audit.
7.5 Two-Factor Authentication. hgo99 supports SMS OTP-based two-factor authentication (2FA) for all registered member accounts. We strongly recommend enabling 2FA from your Account Settings immediately after registration to provide an additional layer of protection against unauthorised access.
7.6 Incident Response. hgo99 maintains a documented data breach incident response plan. In the event of a confirmed data breach that is likely to result in risk to your rights and freedoms, hgo99 will notify affected members and the relevant supervisory authority within 72 hours of becoming aware of the breach, in accordance with applicable data protection regulations.
8.1 Active Accounts. While your account remains open and active, hgo99 retains all Personal Data associated with your account, including registration data, KYC documents, transactional records, and communications history. This data is necessary for the continued operation of your account and for compliance monitoring.
8.2 Following Account Closure. When your account is closed — whether at your request or by hgo99 — hgo99 retains your Personal Data for a minimum period of five (5) years from the date of closure. This retention period is mandated by our licensing authority and is necessary to satisfy anti-money-laundering (AML) record-keeping obligations, to respond to regulatory audit requests, and to defend or establish legal claims arising from your use of the platform.
8.3 Specific Retention Periods.
| Data Category | Retention Period |
|---|---|
| Account registration data (name, email, date of birth, NIK) | Duration of account + 5 years post-closure |
| KYC identity documents (KTP copy, passport copy, proof of address) | Duration of account + 5 years post-closure |
| Financial transaction records (deposits, withdrawals, bet settlements) | Duration of account + 5 years post-closure |
| Customer support communications | 3 years from the date of the communication |
| Technical/session logs (IP address, device data, clickstream) | 13 months from collection date |
| Marketing consent records | Duration of consent + 3 years post-withdrawal of consent |
| Responsible gaming self-exclusion records | Duration of exclusion + 7 years post-expiry |
8.4 Deletion. Upon expiry of the applicable retention period, hgo99 will securely delete or anonymise your Personal Data so that it can no longer be attributed to you. Anonymised, aggregated statistical data derived from your account activity may be retained indefinitely for analytical purposes, but this data cannot be used to identify you.
9.1 What Are Cookies. Cookies are small text files placed on your device by a website when you visit it. hgo99 uses first-party cookies — cookies set directly by hgo99.vu — to operate the platform. We do not use third-party advertising cookies or cross-site tracking technologies.
9.2 Types of Cookies We Use.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Session management, authentication tokens, CSRF protection, load balancing. These cookies are essential to operate the platform and cannot be disabled. | Session / up to 24 hours |
| Functional | Remembering your language preference (English), display settings, and last-visited game category so the platform loads your preferred view on return visits. | Up to 90 days |
| Analytics | Anonymised page view data, feature interaction rates, and error logging used to improve platform performance. No personally identifiable information is stored in analytics cookies. | Up to 13 months |
9.3 Managing Cookies. You may configure your browser to block or delete cookies at any time. However, disabling strictly necessary cookies will prevent the hgo99 platform from functioning correctly — you will not be able to log in or maintain an authenticated session without them. Instructions for managing cookies are available in the help documentation of your browser (Chrome, Firefox, Safari, Edge, or Samsung Internet for Android devices commonly used across Indonesia).
hgo99 respects your rights over your own Personal Data. The following rights are available to you as a registered member or as a visitor to the hgo99 platform:
10.1 Right of Access. You have the right to request a copy of all Personal Data that hgo99 holds about you. We will provide this in a structured, commonly used, machine-readable format within 30 days of receiving a verified request. Submit access requests to [email protected] with the subject line "DATA ACCESS REQUEST" and include your registered username and email address.
10.2 Right to Rectification. If any Personal Data hgo99 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For account profile data (email address, phone number, bank account details), you may update these directly in your Account Settings. For KYC data, please contact [email protected] with supporting documentation.
10.3 Right to Erasure. You may request deletion of your Personal Data where: the data is no longer necessary for the purpose for which it was collected; you withdraw consent and there is no other lawful basis for processing; or the data has been unlawfully processed. This right is subject to hgo99's legal obligation to retain certain records for a minimum of five years following account closure (see Section 8.2). We cannot delete data that we are legally required to retain.
10.4 Right to Restrict Processing. You have the right to request that hgo99 restrict the processing of your Personal Data in certain circumstances — for example, while the accuracy of data you have contested is being verified, or while an objection to processing based on legitimate interests is being assessed.
10.5 Right to Data Portability. Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used format and to transmit it to another service provider of your choice.
10.6 Right to Object. You have the right to object at any time to the processing of your Personal Data for direct marketing purposes, including profiling for marketing. If you object to marketing processing, hgo99 will cease such processing immediately. You also have the right to object to processing based on hgo99's legitimate interests; in such cases, hgo99 will assess whether its legitimate interests override your objection.
10.7 Right to Withdraw Consent. Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. To withdraw consent for marketing communications, use the unsubscribe link in any marketing email, adjust your notification preferences in Account Settings, or email [email protected].
11.1 Age Requirement. The hgo99 platform is strictly for adults aged 21 years and older. We do not knowingly collect Personal Data from, or provide services to, individuals under the age of 21. This age restriction aligns with responsible gaming standards applicable to the Indonesian market.
11.2 Age Verification at Registration. All new account registrations are subject to mandatory age verification. You are required to declare your date of birth during registration. Prior to your first withdrawal, and in any case within 30 days of account opening, you must submit a valid government-issued identity document (KTP or passport) that confirms you are at least 21 years of age.
11.3 Discovery of Underage Account. If hgo99 discovers or has reasonable grounds to believe that an account has been registered by an individual under the age of 21, we will immediately suspend the account, conduct an urgent identity review, and — if the suspicion is confirmed — permanently close the account. Any real-money balance in the account will be retained pending investigation and may be forfeited in accordance with our Terms & Conditions. Any Personal Data collected in connection with an underage account will be deleted once the investigation is complete and no legal retention obligation applies.
11.4 Parental Controls. If you believe that a minor in your household has registered an account on the hgo99 platform, please contact our support team immediately at [email protected] with the subject line "UNDERAGE ACCOUNT REPORT". We will prioritise such reports and respond within 24 hours.
12.1 International Nature of Operations. hgo99 operates as an international offshore online gaming platform. As a result, your Personal Data may be transferred to and processed in countries other than Indonesia where hgo99's infrastructure, licensing authority, or third-party service providers are located.
12.2 Transfer Safeguards. Whenever your Personal Data is transferred outside of Indonesia to a jurisdiction that does not provide an equivalent level of data protection, hgo99 ensures that appropriate safeguards are in place. These safeguards include contractual clauses in data processing agreements that require receiving parties to protect your data to a standard at least equivalent to that required under hgo99's licensing framework.
12.3 Payment Processing. Cross-border data transfers in connection with payment processing — for example, where a payment processor routes a transaction through an international banking network — are strictly limited to the data necessary to execute and settle the specific transaction. Such transfers are subject to the PCI-DSS compliance obligations of the payment processor and the relevant banking network's data security standards.
12.4 Your Acceptance. By registering an account and using the hgo99 platform, you acknowledge that your Personal Data may be transferred internationally as described in this Section 12, and that you consent to such transfers as a necessary component of delivering the cross-border gaming services you have requested.
13.1 Right to Update. hgo99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, changes in our licensing obligations, or changes in the services we offer. The current version of this Privacy Policy is always accessible at hgo99.vu/privacy-policy and displays the effective date of the most recent revision at the top of the document.
13.2 Notification of Material Changes. Where a proposed amendment materially affects your rights or the way in which hgo99 processes your Personal Data, we will provide at least 14 days' advance notice by displaying a prominent notice on the Platform and by sending an email to your registered address. For minor clarifications or corrections that do not alter the substantive content of the policy, hgo99 may update the policy without prior notice.
13.3 Continued Use. Your continued use of the hgo99 platform following the effective date of any amendment to this Privacy Policy constitutes your acceptance of the revised policy. If you do not accept the revised policy, you must stop using the platform and may request account closure in accordance with Section 13 of the Terms & Conditions.
14.1 Privacy Queries. If you have any questions about this Privacy Policy, about the Personal Data hgo99 holds about you, or about exercising any of the rights described in Section 10, please contact our support team using the details below. Our Indonesian-speaking support agents are available 24 hours a day, 7 days a week, including on Indonesian public holidays such as Idul Fitri and Indonesian Independence Day (17 August).
14.2 Complaints. If you believe that hgo99 has not handled your Personal Data in accordance with this Privacy Policy or applicable data protection law, you have the right to raise a complaint. We ask that you first contact our support team at [email protected] so that we have the opportunity to investigate and address your concern directly. If you are not satisfied with our response, you may escalate your complaint to the relevant data protection supervisory authority or to the dispute resolution body designated by our licensing authority.
Please include your registered username, the email address linked to your account, and a clear description of your concern when contacting us. hgo99 will never ask for your account password, full payment card number, or full bank account number via any communication channel.
Now that you understand how hgo99 handles your data, you're ready to enjoy the full platform experience — from live sports betting on BRI Liga 1 and the EPL to slots, Live Roulette, and Domino QQ.