haka4 Privacy Policy

1.1 The data controller responsible for the personal data collected through haka4.bet is haka4 (hereinafter "haka4", "we", "us", or "our"). haka4 operates as an internationally licensed online sportsbook and casino platform, providing betting and gaming services to players, with a primary focus on the Indonesian market.

1.2 As data controller, haka4 determines the purposes and means by which your personal data is processed. This Privacy Policy applies to all personal data collected through your use of the haka4.bet website, its mobile web interface, customer support channels, and all related services and communications.

1.3 If you have any questions about how your data is handled, or wish to exercise any of your data rights described in Section 10, you may contact our Data Protection contact point at [email protected].

2.1 haka4 collects the following categories of personal data from members and visitors:

2.2 We do not collect any special category data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) except where strictly required by our responsible gaming obligations — for example, recording a self-exclusion request or a problem-gambling flag raised during account review.

2.3 We do not collect or store full payment card numbers. Any card detail processing is handled exclusively by our PCI-DSS-compliant third-party payment processors, and haka4 only receives a tokenised reference.

2.4 Providing the mandatory data categories listed above is a condition of using haka4's services. If you choose not to provide this data, you will not be able to open an account, place bets, or process withdrawals.

2.5 We may also collect publicly available data about you from identity verification bureaus and fraud prevention databases as part of our KYC and anti-money-laundering (AML) compliance programme.

3.1 Directly from you: When you register an account on haka4.bet, complete your KYC verification, make a deposit or withdrawal, contact our support team, or participate in a promotion, you provide us with personal data directly. This is the primary source of your identity, contact, and financial data.

3.2 Automatically from your device: When you visit haka4.bet, our servers automatically record technical data including your IP address, browser type, referring URL, pages viewed, and actions taken on the site. This data is collected via server logs, cookies, and similar tracking technologies described in Section 9.

3.3 From third-party sources: haka4 receives data from the following third-party sources as part of its compliance and operational obligations:

• Identity verification providers and KYC bureaus (to cross-check the identity documents you submit)
• Fraud prevention and AML screening databases (to detect and prevent financial crime)
• Payment processors and banking partners (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay) — confirmation of transaction status
• Analytics providers (aggregated, anonymised usage statistics to improve the platform)

3.4 haka4 does not purchase personal data lists from data brokers or marketing companies. Any third-party data we receive is limited to what is necessary for the specific purposes described in Section 4.

4.1 Account management: To create and maintain your haka4 member account, authenticate your identity at login, and manage your account preferences and security settings.

4.2 Service delivery: To process your bets on sports markets (including BRI Liga 1, EPL, La Liga, Champions League, and other competitions), operate your access to slot games, live casino tables, and togel (Indonesia's traditional numbers lottery) markets, and credit winnings to your account balance.

4.3 Payment processing: To initiate and confirm deposits and withdrawals in Indonesian Rupiah (IDR) via your chosen local bank or e-wallet, and to maintain accurate financial records of all transactions.

4.4 KYC and regulatory compliance: To verify your identity, age (21+), and residency as required under our international gaming licence, and to fulfil our anti-money-laundering (AML) and know-your-customer (KYC) obligations.

4.5 Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, duplicate account creation, unauthorised access, match-fixing involvement, and money laundering.

4.6 Responsible gaming: To monitor betting patterns for signs of problem gambling, apply self-exclusion requests, and communicate with members who have activated deposit limits, session time reminders, or cooling-off periods. See our Responsible Gaming page for full details.

4.7 Personalisation and promotions: To offer personalised game recommendations, display relevant promotions (including seasonal offers tied to Idul Fitri, Ramadhan, and Indonesian Independence Day), and send you account-related communications. Marketing communications are sent only where you have consented or where we have a legitimate interest, and you may opt out at any time.

4.8 Platform improvement: To analyse aggregated, anonymised usage data to improve the haka4 platform, fix bugs, optimise performance, and develop new features for Indonesia's players.

5.1 Contractual necessity: The majority of the data processing described in Clauses 4.1 through 4.4 is necessary for the performance of the contract between haka4 and you as a member — i.e., to provide the betting and gaming services you have signed up to use.

5.2 Legal obligation: Processing for KYC verification, AML screening, and fraud reporting is carried out to comply with haka4's obligations under its international gaming licence and applicable financial crime prevention regulations.

5.3 Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregated analytics is carried out on the basis of haka4's legitimate interests in operating a safe, fair, and commercially viable platform — provided those interests are not overridden by your privacy rights.

5.4 Consent: Where haka4 sends you direct marketing communications or places non-essential cookies, it does so on the basis of your consent, which you may withdraw at any time by contacting [email protected] or adjusting your browser cookie settings.

5.5 Vital interests: In exceptional circumstances — specifically where processing is necessary to protect the vital interests of a person in a problem-gambling or harm-related context — haka4 may process relevant data on the basis of vital interests.

6.1 haka4 may share your personal data with the following categories of recipient, strictly to the extent necessary for the stated purpose:

• Payment processors and banking partners — BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI, OVO, DANA, GoPay, ShopeePay, and LinkAja — for the purpose of processing your deposits and withdrawals in IDR.
• KYC and identity verification providers — third-party bureaus that cross-reference identity documents and screen against sanctions, politically exposed person (PEP), and AML databases.
• Game content providers — studios including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft receive only the minimum session data required to operate their games securely within the haka4 platform.
• IT and infrastructure providers — cloud hosting, content delivery, and platform security vendors operating under strict data processing agreements with haka4.
• Regulatory and law enforcement authorities — where haka4 is required by law, court order, or licensing conditions to disclose data to a competent authority.
• Professional advisors — legal counsel, auditors, and insurance providers, subject to professional confidentiality obligations.

6.2 All third-party service providers with whom haka4 shares personal data are contractually required to process that data only as directed by haka4, to maintain appropriate security standards, and not to use your data for their own commercial purposes.

6.3 haka4 does not share your data with third-party advertisers, affiliate marketing networks, or social media platforms for the purpose of targeting advertising at you on other websites or apps.

6.4 In the event of a corporate restructuring, merger, acquisition, or sale of all or part of haka4's assets, your personal data may be transferred to the acquiring entity, provided that entity agrees to honour this Privacy Policy or provides equivalent privacy protections.

6.5 Where personal data is transferred to recipients located outside Indonesia, haka4 ensures that appropriate contractual, technical, and organisational safeguards are in place to protect your data to a standard equivalent to that described in this Policy.

6.6 haka4 may share anonymised, aggregated statistical data (which cannot identify any individual) with research partners or publish it for marketing purposes — for example, "over 500,000 bets settled per month across BRI Liga 1 markets."

7.1 haka4 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or licensing obligations. The following indicative retention periods apply:

7.2 Where an account is closed by haka4 due to fraud, money laundering, or other serious terms violations, relevant data may be retained for a longer period as required for legal proceedings or regulatory reporting.

7.3 Self-exclusion records are retained indefinitely (or for a minimum of 5 years) to prevent re-registration by excluded individuals, in accordance with responsible gaming best practice.

7.4 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to any identifiable individual.

8.1 haka4 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption: All data transmitted between your browser and haka4.bet is encrypted using industry-standard TLS 1.2 or higher. Look for the padlock icon in your browser address bar.
• Data encryption at rest: Sensitive data fields — including KYC documents, financial data, and authentication credentials — are encrypted in our databases using AES-256 encryption.
• Access controls: Access to personal data is restricted to haka4 employees and contractors who have a legitimate need for that data to perform their role. All access is role-based, logged, and subject to regular review.
• Two-factor authentication: Internal systems handling personal data require multi-factor authentication for all staff access points.
• Penetration testing and vulnerability scanning: haka4's platform is subject to regular third-party security assessments to identify and remediate vulnerabilities.
• Incident response plan: haka4 maintains a documented data breach response procedure. In the event of a breach affecting your personal data, we will notify you and the relevant authorities as required by applicable law.

8.2 While haka4 takes all reasonable precautions, no data transmission over the internet or electronic storage system can be guaranteed as 100% secure. You use haka4.bet at your own risk, and you are responsible for keeping your account credentials confidential.

8.3 If you suspect your haka4 account has been compromised, contact our support team immediately at [email protected]. We recommend enabling SMS-based two-factor authentication from your account security settings to significantly reduce the risk of unauthorised access.

8.4 haka4 employees will never ask you for your password, PIN, or two-factor authentication codes via any channel — including email, live chat, or phone.

8.5 Payment data is handled exclusively through our PCI-DSS-compliant banking and e-wallet partners. haka4 does not store complete bank account numbers or full card data on its own servers.

9.1 haka4.bet uses cookies and similar tracking technologies (including web beacons and local storage) to operate the platform, remember your preferences, maintain your logged-in session, and analyse how members use the site.

9.2 The following categories of cookie are used on haka4.bet:

9.3 Strictly necessary cookies are deployed without consent as they are essential for the platform to function. All other cookie categories are deployed only with your consent, which is collected at first visit.

9.4 You may withdraw consent for non-essential cookies at any time by adjusting your browser settings to block or delete cookies. Please note that disabling certain cookies may affect the functionality of haka4.bet — for example, your login session may not persist across pages if session cookies are blocked.

9.5 haka4 does not use cross-site tracking cookies or behavioural advertising cookies. Our analytics are conducted using first-party data only, and we do not participate in advertising networks that track your behaviour across unrelated websites.

10.1 Subject to applicable law and the limitations inherent in haka4's regulatory obligations, you hold the following rights in respect of your personal data:

• Right of Access: You may request a copy of the personal data haka4 holds about you.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data. Core identity changes (full name, date of birth) require supporting documentation.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention requirements (see Section 7).
• Right to Restriction: You may request that we restrict processing of your data in certain circumstances — for example, while the accuracy of data is contested.
• Right to Data Portability: You may request that we provide your personal data to you in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including profiling for responsible gaming monitoring, where you have grounds specific to your situation.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

10.2 To exercise any of these rights, please submit a written request to [email protected], including your account username and the specific right you wish to exercise. We will respond within 30 days of receipt.

10.3 Please note that certain rights are limited where haka4's processing is necessary to comply with a legal obligation (such as AML record-keeping) or to exercise or defend legal claims. In such cases, we will explain the applicable limitation in our response.

10.4 haka4 may require identity verification before fulfilling a data rights request, to ensure that data is not disclosed to an unauthorised party.

10.5 There is no charge for exercising your data rights in most circumstances. However, haka4 reserves the right to charge a reasonable administrative fee for manifestly unfounded or excessive requests.

10.6 If you are not satisfied with haka4's response to your data rights request, you may escalate your complaint to the relevant data protection authority in your jurisdiction.

10.7 You may opt out of marketing communications at any time by clicking the unsubscribe link in any marketing email or by contacting [email protected]. Opting out of marketing does not affect transactional communications relating to your account (such as deposit confirmations and withdrawal notifications).

10.8 For responsible gaming data specifically — such as self-exclusion records and deposit limit settings — some rights are restricted to ensure that protective measures cannot be circumvented. Permanent self-exclusion records, for example, are not subject to erasure requests.

11.1 haka4's services are strictly for adults aged 21 and above. haka4.bet is not directed at, and does not knowingly collect personal data from, persons under the age of 21. Persons under 21 are prohibited from registering an account or using any of haka4's betting or gaming services.

11.2 haka4 employs age verification as a mandatory step of the KYC process. If haka4 becomes aware that personal data has been collected from a person under the age of 21, that data will be deleted and the associated account will be closed immediately, with any deposited funds returned to the originating payment source.

11.3 If you are a parent or guardian and believe that a minor in your care has registered with haka4, please contact us immediately at [email protected]. We take this matter seriously and will act without delay.

12.1 haka4.bet may contain references to third-party services — including game studios such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft — whose software runs within an embedded frame on our platform. While these studios operate within haka4's environment under contractual obligations, their own privacy policies govern any data they independently collect.

12.2 haka4 is not responsible for the privacy practices of any third-party website, application, or service that is not directly operated by haka4. If you navigate away from haka4.bet to an external website, we strongly encourage you to review the privacy policy of that site before submitting any personal information.

12.3 Any links to third-party platforms present on haka4.bet are provided solely for your convenience. Their inclusion does not constitute an endorsement by haka4 of those platforms or their privacy and security practices.

13.1 haka4 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, platform features, applicable law, or regulatory requirements. The "Last Updated" date at the top of this page will be revised whenever a material change is made.

13.2 Where a change is material — meaning it significantly affects how we use your personal data or reduces your rights — haka4 will notify active account holders via email or through a prominent notice on the platform at least 14 days before the change takes effect. Your continued use of haka4.bet after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms.

13.3 We encourage you to review this Privacy Policy periodically to stay informed about how haka4 protects your information. Previous versions of this Policy are available on request by contacting [email protected].

14.1 For any questions, concerns, or requests relating to this Privacy Policy or the way haka4 handles your personal data, please contact our support team:

• Email: [email protected] (plain text — not a clickable link)
• Subject line: "Privacy Enquiry" or "Data Rights Request"
• Response time: We aim to acknowledge all privacy-related enquiries within 3 business days (WIB, UTC+7) and provide a full response within 30 days.

14.2 If you are not satisfied with the resolution provided by haka4, you have the right to escalate your complaint to the relevant data protection authority or gaming regulator in your jurisdiction. haka4 will cooperate fully with any such investigation.

14.3 haka4 is committed to resolving all privacy complaints fairly and promptly. We treat every data concern with the same seriousness as a security incident, and all complaints are escalated to our compliance team for review.