LEGAL REFERENCE

Your Data. Your Control. Our Commitment.

Q: How do I report a privacy concern?

Email our data protection team at privacy@hebohwin99.win or use the Privacy Concern form in your account settings. We investigate all reports within 48 hours and respond with findings and next steps.

We built hebohwin99 around your account security and privacy. Every deposit through DANA, OVO, GoPay or QRIS, every table session, every sportsbook bet — your information stays encrypted...

Data EncryptedQRIS ProtectedAccount SecurePayment SafeYour Privacy First

Account access Read FAQ

Privacy Policy – What We Collect & Why

When you open an account with hebohwin99, we collect your name, email, phone number and payment details to verify your identity and process transactions through DANA, OVO, GoPay and QRIS. We also track your gameplay, session history and account activity to detect fraud, improve your experience and comply with local regulations in supported regions. Your data is stored on secure servers and

shared only with payment processors and regulatory bodies where required by law. We do not sell your personal information to third parties.

Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.

HELP CHANNELS

Privacy Questions? Reach Out.

Email Support Send privacy concerns to our data protection team. We respond within 48 hours with clarification on how your information is handled and stored.

Account Settings Update your personal details, communication preferences and data sharing settings directly from your account dashboard anytime.

Legal Requests If you need to request, correct or delete your data, contact our compliance officer through the support portal with your account details.

EDITORIAL CLARITY

Privacy Standards We Follow

Encryption Standard

All account data and payment information use TLS 1.2+ encryption. Your DANA, OVO, GoPay and QRIS transactions are protected end-to-end.

Fraud Detection

We monitor account activity 24/7 to spot unusual login patterns, duplicate accounts and suspicious transactions before they affect your balance.

Payment Compliance

Our payment processors for DANA, OVO, GoPay and QRIS meet Indonesia's financial data protection standards and PCI DSS requirements.

Data Retention

We keep your account data for the duration of your membership plus 7 years for regulatory compliance, then securely delete it.

Third-Party Access

We share data only with payment partners, fraud prevention services and authorities where local law requires it in supported regions.

Policy Updates

When we update this privacy policy, we notify you via email and in-app message. Your continued use means you accept the new terms.

How Our Privacy Approach Stands

Transparent Data Use	We tell you exactly what we collect and why — no hidden clauses or surprise data sharing with unrelated third parties.
Indonesia-First Payment Security	DANA, OVO, GoPay and QRIS integrations are built with local compliance in mind, not retrofitted from global templates.
No Data Selling	Your account history, betting patterns and personal details are never sold to advertisers, brokers or marketing firms.
Fast Data Requests	Request a copy of your data, correct errors or ask for deletion — we process these within 14 days, not months.
Fraud Prevention First	We monitor your account for suspicious activity and alert you immediately if we detect unauthorized access attempts.
Secure Session Handling	Your login tokens expire after inactivity, and we auto-logout on mobile if you switch apps, keeping your account locked down.
Compliance Audits	Our privacy practices are reviewed quarterly by independent auditors to ensure we meet Indonesia's data protection standards.

What Protects Your Account

Two-Factor Authentication

Enable 2FA on your account to require a second verification step when logging in from a new device or location.

Session Timeout

Your session automatically ends after 30 minutes of inactivity. Log back in to resume — this keeps your account safe if you step away.

Payment Verification

Every DANA, OVO, GoPay and QRIS transaction requires confirmation from your registered phone number or email before it processes.

Account Recovery

If you lose access, we verify your identity through email and phone before resetting your password or restoring your account.

Withdrawal Limits

We cap daily withdrawals and flag large transfers for manual review to prevent unauthorized account drains.

Secure Password Storage

Your password is hashed and salted — we never store it in plain text and cannot see it even if our servers were compromised.

Privacy Policy – Frequently Asked

We retain your account information for as long as your membership is active, plus 7 years for regulatory compliance. After that, we securely delete it. You can request deletion anytime through your account settings.

Yes. Go to Account Settings, select Privacy & Data, and click Export My Data. We'll email you a complete file of your personal information, transaction history and account activity within 14 days.

We share data only with payment processors (DANA, OVO, GoPay, QRIS partners), fraud prevention services and regulatory authorities where local law requires it. We never sell your data to advertisers or marketing firms.

Yes. All payment details are encrypted with TLS 1.2+ and stored on PCI DSS-compliant servers. Your payment processor handles the actual transaction — we never see your full card or wallet credentials.

Your account is deactivated immediately and your login credentials stop working. We retain anonymized transaction records for 7 years for tax and regulatory purposes, but your personal details are flagged for deletion.

Email our data protection team at [email protected] or use the Privacy Concern form in your account settings. We investigate all reports within 48 hours and respond with findings and next steps.

We use cookies to keep you logged in, remember your preferences and detect fraud. We do not use tracking pixels to follow you across other websites. You can disable non-essential cookies in your browser settings anytime.