haha178 Platform Privacy Notice

This page describes what we collect when you use haha178 and how we keep that data protected. Our privacy policy applies to every user account, whether you access haha178 from Jakarta, Surabaya, Bandung, Medan, Semarang, or another region where our service is available under local law. We collect personal information only to verify your identity, process your deposits and withdrawals via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet, and comply with anti-money-laundering regulations.

We do not sell or rent your data to third parties. We do not share your account details with marketing firms or data brokers. Our data processors—payment gateways, email services, and compliance partners—operate under strict confidentiality agreements and only access information necessary to fulfill their function. This notice explains the scope of our data collection, how long we retain it, and what rights you have.

Services are available only where local law permits. Your access and use must comply with your jurisdiction's regulations.

What Data We Collect at haha178

We collect your email address, full legal name, phone number, and date of birth when you register. These details are mandatory for account creation and KYC verification. We also record your IP address and device information (browser type, operating system) when you log in; this helps us detect unauthorized access and prevent account fraud.

We record every wager you place—match selections in Liga 1 or Piala AFF, live-dealer game rounds, slot spins, and esports bets. This data helps us calculate your tier progression, referral commissions, and cashback eligibility. We also store your withdrawal history, including the method used, amount, and processing date.

We collect your proof of identity (national ID, passport) and proof of address (utility bill, bank statement) during KYC verification. These documents are scanned and stored in encrypted form; originals are not required. We retain identity documents for the duration of your account plus a compliance-mandated retention window.

How We Use Your Data

We use your email to send account notifications—login alerts, deposit confirmations, withdrawal status updates, and promotional offers (if you opted in). Your phone number is used for optional SMS notifications and account recovery. Your legal name and date of birth are required for KYC compliance and are shared only with our compliance partner for verification purposes.

Payment data is used exclusively to process your deposits and withdrawals. We do not use your payment method for any purpose beyond transaction processing. Your wager history is used to calculate tier progression, referral commissions, weekly cashback, and tournament eligibility. We analyze aggregate betting patterns (not individual bets) to improve game selection and identify potential system abuse.

IP address and device logs are used for account security—detecting login from unusual locations, preventing credential-stuffing attacks, and identifying duplicate accounts. We retain these logs for up to 90 days for security audits. Identity documents are retained for the account lifetime plus two years after closure, as required by anti-money-laundering law.

Third-Party Processors and Data Sharing

We work with specialized vendors to deliver our service. Payment processors handle mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, and bank transfer routing; they receive payment details only. Email service providers send our notifications; they receive your email address and message content. KYC verification partners receive your name, date of birth, and scanned identity documents to confirm your identity against public records.

All third-party processors sign Data Processing Addendums (DPAs) committing to confidentiality and security standards matching our own. None of them are permitted to use your data for their own marketing purposes. We do not share your wager history, betting preferences, or account balance with any external party.

We may disclose data to legal authorities if required by law—for example, if a court issues a subpoena or if we detect money-laundering activity. These disclosures are rare and made only after legal review. We do not voluntarily report user data to tax authorities or immigration agencies.

Cookies and Tracking

We use cookies to maintain your login session and remember your account preferences (language, theme, notification settings). These are essential cookies required for the platform to function. We do not use tracking cookies for behavioural advertising or third-party analytics. We do not allow Google Analytics, Facebook Pixel, or similar tracking services on haha178.

You can disable non-essential cookies in your browser settings without affecting core functionality. However, session cookies are necessary; disabling them will log you out.

Data Retention and Account Closure

We retain your account data for the duration of your active account. If you close your account, we retain personal information for two years to comply with anti-money-laundering record-keeping rules. After two years, we delete your email, phone number, and payment history. Identity documents are retained for the full two-year window, then securely destroyed.

We do not delete wager history entirely; we retain aggregate statistics (total wagered, total paid out, tier progression milestones) to fulfill regulatory reporting obligations. However, this aggregate data is anonymized and cannot be linked to your identity.

If you request account deletion before the two-year window ends, we will close your account immediately but cannot delete data required by law. We will confirm the closure date and the expected deletion date when you submit the request.

Security Measures

We encrypt all data in transit using SSL/TLS protocols. Your login credentials are hashed and salted; we do not store plaintext passwords. Databases are encrypted at rest and accessible only to authorized staff via secure authentication. We conduct regular security audits and penetration testing to identify vulnerabilities. Our servers are located outside Indonesia and comply with international security standards.

Two-factor authentication is available on request for enhanced account security. We recommend enabling it if you maintain a large account balance or have experienced previous account compromise.

Contacting Us About Privacy

If you have questions about this privacy policy, wish to exercise your rights (access, correction, deletion), or suspect a data breach, contact our support team via in-app messaging or email. We respond to privacy inquiries within five business days. For data deletion requests, we may require additional verification to confirm you are the account holder.

This privacy notice is current as of its publication date and may be updated to reflect changes in our data practices or legal requirements. We will notify you of material changes via email. Continued use of haha178 after an update constitutes acceptance of the revised policy.