hit69 Privacy Policy

This Privacy Policy applies to all personal data processed by hit69 (referred to herein as "hit69", "we", "us", or "the Platform") in connection with the operation of the online gaming platform accessible at https://hit69.pro, including all associated pages, services, promotions, and customer support channels.

By registering an account on hit69 or by continuing to use the Platform following any update to this Privacy Policy, you acknowledge that you have read, understood, and consented to the collection and use of your personal data as described in this document. This Policy should be read in conjunction with the hit69 Terms & Conditions, which govern the overall relationship between hit69 and its members.

hit69 is committed to handling personal data with transparency, integrity, and proportionality. We apply the principles of data minimisation — collecting only what is genuinely necessary — and purpose limitation — using data only for the specific reasons stated at the point of collection.

For the purposes of this Privacy Policy, the following terms carry the meanings defined below:

• "Personal Data" — any information that identifies or could reasonably be used to identify a living individual, whether directly (e.g., full name, national ID number) or indirectly (e.g., IP address, device identifier combined with other data points).
• "Processing" — any operation performed on personal data, including collection, recording, storage, use, disclosure, transmission, erasure, and destruction.
• "Data Controller" — hit69, the entity that determines the purposes and means by which personal data is processed.
• "Data Subject" / "You" — the individual whose personal data is being processed; in the context of this Policy, any registered member or visitor to the hit69 Platform.
• "Third-Party Processor" — any external company or service provider engaged by hit69 to process personal data on hit69's behalf, under a data processing agreement that imposes obligations equivalent to those in this Policy.
• "KYC" — Know Your Customer; the identity verification process required to confirm a member's eligibility to use the Platform and comply with anti-money-laundering obligations.
• "Cookies" — small data files placed on your device by the hit69 Platform or by authorised third-party services, used to remember your preferences, maintain your session, and support analytical and security functions.

hit69 collects the following categories of personal data in the course of operating the Platform and providing services to Indonesian players:

hit69 does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly required for identity verification purposes.

Personal data is collected through the following channels and mechanisms:

• Direct Submission: Data you provide voluntarily when completing the registration form, submitting KYC documents, making deposit or withdrawal requests, completing promotional claim forms, or contacting customer support via live chat or email.
• Automated Collection: Technical and usage data collected automatically when you access the Platform, via server logs, session tracking, and analytics tools. This includes your IP address, device fingerprint, and browsing behaviour on the hit69 website.
• Third-Party Sources: In certain circumstances, hit69 may receive supplementary identity or fraud-risk data from third-party identity verification providers, payment processors, and fraud detection services engaged to support KYC compliance and transaction security.
• Cookies and Similar Technologies: Data collected via cookies, pixel tags, local storage objects, and similar tracking technologies deployed on the Platform. See Section 11 for full details.

hit69 processes personal data for the following specific, documented purposes:

1. Account Management: Creating, maintaining, and administering your hit69 member account, including authentication, password resets, and profile updates.
2. Service Delivery: Processing deposits and withdrawals via Indonesian payment channels (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and others), settling bets, crediting bonuses, and delivering the full range of hit69 gaming services.
3. KYC and Regulatory Compliance: Verifying your identity and age (21+) to comply with the Platform's licensing obligations and anti-money-laundering requirements. This includes screening against relevant sanctions and watch lists.
4. Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, bonus abuse, money laundering, and other prohibited conduct as defined in the hit69 Terms & Conditions.
5. Customer Support: Responding to support enquiries, resolving complaints, processing responsible gaming requests (such as self-exclusion and deposit limits), and maintaining a record of communications for quality assurance purposes.
6. Platform Improvement: Analysing aggregated usage patterns to improve the performance, design, and content of the hit69 Platform, and to develop new features and game offerings relevant to Indonesian players.
7. Marketing and Promotions: Sending promotional communications — including bonus offers, tournament announcements, and seasonal promotions aligned with Indonesian holidays such as Idul Fitri, Ramadhan, and Indonesian Independence Day — to members who have not opted out of marketing messages. You may withdraw marketing consent at any time via your account settings or by contacting support.
8. Legal Obligations: Retaining data to satisfy regulatory record-keeping requirements, respond to lawful requests from competent authorities, and enforce or defend legal claims.

hit69 relies on the following legal bases when processing your personal data:

• Contractual Necessity: Processing required to perform our contractual obligations to you under the hit69 Terms & Conditions — for example, processing your deposits and withdrawals, maintaining your account, and settling bets.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC identity verification, anti-money-laundering screening, and data retention mandated by our gaming licence.
• Legitimate Interests: Processing carried out in pursuit of hit69's legitimate business interests — including fraud prevention, platform security, and service improvement — where those interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — most notably for the receipt of marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

hit69 shares personal data with third parties only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment Processors: Your name, bank account details, and transaction amounts are shared with Indonesian payment processors and banking partners (including the relevant infrastructure behind BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, OVO, DANA, GoPay, ShopeePay, and LinkAja) solely for the purpose of processing deposits and withdrawals.
• Identity Verification Providers: Your identity documents and verification data may be shared with third-party KYC service providers engaged by hit69 to perform document authentication and identity checks.
• Game Software Providers: Certain gameplay data (such as Member ID, session tokens, and bet records) is shared with licensed game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — to the extent required to deliver their games within the hit69 Platform. These providers operate under their own data processing agreements with hit69 and are not permitted to use your data for independent purposes.
• Fraud & Risk Management Services: Technical data including IP addresses and device identifiers may be shared with specialised fraud detection services to identify and prevent fraudulent activity on the Platform.
• Legal and Regulatory Authorities: hit69 will disclose personal data to competent law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law or a valid legal order. Where legally permissible, hit69 will notify affected members of such disclosures.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of assets involving hit69, personal data held by the Platform may be transferred to the successor entity as part of that transaction, subject to equivalent privacy protections remaining in place.

hit69 operates a platform that serves Indonesian players from server infrastructure and with technology partners that may be located in jurisdictions outside Indonesia. Where personal data is transferred to a country that does not provide a level of data protection equivalent to the standards applied within Indonesia, hit69 implements appropriate safeguards to protect the data, including:

• Standard contractual clauses or equivalent binding data transfer agreements with the receiving party;
• Requiring the receiving party to implement technical and organisational security measures consistent with those applied by hit69; and
• Conducting transfer impact assessments where required to evaluate the risk to data subjects in the destination jurisdiction.

By using the hit69 Platform, you acknowledge that your personal data may be transferred, stored, and processed outside Indonesia as described in this section.

hit69 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following retention principles apply:

• Active Account Data: Personal and financial data associated with an active hit69 account is retained for the duration of the member's registration on the Platform.
• Post-Closure Retention: Following account closure — whether initiated by the member or by hit69 — identity, financial, and transaction data is retained for a minimum of five (5) years to satisfy anti-money-laundering record-keeping requirements and to support the resolution of any post-closure disputes or regulatory enquiries.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years from the date of submission, in line with standard financial services compliance practice.
• Support Communications: Live chat transcripts and email correspondence are retained for a minimum of three (3) years to support quality assurance, training, and dispute resolution.
• Marketing Data: Where consent to receive marketing communications is withdrawn, the relevant contact data is removed from active marketing lists within 30 days of the withdrawal request, although residual records may be retained in suppression lists to prevent unintentional re-contact.
• Technical Logs: Server logs and device data are retained for up to twelve (12) months for security monitoring and fraud investigation purposes, after which they are deleted or permanently anonymised.

hit69 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the hit69 Platform is encrypted in transit using industry-standard TLS protocols. The Platform is accessible exclusively via HTTPS.
• Encryption at Rest: Sensitive personal data — including identity documents, bank account details, and password hashes — is encrypted at rest within hit69's databases using AES-256 or equivalent encryption standards.
• Access Controls: Access to personal data within hit69's systems is restricted on a strict need-to-know basis. Staff members are granted the minimum level of access required to perform their role, and all access events are logged for audit purposes.
• Two-Factor Authentication: Members are strongly encouraged to enable two-factor authentication (2FA) on their hit69 accounts. hit69 support staff accounts that handle personal data are required to use 2FA.
• Penetration Testing & Vulnerability Management: The hit69 Platform undergoes regular security assessments, including vulnerability scanning and penetration testing, to identify and remediate potential weaknesses before they can be exploited.
• Incident Response: hit69 maintains a documented data breach response procedure. In the event of a security incident that poses a material risk to members' personal data, affected members will be notified without undue delay, and the incident will be reported to relevant authorities as required by applicable law.

The hit69 Platform uses cookies and similar tracking technologies to deliver a functional, personalised, and secure experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function correctly — including maintaining your login session, remembering your language and display preferences, and securing your account against session hijacking. These cookies cannot be disabled without impairing your ability to use the Platform.
• Performance & Analytics Cookies: Used to collect aggregated data about how members interact with the Platform — which pages are visited most frequently, how long members spend on each section, and where navigation errors occur. This data is used solely to improve Platform performance and is not used to identify individual members.
• Functionality Cookies: Enable enhanced features such as live chat pre-population, previously viewed game recommendations, and saved deposit method preferences.
• Security Cookies: Support fraud detection and bot-prevention systems by recording behavioural signals (such as mouse movement patterns and typing cadence) that help distinguish genuine members from automated scripts.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will affect your ability to access certain features of the Platform, including maintaining an authenticated session. hit69 does not currently respond to browser Do Not Track (DNT) signals, as no universally accepted standard for DNT compliance exists.

As a data subject, you hold the following rights in relation to your personal data processed by hit69. To exercise any of these rights, please contact the hit69 support team via live chat or email at [email protected]:

• Right of Access: You may request a copy of the personal data that hit69 holds about you, along with information about how it is being used and with whom it has been shared.
• Right to Rectification: You may request that inaccurate or incomplete personal data held by hit69 be corrected or updated. Note that changes to identity data may require re-submission of KYC documents.
• Right to Erasure: You may request that hit69 delete your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and no other legal basis for processing applies. This right is subject to overriding retention obligations under applicable law.
• Right to Restrict Processing: You may request that hit69 restrict the processing of your data in certain circumstances — for example, while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request that your data be provided to you in a structured, commonly used, machine-readable format.
• Right to Object: You may object to the processing of your personal data where hit69 relies on legitimate interests as the legal basis, or where data is processed for direct marketing purposes. An objection to direct marketing will be honoured without exception.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

hit69 will respond to all rights requests within 30 calendar days of receipt. Where the complexity or volume of requests requires additional time, hit69 will notify you of the extension and the reason for it within the initial 30-day window.

The hit69 Platform is strictly for adults aged 21 and over. hit69 does not knowingly collect personal data from individuals under 21 years of age. If you are a parent or guardian and you believe that a person under 21 in your care has submitted personal data to hit69 without your knowledge, please contact our support team immediately at [email protected].

Upon receipt of a verified report of underage registration, hit69 will promptly close the relevant account, delete all associated personal data to the extent permitted by law, and void any transactions conducted from that account. Any funds deposited by an underage individual will be returned to the originating payment method following verification.

hit69 employs both technical age-gate controls at registration and manual KYC review to minimise the risk of underage access to the Platform. These measures are reviewed and updated on a regular basis.

hit69 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or the Platform's data processing practices. When material changes are made to this Policy, hit69 will:

• Update the "Last Updated" date at the top of this page;
• Display a prominent notice on the hit69 Platform homepage for a minimum of 14 days prior to the changes taking effect; and
• Where required by applicable law or the significance of the change, notify registered members directly via email or in-platform notification.

Continued use of the hit69 Platform following the effective date of any revised Privacy Policy constitutes acceptance of the updated terms. If you do not agree to the revised Policy, you must cease using the Platform and may request account closure in accordance with the hit69 Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which hit69 processes your personal data, please contact our support team through any of the following channels:

• Live Chat: Available 24/7 directly from the hit69 Platform. Average response time is 2–5 minutes during peak WIB hours. Our team includes native Indonesian-speaking agents available at all times.
• Email: [email protected] — please include "Privacy Request" in the subject line to ensure your query is routed to the appropriate team. We aim to acknowledge all privacy-related emails within 24 hours and provide a full response within 30 calendar days.

For formal data rights requests (access, erasure, rectification, portability, or objection), please include your registered email address, your Member ID, and a brief description of your request so that we can verify your identity and process your request efficiently.