Privacy Policy

In this Privacy Policy, the following terms carry the meanings set out below unless the context requires otherwise:

• "hao7", "we", "us", or "our" refers to hao7 and its parent, subsidiary, and affiliated entities that own and operate the online gambling platform accessible at hao7.cam.
• "Platform" refers to the hao7 website, mobile-optimized web interface, and any associated digital services or communications channels operated by hao7.
• "Member", "you", or "your" refers to any individual who visits, registers on, or interacts with the Platform.
• "Personal Data" refers to any information that identifies or can reasonably identify you as an individual, including your name, date of birth, national identification number, address, email address, mobile phone number, IP address, device identifiers, and financial transaction records.
• "Processing" means any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, transmission, and deletion.
• "Third-Party Service Providers" refers to external vendors, partners, and contractors engaged by hao7 to facilitate specific operational functions, including payment processors, KYC verification services, fraud detection providers, and cloud infrastructure hosts.
• "KYC" means Know Your Customer — the identity verification process required for all Members prior to withdrawal approval.
• "IDR" refers to Indonesian Rupiah, the currency in which all hao7 transactions are denominated.

hao7 acts as the data controller in respect of the Personal Data collected through the Platform. As data controller, hao7 is responsible for determining the purposes and means by which your Personal Data is processed and for ensuring that such processing complies with applicable data protection principles.

Where hao7 engages Third-Party Service Providers to process Personal Data on its behalf (for example, a payment gateway processing an IDR bank transfer via BCA or BNI, or a KYC verification partner conducting identity checks), those parties act as data processors under hao7's instruction. hao7 remains responsible for ensuring that data processors provide sufficient guarantees of data security and confidentiality through appropriate contractual arrangements.

hao7 collects the following categories of Personal Data in the course of operating the Platform and providing our Services to Indonesian Members:

hao7 does not collect sensitive personal data (such as biometric data, health information, or religious affiliation) except where voluntarily disclosed by a Member in the context of a responsible gaming self-assessment or support interaction. Such disclosures are handled with the highest level of confidentiality.

hao7 collects Personal Data through the following channels and mechanisms:

• Direct Submission: Information you provide voluntarily when registering an Account, completing KYC verification, submitting a deposit or withdrawal request, contacting customer support, or participating in a promotional campaign.
• Automated Technical Collection: Data collected automatically when you access the Platform, including your IP address, device identifiers, browser attributes, and session activity, through server logs, session management systems, and analytics tools.
• Payment Processors: Confirmation data and transaction reference numbers returned by Indonesian payment gateways (including inter-bank transfer systems used by BCA, BRI, BNI, and Mandiri) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) upon completion of a financial transaction.
• KYC and Identity Verification Partners: Verification status, risk scores, and document authenticity assessments returned by third-party KYC service providers engaged by hao7 to process identity verification requests.
• Fraud and Risk Management Systems: Behavioral risk signals and device fingerprinting data generated by hao7's internal and third-party anti-fraud tools to detect unauthorized account access, bonus abuse, and money laundering patterns.
• Cookies and Tracking Technologies: Data collected through browser cookies, local storage objects, and similar technologies as described in Section 7 of this Policy.

hao7 processes your Personal Data only where there is a lawful basis for doing so. The table below sets out the primary purposes for which we process Personal Data and the corresponding legal basis in each case:

Where processing is based on your consent — for example, receiving promotional emails about slot gacor (high-payout slot) offers or sports betting promotions covering BRI Liga 1 and Champions League markets — you may withdraw that consent at any time by updating your notification preferences within your Account dashboard or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

hao7 does not sell, rent, or trade your Personal Data to any third party for commercial purposes. We share Personal Data only in the circumstances described below, and only to the extent strictly necessary for each stated purpose:

• Payment Service Providers: We share transaction-relevant data (account holder name, bank account number, transaction amount in IDR) with the payment gateways and financial institutions required to process your deposits and withdrawals. This includes inter-bank transfer networks supporting BCA, BRI, BNI, Mandiri, CIMB Niaga, and OCBC NISP, as well as e-wallet platforms OVO, DANA, GoPay, ShopeePay, and LinkAja.
• KYC and Identity Verification Partners: Identity documents and personal information submitted for KYC are shared with licensed third-party verification services solely for the purpose of confirming your identity and age. These partners are contractually bound to process your data only as directed by hao7 and to maintain equivalent data security standards.
• Fraud Prevention and AML Service Providers: Technical and behavioral data may be shared with specialist fraud detection and anti-money laundering platforms to identify and prevent financial crime on the Platform.
• Game and Software Providers: Certain anonymized or pseudonymized session and gameplay data may be shared with our game software partners (including Pragmatic Play, Evolution Gaming, Spribe, and Pocket Games Soft) for the purpose of resolving game disputes, auditing RNG integrity, and improving game performance. These providers do not receive your full identity data.
• Legal and Regulatory Authorities: hao7 may disclose Personal Data to law enforcement agencies, financial intelligence units, regulatory bodies, or courts where required by applicable law, a valid court order, or a regulatory directive. In such cases, hao7 will disclose only the minimum data necessary to satisfy the legal requirement.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of hao7's assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the applicable privacy terms before any change in control takes effect.
• Group Companies: hao7 may share Personal Data within its group of affiliated companies for the purposes of internal administration, consolidated compliance reporting, and group-wide fraud prevention. All group companies are bound by data handling standards consistent with this Privacy Policy.

hao7 uses cookies and similar tracking technologies to operate the Platform efficiently, recognize returning Members, maintain session state, and gather aggregate usage analytics. The following categories of cookies are used on the Platform:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function and cannot be disabled. They include session authentication tokens, security tokens that protect against cross-site request forgery (CSRF), and cookies that maintain your login state during a session.
• Functional Cookies: These cookies remember your preferences — such as your preferred language setting and last-used payment method — to provide a more personalized experience on return visits. Disabling these cookies may reduce functionality but will not prevent access to the Platform.
• Analytics Cookies: hao7 uses first-party analytics cookies to collect aggregated, anonymized data about how Members interact with the Platform, including pages visited, time on page, game categories browsed, and features used. This data is used solely to improve the Platform's design and functionality.
• Security and Fraud Prevention Cookies: Device fingerprinting and risk-scoring technologies use persistent identifiers to flag suspicious login patterns, detect account sharing, and identify devices previously associated with fraudulent activity.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform, including the ability to maintain a login session. Most modern browsers — including Chrome, Firefox, Safari, and Edge — provide granular cookie management tools accessible via their respective privacy or settings menus.

hao7 retains Personal Data only for as long as necessary to fulfill the purposes for which it was collected, to meet legal and regulatory retention obligations, or to resolve disputes and enforce our agreements. The general retention periods applied by hao7 are set out below:

• Active Account Data: Personal Data associated with an active hao7 Account is retained for the full duration of the Account's active status and for a minimum of five (5) years following Account closure, in compliance with international AML record-keeping standards.
• KYC Documents: Identity and verification documents submitted for KYC are retained for a minimum of five (5) years from the date of submission or from the date of Account closure, whichever is later, as required by applicable anti-money laundering regulations.
• Financial Transaction Records: Deposit and withdrawal records, including transaction amounts in IDR and payment method identifiers, are retained for a minimum of seven (7) years in accordance with financial record-keeping obligations.
• Customer Support Communications: Records of support interactions, including complaint correspondence and dispute resolution documentation, are retained for three (3) years from the date of the final resolution.
• Marketing Consent Records: Records of your marketing consent and preference history are retained for three (3) years from the date the consent was given or withdrawn, to allow hao7 to demonstrate compliance with consent requirements.
• Technical and Log Data: Server logs, IP address records, and session data are retained for up to twelve (12) months for security monitoring and fraud investigation purposes, after which they are aggregated or deleted.

When Personal Data is no longer required for any of the above purposes, hao7 will securely delete or anonymize it in a manner that renders re-identification impossible.

hao7 implements a multi-layered technical and organizational security framework designed to protect your Personal Data against unauthorized access, accidental loss, destruction, or disclosure. Our security measures include:

• Transport Encryption: All data transmitted between your browser or mobile device and hao7's servers is encrypted using TLS 1.3 with 256-bit AES encryption. This applies to all pages on the Platform, including login, account management, deposit, and withdrawal flows.
• Data-at-Rest Encryption: Personal Data and financial records stored in hao7's databases are encrypted at rest using AES-256 encryption. Encryption keys are managed through a dedicated key management system with strict access controls.
• Access Controls: Internal access to Personal Data is governed by a strict role-based access control (RBAC) policy. Only personnel with a documented operational need may access member records, and all access events are logged for audit purposes.
• Two-Factor Authentication (2FA): All internal staff accounts with access to member data systems are protected by mandatory two-factor authentication. Members are also encouraged to enable 2FA on their hao7 Accounts for additional protection.
• Penetration Testing and Vulnerability Management: hao7's Platform and infrastructure undergo regular penetration testing by qualified independent security researchers. Critical and high-severity vulnerabilities are patched within defined remediation SLAs.
• Incident Response: hao7 maintains a documented data breach incident response plan. In the event of a security incident affecting your Personal Data, you will be notified promptly in accordance with applicable data protection notification requirements.

While hao7 takes all reasonable technical and organizational measures to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your Account password and for logging out of your Account when using a shared or public device.

As a Member of hao7, you have the following rights in relation to the Personal Data we hold about you. To exercise any of these rights, please contact us using the details in Section 14:

• Right of Access: You have the right to request a copy of the Personal Data hao7 holds about you, along with information about the purposes for which it is processed, the categories of data involved, and the recipients to whom it has been disclosed.
• Right to Rectification: If any Personal Data hao7 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to Erasure: You may request the deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other lawful basis applies), or where the data has been unlawfully processed. This right is subject to legal and regulatory retention obligations that may require hao7 to retain certain data for a defined period regardless of an erasure request.
• Right to Restrict Processing: You may request that hao7 restrict the processing of your Personal Data in certain circumstances — for example, while the accuracy of the data is being contested, or while you have objected to processing pending verification of whether hao7's legitimate interests override your rights.
• Right to Data Portability: You have the right to receive the Personal Data you have provided to hao7 in a structured, commonly used, and machine-readable format, and to have that data transmitted to another controller where technically feasible.
• Right to Object: Where hao7 processes your Personal Data on the basis of legitimate interest, you have the right to object to that processing. hao7 will cease processing unless it can demonstrate compelling legitimate grounds that override your rights, or where processing is necessary for the establishment, exercise, or defense of legal claims.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

hao7 will respond to all verified privacy rights requests within 14 business days of receipt. In complex cases, this period may be extended by a further 14 business days, in which case you will be notified of the extension and the reason for it.

hao7's Services are strictly intended for adults aged 21 years and over. hao7 does not knowingly collect Personal Data from individuals under the age of 21. The Platform employs age verification controls during registration and mandatory KYC checks to enforce this restriction.

If hao7 becomes aware that Personal Data has been collected from a person under the age of 21, the relevant Account will be immediately suspended, all associated data will be permanently deleted from our systems, and any deposited funds will be returned to the funding source following appropriate verification.

If you are a parent or legal guardian and believe that a minor in your care has registered on hao7 without authorization, please contact us immediately using the details in Section 14. We will investigate the matter promptly and take all appropriate action, including permanent Account closure and data deletion.

hao7 operates internationally and, as a result, your Personal Data may be transferred to and processed in countries outside Indonesia. Such countries may not have data protection laws equivalent to those in Indonesia or in the European Economic Area.

Where Personal Data is transferred internationally — for example, to cloud infrastructure hosts, KYC verification partners, or game software providers operating data centers outside Indonesia — hao7 ensures that appropriate safeguards are in place to protect your data. These safeguards include:

• Standard contractual clauses requiring recipient entities to maintain data protection standards equivalent to those applied by hao7.
• Data processing agreements with all third-party processors that impose confidentiality obligations and security requirements consistent with this Privacy Policy.
• Technical measures including end-to-end encryption for all data in transit across international network boundaries.

By registering an Account and using the Platform, you acknowledge and consent to the transfer of your Personal Data to international jurisdictions as described in this section, subject to the safeguards outlined above.

hao7 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable legal obligations. When material changes are made, we will notify you by email to your registered address and display a prominent notice on the Platform for a minimum of 14 days prior to the changes taking effect.

The "Last Updated" date at the top of this page reflects the most recent revision. We recommend reviewing this Policy periodically to stay informed about how hao7 protects your Personal Data. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the updated Policy.

If you do not agree with any material change to this Privacy Policy, you should cease using the Platform and may request Account closure and the return of your available Real Money Balance by contacting support prior to the effective date of the change.

For any questions, concerns, or requests relating to this Privacy Policy or the Personal Data hao7 holds about you, please contact our Data Protection team using the details below. Our team is available 24 hours a day, 7 days a week (WIB, UTC+7), with Indonesian-speaking agents available at all times.

• Privacy and Data Requests Email: [email protected]
• Subject Line Format: Please use [Privacy Request] — [Your Account Username] — [Request Type] to ensure your message is directed to the Data Protection team promptly.
• Response Timeframe: All privacy-related requests are acknowledged within 24 hours. Substantive responses are provided within 14 business days of identity verification.
• Supported Request Types: Data access, data rectification, data erasure, restriction of processing, data portability, withdrawal of marketing consent, and general privacy inquiries.