Privacy Policy

hot58 ("we", "us", "our") operates the online gaming and sportsbook platform accessible at https://hot58.pro (the "Platform"). As a platform that serves players primarily based in Indonesia, we process a range of personal data in the course of providing our Services. We take our obligations as a data controller seriously and are committed to handling your information with transparency, integrity, and respect.

This Privacy Policy applies to all users of the Platform, including registered Members, visitors who browse without registering, and individuals who contact our support team. It governs all personal data collected through the Platform, our communications channels, and any related mobile or web applications operated under the hot58 brand.

This Privacy Policy should be read alongside our Terms &amp ; Conditions, which form the broader contractual framework governing your use of hot58's Services. By accessing or using the Platform, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, national identity number, address, email address, phone number, IP address, device identifiers, financial account details, and gameplay records.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction — whether by automated or manual means.
• "Data Controller" means hot58, which determines the purposes and means of processing your Personal Data.
• "Data Processor" means a third party that processes Personal Data on behalf of hot58, under binding written instructions and subject to data processing agreements.
• "Member" means any individual who has completed registration on the Platform and holds an active or suspended hot58 account.
• "Visitor" means any individual who accesses the Platform without completing registration.
• "KYC" means Know Your Customer — the identity verification procedures hot58 applies to confirm a Member's identity, age, and residential status.
• "Sensitive Personal Data" means a subset of Personal Data that warrants enhanced protection, including financial data, government-issued identity documents, and any data that could facilitate identity theft or financial fraud if disclosed.

hot58 collects only the data necessary to provide, operate, secure, and improve the Platform. The categories of Personal Data we collect are set out in the table below:

hot58 collects your Personal Data through the following methods:

• Direct Submission: When you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact our support team, or respond to a promotion, you provide data directly to hot58.
• Automated Collection: When you access or browse the Platform, our servers automatically collect Technical Data and Usage Data via cookies, web beacons, server logs, and similar tracking technologies. This data is collected whether or not you are a registered Member.
• Third-Party Sources: In certain circumstances, hot58 may receive data about you from third parties, including identity verification service providers (for KYC), payment processors (for transaction confirmation), and fraud detection partners. We only receive data from these sources where you have authorised the third party to share it, or where we are permitted to do so under applicable law.
• Game Providers: Third-party game studios integrated into the Platform (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) may share anonymised session and gameplay data with hot58 for the purposes of game integrity monitoring and dispute resolution. Game studios do not share your identity documents or financial data directly with hot58 beyond what is necessary for their licensing obligations.

hot58 processes your Personal Data for the following clearly defined purposes:

• Account Creation and Management: To register your account, verify your identity and age (21+ requirement), maintain your account profile, and administer your relationship with hot58 as a Member.
• Service Delivery: To enable you to access games, place bets, participate in promotions, and use all features of the Platform in accordance with the Terms & Conditions.
• Payment Processing: To process deposits and withdrawals via your chosen payment method (bank transfer or e-wallet), verify that payment accounts are registered in your name, and maintain accurate financial records.
• KYC and Compliance: To verify your identity, age, and residency in fulfilment of our obligations under applicable international gaming regulations and anti-money laundering (AML) standards.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, collusion, and other forms of abuse that would harm the Platform or its Members.
• Customer Support: To respond to your enquiries, resolve complaints, process self-exclusion or deposit limit requests, and provide Indonesian-speaking support services via email and WhatsApp.
• Responsible Gaming: To monitor gameplay patterns that may indicate problem gambling behaviour and, where appropriate, to reach out proactively to offer responsible gaming resources or to enforce protective limits.
• Marketing and Promotions: To send you relevant promotional communications, bonus offers, and platform updates where you have opted in to receive such communications. You may withdraw consent at any time by contacting [email protected].
• Platform Improvement: To analyse Usage Data in aggregate to improve the Platform's design, performance, game selection, and user experience for players across Jakarta, Surabaya, Bandung, Bali, Medan, and the wider Indonesian archipelago.
• Legal Compliance: To comply with any legal obligation, court order, regulatory direction, or law enforcement request to which hot58 is subject under the laws of the jurisdiction governing our international gaming licence.

hot58 processes your Personal Data only where a valid legal basis exists. The legal bases we rely upon are as follows:

• Contractual Necessity: Processing that is necessary to perform the contract between you and hot58 — specifically the Terms & Conditions — including account registration, KYC verification, payment processing, and service delivery.
• Legitimate Interests: Processing carried out in furtherance of hot58's legitimate business interests where those interests are not overridden by your fundamental rights and freedoms. This includes fraud prevention, security monitoring, platform analytics, and responsible gaming monitoring.
• Legal Obligation: Processing that is required by applicable law, including our obligations under international AML regulations, financial reporting standards, and any court or regulatory order to which hot58 is subject.
• Consent: Processing for marketing and promotional communications, which is carried out only where you have provided clear, voluntary, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

hot58 does not sell your Personal Data to third parties. We share your data only in the limited circumstances described below, and always subject to appropriate data protection safeguards:

• Payment Service Providers: Your financial data is shared with payment processors and banking partners (including the operators of BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, and LinkAja integrations) to the extent necessary to execute your deposit and withdrawal instructions. These parties process your data as independent data controllers subject to their own privacy policies.
• Identity Verification Partners: Where we engage a third-party KYC provider to assist with identity document verification, your Identity Data and relevant documentation are shared with that provider solely for verification purposes. KYC providers are engaged as Data Processors under binding data processing agreements.
• Game Studios: Session identifiers and anonymised gameplay data may be shared with integrated game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) for the purpose of game integrity monitoring, technical dispute resolution, and regulatory compliance. No financial or identity documents are shared with game studios beyond what is strictly required.
• Fraud Prevention and Security Services: Technical Data and usage patterns may be shared with specialist fraud detection providers to protect the integrity of the Platform and the security of all Members' accounts.
• Legal and Regulatory Authorities: hot58 will disclose Personal Data to law enforcement agencies, regulatory bodies, or courts where required to do so by a valid legal obligation, court order, or regulatory direction. We will notify affected Members of such disclosures where we are legally permitted to do so.
• Corporate Transactions: In the event of a merger, acquisition, restructuring, or sale of all or part of hot58's business, your Personal Data may be transferred to a successor entity. Any such transfer will be subject to the same privacy protections described in this Policy, and you will be notified in advance.

hot58 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents reconstruction of the original information. Where anonymisation is applied, the resulting data may be retained indefinitely for statistical and analytical purposes without constituting Personal Data under applicable privacy law.

hot58 implements a comprehensive suite of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and the hot58 Platform is encrypted using industry-standard 256-bit SSL/TLS technology. This applies to all login sessions, payment transactions, and personal data submissions.
• Encrypted Data Storage: Sensitive Personal Data, including financial account details and identity document data, is stored in encrypted form on secure servers hosted in access-controlled data centres. Encryption keys are managed using hardware security modules (HSMs).
• Access Controls: Access to Personal Data within hot58's internal systems is restricted to authorised personnel on a strict need-to-know basis. All internal access events are logged and audited.
• Two-Factor Authentication: Internal system access for hot58 staff requires multi-factor authentication. Members are also strongly encouraged to enable optional 2FA on their own accounts.
• Penetration Testing: hot58's Platform infrastructure undergoes regular security assessments and penetration testing by qualified third-party security firms to identify and remediate vulnerabilities proactively.
• Incident Response: hot58 maintains a documented data breach incident response procedure. In the event of a confirmed breach affecting your Personal Data, you will be notified without undue delay, together with details of the data affected and the steps being taken to address the incident.
• Fraud Monitoring: Automated and manual fraud monitoring systems operate continuously to detect suspicious activity, unauthorised login attempts, and anomalous transaction patterns on your account.

hot58 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your login session, and collect anonymised usage analytics. The types of cookies we use are as follows:

• Strictly Necessary Cookies: These cookies are essential to the operation of the Platform. They enable core functions such as maintaining your login session, remembering your language and region settings, and ensuring the security of your account. The Platform cannot function properly without these cookies, and they cannot be disabled.
• Functional Cookies: These cookies allow the Platform to remember your preferences and personalisation choices — such as your preferred payment method or game category — to provide a more tailored experience. Disabling functional cookies may impair certain features of the Platform.
• Analytics Cookies: hot58 uses first-party analytics cookies to collect aggregated, anonymised data about how visitors and Members use the Platform. This data helps us understand which pages are most visited, where users encounter difficulties, and how to improve the overall experience. Analytics data is not linked to your identity.
• Security Cookies: These cookies support our fraud detection and security monitoring systems by recording session identifiers and device fingerprint data to detect anomalous access patterns. They are necessary for the protection of all Members' accounts.

You can manage your browser's cookie settings at any time through your browser's preferences menu. Blocking strictly necessary cookies will prevent you from logging in and using the Platform's core features. hot58 does not use third-party advertising or behavioural tracking cookies.

As a Member or Visitor whose Personal Data is processed by hot58, you have the following rights in relation to your data. To exercise any of these rights, please submit a written request to [email protected] from the email address associated with your account:

• Right of Access: You have the right to request a copy of the Personal Data hot58 holds about you, together with information about the purposes for which it is processed, the categories of data held, and the recipients to whom it has been disclosed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete Personal Data we hold about you. We will action valid rectification requests within 30 days.
• Right to Erasure: You have the right to request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to exceptions where retention is required by legal obligation — for example, transaction records that must be retained for AML compliance purposes.
• Right to Restriction: You have the right to request that we restrict the processing of your Personal Data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to Data Portability: You have the right to receive your Personal Data in a structured, commonly used, machine-readable format and to request that it be transmitted to another data controller, where technically feasible and where processing is based on your consent or a contract.
• Right to Object: You have the right to object to processing of your Personal Data where it is carried out on the basis of legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time by contacting [email protected] or updating your account preferences. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

hot58 aims to respond to all privacy rights requests within 30 calendar days of receipt. In cases of complexity or high volume, this period may be extended by a further 60 days, in which case you will be notified of the extension and the reason for it. We will not charge a fee for exercising your rights unless a request is manifestly unfounded or excessive.

hot58 maintains a strict 21+ age policy. The Platform is not directed at, and should not be used by, any individual under the age of 21. We do not knowingly collect Personal Data from individuals under 21 years of age.

During registration, all users are required to confirm that they are 21 years of age or older. hot58 reserves the right to request documentary proof of age at any stage. If we become aware that Personal Data has been submitted by or collected from an individual under the age of 21, we will take immediate steps to suspend the associated account and delete the relevant data as soon as practicable.

The hot58 Platform integrates content and services provided by third-party game studios, including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. While these studios' games are accessible through the Platform, their underlying software environments operate under their own privacy practices and licensing terms.

hot58 is not responsible for the privacy practices of third-party game studios, payment service providers, or any other external service whose functionality is accessible through the Platform. We encourage you to review the privacy policies of any third-party service you interact with in connection with your use of the Platform.

The hot58 Platform does not contain links to unaffiliated external websites for advertising or commercial purposes. All links within the Platform navigate to pages within the hot58 domain or to the integrated game and payment environments described above.

hot58 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or the structure of the Platform. When material changes are made, we will provide notice by posting a prominent update on the Platform and, where appropriate, by sending a notification to the email address associated with your account.

The "Last Updated" date at the top of this document will be revised each time the Policy is amended. We encourage you to review this Privacy Policy periodically to stay informed about how hot58 protects your Personal Data. Your continued use of the Platform following the effective date of any revised Policy constitutes your acknowledgment of the changes.

If you do not agree with any changes to this Privacy Policy, you should cease using the Platform and may request closure of your account by contacting [email protected]. All Personal Data held at the time of account closure will be handled in accordance with Clause 8 (Data Retention) of this Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way hot58 processes your Personal Data, please contact our Data Protection team using the details below. We aim to acknowledge all privacy-related enquiries within 24 hours and to provide a substantive response within 30 calendar days.