h89ii Privacy Policy

This Privacy Policy applies to all personal data collected, processed, stored, or transmitted by h89ii in connection with the operation of the online betting platform available at https://h89ii.net and all associated sub-domains, mobile-optimized pages, and digital services made available to registered members ("the Platform").

This Policy applies to all individuals who:

• Visit the h89ii website or any associated digital property, whether or not they are registered members.
• Register an account and use any h89ii product, including the sportsbook, live casino, slots, togel (Indonesia's traditional numbers lottery) draws, or E-sports betting.
• Contact h89ii's customer support team via live chat, email, or any other communication channel.
• Participate in any h89ii promotion, survey, or marketing campaign.

This Privacy Policy should be read alongside h89ii's Terms & Conditions and Responsible Gaming policy, all of which together govern the member relationship with h89ii.

For the purposes of this Privacy Policy, the following definitions apply:

h89ii collects the following categories of personal data in the course of operating the Platform and delivering its Services:

h89ii collects personal data through the following means:

• Direct Submission: Data you provide when completing the account registration form, submitting KYC documents, making a deposit or withdrawal request, or contacting our support team.
• Automated Technical Collection: Data collected automatically when you visit or use the Platform, including IP address, device identifiers, browser fingerprint, session logs, and cookie data via our analytics and security systems.
• Transaction Systems: Data received from our payment processing partners when you initiate a deposit or withdrawal through a local Indonesian bank or e-wallet provider.
• Third-Party Verification Providers: Identity and address data returned by our KYC service providers following document verification checks.
• Fraud and AML Screening: Data returned by third-party screening tools that h89ii uses to comply with its anti-money laundering and counter-terrorist financing obligations.
• Responsible Gaming Systems: Data generated when you interact with self-exclusion tools, deposit limit settings, or session time-out features within the Platform.

h89ii processes member personal data for the following specific, documented purposes:

• Account Management: Creating and maintaining your h89ii account, authenticating your identity at login, and administering account preferences and settings.
• Service Delivery: Processing bets, settling outcomes, crediting winnings, managing deposits and withdrawals, and delivering bonus promotions.
• Identity Verification (KYC): Confirming your age (21+ requirement), identity, and payment method ownership in compliance with regulatory obligations.
• Anti-Money Laundering (AML) & Fraud Prevention: Screening transactions and account activity against AML/CTF risk indicators and known fraud patterns to protect both h89ii and its members.
• Customer Support: Responding to your enquiries, resolving complaints, and providing technical assistance.
• Responsible Gaming: Monitoring betting patterns to identify potential problem gambling indicators and administering self-exclusion and limit-setting tools at your request.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to members who have opted in to receive such communications. You may opt out at any time.
• Platform Security & Integrity: Detecting and preventing unauthorized access, bot activity, collusion, and other forms of platform abuse.
• Legal Compliance: Meeting h89ii's obligations under applicable licensing conditions, financial regulations, and data protection law.
• Analytics & Platform Improvement: Analyzing aggregated usage data to improve Platform performance, user experience, and product offerings.

h89ii processes personal data on one or more of the following legal bases, depending on the purpose of the specific processing activity:

• Contractual Necessity: Processing required to perform the contract between h89ii and the member — i.e., to operate the account and deliver betting services.
• Legal Obligation: Processing required to comply with applicable AML, KYC, licensing, and financial reporting obligations to which h89ii is subject.
• Legitimate Interests: Processing carried out to pursue h89ii's legitimate business interests, including fraud prevention, security monitoring, and platform analytics, where such interests are not overridden by the member's privacy rights.
• Consent: Processing for marketing communications and optional data collection activities where h89ii has obtained your express consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

h89ii does not sell, rent, or otherwise transfer member personal data to third parties for commercial purposes. However, h89ii may share data with the following categories of recipient where necessary and proportionate:

• Payment Partners: Local Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum data necessary to process your deposit or withdrawal transaction.
• KYC & Identity Verification Providers: Third-party verification services that process your identity documents on h89ii's behalf under contractual data processing agreements.
• AML & Fraud Screening Providers: Services used to screen members and transactions against sanctions lists, PEP (Politically Exposed Person) databases, and fraud risk indicators.
• Game Studio & Platform Technology Providers: Third-party game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) and platform infrastructure providers may receive session-level technical data necessary to deliver their products. These providers are contractually prohibited from using that data for any purpose beyond service delivery.
• Regulatory Authorities: h89ii may disclose personal data to licensing regulators, financial intelligence units, or law enforcement agencies when required by law or a valid legal order.
• Professional Advisors: Legal counsel, auditors, and compliance advisors who are bound by professional confidentiality obligations.

h89ii's primary operations serve members resident in Indonesia. Some of h89ii's technology and service providers may be located outside Indonesia, which means that your personal data may be transferred to and processed in countries other than your country of residence.

Where such transfers occur, h89ii takes the following steps to ensure your data remains protected to a standard equivalent to that provided within Indonesia:

• Transfers are made only to providers located in jurisdictions with adequate data protection frameworks, or under contractual arrangements that impose equivalent protections.
• All international data transfers by h89ii's appointed Data Processors are governed by contractual clauses that include data protection obligations, security requirements, and breach notification duties.
• h89ii conducts due diligence on all international service providers before engaging them to process member data.

h89ii retains personal data only for as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by applicable law. The following general retention guidelines apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be associated with any individual member.

h89ii uses cookies and similar tracking technologies on the Platform to ensure proper functionality, improve the user experience, and gather aggregated analytical insights. The following types of cookies may be set when you visit h89ii:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in, security tokens, and load-balancing cookies. These cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Remember your preferences — such as language settings, preferred payment method, and display options — to deliver a more personalized experience.
• Analytical Cookies: Collect anonymized data about how members navigate the Platform — pages visited, features used, and session duration — to help h89ii identify performance issues and improvement opportunities.
• Security Cookies: Used by h89ii's fraud detection systems to identify unusual access patterns, detect bot activity, and protect member accounts from unauthorized access.

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. h89ii does not use third-party advertising cookies or cross-site behavioral tracking technologies.

Subject to applicable law and certain regulatory limitations (for example, h89ii cannot delete AML-required records before their mandatory retention period expires), you hold the following rights in relation to your personal data held by h89ii:

• Right of Access: Request a copy of all personal data h89ii holds about you, including the categories of data, the purposes for which it is processed, and any third parties with whom it has been shared.
• Right to Rectification: Request correction of any personal data that is inaccurate or incomplete. Minor corrections (such as updating your phone number) can be made directly through your account dashboard.
• Right to Erasure: Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to h89ii's legal retention obligations.
• Right to Restrict Processing: Request that h89ii limits the processing of your data in certain circumstances — for example, while you contest the accuracy of the data or while an objection is being evaluated.
• Right to Data Portability: Request that h89ii provides your personal data in a structured, commonly used, machine-readable format, where the processing is based on consent or contract and is carried out by automated means.
• Right to Object: Object to processing carried out on the basis of h89ii's legitimate interests, including direct marketing communications. Where you object to marketing, h89ii will cease that processing immediately.
• Right to Withdraw Consent: Where processing is based on your consent, withdraw that consent at any time without penalty. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request — [Your Full Name] — [Account ID]". h89ii will acknowledge your request within 48 hours (WIB) and respond substantively within 30 calendar days.

h89ii's Services are strictly intended for adults aged 21 and over. h89ii does not knowingly collect, process, or store personal data belonging to individuals under the age of 21. If h89ii discovers that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account will be closed.

If you are a parent or guardian and believe that a person under 21 in your care has registered an account on h89ii, please contact our support team immediately at [email protected] so that we can investigate and take appropriate action without delay.

h89ii maintains a comprehensive information security program designed to protect member personal data against unauthorized access, accidental loss, destruction, or alteration. Key security measures include:

• Encryption in Transit: All data transmitted between your device and h89ii's servers is protected by 256-bit SSL/TLS encryption.
• Encryption at Rest: Sensitive data stored in h89ii's databases — including identity document data and financial records — is encrypted at rest using industry-standard algorithms.
• Password Security: Member passwords are never stored in plain text. h89ii uses a salted hashing algorithm so that passwords cannot be recovered even in the event of a data breach.
• Access Control: Internal access to member data is governed by role-based access controls. Only authorized personnel with a documented need to access specific data categories are granted permission, and all access events are logged.
• Network Security: h89ii's infrastructure is protected by enterprise-grade firewalls, intrusion detection systems, and distributed denial-of-service (DDoS) mitigation services.
• Penetration Testing: h89ii's systems are subject to regular independent security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Breach Response: h89ii maintains a documented data breach response plan. In the event of a breach that is likely to result in a risk to member rights, h89ii will notify affected members and the relevant regulatory authority within the timeframe required by applicable law.

The h89ii Platform may contain references to third-party game studios, payment providers, and sports data providers whose services are integrated into the Platform. While h89ii selects its partners carefully and requires them to maintain appropriate data protection standards, h89ii is not responsible for the privacy practices of third-party organizations.

This Privacy Policy applies solely to data processed by h89ii in its capacity as Data Controller. If you interact directly with a third-party provider's own website or application (outside the h89ii Platform), that provider's privacy policy governs the processing of your data in that context.

h89ii reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data processing activities, or our service offerings. Where a change is material — meaning it affects your rights or how your data is used in a significant way — h89ii will provide advance notice via email to your registered address or via a prominent in-Platform notification before the revised Policy takes effect.

The "Last Updated" date at the top of this page will always reflect the date on which the most recent version of this Policy was published. Your continued use of h89ii following the effective date of any amendment constitutes your acceptance of the revised Policy. The current version of this Policy is always available at https://h89ii.net/privacy-policy.

If you have any questions about this Privacy Policy, wish to exercise a data right, or want to raise a complaint about how h89ii has handled your personal data, please contact us using the details below:

If you are not satisfied with h89ii's response to a privacy complaint, you have the right to escalate the matter to the relevant data protection or gaming regulatory authority in the jurisdiction under which h89ii holds its operating license. Details of the applicable authority are available on request from the h89ii support team.