Privacy Policy

This Privacy Policy ("Policy") describes how hoki311 ("we", "us", "our", "the Company", "the Platform") collects, processes, stores, and protects the personal data of all individuals ("you", "the User", "the Player") who access or use the hoki311 online gaming platform at https://hoki311.cam ("the Site") or any associated services, including mobile-optimised access, customer support channels, and promotional communications.

By registering an account on hoki311 or continuing to use the Site, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform and contact us to arrange account closure.

This Policy should be read in conjunction with our Terms & Conditions, which govern the overall terms of your relationship with hoki311. In the event of any conflict between this Policy and the Terms & Conditions on matters relating to personal data, this Privacy Policy shall prevail.

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information that relates to an identified or identifiable natural person, including but not limited to name, national identification number, email address, contact number, financial account details, and IP address.
• "Processing" — any operation performed on personal data, including collection, recording, storage, organisation, retrieval, use, transmission, erasure, or destruction.
• "Data Controller" — hoki311, which determines the purposes and means of processing your personal data.
• "Data Processor" — any third party engaged by hoki311 to process personal data on its behalf and under its instructions, including payment processors, KYC providers, and IT service providers.
• "KYC" — Know Your Customer: the identity and age verification process required to comply with applicable anti-money laundering and responsible gambling obligations.
• "Cookies" — small text files placed on your device by the Site for the purposes of session management, preference storage, and analytics.
• "Consent" — a freely given, specific, informed, and unambiguous indication of agreement to the processing of your personal data for a stated purpose.

hoki311 collects personal data that is necessary and proportionate for the purposes described in Section 5. The categories of data we collect are as follows:

hoki311 collects personal data through the following channels:

• Direct collection — data you provide when completing the account registration form, submitting KYC documents, contacting support via live chat or email, or engaging with promotional campaigns.
• Automated collection — technical and usage data collected automatically through cookies, web beacons, server logs, and analytics tools when you access and navigate the Site.
• Third-party sources — identity and fraud-risk data received from authorised KYC verification partners, payment service providers (e.g., DuitNow, FPX operators, Touch 'n Go eWallet), and financial crime intelligence databases where permitted by applicable law.
• Device data — device identifiers, browser fingerprinting, and geolocation data (at city level only — e.g., Kuala Lumpur or Penang) collected to enforce geographic compliance and detect suspicious access patterns.

hoki311 processes your personal data for the following defined purposes:

• Account Management — creating, maintaining, and administering your registered account, including login authentication and security monitoring.
• KYC & Age Verification — verifying your identity and confirming that you meet the minimum age requirement of 21 years before allowing full account access and withdrawal privileges.
• Payment Processing — executing deposits and withdrawals via your chosen payment method (DuitNow, Maybank, Touch 'n Go eWallet, Boost, etc.) and maintaining accurate transaction records.
• Fraud Prevention & Security — detecting, investigating, and preventing fraudulent activity, money laundering, multi-accounting, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible Gambling — monitoring gameplay patterns to identify indicators of problem gambling, enforcing player-set deposit limits and self-exclusion requests, and complying with responsible gambling obligations.
• Customer Support — responding to your queries, resolving disputes, and maintaining records of support interactions for quality assurance purposes.
• Legal Compliance — fulfilling obligations under applicable anti-money laundering (AML), counter-terrorism financing (CTF), and data protection regulations.
• Service Improvement — analysing aggregated, anonymised usage data to improve platform performance, game selection, and user experience.
• Marketing Communications — sending promotional offers, bonus notifications, and newsletters to players who have given explicit opt-in consent. You may withdraw this consent at any time.

Each category of processing carried out by hoki311 is grounded in one or more of the following lawful bases:

• Contractual Necessity — processing required to perform the contract between you and hoki311 (i.e., providing the gaming service, processing payments, managing your account).
• Legal Obligation — processing required for hoki311 to comply with applicable laws, including KYC/AML requirements, responsible gambling regulations, and tax reporting obligations.
• Legitimate Interests — processing conducted to pursue hoki311's legitimate business interests, including fraud detection, security monitoring, and service improvement, where those interests are not overridden by your rights and freedoms.
• Consent — processing for purposes where your explicit, freely-given consent has been obtained, including marketing communications and optional analytics participation. You may withdraw consent at any time without affecting the lawfulness of prior processing.

hoki311 does not sell your personal data. We share personal data with third parties only in the following tightly controlled circumstances:

• Payment Service Providers — financial institutions and e-wallet operators (including DuitNow/FPX operators, Maybank, CIMB, Public Bank, Touch 'n Go eWallet, Boost, and GrabPay) to execute payment transactions. These parties process your data as independent data controllers under their own privacy policies.
• KYC & Identity Verification Providers — authorised third-party identity verification services engaged to perform document checks, biometric verification, and politically exposed person (PEP) screenings in accordance with AML obligations.
• Fraud & Security Intelligence Services — third-party providers of fraud detection, IP risk scoring, and device fingerprinting services. Data shared is limited to technical identifiers and risk signals.
• IT Infrastructure Providers — cloud hosting, data storage, and content delivery network (CDN) providers engaged to support the technical operation of hoki311. All such providers are contractually bound by data processing agreements.
• Legal & Regulatory Authorities — law enforcement agencies, financial intelligence units, or regulatory bodies where disclosure is required by applicable law, court order, or regulatory directive.
• Professional Advisers — legal counsel, auditors, and compliance consultants engaged on a confidential basis where access to personal data is necessary to provide professional advice.

All third-party data processors engaged by hoki311 are required to implement appropriate technical and organisational security measures and to process personal data only in accordance with hoki311's documented instructions.

hoki311 uses cookies and similar tracking technologies to ensure the proper functioning of the Site, enhance user experience, and support analytics and security monitoring. The following categories of cookies are deployed:

• Strictly Necessary Cookies — essential for core Site functionality including session management, login authentication, and security token validation. These cookies cannot be disabled.
• Performance & Analytics Cookies — used to collect anonymised data on how users interact with the Site (pages visited, session duration, error events) to help us improve platform performance. Deployed only with your consent.
• Functional Cookies — store your preferences such as language settings, display options, and recently accessed game categories to provide a more personalised experience.
• Security Cookies — used for fraud detection and abuse prevention, including device fingerprinting and suspicious activity flagging.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair your ability to access certain features of the Platform, including account login.

hoki311 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. The following general retention principles apply:

• Active Account Data — retained for the duration of the active account relationship and for a minimum of five (5) years following account closure, to meet AML and regulatory record-keeping requirements.
• KYC Documents — retained for a minimum of five (5) years from the date of last account activity or account closure, whichever is later, in accordance with applicable AML regulations.
• Transaction Records — retained for a minimum of seven (7) years to comply with financial reporting and audit trail obligations.
• Support Communications — retained for three (3) years for quality assurance, dispute resolution, and training purposes.
• Marketing Opt-in Records — retained for the duration of active consent plus two (2) years from the date of consent withdrawal, as evidence of lawful marketing activity.
• Technical & Log Data — typically retained for twelve (12) months for security monitoring and fraud investigation purposes, after which data is deleted or anonymised.

Upon expiry of the applicable retention period, personal data is either permanently deleted or anonymised such that it can no longer be attributed to any identifiable individual.

hoki311 implements a layered approach to data security, incorporating both technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, or destruction.

Key security measures in place include:

• Encryption in Transit — all data exchanged between your browser and hoki311's servers is encrypted using TLS 1.2 or higher (256-bit SSL certificates).
• Encryption at Rest — sensitive personal data stored in our databases (including KYC documents and financial account details) is encrypted using AES-256 encryption.
• Access Controls — strict role-based access controls ensure that only authorised personnel with a documented business need can access personal data. All access events are logged and audited.
• Multi-Factor Authentication — internal systems handling personal data require multi-factor authentication for all administrator access.
• Regular Penetration Testing — hoki311 commissions periodic third-party security assessments and penetration tests to identify and remediate vulnerabilities.
• Incident Response — a documented data breach response procedure is in place. In the event of a breach affecting your personal data, we will notify affected individuals within 72 hours of becoming aware of the incident, where required by applicable law.

As an individual whose personal data is processed by hoki311, you hold the following rights. Requests to exercise any of these rights should be submitted to our support team via live chat or email and will be processed within 30 calendar days of receipt.

To exercise any of the above rights, please contact our Data Protection team via live chat or email at [email protected]. We will not discriminate against you or restrict your access to services for exercising your data rights.

hoki311 is strictly an adult platform. We do not knowingly collect personal data from any individual under the age of 21 years. All account registrations are subject to age verification, and accounts where the holder is found to be under 21 will be closed immediately with any balance returned to the registered payment method.

If you believe that a minor has registered an account on hoki311 or that personal data belonging to a minor has been submitted to our Platform, please contact us immediately at [email protected]. We will investigate and take appropriate action, including erasure of the minor's data and account closure, within 48 hours of receiving a verified report.

hoki311 is operated for the international market and may transfer personal data to countries outside Malaysia where our data processors and technical infrastructure partners are located. Such transfers include data processed by cloud hosting providers and KYC verification services operating internationally.

All international transfers of personal data are conducted with appropriate safeguards in place, including:

• Data processing agreements incorporating standard contractual clauses;
• Transfer to jurisdictions that maintain an adequate level of data protection as assessed by applicable law;
• Technical encryption measures ensuring data cannot be accessed in an unprotected state during transit.

Where you are a resident of Malaysia, your personal data is treated with protections consistent with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards.

hoki311 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or operational requirements. The "Last Updated" date at the top of this Policy will be revised accordingly with each material update.

Where amendments are material — including changes to the categories of data collected, new purposes of processing, or significant changes to retention periods — we will notify registered users via email to their registered address at least 14 days before the changes take effect.

Minor amendments (such as typographical corrections or clarifications that do not change the substance of existing commitments) may be made without prior notice. Your continued use of hoki311 after the effective date of any amendment constitutes acceptance of the revised Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way hoki311 handles your personal data, please contact our Data Protection team using the details below:

• Live Chat: Available 24/7 via the on-site chat widget. Average response time: 3–5 minutes.
• Email: [email protected] — please mark your subject line "Privacy Request — [Your Username]" for priority routing.
• Languages: Privacy inquiries can be handled in Bahasa Melayu, Mandarin Chinese, and English.

We aim to acknowledge all privacy-related inquiries within 48 hours and to provide a substantive response within 30 calendar days. Where the complexity of a request requires additional time, we will inform you of the extension and the reasons for it within the initial 30-day period.