Privacy Policy

Introduction

hot56 ("we", "us", "our") operates the online gambling platform accessible at https://hot56.net, serving players across Indonesia and other permitted jurisdictions. This Privacy Policy applies to all personal data collected through the hot56 website, mobile-optimized interface, customer support channels, and any associated services offered under the hot56 brand.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which are incorporated herein by reference. By registering a Member account on hot56, you confirm that you have read this Privacy Policy and that you consent to the collection and processing of your personal data as described herein.

If you do not agree with any part of this Privacy Policy, you must discontinue use of the hot56 platform immediately. Continued use of the platform following the publication of any amended version of this Policy constitutes acceptance of those amendments.

Definitions

For the purposes of this Privacy Policy, the following terms shall bear the meanings assigned to them below:

• "Personal Data" — Any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, address, email address, phone number, payment details, device identifiers, and IP addresses.
• "Processing" — Any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction, whether carried out by automated or manual means.
• "Data Controller" — hot56, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" — Any third party that processes Personal Data on hot56's behalf and under hot56's documented instructions (e.g., payment processors, identity verification providers, cloud hosting providers).
• "Member" — Any individual who holds a registered account on the hot56 platform.
• "Cookies" — Small text files placed on your device by the hot56 platform to store session information, preferences, and usage analytics.
• "KYC" — Know Your Customer: the regulatory identity and age verification process applied before a Member's first withdrawal is processed.

Data We Collect

hot56 collects Personal Data in the following categories. We collect only what is necessary for the specific purpose identified and do not retain data beyond the period required for that purpose.

How We Collect Data

hot56 collects Personal Data through the following channels:

• Direct Submission: Data you provide voluntarily when registering an account, completing KYC verification, submitting a deposit or withdrawal request, contacting customer support, or updating your account settings.
• Automated Technical Collection: Data collected automatically as you interact with the hot56 platform, including IP address logging, session tracking via cookies and similar technologies, and device fingerprinting used for fraud prevention.
• Payment Processors: Transaction reference data returned by your bank or e-wallet provider (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, and others) when a deposit or withdrawal is processed. hot56 receives transaction confirmation data only — full payment credentials remain with the processor.
• Identity Verification Providers: During KYC review, hot56 may use a licensed third-party identity verification service to validate the authenticity of your submitted documents. The verification provider returns a pass/fail result and a confidence score; the underlying document image is stored by hot56 for the duration required by our record-keeping obligations.
• Fraud and Risk Screening Tools: hot56 uses automated risk-screening systems that process Technical Data and Usage Data to detect patterns consistent with fraudulent activity, money laundering, multi-accounting, or bot-driven wagering. These systems may generate a risk score that informs account-level decisions.
• Publicly Available Sources: In limited circumstances relating to fraud prevention or regulatory compliance, hot56 may cross-reference data against publicly available registers or databases (e.g., sanctions lists, politically exposed persons databases). This is not routine and is conducted only where legally required or where a specific risk flag has been raised.

Purposes of Processing

hot56 processes your Personal Data for the following clearly defined purposes. We process data only for a purpose that is compatible with the one for which it was originally collected:

• Account Management: To create, maintain, and administer your Member account, authenticate your identity at each login, and deliver the platform services you have requested.
• Transaction Processing: To process deposits and withdrawals in IDR via your nominated bank account or e-wallet, reconcile transaction records, and investigate any disputed transactions.
• KYC and Age Verification: To verify that you are at least 21 years of age and to confirm your identity before processing your first withdrawal, in compliance with our anti-money-laundering obligations.
• Fraud Prevention and Security: To detect and prevent fraudulent activity, unauthorized account access, multi-accounting, bonus abuse, money laundering, and any other activity that violates our Terms & Conditions or applicable law.
• Regulatory Compliance: To fulfill our obligations under applicable anti-money-laundering legislation, know-your-customer regulations, and any other legal or regulatory requirement applicable to our licensing jurisdiction.
• Customer Support: To respond to your queries, complaints, and responsible gaming requests via live chat or email, and to maintain a record of those interactions for quality assurance and compliance purposes.
• Responsible Gaming: To monitor usage patterns for signs of problem gambling behavior, to deliver responsible gaming tools (deposit limits, session alerts, self-exclusion) at your request, and to fulfill our duty of care toward vulnerable players.
• Platform Improvement: To analyze aggregated, anonymized usage data in order to improve platform performance, game selection, user experience design, and payment processing efficiency.
• Marketing Communications: Where you have explicitly opted in to receive promotional communications, to send you information about bonuses, new game launches, tournament schedules, and seasonal promotions relevant to the Indonesian market. You may opt out at any time via your account settings or by contacting support.

Legal Basis for Processing

hot56 processes your Personal Data on the following legal bases:

Data Sharing

hot56 does not sell, rent, or trade your Personal Data to unaffiliated third parties for their own commercial purposes under any circumstances. Personal Data may be shared only in the following limited circumstances:

• Payment Processors: Your bank account number or e-wallet identifier is shared with your nominated payment provider (e.g., BCA, BRI, OVO, DANA) solely to execute your requested deposit or withdrawal transaction. Payment processors are bound by their own privacy and data-security obligations and are not permitted to use your data for any other purpose.
• Identity Verification Providers: Your name, date of birth, and document images are shared with our licensed KYC provider to complete identity verification. The KYC provider operates under a data processing agreement with hot56 and processes your data solely for identity verification purposes.
• Game Content Providers: Game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) receive limited Technical Data (e.g., session token, currency, jurisdiction flag) necessary to serve their games within the hot56 platform. Game providers do not receive your name, payment details, or full contact information.
• Cloud Infrastructure and Security Providers: hot56 uses reputable cloud hosting and cybersecurity providers to operate the platform. These providers act as Data Processors under documented agreements and have no independent right to access or use Member data.
• Legal and Regulatory Authorities: hot56 will disclose Personal Data to law enforcement agencies, regulatory bodies, or other public authorities when legally required to do so — for example, in response to a lawfully issued subpoena, court order, or regulatory investigation. Where legally permitted, hot56 will notify the affected Member of such a disclosure.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of hot56's assets, your Personal Data may be transferred to the acquiring entity. You will be notified of any such transfer and provided with the opportunity to close your account before the transfer takes effect.

Cookies & Tracking

hot56 uses cookies and similar tracking technologies to operate the platform, maintain session security, remember your preferences, and analyze usage patterns. The following categories of cookies are used:

You may manage cookie preferences through your browser settings. Note that disabling Strictly Necessary cookies will prevent you from logging in to the hot56 platform. Disabling Functional cookies will reset your preferences on each visit. Disabling Analytics and Fraud Prevention cookies may limit hot56's ability to provide a personalized and secure experience.

Data Retention

hot56 retains Personal Data only for as long as is necessary to fulfill the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Account Data (Identity & Contact): Retained for the duration of your active account, plus a minimum of 5 years following account closure, in compliance with anti-money-laundering record-keeping requirements.
• KYC Verification Documents: Retained for a minimum of 5 years from the date of verification, as required by applicable AML regulations.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction, for regulatory compliance and dispute resolution purposes.
• Customer Support Communications: Retained for 3 years from the date of the last interaction, for quality assurance and dispute resolution purposes.
• Technical and Usage Data (Logs): Retained for up to 12 months from the date of collection, unless a longer retention period is required for fraud investigation or legal proceedings.
• Marketing Consent Records: Retained for the duration of your opt-in consent, plus 3 years following withdrawal of consent, to maintain an auditable record of your marketing preferences.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymized so that it can no longer be attributed to an identified individual. Anonymized, aggregated data may be retained indefinitely for statistical and research purposes.

Security Measures

hot56 implements a layered security architecture designed to protect your Personal Data against unauthorized access, disclosure, alteration, and destruction. Our security measures include, but are not limited to:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and the hot56 platform is encrypted in transit using 256-bit SSL/TLS, the same encryption standard used by global financial institutions and major e-commerce platforms.
• Encryption at Rest: Sensitive Personal Data stored in hot56's databases — including Identity Data, Financial Data, and KYC documents — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to Member Personal Data is restricted to hot56 staff and Data Processors who require it to perform their specific function. All access is logged, and access privileges are reviewed on a regular basis. Former employees have access revoked immediately upon termination.
• Two-Factor Authentication (2FA): Members are strongly encouraged to enable 2FA on their hot56 account via the account security settings. 2FA adds an additional verification step that protects your account even if your password is compromised.
• Penetration Testing and Security Audits: hot56 conducts regular security assessments, including third-party penetration testing, to identify and remediate vulnerabilities before they can be exploited.
• Data Breach Response: In the event of a data security breach that poses a risk to your rights and freedoms, hot56 will notify affected Members and the relevant supervisory authority without undue delay, and in any case within 72 hours of becoming aware of the breach, where legally required.

Your Rights

As a Member, you hold the following rights in relation to your Personal Data held by hot56. Requests may be submitted at any time by contacting our Data Protection Officer at [email protected]. We will respond to all valid requests within 30 days of receipt.

• Right of Access: You have the right to request a copy of the Personal Data hot56 holds about you, along with information about how it is being processed. hot56 will provide this in a structured, commonly used, machine-readable format.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete Personal Data held by hot56. You may update your contact information and certain account details directly via your account settings panel at any time.
• Right to Erasure: You have the right to request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where processing was unlawful. Note that hot56 may be required by law to retain certain data (e.g., transaction records and KYC documents) for a minimum period even after account closure. In such cases, hot56 will explain the applicable legal obligation and will delete the data as soon as the mandatory retention period has expired.
• Right to Restrict Processing: You have the right to request that hot56 restrict the processing of your Personal Data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to Object: You have the right to object to the processing of your Personal Data on the basis of hot56's legitimate interests. You also have an unconditional right to object to processing for direct marketing purposes at any time.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive a copy of your Personal Data in a portable format for transfer to another service provider.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. You may withdraw marketing consent via your account settings or by contacting support.

hot56 will not charge a fee for processing a valid data rights request. Where a request is manifestly unfounded, excessive, or repetitive, hot56 reserves the right to charge a reasonable administrative fee or decline to act on the request, providing written reasons for its decision.

Minors (Under 21)

hot56 strictly prohibits the use of its platform by any person under the age of 21. hot56 does not knowingly collect Personal Data from individuals under 21 years of age. If we become aware that Personal Data has been submitted by or on behalf of a person under 21, we will immediately suspend the associated account, delete the submitted data to the extent not required by applicable legal obligations, and notify the relevant authorities where required.

Parents and guardians concerned about a minor's access to online gambling platforms are encouraged to use parental control software and to contact hot56 support immediately if they believe a minor has accessed the platform. hot56 takes all such reports seriously and will act without delay. For guidance on responsible gaming tools available to Members, please visit our Responsible Gaming page.

Third-Party Links

The hot56 platform does not include links to third-party websites for general browsing purposes. Where third-party game content is embedded within the platform interface (e.g., live casino streams powered by Evolution Gaming, or slot titles from Pragmatic Play), those providers operate under their own privacy practices in relation to their game server infrastructure. hot56's Privacy Policy governs the data collected at the hot56 platform level; it does not govern the internal data practices of embedded game content providers beyond the contractual obligations imposed by hot56's data processing agreements with those providers.

hot56 is not responsible for the privacy practices, content, or security of any third-party platform that is not under hot56's direct operation and control.

Amendments

hot56 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. Material changes will be communicated to Members via a prominent notice on the hot56 platform and, where practicable, via the email address registered to your account, at least 7 days before the change takes effect.

The "Last Updated" date displayed at the top of this page will be revised each time the policy is amended. We encourage you to review this page periodically. Your continued use of the hot56 platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

Contact & Data Protection Officer

All privacy-related requests, questions, complaints, and data rights exercises should be directed to the hot56 Data Protection Officer (DPO). The DPO is responsible for overseeing hot56's compliance with this Privacy Policy and applicable data protection law.

If you are not satisfied with hot56's response to your privacy request or complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction. hot56 will cooperate fully with any such regulatory investigation.