hot55 Privacy Policy

1 Definitions

The following definitions apply throughout this Privacy Policy:

• "Platform" means the hot55 website, its mobile-optimised interface, and all services accessible at https://hot55.cam.
• "hot55", "we", "us", or "our" refers to the operator and data controller of the Platform.
• "Member", "you", or "your" means any individual who registers an account or otherwise interacts with the Platform.
• "Personal Data" means any information relating to an identified or identifiable natural person, including name, contact details, payment information, device identifiers, and behavioural data collected during Platform use.
• "KYC" (Know Your Customer) refers to the identity verification documents submitted by members as a condition of their first withdrawal.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, and deletion.
• "Third-Party Processor" means any external service provider to whom hot55 discloses Personal Data for a defined operational purpose under a contractual data processing agreement.
• "IDR / Rp" means Indonesian Rupiah, the sole transaction currency on the Platform.

2 Scope & Data Controller

This Privacy Policy governs all Personal Data collected by hot55 through:

• The account registration and KYC verification process;
• Ongoing use of betting, gaming, and financial features on the Platform;
• Interactions with hot55 customer support channels;
• Cookies and technical tracking mechanisms described in Section 8 of this policy.

hot55 acts as the data controller for all Personal Data collected directly through the Platform. Where Third-Party Processors are engaged, hot55 remains responsible for ensuring those processors meet the data protection standards set out in this policy.

This policy applies to members who are residents of Indonesia and to all other members globally who interact with the Platform. References to Indonesian context (e.g., bank transfer data, e-wallet data) reflect the predominant user base served by hot55.

3 Personal Data We Collect

hot55 collects only the minimum Personal Data necessary to operate the Platform safely, comply with its licensing obligations, and deliver a high-quality member experience. The categories of data we collect are set out below.

4 How We Use Your Personal Data

hot55 uses your Personal Data for the following purposes:

• Account management: Creating, maintaining, and securing your member account, including password resets and login authentication;
• KYC and compliance: Verifying your identity and age (you must be at least 21 years old) to meet our licensing obligations and prevent underage gambling;
• Transaction processing: Executing deposits and withdrawals via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and any other payment method you have registered to your account;
• Betting and gaming operations: Recording bets, calculating winnings, settling markets, and maintaining an accurate account balance denominated in IDR;
• Fraud and security monitoring: Detecting and investigating suspicious account activity, multi-accounting, bonus abuse, money laundering, and other prohibited behaviours described in our Terms & Conditions;
• Responsible gaming: Monitoring betting patterns to identify potential problem gambling behaviour and enforcing self-exclusion, deposit limits, and other protective measures a member has elected;
• Customer support: Responding to your queries, complaints, and disputes through our 24/7 support channels;
• Platform improvement: Analysing aggregated, anonymised usage data to improve Platform performance, product design, and the overall member experience;
• Legal and regulatory compliance: Meeting the record-keeping, reporting, and audit requirements of our international gaming licence.

hot55 does not use your Personal Data for unsolicited third-party advertising, sale to data brokers, or any purpose not listed above without first obtaining your explicit consent.

5 Legal Basis for Processing

hot55 relies on the following legal bases when processing your Personal Data:

• Contractual necessity: Processing required to perform the member agreement — account creation, transaction execution, bet settlement, and KYC verification are all contractually necessary;
• Legal obligation: Processing required to comply with our international licensing conditions, anti-money-laundering obligations, and age-verification requirements;
• Legitimate interests: Processing for fraud detection, security monitoring, responsible gaming oversight, and Platform improvement, where our legitimate operational interests are not overridden by your fundamental privacy rights;
• Consent: Where we send optional communications (e.g., promotional emails about bonuses or seasonal offers relevant to events such as Idul Fitri, Ramadhan, or Nyepi), we will obtain your prior consent and provide a clear opt-out mechanism in every such communication.

6 Disclosure of Your Personal Data

6.1 Internal Access Controls

Access to your Personal Data within hot55 is restricted on a strict need-to-know basis. Customer support agents, compliance officers, and finance personnel each have access limited to the data categories necessary for their specific role. All internal access is logged and subject to periodic audit.

6.2 Third-Party Service Providers

hot55 engages carefully selected third-party processors to support Platform operations. These may include:

• Payment gateway providers that facilitate bank transfers and e-wallet transactions in IDR;
• Identity verification services that assist with KYC document authentication;
• Cloud infrastructure and hosting providers on whose servers Platform data is stored;
• Game content providers (such as Pragmatic Play, Evolution Gaming, Spribe, and Pocket Games Soft) who may receive anonymised session identifiers to deliver their game APIs;
• Fraud detection and security analytics providers.

Every Third-Party Processor engaged by hot55 is bound by a contractual data processing agreement that prohibits them from using your Personal Data for any purpose other than the contracted function, and requires them to maintain security standards consistent with this policy.

6.3 Legal Disclosure

hot55 may disclose Personal Data to law enforcement agencies, regulatory authorities, or courts of competent jurisdiction where required to do so by applicable law, valid legal process, or in connection with the investigation of fraud, money laundering, or other criminal activity.

7 Data Retention

hot55 retains your Personal Data only for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention obligations:

• Active account data: Retained for the lifetime of your account plus a minimum of five years following account closure, to satisfy anti-money-laundering record-keeping requirements under our licensing conditions;
• KYC documents: Retained for a minimum of five years from the date of submission or the date of account closure, whichever is later;
• Transaction records: Retained for a minimum of five years from the date of each transaction;
• Support communications: Retained for three years from the date of the interaction;
• Technical and cookie data: Retained for up to 13 months from the date of collection, after which it is anonymised or deleted.

On expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents reconstruction. If you request account closure, we will initiate deletion of non-mandatory data within 30 days, while retaining only the minimum data required by our legal and licensing obligations for the periods stated above.

8 Cookies & Tracking Technologies

8.1 What We Use

The hot55 Platform uses the following categories of cookies and similar tracking technologies:

• Strictly necessary cookies: Essential for basic Platform functionality — session management, login state, and security tokens. These cannot be disabled without breaking the Platform;
• Performance cookies: Collect anonymised data on page load times, error rates, and navigation flows to help us diagnose and resolve technical issues;
• Analytics cookies: Used to understand aggregate member behaviour — which pages are visited most frequently, how long sessions last, and which features members engage with. Data is aggregated and not linked to individual identities.

8.2 What We Do Not Use

hot55 does not use advertising or retargeting cookies. We do not permit advertising networks to place tracking cookies on the Platform. We do not track your browsing activity on third-party websites.

8.3 Cookie Lifespan

Session cookies are deleted automatically when you close your browser. Persistent cookies used for performance and analytics have a maximum lifespan of 13 months, after which they expire and are not automatically renewed without a fresh Platform visit.

9 Security Measures

hot55 implements a layered security architecture to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction:

• Transport security: All data in transit between your device and our servers is encrypted using TLS 1.2 or higher with 256-bit encryption;
• Data-at-rest encryption: Sensitive data stored on our servers — including KYC documents and financial records — is encrypted at rest using AES-256;
• Access controls: Role-based access controls limit internal data access to personnel with a verified operational need. Multi-factor authentication is required for all privileged system access;
• Penetration testing: The Platform undergoes regular independent security assessments, including penetration testing and vulnerability scanning;
• Incident response: hot55 maintains a documented data breach response procedure. In the event of a breach that poses a material risk to affected members, we will notify impacted individuals within 72 hours of becoming aware of the incident.

While hot55 employs industry-standard security measures, no system is entirely immune to risk. You should protect your own account by using a strong, unique password and by contacting us immediately if you suspect unauthorised access to your account.

10 Your Rights Over Your Personal Data

As a hot55 member, you hold the following rights regarding your Personal Data. To exercise any of these rights, submit a written request to [email protected] from the email address registered to your account:

• Right of access: You may request a copy of all Personal Data hot55 holds about you. We will provide this within 30 days of receiving a verified request;
• Right to rectification: You may request correction of any inaccurate or incomplete Personal Data held about you. Basic account details (email, contact number) can be updated directly from your account settings panel;
• Right to erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected. Note that we are legally required to retain certain data for a minimum of five years following account closure, as described in Section 7;
• Right to restriction of processing: You may request that we temporarily restrict the processing of your Personal Data while a correction or erasure request is under review;
• Right to data portability: You may request a structured, machine-readable copy of the Personal Data you have provided to hot55 for the purposes of transferring it to another service;
• Right to object: You may object to processing of your Personal Data on the basis of legitimate interests, including the profiling of your betting patterns for responsible gaming purposes. Note that some objections may limit our ability to continue operating your account;
• Right to withdraw consent: Where processing is based on your consent (e.g., promotional communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

hot55 will acknowledge all data rights requests within five business days and will complete them within 30 calendar days. Where a request is complex or where we receive a high volume of simultaneous requests, we may extend this period by a further 30 days, with advance notice to you.

11 Third-Party Processors & International Transfers

Some of hot55's Third-Party Processors may be located outside Indonesia. Where Personal Data is transferred internationally, hot55 ensures that appropriate safeguards are in place, including:

• Contractual data processing agreements incorporating internationally recognised standard contractual clauses;
• Selection of processors that hold recognised international data security certifications (e.g., ISO 27001, SOC 2 Type II);
• Transfer impact assessments conducted before engaging new processors in jurisdictions with differing data protection frameworks.

hot55 does not transfer Personal Data to processors located in jurisdictions that lack adequate data protection standards without implementing the contractual and technical safeguards described above.

12 Children & Minors

If you believe a minor has registered an account on hot55, please report this to us immediately at [email protected]. We will investigate the report and take appropriate action within 24 hours.

13 Amendments to This Policy

hot55 reviews this Privacy Policy at least annually and whenever material changes to our data processing practices occur. When significant changes are made, we will notify registered members via the email address on file or through a prominent in-Platform notification, at least 7 days before the revised policy takes effect.

The "Last Updated" date displayed at the top of this page reflects the date of the most recent revision. Your continued use of the Platform after a revised policy takes effect constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you must cease using the Platform and may request account closure by contacting our support team.

We encourage you to revisit this page periodically. Archived versions of previous policy revisions are available on request from our support team.

14 Contact & Data Rights Requests

For any privacy-related query, concern, or formal data rights request, please contact the hot55 Data Protection team through the following channel:

For general questions about how hot55 handles your information, you are also welcome to review our FAQ page, which covers common queries about account data, KYC, and security practices.

If you have a concern about how your Personal Data has been handled and you are not satisfied with our response, you retain the right to escalate the matter to the relevant data protection authority in your jurisdiction.