Summary for Indonesian Members: hgo90 collects only the data required to operate your account securely, process transactions in IDR, and comply with our international gaming license obligations. We do not sell your data. We do not share it with third parties except as described in this Policy. All data is encrypted and held securely. You may request access, correction, or deletion at any time by contacting
[email protected].
This Privacy Policy governs the collection, use, storage, processing, and disclosure of personal data by hgo90 (referred to herein as "hgo90", "we", "us", or "our") in connection with the online betting and gaming platform operated at https://hgo90.cam.
hgo90 is operated by an internationally licensed gaming entity subject to the data protection obligations imposed by its licensing jurisdiction. While hgo90's primary user base is located in Indonesia — across cities including Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, and Makassar — the platform is accessed globally, and this Policy reflects both our licensing obligations and international data protection best practices.
By registering an account on hgo90 or otherwise accessing the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. This Policy is incorporated by reference into hgo90's Terms & Conditions, which govern your use of the platform in full. If you do not consent to these practices, you must not use the hgo90 platform.
We review and update this Policy regularly. The current version's effective date is displayed at the top of this page. Material changes are communicated by email to your registered address before taking effect.
The following terms carry specific meanings throughout this Privacy Policy.
- "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, directly or indirectly — including name, date of birth, national ID number, email address, phone number, payment account details, IP address, and device identifiers.
- "Processing" means any operation performed on Personal Data — including collection, recording, storage, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
- "Data Controller" means hgo90's operating entity, which determines the purposes and means of processing Personal Data collected through the platform.
- "Data Processor" means any third party that processes Personal Data on behalf of hgo90 under a written data processing agreement — for example, payment processors, KYC verification vendors, and cloud hosting providers.
- "Member" means any natural person who holds a registered account on the hgo90 platform.
- "KYC Data" means the identity verification documentation collected during the Know Your Customer process, including government-issued ID, proof of address, and source-of-funds evidence where applicable.
hgo90 collects Personal Data across the following categories. We collect the minimum data necessary for each stated purpose — we do not collect data speculatively or retain categories of data beyond their operational necessity.
| Category |
Examples |
Purpose |
| Registration Data |
Full name, date of birth, email address, phone number, country of residence |
Account creation, age verification, communication |
| KYC Documents |
KTP (national ID), passport, SIM, selfie with ID, proof of payment method |
Identity verification, AML compliance, withdrawal processing |
| Financial Data |
Bank account name and number (BCA, BRI, BNI, Mandiri, etc.), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit and withdrawal records |
Transaction processing, fraud prevention, AML reporting |
| Gaming Activity |
Bet history, game sessions, outcomes, bonus claims, responsible gaming tool usage |
Account management, regulatory compliance, responsible gaming monitoring |
| Technical Data |
IP address, device type, browser, operating system, session timestamps, geolocation (country level) |
Security, fraud detection, platform optimization |
| Communication Records |
Live Chat transcripts, WhatsApp exchanges, email correspondence |
Support delivery, quality assurance, dispute resolution |
| Cookies and Analytics |
Session cookies, preference cookies, analytics identifiers |
Platform functionality, performance measurement, user experience |
hgo90 collects Personal Data through the following channels and mechanisms.
- Direct Submission: Data you provide actively during account registration, KYC verification, payment processing, form completion, or communication with support (Live Chat, WhatsApp, email).
- Automated Collection: Technical data collected automatically when you access the hgo90 platform — including IP address, device fingerprint, browser metadata, session duration, and page interaction data — via server logs and analytics systems.
- Payment Processors: Confirmation data returned by hgo90's payment processing partners (Indonesian banks, e-wallet providers, and card networks) when you initiate a deposit or withdrawal. hgo90 does not store full bank account numbers or full card numbers; tokenized references provided by payment processors are used instead.
- KYC Verification Vendors: Results returned by third-party KYC verification services engaged to validate the authenticity of identity documents submitted during verification — including document authenticity scores and facial match results.
- Cookies and Tracking Technologies: Data collected through cookies, local storage, and similar technologies as described in Section 11 of this Policy.
hgo90 processes your Personal Data for the following specific and documented purposes. We do not use your data for purposes incompatible with those listed below without obtaining fresh consent.
- Account Operation: Creating and maintaining your Member account, processing login authentication, managing your balance, and enabling access to hgo90's betting and gaming products.
- Transaction Processing: Processing deposits and withdrawals via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, and other supported payment methods — all transactions in IDR.
- Identity Verification (KYC): Verifying your identity and age (21+) as required by our international gaming license and AML obligations before processing withdrawals.
- Fraud and Security: Detecting, investigating, and preventing fraudulent activity, unauthorized account access, money laundering, bonus abuse, multi-accounting, and other platform integrity threats.
- Regulatory Compliance: Fulfilling obligations imposed by hgo90's international gaming license, applicable AML regulations, and any legally binding request from licensing authorities or law enforcement.
- Customer Support: Providing 24/7 customer service in Bahasa Indonesia and English via Live Chat, WhatsApp, and email — including responding to queries, complaints, and disputes.
- Responsible Gaming: Monitoring gaming activity to identify behavioral patterns potentially indicative of problem gambling and implementing responsible gaming tools where appropriate.
- Service Improvement: Analyzing aggregated, anonymized usage data to optimize platform performance, improve user experience, and develop new product features.
- Marketing Communications: Sending promotional communications (bonus offers, seasonal promotions, VIP tier updates) to Members who have opted in to marketing. You may withdraw marketing consent at any time by contacting support.
Each category of data processing carried out by hgo90 rests on one of the following lawful bases.
| Legal Basis |
Processing Activities Covered |
| Contractual Necessity |
Account creation and operation, transaction processing, KYC verification, bonus administration, customer support delivery — all activities necessary to perform the agreement between hgo90 and a Member. |
| Legal Obligation |
AML compliance, age verification, regulatory reporting, data retention mandated by applicable licensing and financial crime laws. |
| Legitimate Interests |
Fraud detection, security monitoring, platform integrity, responsible gaming monitoring, and anonymized analytics — where hgo90's interests do not override the Member's fundamental rights. |
| Consent |
Marketing communications, non-essential cookies, and any processing activity where hgo90 relies on your freely given, specific, informed, and unambiguous consent. Consent may be withdrawn at any time without affecting previous processing. |
hgo90 does not sell your personal data to any third party under any circumstances. Data sharing is limited strictly to the categories of recipients described below, all of whom operate under contractual data protection obligations.
- Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the transaction data necessary to process your deposits and withdrawals. Each processor operates under its own privacy policy and applicable Indonesian banking regulations.
- KYC Verification Vendors: Licensed third-party identity verification services receive your KYC documents to validate their authenticity. These vendors are contractually prohibited from using your data for any purpose other than identity verification for hgo90.
- Game Software Providers: Game studios including Pragmatic Play, Evolution Gaming, Pocket Games Soft, Spribe, Microgaming, and NetEnt receive anonymized session identifiers necessary to deliver their game content. These providers do not receive your name, payment details, or full account information.
- Cloud and Hosting Providers: hgo90 uses internationally certified cloud infrastructure providers to host the platform and store encrypted data. These providers operate as Data Processors under written agreements and have no right to access data for their own purposes.
- Regulatory and Law Enforcement Authorities: hgo90 will disclose Personal Data to its licensing authority, financial intelligence units, or law enforcement agencies where legally required to do so — for example, in response to a court order, regulatory investigation, or AML reporting obligation. Where legally permitted, hgo90 will notify affected Members of such disclosures.
- Professional Advisors: Lawyers, auditors, and compliance consultants engaged by hgo90 may access Personal Data in the context of providing professional advice, subject to professional confidentiality obligations.
As an internationally operated platform, hgo90 may transfer Personal Data to countries outside Indonesia for processing and storage. When such transfers occur, hgo90 ensures that appropriate safeguards are in place to maintain the level of data protection required under applicable law.
- Transfer Safeguards: International transfers to Data Processors are governed by contractual clauses that impose equivalent data protection standards, including obligations regarding data security, access controls, breach notification, and sub-processing restrictions.
- Storage Location: Member data is stored on servers located in jurisdictions that maintain a recognized level of data protection. hgo90 does not transfer data to jurisdictions with materially inadequate data protection frameworks without implementing compensating safeguards.
- Indonesian Users: For Members located in Indonesia, hgo90 acknowledges that Indonesian data protection legislation — including Government Regulation No. 71 of 2019 on Electronic Systems and Transactions — may apply to certain aspects of personal data processing. hgo90 endeavors to process Indonesian Member data in a manner consistent with applicable Indonesian data protection principles.
hgo90 retains Personal Data only for as long as is necessary to fulfill the purpose for which it was collected, or as required by applicable law or licensing obligations. The following retention periods apply.
| Data Category |
Retention Period |
Basis |
| Account & KYC Data |
5 years from account closure |
AML / gaming license regulatory requirement |
| Financial Transaction Records |
5 years from transaction date |
AML / financial crime compliance |
| Gaming Activity History |
5 years from the date of activity |
Licensing obligation; responsible gaming audit trail |
| Customer Support Records |
3 years from the date of the interaction |
Dispute resolution; service quality |
| Marketing Consent Records |
Until consent is withdrawn, plus 12 months |
Proof of lawful marketing basis |
| Anonymized Analytics Data |
Indefinite (no Personal Data once anonymized) |
Platform improvement; no personal data risk |
Upon expiry of the applicable retention period, Personal Data is securely deleted using industry-standard data destruction methods. KYC documents are deleted from live systems and from backup archives within 90 days of the applicable retention period end date.
hgo90 implements a multi-layered security architecture to protect your Personal Data against unauthorized access, loss, alteration, or disclosure. The following technical and organizational measures are operational on the hgo90 platform.
- Encryption in Transit: All data transmitted between your browser or device and hgo90 servers is encrypted using TLS 1.2 or higher (256-bit encryption). This covers all page loads, API calls, login events, and payment transactions.
- Encryption at Rest: Personal Data and KYC documents stored on hgo90 servers are encrypted using AES-256. Encryption keys are managed separately from the encrypted data using a dedicated key management system.
- Access Controls: Access to Personal Data within hgo90's infrastructure is restricted on a strict need-to-know basis. Employee access is governed by role-based permissions, enforced with multi-factor authentication. All data access events are logged and subject to periodic audit.
- Two-Factor Authentication (2FA): All Member accounts on hgo90 support two-factor authentication via one-time password (OTP). hgo90 strongly recommends enabling 2FA to protect your account against unauthorized access.
- Penetration Testing: hgo90's platform infrastructure is subject to regular third-party penetration testing and vulnerability assessments. Critical vulnerabilities identified are remediated within defined SLA windows.
- Data Breach Response: hgo90 maintains a documented data breach response procedure. In the event of a breach affecting your Personal Data, hgo90 will notify you by email within 72 hours of becoming aware of the breach, subject to any restrictions imposed by law enforcement investigations.
hgo90 uses cookies and similar tracking technologies to deliver platform functionality, maintain session state, and improve the user experience. The following categories of cookies are used.
| Cookie Type |
Purpose |
Basis |
| Strictly Necessary |
Session authentication, security tokens, load balancing, CSRF protection — cookies without which the platform cannot function correctly. |
Contractual necessity — no consent required |
| Functional / Preference |
Remembering your language preference, display settings, and last visited game category to improve your experience on return visits. |
Consent |
| Analytics |
Aggregated, anonymized data on page views, click paths, session duration, and feature usage — used to measure platform performance and prioritize improvements. |
Consent / Legitimate Interests |
| Fraud Detection |
Device fingerprinting and behavioral signals used to detect bot activity, multi-accounting, and suspicious login patterns. |
Legitimate Interests |
You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair or prevent access to hgo90's platform. Third-party advertising cookies are not used on the hgo90 platform.
As an hgo90 Member, you hold the following rights with respect to your Personal Data. Requests relating to any of these rights may be submitted via email to [email protected] with the subject line "DATA RIGHTS REQUEST — [right type]". hgo90 will respond to all verified data rights requests within 30 calendar days.
Right of Access
You may request a copy of all Personal Data held about you by hgo90, together with information about how it is used, where it is stored, and with whom it is shared. hgo90 will provide this in a structured, commonly used format.
Right to Rectification
If any Personal Data held by hgo90 is inaccurate or incomplete, you may request that it be corrected or supplemented. hgo90 will update inaccurate data within 5 business days of a verified rectification request.
Right to Erasure
You may request deletion of your Personal Data where processing is no longer necessary, consent has been withdrawn, or processing is unlawful. Erasure requests may be declined where retention is required by AML, gaming license, or other legal obligations — in which case hgo90 will explain the specific retention basis.
Right to Restriction
You may request that hgo90 restrict processing of your Personal Data while a dispute regarding its accuracy or lawfulness is being resolved. Restricted data will not be processed for any purpose other than storage until the restriction is lifted.
Right to Data Portability
Where processing is based on consent or contractual necessity and carried out by automated means, you may request that hgo90 provide your Personal Data in a machine-readable format (JSON or CSV) suitable for transfer to another service provider.
Right to Object
You may object to processing carried out on the basis of legitimate interests or for direct marketing purposes. Marketing objections are processed immediately upon receipt. Objections to legitimate interests processing will be assessed against the specific interests cited.
Right to Withdraw Consent
Where processing relies on your consent — including marketing communications and non-essential cookies — you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.
hgo90 is strictly an adults-only platform (21+). We do not knowingly collect Personal Data from individuals under the age of 21. If we become aware that data belonging to a person under 21 has been collected, we will delete it immediately, close the associated account, and reverse all transactions where technically possible.
Age verification is enforced at the KYC stage before any withdrawal is processed. If you believe that a person under 21 has registered on hgo90 using false information, please contact us immediately at [email protected]. Parental or guardian controls on devices and internet connections are an effective complementary layer of protection that hgo90 actively encourages families to use.
hgo90 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, licensing requirements, data processing practices, or platform functionality. The current version's effective date is always displayed at the top of this page.
- Material Changes: For material changes — including changes to the categories of data collected, the purposes of processing, or the categories of data recipients — hgo90 will notify you by email to your registered address at least 7 days before the change takes effect.
- Minor Updates: Corrections, clarifications, and updates that do not materially affect how hgo90 processes your Personal Data will take effect on publication without advance email notice.
- Continued Use: Your continued use of the hgo90 platform after a Policy update constitutes acceptance of the updated terms. If you do not agree with material changes, you may close your account before the change takes effect.