Privacy Policy

1. Definitions

Throughout this Privacy Policy, the following terms carry the meanings defined below:

• "bkhoki," "we," "us," "our" — refers to the bkhoki online betting platform and its data-controlling operators.
• "You," "your," "user," "member," "player" — refers to any individual who accesses the bkhoki website, creates an account, or uses any bkhoki service.
• "Personal Data" — any information that identifies or can reasonably identify you as an individual, including your name, email address, phone number, Indonesian National ID number, IP address, and financial account details.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, and deletion.
• "Service" — the bkhoki platform and all associated products, features, and communications.
• "Third Parties" — entities other than you and bkhoki, such as payment processors, game providers, and analytics partners.
• "Cookies" — small text files placed on your device by the bkhoki platform to recognize your browser, maintain session state, and analyze usage.

2. Information We Collect

We collect Personal Data through several channels: directly from you when you register an account, use our services, or contact support; automatically as you interact with our platform; and from trusted third-party verification partners. The specific categories of data we collect are set out below.

2.1 Account Registration Data

When you create a bkhoki account, we collect:

• Full legal name (as it appears on your Indonesian National ID — KTP)
• Date of birth (to verify you are at least 21 years of age)
• Indonesian residential address
• Email address
• Mobile phone number (Indonesian number preferred)
• Username and encrypted password

2.2 Identity Verification (KYC) Data

To comply with Know Your Customer (KYC) requirements and anti-money-laundering obligations, we collect:

• Scanned copy or photo of your Indonesian National ID (KTP)
• Proof of address (e.g., utility bill, bank statement from BCA, BRI, BNI, Mandiri, or CIMB Niaga dated within three months)
• Selfie photograph holding your ID document
• Additional documents if required during enhanced due-diligence reviews

2.3 Financial and Transaction Data

To facilitate deposits and withdrawals, we collect:

• Bank account name and account number (BCA, BRI, BNI, Mandiri, CIMB Niaga, or other supported banks)
• E-wallet account details (DANA, OVO, GoPay, ShopeePay, LinkAja)
• Transaction history (deposits, withdrawals, bet placements, and account balance records)
• Payment method type and transaction reference numbers

bkhoki does not store full card numbers or banking credentials directly. All payment processing is handled by PCI-DSS-compliant third-party payment gateways.

2.4 Usage and Behavioral Data

When you use the platform, we automatically collect technical and behavioral data, including:

• IP address, browser type, operating system, and device type
• Pages visited, time spent on pages, click-through patterns, and game sessions
• Betting history, wagering patterns, and game preferences
• Login timestamps, session duration, and geographic location (at country/city level)

2.5 Communication Data

When you contact our support team or participate in promotions, we retain:

• Chat transcripts and email correspondence
• Survey responses and feedback submissions
• Promotional participation records

3. How We Use Your Personal Data

bkhoki uses your Personal Data for the following purposes:

4. Legal Basis for Processing

bkhoki processes your Personal Data on the following legal grounds:

• Contractual Necessity: Processing your registration, KYC verification, deposits, withdrawals, and bet settlements is necessary to perform our contract with you as a bkhoki member.
• Legal Obligation: We are required to collect and retain certain data — including KYC documents and transaction records — to comply with applicable anti-money-laundering, counter-terrorism financing, and age verification requirements.
• Legitimate Interests: We process certain usage and behavioral data to prevent fraud, improve platform security, and optimize the user experience, provided these interests do not override your fundamental privacy rights.
• Consent: For marketing communications and non-essential cookies, we rely on your explicit consent, which you may withdraw at any time through your account settings or by contacting support.

5. Data Sharing and Third-Party Disclosure

bkhoki does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We share Personal Data only in the following limited circumstances:

5.1 Payment Processors

To facilitate deposits and withdrawals, we share necessary financial information (name, account number) with our payment processing partners who integrate with Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet providers (DANA, OVO, GoPay, ShopeePay, LinkAja). These partners are contractually required to handle your data securely and use it solely for processing the relevant transaction.

5.2 Game Providers

Third-party game studios (including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and Spribe) receive limited session data — typically a session token and stake amounts — to deliver their game content. These providers do not receive your full personal profile or payment details.

5.3 Identity Verification Partners

bkhoki works with accredited KYC verification service providers to authenticate identity documents. These partners process your KTP scan, proof of address, and selfie solely for the purpose of identity verification and are bound by strict data processing agreements.

5.4 Legal and Regulatory Authorities

We may disclose Personal Data to law enforcement agencies, regulatory bodies, or other government authorities when required by applicable law, court order, or to protect the rights and safety of bkhoki and its users. Disclosure in these circumstances is kept to the minimum necessary.

5.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of bkhoki's business assets, your Personal Data may be transferred to the acquiring entity. You will be notified of any such transfer and the choices available to you in advance.

6. Cookies and Tracking Technologies

bkhoki uses cookies and similar technologies to operate the platform, remember your preferences, maintain your login session, and analyze usage patterns. Below is a summary of the cookie categories we use:

You can manage or disable cookies through your browser settings. Please note that disabling essential cookies will impair the functionality of the bkhoki platform and may prevent you from logging in or placing bets. Analytics and marketing cookies can be disabled without affecting core platform functionality.

7. Data Security Measures

The security of your Personal Data is our highest technical priori ty. bkhoki employs the following technical and organizational security measures to protect your data against unauthorized access, loss, alteration, or disclosure:

• 256-Bit SSL Encryption: All data transmitted between your browser and the bkhoki platform is encrypted using industry-standard TLS 1.2/1.3 protocols — the same level of encryption used by major Indonesian banks and fintech applications such as DANA and OVO.
• Secure Server Infrastructure: bkhoki's servers are hosted in ISO 27001-certified data centers with physical access controls, redundant power systems, and DDoS protection.
• Data Access Controls: Personal Data is accessible only to authorized bkhoki personnel who require it to perform their job functions. All staff with data access are bound by strict confidentiality agreements.
• Password Hashing: User passwords are never stored in plain text. We use industry-standard cryptographic hashing algorithms (bcrypt) with salting to protect your credentials.
• Two-Factor Authentication (2FA): You are strongly encouraged to enable 2FA on your bkhoki account to add an additional layer of protection beyond your password.
• Regular Security Audits: Our platform and infrastructure undergo regular penetration testing and security audits conducted by independent third-party security firms.
• Breach Response Protocol: In the event of a data breach that affects your Personal Data, bkhoki will notify affected users within 72 hours of discovery and take immediate steps to contain and remediate the breach.

8. Data Retention

bkhoki retains your Personal Data only for as long as is necessary to fulfill the purposes outlined in this Privacy Policy, or as required by applicable legal and regulatory obligations. The following retention periods apply:

Once the applicable retention period expires, Personal Data is securely deleted or anonymized so that it can no longer be linked to you as an individual.

9. Your Privacy Rights

As a bkhoki member and data subject, you hold the following rights with respect to your Personal Data. To exercise any of these rights, contact our support team at the details provided in Section 13.

• Right of Access: You may request a copy of the Personal Data bkhoki holds about you, including information about how it is processed and who it is shared with.
• Right to Rectification: If any of your Personal Data is inaccurate or incomplete, you have the right to request that we correct or update it promptly.
• Right to Erasure ("Right to Be Forgotten"): In certain circumstances — for example, if you close your account and we have no outstanding legal obligation to retain your data — you may request that we delete your Personal Data.
• Right to Restriction of Processing: You may request that we limit how we use your Personal Data while a dispute regarding its accuracy or our legal basis for processing is being resolved.
• Right to Data Portability: You may request that we provide your Personal Data in a structured, machine-readable format so that you can transfer it to another service provider.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes. We will comply unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

We will respond to all verified privacy rights requests within 30 calendar days of receipt. In complex cases, we may extend this period by an additional 30 days, with notification to you. We will never charge a fee for exercising your privacy rights, except in cases of manifestly unfounded or excessive requests.

10. Minors and Age Restriction

bkhoki is strictly an adults-only platform. You must be at least 21 years of age to register an account or use any bkhoki service. We do not knowingly collect Personal Data from individuals under the age of 21.

If we become aware that a person under 21 has registered an account or provided Personal Data to us, we will immediately suspend that account, void any associated bets and winnings, and delete all Personal Data associated with that account. If you believe that a minor has registered on our platform, please contact our support team immediately so we can take appropriate action.

11. International Data Transfers

bkhoki's primary user base is located in Indonesia, and we process most data within our secure server infrastructure. However, because some of our third-party service providers — including game studios such as Evolution Gaming, Pragmatic Play, and Microgaming, as well as KYC verification partners — operate internationally, your Personal Data may be transferred to and processed in countries outside Indonesia.

Whenever Personal Data is transferred internationally, bkhoki ensures that appropriate safeguards are in place, including contractual data processing agreements that require third-party recipients to protect your data to the same standard as this Privacy Policy. We do not transfer Personal Data to jurisdictions that do not offer an adequate level of data protection without implementing additional technical and contractual safeguards.

12. Updates to This Privacy Policy

bkhoki may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable laws, or business operations. When we make material changes, we will notify you by posting a prominent notice on the bkhoki platform and, where appropriate, by sending a notification to the email address registered on your account.

The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. Your continued use of bkhoki after any changes to this Policy constitutes your acceptance of those changes.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how bkhoki handles your Personal Data, please reach out to our dedicated privacy and data protection team:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 through the bkhoki platform — select "Privacy & Data" from the support menu
• Response Time: We aim to acknowledge all privacy-related inquiries within 2 business days (WIB, UTC+7) and resolve them within 30 calendar days

When submitting a data access, rectification, or erasure request, please include your registered email address, account username, and a brief description of your request to help us locate and verify your account efficiently.