🔒 hokiwin77 Privacy Policy – updated January 2026 🛡️ Your data is protected with 256-bit SSL encryption 📋 Full compliance with Malaysia PDPA 2010 – your rights are protected 🚫 hokiwin77 never sells your personal data to third parties ✅ You have the right to access, correct, and delete your data at any time 💳 Touch 'n Go, DuitNow & GrabPay payment details are stored securely 🔒 hokiwin77 Privacy Policy – updated January 2026 🛡️ Your data is protected with 256-bit SSL encryption 📋 Full compliance with Malaysia PDPA 2010 – your rights are protected 🚫 hokiwin77 never sells your personal data to third parties ✅ You have the right to access, correct, and delete your data at any time 💳 Touch 'n Go, DuitNow & GrabPay payment details are stored securely
🔒

Hokiwin77 Privacy Policy – Protecting Your Personal Data in Malaysia

At hokiwin77, your privacy is not just a legal obligation — it is a commitment we take seriously every day. This document clearly explains what data we collect, why we collect it, and how it is protected in accordance with Malaysia's PDPA 2010.

Updated: January 2026 Version 3.1 PDPA 2010 Compliant SSL 256-bit

Introduction – hokiwin77's Privacy Commitment

When you register and use the platform hokiwin77, you are entrusting us with some of your personal information. We do not take that trust lightly. This Privacy Policy was written not merely to satisfy legal obligations, but to explain openly and transparently how we handle your data — in plain language, not confusing legal jargon.

Hokiwin77 is fully compliant with Personal Data Protection Act 2010 (PDPA) Malaysia, which is the primary legislation governing the collection, processing and storage of personal data in Malaysia. Under this Act, you have clear rights over your data, and we have clear obligations to uphold those rights.

This policy applies to all data collected through the hokiwin77 website, mobile application (where applicable), customer support systems, and all our communication channels. It covers all users in Malaysia — whether you are considering registering, are already an active member, or have closed your account.

Important Note: By using hokiwin77's services, you agree to this Privacy Policy. If you do not agree with any part of this policy, we ask that you refrain from using our platform. Any material changes to this policy will be communicated in advance via email or in-platform notification.

We have structured this Privacy Policy into clear sections so you can navigate directly to what is most relevant to you. If anything is unclear, our support team is available 24/7 via live chat or email at support@hokiwin77.best.

Hokiwin77's Six Core Privacy Principles

These principles form the foundation of every decision we make regarding our users' data.

Minimum & Purposeful Collection

Hokiwin77 only collects data that is genuinely necessary to operate our services. We do not collect more information than required, and every piece of data collected has a clear and legitimate purpose. This "minimum necessary" approach is central to how we operate.

Never Sold, Never Shared Indiscriminately

Your personal data is never sold to any third party for marketing or commercial purposes. Data sharing occurs only in the limited circumstances described in this policy – and always with appropriate safeguards in place. This is a commitment we do not compromise on.

Bank-Grade Security

We protect your data with the same 256-bit SSL encryption used by Malaysia's leading banking institutions. Data is stored on secure servers with layered access controls, regular security audits, and round-the-clock real-time threat monitoring.

Fully Yours to Control

Your personal data belongs to you. hokiwin77 gives you full control — the right to access, correct, request a copy of, or delete your data at any time. Requests are processed within 14 business days at no charge.

Malaysia PDPA 2010 Compliance

All of hokiwin77's data management practices are designed to meet and exceed the requirements of Malaysia's Personal Data Protection Act 2010. We undergo regular compliance reviews and update our procedures whenever legislation or guidelines change.

Timely Breach Notification

In the exceptional event of a data security breach affecting your information, hokiwin77 is committed to notifying affected users within a reasonable timeframe and taking immediate remedial action in line with PDPA requirements.

1Personal Data We Collect

Hokiwin77 collects several categories of data from our users, depending on how you interact with the platform:

A. Data You Provide Directly

  • Registration information: Full name (as printed on your MyKad), Malaysian mobile number, email address, date of birth, and a password of your choosing. Your name must match the name on the payment method you use.
  • Identity verification documents (KYC): A copy of your MyKad or passport when requested for identity verification purposes prior to your first withdrawal or when unusual activity is detected on your account.
  • Payment information: The account number or eWallet ID associated with your chosen payment method – Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or your FPX account (Maybank2u, CIMB Clicks). hokiwin77 does not store credit card details directly.
  • Support communication: Full conversation history with our customer support team via live chat or email, including issues reported and responses provided.

B. Automatically Collected Data

  • Platform usage data: Games played (Live Casino, baccarat, slots, football betting, sports, lottery, esports), session duration, play frequency, bet values, and game outcomes.
  • Technical data: IP address, web browser type, device operating system, screen resolution, and mobile carrier (Maxis, Celcom, Digi, U Mobile) when accessing via mobile data.
  • Approximate location data: State and city based on your IP address – used to confirm you are located in Malaysia and for fraud detection purposes. hokiwin77 does not track your precise GPS location.
  • Cookie data: Session information, language and display preferences, and platform performance analytics. See Section 8 for full details.
Important: hokiwin77 does not collect sensitive information such as biometric data, health information, political views, or religious beliefs. The data we collect is limited to what is necessary to operate an online entertainment service safely and responsibly.

2Purpose of Data Collection

Under PDPA 2010, we are required to state a clear purpose for each piece of data collected. Those purposes are as follows:

Purpose of Collection Legal Basis Data Involved
Account management & identity verification Contractual requirement Name, phone number, email, MyKad
Deposit & withdrawal processing Contractual requirement Payment information, transaction records
Gaming service provision Contractual requirement Usage data, game history
Fraud prevention & AML Legal obligations IP, transactions, usage patterns
Age verification (18+) Legal obligations Date of birth, KYC documents
Customer support Legitimate interest Account data, communication history
Platform improvements Legitimate interest Technical data, usage patterns
Marketing communications (with consent) Consent Email, phone number

3How hokiwin77 Uses Your Data

  • To verify your identity at registration and confirm that you meet the minimum age requirement of 18 years to use the hokiwin77 platform. This is a mandatory requirement under Malaysian entertainment law.
  • Processing deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX, as well as carrying out withdrawal checks to your Malaysian local bank account. The name on your payment account must match the registered name on your hokiwin77 account.
  • Delivering a personalised gaming experience – including surfacing games relevant to your interests (Live Casino, baccarat, Malaysia Super League betting, EPL, badminton, MPL Malaysia esports) and updating the baccarat roadmap display in real time.
  • Detecting and preventing fraud, money laundering, bonus abuse, and unauthorised access to your account. Our systems continuously monitor transaction patterns and unusual activity.
  • Sending important notifications related to your account — including deposit confirmations, withdrawal confirmations, security alerts, and significant terms updates. These communications cannot be opted out of as they are an operational requirement.
  • Sending marketing communications about promotions, bonuses, and special events at hokiwin77 – but only where you have given your consent. You may withdraw consent at any time through your account settings.
  • Conducting aggregate analysis (with no personally identifiable information) to understand platform usage patterns and make improvements to the user experience.

4Data Sharing & Disclosure

Hokiwin77 does not sell your personal data. Data sharing only occurs in the following limited circumstances:

  • Payment service providers: Information required to process transactions is shared with the relevant payment method providers – Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX member banks. Such sharing is limited strictly to what is necessary to complete the transaction.
  • Licensed game providers: For live baccarat tables, live casino, and other games, minimal session information (anonymised player ID, bet value) is shared with the licensed game platform providers used by hokiwin77. These providers are bound by strict data protection agreements.
  • Legal requirements: hokiwin77 will disclose data to relevant Malaysian authorities – including the police, courts, or regulatory bodies – when required by Malaysian law, a valid court order, or to prevent serious crime.
  • Business transfer: In the event of a merger, acquisition, or transfer of company assets, user data may be transferred to the receiving entity. We will notify users and ensure continued data protection in any such circumstances.
  • Supporting technology providers: Companies that assist us with technical operations (such as cloud services and customer support systems) may process certain data on our behalf, but only under our instructions and subject to data processing agreements that comply with PDPA.
We DO NOT share your data with: third-party advertising companies, data brokers, social media platforms (unless you personally log in via a social account), or any party not mentioned above. There are no exceptions to this.

5Data Security Measures We Practice

Hokiwin77 invests seriously in security infrastructure to protect your data:

256-bit SSL Encryption

All data transmitted between your device and hokiwin77's servers is encrypted using TLS 1.3 with AES-256 encryption keys — the same standard used by Maybank, CIMB, and other major Malaysian banks.

Secure & Redundant Servers

Data is stored in certified data centres with strict physical and digital access controls. Redundant backup systems ensure data is never lost, even in the event of a technical failure.

Internal Access Controls

Only staff who require access to user data in order to carry out their duties are permitted to do so. All access is logged and audited on a regular basis.

24/7 Threat Monitoring

Intrusion detection systems (IDS) and firewalls operate around the clock to detect and block any unauthorised access attempts to our infrastructure.

Two-Factor Authentication (2FA)

2FA is available for all hokiwin77 accounts. Once enabled, every login from a new device requires OTP verification via SMS to your registered Malaysian mobile number.

Regular Security Audits

Hokiwin77 conducts regular penetration testing and security audits by independent third parties to identify and address vulnerabilities before they can be exploited.

6Data Retention Period

Hokiwin77 does not retain data for longer than necessary. The following outlines our data retention guidelines:

  • Active account data: Retained for as long as your account is active. Following account closure at your request, core personal data will be deleted within 90 days, unless legal requirements mandate a longer retention period.
  • Financial transaction records: Retained for 7 years from the date of transaction, in line with Malaysian financial and tax legal requirements (Companies Act 2016). This covers deposit and withdrawal records via Touch 'n Go, DuitNow, GrabPay, and others.
  • Game records: Complete game history (baccarat, casino, Sports Betting, lottery, e-sports) is retained for 5 years for dispute resolution and compliance purposes. After this period, records are aggregated and anonymised.
  • KYC Documents: Copies of MyKad or passport collected for identity verification purposes are retained for the period required under applicable AML (Anti-Money Laundering) laws – typically 5 years from the date of the last withdrawal.
  • Customer support history: Conversation records and support tickets are retained for 3 years for reference and dispute resolution purposes. After this period, records are permanently deleted.
  • Cookie data: Session cookies expire immediately when you close your browser. Preference cookies are retained for up to 1 year. For more details, refer to Section 8.
Early Deletion Request: If you would like your data deleted ahead of the standard retention period (beyond legal requirements), please contact us at support@hokiwin77.best. We will review your request and let you know which data can be deleted early and which must be retained due to legal obligations.

7Your Rights under Malaysia's PDPA 2010

As a user in Malaysia, you have the following rights under the Personal Data Protection Act 2010:

Right of Access

You have the right to obtain a copy of the personal data we hold about you. Requests are processed within 14 business days.

Right to Rectification

If your data is inaccurate or out of date, you have the right to request that we correct it. Basic corrections can be made directly from your account settings.

Right to Erasure

You may request deletion of your data, subject to legal retention requirements. Close your account and submit a request to support@hokiwin77.best.

Right to Object

You have the right to object to the processing of your data for marketing purposes. Opt out of marketing communications from your account settings or via the unsubscribe link in our emails.

Data Portability Rights

You may request a copy of your data in a machine-readable format (JSON or CSV) for transfer to another service if desired.

Right to Restrict Processing

In certain circumstances, you may request that we restrict how your data is processed while a separate request is being resolved.

How to Submit a Request: Send an email to support@hokiwin77.best with the subject line "PDPA Data Rights Request" and state the type of request along with your account details. We will verify your identity and process the request within 14 business days. No fees are charged for reasonable data rights requests.

8Cookies & Tracking Technologies

Hokiwin77 uses cookies and similar technologies to keep the platform running smoothly and to deliver the best experience to our users:

Cookie Type Purpose Duration Status
Session Cookies Maintaining your login session and session information while you play baccarat, casino games, or place bets Expires when the browser is closed Mandatory
Security Cookies Preventing CSRF and other security attacks, and validating legitimate requests from your account 1 day Mandatory
Preference Cookies Saving your language settings, baccarat table display preferences, and game preferences 1 year Mandatory
Analytics Cookies Understanding how users interact with the platform to drive improvements – data is aggregated and anonymised 90 days Preferences
Performance Cookies Measuring page load times and Live Casino streaming quality for technical improvements 30 days Preferences

You can manage your cookie settings through your web browser settings. Disabling essential cookies may affect platform functionality, including the ability to log in and play. hokiwin77 does not use third-party cookies for advertising.

9Child Data Protection

  • Hokiwin77 services are intended for adults aged 18 and above only. We do not knowingly collect or process personal data from individuals under the age of 18.
  • Our registration process includes date of birth verification and, where necessary, a request for age verification documents (MyKad). This is an active measure to prevent underage registration.
  • If we discover that data from a minor has been collected without our knowledge, the account will be closed immediately, the data will be deleted, and any remaining funds will be returned to the rightful owner.
  • If you believe a minor has registered an account on hokiwin77, please contact us immediately at support@hokiwin77.best so we can take swift action.

10Cross-Border Data Transfers

  • Hokiwin77 operates with its primary focus in Malaysia. However, some of our technical service providers — such as cloud infrastructure and game providers — may store or process data in data centres located outside Malaysia.
  • In all cases of cross-border data transfers, hokiwin77 ensures that protection equivalent to or greater than Malaysia's PDPA 2010 applies to that data through binding contractual agreements with the relevant providers.
  • Hokiwin77 does not transfer user data to countries without adequate data protection standards unless additional safeguards are in place, such as Standard Contractual Clauses or other recognised data transfer mechanisms.
  • You have the right to know where your data is transferred. If you would like more information about international data transfers carried out by hokiwin77, please contact us at support@hokiwin77.best.

11How to Contact Us About Privacy

  • For any enquiries, requests, or complaints regarding this Privacy Policy or the management of your personal data, please contact the hokiwin77 privacy team by email at support@hokiwin77.best with the subject line "Data Privacy Inquiry".
  • We are committed to responding to all privacy enquiries within 5 business days and resolving formal requests within 14 business days.
  • If you are not satisfied with how hokiwin77 has handled your privacy complaint, you have the right to refer the matter to Malaysia's Department of Personal Data Protection (JPDP) under the Ministry of Digital.
  • This Privacy Policy is updated from time to time. The current version is always available on this page with the date indicated. Members will be notified of significant changes by email at least 7 days before they take effect.
Last Updated: January 2026  |  Version: 3.1  |  Effective Date: 15 January 2026. Changes in this version include added details on analytics cookies, updated data retention schedules, and further clarification on data portability rights.
🔒
Privacy Questions?

Hokiwin77's privacy team is available to assist you 24/7.

📧 support@hokiwin77.best
Register Now
Key Privacy Facts
EncryptionSSL 256-bit
LegislationPDPA 2010
Data soldNever
Request response14 business days
UpdatedJan 2026
Data Protection Level
Data Encryption100%
PDPA Compliance100%
Access Controls98%
Threat Monitoring99%

* Based on the latest internal security audit

Your Privacy Rights – A Simple Summary

We understand that privacy laws can be complex. Here is a straightforward summary of your rights as a hokiwin77 user in Malaysia.

📋
Know What We Store

Request a full copy of all personal data hokiwin77 holds about you at any time. We are required to provide it within 14 business days, free of charge.

✏️
Correct Inaccurate Data

If your name, phone number, or any other account information is incorrect, you have the right to have it corrected. Basic corrections can be made directly from your account dashboard.

🗑️
Delete Your Data

Close your account and request deletion of data that does not need to be retained for legal purposes. This process is free of charge and we will not question your decision.

🚫
Unsubscribe from Marketing Emails

Don't want to receive promotions or bonus offers from hokiwin77? Unsubscribe with one click from within our emails, or update your preferences in your account settings. Changes take effect immediately.

📤
Take Your Data With You

Request an export of your data in a portable format (JSON or CSV). Useful if you wish to keep your own personal record of your game history or transactions.

⚖️
Submit a Formal Complaint

If you are dissatisfied with how hokiwin77 handles your data, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP).

FAQ – hokiwin77 Privacy Policy

The most frequently asked questions from Malaysian members about privacy and data security at hokiwin77.

No. hokiwin77 never sells, rents, or shares your personal data with advertisers, data brokers, or third-party marketing companies. Your data is used solely to operate hokiwin77 services, process your financial transactions through your chosen Malaysian payment method (Touch 'n Go eWallet, DuitNow, GrabPay, and others), and keep your account secure. Limited sharing occurs only with the technical service providers necessary to run the platform, and all of them are bound by strict data protection agreements.

hokiwin77 does not store credit or debit card details directly on our servers. All transactions are processed through licensed, secure payment gateways. For e-wallet methods such as Touch 'n Go eWallet, GrabPay, Boost and ShopeePay, transactions occur directly through the respective e-wallet systems — hokiwin77 only receives confirmation that a payment was successful. For FPX via Maybank2u or CIMB Clicks, the verification process takes place within your own bank's system, not on hokiwin77's servers. All communication between our platform and payment providers is encrypted with 256-bit SSL.

Yes, you have the right to request deletion of your data under Malaysia's PDPA 2010. To do so, close your account first and send a deletion request to support@hokiwin77.best. We will delete all data that does not need to be retained for legal purposes within 90 days. Please note that certain data, such as financial transaction records (7 years) and KYC documents (5 years), must be retained under Malaysian financial law and cannot be deleted early. We will inform you precisely which data has been deleted and which must be kept, along with the reasons.

If your account is closed at your own request, core personal data (name, email, phone number) will be deleted within 90 days, while transaction and game records are retained for the periods required by law. If an account is closed by hokiwin77 due to a breach of terms or fraud, data may be retained for a longer period for investigation and legal action purposes. In all cases, you may still submit a data access request to find out what we hold about you, unless disclosure would risk compromising an ongoing investigation.

hokiwin77 detects your approximate location based on your device's IP address, giving us information about the country and state you are in. This data is used for two purposes: first, to confirm that you are in Malaysia, as our services are intended exclusively for Malaysian users; and second, as part of our fraud detection system — access from unusual or overseas locations may trigger additional security checks to protect your account. hokiwin77 does not use GPS or track your precise location. IP data is not shared with advertisers or third parties for marketing purposes.
🛡️

Your Data Is Safe – Play with Full Confidence at hokiwin77

Register a free account today and enjoy a fully protected online entertainment experience. Your privacy is our priority — 256-bit SSL, PDPA 2010 compliant, and your data is never sold to anyone.

18+ only. Gambling can be addictive. Please play responsibly.

Bahasa Melayu