hk asli Privacy Policy
This page describes what we collect when you use hk asli and how we keep that data protected. We at hk asli collect only the information necessary to operate your account, process your deposits and withdrawals, and comply with applicable regulations. Your email, payment details, and identity documents are encrypted and never shared with third parties except as required by law.
We store your data on servers that may sit outside your jurisdiction. Our compliance team retains KYC documents (ID, proof of address) for five years per regulatory requirements, then deletes them. We use cookies and session tokens to recognize your account when you log in, but these contain no personal information—only a secure session identifier.
Our hk asli privacy policy applies to all users accessing our platform from supported jurisdictions. We update this policy as our service evolves, and we'll notify you of material changes via email.
What Data We Collect on hk asli
Account registration and KYC information
When you register on hk asli, we collect your email, username, and password (hashed, never stored in plain text). We also collect your full name, date of birth, and current address. During KYC verification before your first withdrawal, we collect a photograph of your identity document (Indonesian KTP, passport, or driver's license) and proof of residence (utility bill, bank statement, or rental agreement).
We use this information to verify your identity, prevent fraud, comply with anti-money-laundering regulations, and process your withdrawal requests. We compare your ID photograph to a selfie you take in our app using facial-recognition technology. Your facial data is encrypted and not retained after verification unless you initiate a re-verification process.
Payment and transaction data
We collect information about every deposit and withdrawal on hk asli. This includes your payment method (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet), the date and time of the transaction, and the amount. We do not store your full card number or e-wallet credentials—your payment provider handles that encryption. We store only a tokenized reference so we can verify your withdrawal method matches your deposit method.
Key takeaways
- We collect email, name, date of birth, and address at registration
- KYC documents (ID, proof of address) are retained for 5 years, then deleted
- Payment details are tokenized and never stored in full
- Facial recognition data is deleted after verification
- Your password is hashed and cannot be read by our staff
Gameplay and session data
We at hk asli collect information about your gameplay: which slots you play (Aviator, Sweet Bonanza, Gates of Olympus, Fortune Tiger, Mahjong Ways, etc.), your bet sizes, your session duration, and your account balance. We also log which live-dealer tables you access, which sports events you view (Liga 1, Piala AFF, Champions League, etc.), and which payment methods you've registered.
We use this data to detect unusual account activity (potential fraud), generate your account statement, and improve our game recommendations. We do not sell this data to third parties. We may share aggregated, anonymized statistics with game providers (e.g., "Game X was played 5,000 times this week") for RTP and fairness auditing, but individual account details remain private.
Cookies and tracking
We use cookies and session tokens to keep you logged into hk asli. These cookies contain only a secure session identifier—no personal information. You can disable cookies in your browser, but this will log you out and require you to log in again each visit. We do not use third-party tracking cookies (Google Analytics, Facebook Pixel) on hk asli.
Device and IP address logging
We at hk asli log your device type (mobile, tablet, desktop), operating system, browser, and IP address when you log in. This helps us detect account takeover attempts—if your account suddenly logs in from a new country or device, we flag it for review. We retain these logs for 90 days, then delete them.
Our geolocation screening uses your IP to verify that you're accessing hk asli from a supported jurisdiction. Users attempting to access from restricted regions are blocked automatically. This does not affect users in Jakarta, Surabaya, Bandung, Medan, Semarang, or other areas where we operate legally.
How We Use, Store, and Protect Your Data
Data retention and deletion
We retain different types of data for different periods on hk asli. Gameplay logs and session records are kept for 2 years for audit purposes, then deleted. KYC documents (ID, proof of address) are retained for 5 years per Indonesian regulatory requirements, then securely deleted. Device logs (IP, browser, device type) are kept for 90 days. Account usernames and hashed passwords are retained for the lifetime of your account unless you request deletion.
If you close your hk asli account, we retain enough data to process any outstanding withdrawals and comply with anti-money-laundering laws. After 7 years from account closure, we delete all personal data except what is required by law.
Our hk asli security measures
We protect all data in transit using SSL (Secure Sockets Layer) encryption. Your passwords are hashed using industry-standard algorithms and cannot be reversed by our staff. Payment information is encrypted at rest and isolated from our game databases—our developers, dealers, and support team cannot access your card or e-wallet tokens.
Our data centers use firewalls, intrusion detection, and regular security audits. We conduct quarterly penetration tests to identify vulnerabilities. Our compliance team monitors for unauthorized access attempts and responds to any breach within 24 hours, notifying affected users via email.
Third-party processors
We at hk asli use third-party payment processors to handle DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, and bank transfers. These processors sign data-processing agreements committing to the same security standards we maintain. We do not control their infrastructure, but we verify their compliance annually.
We also use third-party email services to send you account notifications and support replies. These services are contractually bound to keep your email address confidential. We do not hire separate analytics providers—our internal team handles all data analysis.
Your rights and data requests
You have the right to request a copy of all personal data we hold about you on hk asli. Submit a request to our support team with your account email, and we provide a complete data export within 30 days. You can also request correction of inaccurate information (e.g., if your name is misspelled in our system) or request deletion of non-essential data (gameplay logs older than 2 years can be deleted upon request).
We cannot delete KYC documents within the 5-year retention window due to regulatory requirements, but we can delete your account entirely. Closing your hk asli account permanently blocks all access and initiates data deletion (subject to compliance holds). If you believe we've misused your data, contact our compliance team or lodge a complaint with your local data protection authority.
Summary: Your Privacy on hk asli
We at hk asli collect only information necessary to operate your account and comply with regulations. This includes your email, name, date of birth, address, payment method, and gameplay history. We encrypt all data in transit and at rest. Your payment card and e-wallet details are tokenized and never stored in full. KYC documents are retained for 5 years per law, then deleted.
We do not sell your data to third parties. We use it to verify your identity, prevent fraud, process transactions, and improve your experience. Third-party payment processors access only the minimum data needed to complete your mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, or bank transfers. You can request a complete data export, correct inaccurate information, or delete your account at any time by contacting our support team.
Our commitment is straightforward: we treat your privacy with the same seriousness we apply to your account security. For questions about how we use your data, contact our support team during business hours (Monday–Friday, 09:00–17:00 Jakarta time) or review our Terms & Conditions for additional policy details.