Privacy Policy for hit51

Throughout this Privacy Policy, the following terms carry the meanings set out below:

• "hit51" / "we" / "us" / "our" refers to the internationally licensed operator of the hit51 platform at https://hit51.bet.
• "Platform" means the hit51 website, mobile-optimised interface, and any associated APIs or digital services.
• "Member" / "you" / "your" means any natural person who accesses the Platform, whether or not they have registered an account.
• "Personal Data" means any information that identifies or could reasonably identify you as an individual, including your name, email address, phone number, device identifiers, and financial account details.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, and deletion.
• "KYC" means Know Your Customer — the identity verification process required for withdrawal eligibility and account limit increases.
• "Cookies" means small text files placed on your device by the Platform to store session information and support analytics.
• "WIB" means Western Indonesia Time (UTC+7), the default operating time zone for all Platform activities.

This Privacy Policy applies to all Personal Data collected by hit51 in connection with your use of the Platform, including data collected during account registration, KYC verification, deposits, withdrawals, gameplay, customer support interactions, and any marketing communications you have opted into.

hit51 acts as the data controller in respect of all Personal Data processed under this Policy. As data controller, hit51 determines the purposes and means of processing your Personal Data and is responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

This Policy covers Personal Data relating to Members who are residents of Indonesia or who access the Platform from Indonesia. If you access the Platform from a different jurisdiction, additional or different data protection obligations may apply to you; it is your responsibility to determine your local legal position.

hit51 collects the following categories of Personal Data, limited to what is necessary for the purposes described in this Policy:

hit51 does not knowingly collect Sensitive Personal Data (such as racial or ethnic origin, political opinions, religious beliefs, or health information) unless specifically required for responsible gaming assessments, in which case collection is based on your explicit consent.

hit51 collects Personal Data through the following methods:

• Direct provision: Data you actively submit when registering an account, completing KYC verification, depositing or withdrawing funds, contacting support, or responding to promotions.
• Automated collection: Technical and Usage Data collected automatically via server logs, cookies, and analytics tools each time you access the Platform. This data is collected regardless of whether you are a registered Member.
• Third-party payment processors: When you initiate a deposit or withdrawal via a local Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OCBC NISP) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), the payment provider shares transactional confirmation data with us to reconcile your account balance.
• Identity verification providers: During the KYC process, we may use a third-party identity verification service that processes your government ID and liveness check data on our behalf, returning a verification result to us.
• Fraud prevention and AML partners: We may receive risk-scoring data from licensed anti-money-laundering (AML) and fraud screening services to protect the integrity of the Platform.

hit51 processes your Personal Data only where a valid legal basis exists. The primary legal bases we rely on are:

• Contractual necessity: Processing required to open and operate your account, process deposits and withdrawals, settle wagers, and provide customer support — all of which are necessary to perform the contract between you and hit51.
• Legal obligation: Processing required to comply with applicable AML, CTF, and KYC obligations under international regulatory frameworks, including the retention of transaction records for the periods mandated by our licensing authority.
• Legitimate interests: Processing necessary for fraud prevention, platform security, network and information security, improving Platform performance, and conducting internal analytics — provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — for example, for optional marketing communications, promotional emails, or the collection of sensitive data in the context of voluntary responsible gaming self-assessments. You may withdraw consent at any time without affecting the lawfulness of prior processing.

hit51 uses the Personal Data we collect for the following specific purposes:

• Creating and managing your Member account, including verifying your identity and maintaining your Wallet balance in IDR.
• Processing deposit and withdrawal transactions via your chosen local Indonesian bank or e-wallet, and reconciling your account accordingly.
• Conducting KYC and ongoing due-diligence checks to meet our AML and CTF compliance obligations.
• Settling wagers, calculating winnings, and applying bonus credits in accordance with applicable promotion terms.
• Providing customer support via live chat and email, including responding to complaints and dispute resolution requests submitted to support@hit51.bet.
• Sending transactional communications — including deposit confirmations, withdrawal notifications, KYC status updates, and security alerts — to your registered email address and phone number.
• Sending promotional communications (where you have consented), including information about seasonal offers aligned with Indonesian cultural dates such as Ramadhan, Idul Fitri, and Imlek.
• Detecting and preventing fraud, bonus abuse, multi-accounting, collusion, and other prohibited conduct as defined in our Terms & Conditions.
• Monitoring and analysing Platform usage to improve game selection, interface design, and overall user experience for our Indonesian-market membership base.
• Enforcing our Terms & Conditions and exercising or defending legal claims where necessary.

hit51 does not sell, rent, or otherwise commercially disclose your Personal Data to third parties for their own marketing purposes. We share your data only in the following circumstances, and only to the minimum extent necessary:

• Payment processors and banking partners: We share your name, account number, and transaction amount with the relevant Indonesian bank or e-wallet provider (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) solely to execute deposit and withdrawal instructions.
• Identity verification providers: We share Identity Data and KYC documentation with our contracted identity verification partner for the purpose of completing your verification check. That partner acts as a data processor under our instructions.
• Fraud and AML screening services: We share Technical Data and Transaction Data with licensed AML and fraud screening platforms to fulfil our compliance obligations and protect Members from financial crime.
• Game studios and platform providers: When you launch a game from Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Pocket Games Soft, your session data (stake amount, game outcome) is transmitted to the relevant studio for game resolution. These studios operate under separate data agreements and are contractually prohibited from using your data for purposes beyond game operation.
• Regulatory and law enforcement authorities: We will disclose Personal Data to competent authorities when required to do so by applicable law, court order, or where we have a good-faith belief that disclosure is necessary to prevent imminent harm, financial crime, or other serious offences.
• Professional advisors: We may share data with our legal counsel, auditors, and insurance providers where necessary for the conduct of their professional services, subject to appropriate confidentiality obligations.
• Corporate transactions: In the event of a merger, acquisition, or sale of substantially all of hit51's assets, your Personal Data may be transferred to the successor entity, provided that entity agrees to honour this Privacy Policy or provides you with equivalent protections.

hit51 uses cookies and similar tracking technologies to support essential Platform functions, analyse usage patterns, and where you have consented, deliver relevant promotional content. The following cookie categories are in use:

You may manage your cookie preferences at any time through your browser settings. Please note that disabling Strictly Necessary cookies may impair the functionality of the Platform, including your ability to log in and maintain an active session. Instructions for managing cookies in commonly used browsers (Chrome, Firefox, Safari, Edge) are available from each browser's help documentation.

hit51 does not use cross-site tracking technologies that link your activity on this Platform with activity on unaffiliated third-party websites for advertising profiling purposes.

hit51 retains your Personal Data for as long as necessary to fulfil the purposes described in this Policy, to maintain your active account, and to comply with our legal and regulatory obligations. The following retention periods apply as a general guide:

• Active account data: Retained for the full duration of your membership and for a period of five (5) years following account closure, in accordance with standard international AML record-keeping requirements.
• KYC documentation: Retained for five (5) years from the date of verification or from the date of account closure, whichever is later.
• Transaction records: All deposit, withdrawal, and wager records are retained for five (5) years following the date of the transaction.
• Support communications: Live chat transcripts and email correspondence are retained for two (2) years from the date of the last interaction, or for the duration of any open dispute, whichever is longer.
• Analytics and usage data: Anonymised or aggregated usage data that cannot be linked back to an identifiable individual may be retained indefinitely for internal performance analysis.
• Marketing consent records: Records of your consent to or withdrawal from marketing communications are retained for five (5) years as evidence of your stated preferences.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised. Where deletion is technically infeasible for a specific data set (for example, data contained in encrypted backup archives), that data will be isolated from active processing and deleted at the next scheduled backup cycle.

hit51 implements a layered security architecture designed to protect your Personal Data against unauthorised access, accidental loss, destruction, or alteration. Our technical and organisational security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your browser and our servers.
• AES-256 encryption for sensitive Personal Data and financial records stored at rest in our database infrastructure.
• Role-based access controls ensuring that only authorised personnel with a legitimate operational need may access Member Personal Data.
• Multi-factor authentication requirements for all hit51 administrative systems that process Personal Data.
• Regular third-party penetration testing and security audits of our Platform infrastructure.
• Continuous automated monitoring for anomalous login behaviour, suspicious transaction patterns, and potential data breach indicators.
• A documented incident response plan that requires notification to affected Members and relevant authorities within the timeframes mandated by our licensing obligations in the event of a confirmed data breach.

While hit51 takes all reasonable measures to protect your Personal Data, no transmission over the internet and no data storage system is entirely immune from risk. You are responsible for keeping your own account credentials secure and for using a strong, unique password for your hit51 account. If you suspect unauthorised access to your account, contact us immediately at support@hit51.bet.

hit51 is operated by an internationally licensed gaming company. As a result, your Personal Data may be transferred to, stored in, and processed in countries other than Indonesia where our servers, service providers, or group companies are located. These countries may have data protection laws that differ from those applicable in Indonesia.

Where we transfer Personal Data internationally, we ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy. These safeguards include:

• Standard contractual clauses incorporated into agreements with data processors operating outside Indonesia.
• Transfers only to jurisdictions or processors that meet our internal data security standards as assessed during supplier due diligence.
• Where applicable, reliance on adequacy decisions or equivalent international data transfer frameworks recognised by our licensing authority.

You may request further information about the specific safeguards applied to any international transfer of your Personal Data by contacting us at support@hit51.bet.

As a Member of hit51, you hold the following rights in respect of your Personal Data. To exercise any of these rights, please submit a written request to support@hit51.bet from the email address registered on your account. We will respond within 30 calendar days of receiving a valid request:

• Right of access: You may request a copy of the Personal Data we hold about you, together with information about the purposes for which it is processed, the categories of data involved, and the recipients with whom it has been shared.
• Right to rectification: You may request correction of any inaccurate or incomplete Personal Data we hold about you. For straightforward corrections (e.g., email address, phone number), you may update these directly via your account dashboard.
• Right to erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where processing was unlawful. This right is subject to our legal obligation to retain certain data for the periods described in Clause 9.
• Right to restriction: You may request that we restrict active processing of your Personal Data in certain circumstances — for example, while the accuracy of data is contested or while an objection to processing is being assessed.
• Right to data portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request a machine-readable copy of your Personal Data to transfer to another service provider.
• Right to object: You may object at any time to processing of your Personal Data based on legitimate interests, including profiling for direct marketing purposes. Upon receipt of a valid objection, hit51 will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based solely on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

The hit51 Platform is strictly intended for adults aged 21 years and older. We do not knowingly collect Personal Data from individuals under the age of 21. If we become aware that a Member is under the age of 21, we will immediately suspend the account, delete all associated Personal Data to the extent not required for legal compliance, and return any deposited funds to the source payment method.

If you are a parent or guardian and believe that a minor under your care has created a hit51 account or provided their Personal Data to us, please contact us immediately at support@hit51.bet. We will investigate and take appropriate action within 24 hours of receiving such a report.

hit51 employs age verification measures at registration and during KYC to minimise the risk of underage access. However, if you are concerned about a young person in your household accessing online gambling services, we recommend using parental-control software and enabling content filtering at the network or device level.

The hit51 Platform may contain references to or integrations with third-party services — including game studio platforms (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft), payment networks, and live sports data providers. When you interact with these third-party services, their own privacy policies and data practices apply.

hit51 is not responsible for the privacy practices of third-party services and does not make any representations or warranties regarding the adequacy of their data protection measures. We encourage you to review the relevant third-party privacy policy before engaging with any integrated service.

hit51 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or Platform functionality. Where amendments are material — meaning they significantly affect how we collect, use, or share your Personal Data — we will provide at least 14 days' advance notice by email to your registered address and by publishing a prominent notice on the Platform.

For non-material amendments (such as typographical corrections or clarifications that do not alter the substance of the Policy), changes take effect upon publication. The "Last Updated" date at the top of this page reflects the date of the most recent revision.

Continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept the amended Policy, you must cease using the Platform and contact us to close your account prior to the effective date of the changes.

If you have any questions, concerns, or formal complaints regarding this Privacy Policy or the way hit51 handles your Personal Data, please contact our Data Protection team through the following channels:

• Email: support@hit51.bet (plain text — not a clickable link)
• Subject Line: Please include "Privacy Request" or "Data Complaint" in your subject line so your message is routed directly to the appropriate team.
• Live Chat: Available 24/7 directly from the Platform — our Indonesian-speaking support agents can assist with general privacy queries at any hour, including during Ramadhan nights and national public holidays.
• Response Time: We aim to acknowledge all formal privacy complaints within 5 business days (WIB) and to provide a substantive written response within 30 calendar days.

If you are not satisfied with hit51's response to a privacy complaint, you have the right to escalate the matter to the dispute resolution body designated by hit51's licensing authority. Details of the applicable escalation process will be provided in our response to your initial complaint.