Privacy Policy — 62hot

For the purposes of this Privacy Policy, the following terms carry the meanings defined below:

• "62hot", "we", "us", or "our" refers to the 62hot online gaming platform operated at https://62hot.pro.
• "Platform" means the 62hot website, all associated subdomains, mobile interfaces, and any digital services provided by 62hot.
• "Player", "you", or "your" refers to any individual who visits, registers on, or otherwise interacts with the Platform.
• "Personal Data" means any information that identifies or could reasonably be used to identify a living natural person, either directly or in combination with other available data.
• "Processing" means any operation performed on Personal Data — including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this context, 62hot.
• "Third-Party Processor" means any company or individual engaged by 62hot to process Personal Data on our behalf, under written data processing agreements that impose obligations equivalent to those in this Policy.
• "KYC" (Know Your Customer) refers to the mandatory identity verification process required before a Player may withdraw funds from the Platform.
• "Cookies" means small text files stored on your device by your browser when you visit the Platform, used to maintain session state, preferences, and analytics.

62hot acts as the Data Controller for all Personal Data collected through the Platform. We are responsible for determining how and why your data is processed, and we are accountable for ensuring that such processing is conducted lawfully, fairly, and transparently.

For all privacy-related inquiries, data subject requests, or complaints, you may contact our Data Privacy team directly at [email protected]. We aim to acknowledge all privacy-related correspondence within 48 hours (WIB, UTC+7) and to resolve requests within 30 calendar days of receipt.

62hot collects Personal Data through several channels: directly from you during registration and account use, automatically through your interaction with the Platform, and from third-party service providers. The categories of data we collect are described in the table below.

We do not collect sensitive categories of Personal Data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly required for KYC identity matching. We do not collect full credit or debit card numbers — all card-based payment flows are handled entirely by our third-party payment processor, which is PCI-DSS compliant.

62hot processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity. Processing is necessary to perform the contract between you and 62hot — specifically, to create and manage your Account, process deposits and withdrawals, settle bets, administer bonuses, and provide customer support.
• Legal Obligation. Processing is required to comply with applicable legal obligations, including anti-money laundering (AML) regulations, fraud prevention obligations, and cooperation with lawful requests from competent authorities.
• Legitimate Interests. Processing is necessary for 62hot's legitimate interests, provided those interests are not overridden by your fundamental rights and freedoms. This basis covers security monitoring, Platform analytics, abuse detection, responsible gaming enforcement, and internal reporting.
• Consent. For certain non-essential processing activities — such as serving personalized promotional offers or using non-essential analytics cookies — we rely on your consent, which you may withdraw at any time by contacting support at [email protected] or adjusting your cookie preferences.

62hot uses the Personal Data we collect for the following specific purposes:

• Account Management. To create, maintain, and secure your 62hot Account, authenticate your identity at login, and communicate account-related notifications (e.g., password resets, deposit confirmations, withdrawal approvals) to your registered Indonesian mobile number or email address.
• Payment Processing. To execute deposit and withdrawal transactions via your chosen local payment channel (bank transfer or e-wallet), verify that withdrawal recipients match the Account holder identity, and maintain accurate financial records.
• KYC & Fraud Prevention. To verify your identity using your KTP, detect and prevent fraudulent activity, money laundering, and unauthorized Account access, and to comply with applicable AML obligations.
• Platform Personalization. To tailor the gaming experience to your preferences — for example, surfacing sports betting markets relevant to BRI Liga 1, EPL, Champions League, or Timnas Indonesia matches based on your betting history, or recommending slot titles from Pragmatic Play, PG Soft, or Spribe that match your play style.
• Bonus & Promotions Administration. To determine your eligibility for welcome bonuses, reload offers, cashback programs, and seasonal promotions (including those tied to Lebaran, Ramadhan, and Indonesian Independence Day), and to credit, track, and audit bonus activity on your Account.
• Responsible Gaming. To monitor gaming patterns for signs of problem gambling, enforce deposit limits and self-exclusion requests you have set, deliver session time reminders, and proactively contact Players whose activity patterns suggest potential harm. See our Responsible Gaming page for full details.
• Customer Support. To respond to your inquiries via live chat or email, resolve disputes, and maintain records of our communications for quality assurance and training purposes.
• Legal Compliance. To respond to lawful requests from government authorities, regulatory bodies, or law enforcement agencies, and to establish, exercise, or defend legal claims.
• Platform Security & Analytics. To monitor the Platform for technical faults, security incidents, and abuse; to analyze aggregate usage data in order to improve Platform performance and user experience; and to conduct internal reporting.

We will not use your Personal Data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another valid legal basis.

62hot does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We share your data only in the specific circumstances described below:

• Payment Service Providers. We share payment-related data with our banking partners and e-wallet processors (including integrations with BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja) strictly for the purpose of executing your requested transactions.
• KYC & Identity Verification Partners. We may share KTP data and supporting documentation with licensed identity verification service providers who assist us in completing the KYC process. These providers operate under strict data processing agreements and are not permitted to use your data for any other purpose.
• Game Content Providers. Game studios such as Pragmatic Play, Evolution Gaming, PG Soft, Spribe, NetEnt, and Microgaming may receive anonymized or pseudonymized session data necessary to deliver their games and compute RTP outcomes. No directly identifying Personal Data is shared with game studios.
• IT & Infrastructure Providers. Cloud hosting providers, content delivery networks, and cybersecurity vendors who support the technical operation of the Platform may access Personal Data as part of their service delivery. All such providers are bound by data processing agreements.
• Legal & Regulatory Authorities. We will disclose Personal Data to competent authorities — including Indonesian law enforcement agencies, courts, or financial intelligence units — where we are legally required to do so, or where disclosure is necessary to protect the vital interests of Players or third parties.
• Business Transfers. In the event of a merger, acquisition, or sale of all or substantially all of 62hot's assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. You will be notified via the Platform or your registered email address prior to any such transfer, and the acquiring entity will be bound by this Privacy Policy.

62hot uses cookies and similar tracking technologies to operate the Platform effectively and to improve your experience. The types of cookies we use are described below:

• Strictly Necessary Cookies. These cookies are essential for the Platform to function and cannot be disabled. They maintain your login session, store your language and currency preferences, and protect the Platform against cross-site request forgery (CSRF) attacks. No consent is required for these cookies.
• Performance & Analytics Cookies. These cookies collect anonymized data about how Players interact with the Platform — such as which pages are most visited, how long sessions last, and where errors occur. This information helps us continuously improve Platform performance. These cookies require your consent.
• Functionality Cookies. These cookies remember choices you have made on the Platform — such as your preferred game view, notification settings, or the last game category you browsed — so that you do not have to reconfigure them on each visit.
• Marketing & Personalization Cookies. These cookies are used to deliver promotional offers and game recommendations that are relevant to your gaming activity. They track which bonuses you have viewed and whether you have responded to promotional campaigns. These cookies require your consent.

You may control cookie preferences through your browser settings. Disabling cookies beyond strictly necessary ones may affect Platform functionality — for example, you may need to log in again on each visit and personalized recommendations will not be available.

62hot retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Active Account Data (registration details, account activity, payment history): Retained for the lifetime of your active Account plus a minimum of five (5) years following Account closure, to comply with AML record-keeping obligations.
• KYC Documents (KTP scans, identity photographs): Retained for a minimum of five (5) years from the date of verification, or longer if required by a regulatory investigation or legal proceedings.
• Transaction Records (deposit and withdrawal logs, bet settlement records): Retained for a minimum of five (5) years from the date of the transaction in accordance with standard financial record-keeping requirements.
• Support Communications (live chat transcripts, emails): Retained for a maximum of two (2) years from the date of the communication, unless the communication relates to an ongoing dispute or legal matter.
• Server Logs & Technical Data (IP addresses, access logs): Retained for a maximum of twelve (12) months from the date of collection, after which they are anonymized or deleted.
• Marketing Preferences & Consent Records: Retained for as long as the consent is active, plus three (3) years following withdrawal of consent or Account closure, to demonstrate compliance.

At the end of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized so that it can no longer be associated with any individual.

62hot implements industry-standard technical and organizational security measures to protect your Personal Data against unauthorized access, accidental loss, alteration, or destruction. Our current security infrastructure includes:

• Transport Encryption: All data transmitted between your device and the Platform is encrypted in transit using TLS 1.3 protocol. The Platform enforces HTTPS at all times and does not serve content over unencrypted HTTP connections.
• Data Encryption at Rest: Sensitive data fields — including KTP numbers, payment account identifiers, and session tokens — are encrypted at rest using AES-256 encryption.
• Password Security: Passwords are never stored in plaintext. They are hashed using a computationally expensive one-way hashing algorithm with per-user salts, ensuring that even in the event of a data breach, raw passwords cannot be recovered.
• Two-Factor Authentication (2FA): Withdrawal requests and high-value account changes require OTP (one-time password) confirmation delivered to your registered Indonesian mobile number, adding a critical layer of protection against Account takeover.
• Access Controls: Access to Personal Data within 62hot's internal systems is restricted on a strict need-to-know basis. All staff with access to production data undergo background screening and receive regular data security training.
• Security Audits: 62hot conducts periodic third-party security audits and penetration testing of the Platform's infrastructure to proactively identify and remediate vulnerabilities.
• Incident Response: In the event of a Personal Data breach that poses a significant risk to affected Players, 62hot will notify impacted individuals via their registered contact details without undue delay and will take all necessary remediation steps.

While we take all reasonable steps to protect your data, no system is entirely immune to security incidents. You can strengthen the protection of your Account by using a strong, unique password and by never sharing your login credentials with any third party.

As a Player on the 62hot Platform, you have the following rights with respect to your Personal Data. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Rights Request" and include your registered username and a description of your request.

• Right of Access. You have the right to request a copy of the Personal Data 62hot holds about you, along with information about how it is being processed. We will respond to access requests within 30 calendar days.
• Right to Rectification. If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic account details (such as your email address or mobile number) directly through your Account settings panel.
• Right to Erasure. You may request that we delete your Personal Data. This right is subject to exceptions — for example, we cannot delete data that we are legally required to retain for AML or financial record-keeping purposes. Where full erasure is not possible, we will explain which data must be retained and why.
• Right to Restrict Processing. You may request that we pause the processing of your Personal Data while a dispute about its accuracy or the lawfulness of its processing is being resolved.
• Right to Data Portability. You have the right to receive the Personal Data you provided to us in a structured, machine-readable format and to have it transmitted to another service provider, where technically feasible.
• Right to Object. You may object to the processing of your Personal Data where we rely on legitimate interests as the legal basis. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent. Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

The 62hot Platform is strictly intended for adults aged 21 years and over. We do not knowingly collect, process, or retain Personal Data from any individual under the age of 21. All Players are required to confirm upon registration that they meet this age requirement, and KYC verification — which cross-references date of birth against KTP records — provides an additional safeguard.

If you are a parent or guardian and have reason to believe that a minor in your care has registered an Account on the Platform, please contact us immediately at [email protected]. We will take prompt action to verify the matter and, where confirmed, permanently close the Account and securely delete all associated Personal Data without undue delay.

The Platform may contain links to third-party websites or resources for informational purposes — for example, links to the official websites of BRI Liga 1, Timnas Indonesia match fixtures, or badminton tournament schedules. These third-party sites operate independently of 62hot and are governed by their own privacy policies, which we encourage you to review.

62hot is not responsible for the privacy practices of any third-party website, even if the Platform links to it. Our Privacy Policy applies solely to data processed by 62hot through the Platform at https://62hot.pro and its associated subdomains.

Where we integrate third-party game content from studios including Pragmatic Play, Evolution Gaming, PG Soft, Spribe, NetEnt, or Microgaming, those studios may process anonymized technical data (such as game session identifiers) within their own systems. Such processing is governed by the studios' own data agreements with 62hot and does not involve the disclosure of your Personal Data to those studios in a directly identifiable form.

62hot reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or Platform features. When we make material changes — meaning changes that significantly affect how we collect, use, or share your Personal Data — we will notify you by displaying a prominent notice on the Platform and, where the change affects your existing rights, by sending a notification to your registered email address or Indonesian mobile number at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this document will always reflect the date of the most recent revision. Minor, non-material changes (such as typographical corrections or clarifications that do not alter the substance of our data practices) may be made without prior notice, though the "Last Updated" date will still be updated accordingly.

Your continued use of the Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you should cease using the Platform and may request closure of your Account by contacting support at [email protected].

The current and all prior versions of this Privacy Policy are archived and available upon request by contacting our Data Privacy team.

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or wish to raise a concern about how we have handled your Personal Data, please contact 62hot's Data Privacy team through the following channels:

• Live Chat: Available 24/7 directly on the Platform at https://62hot.pro. Our Indonesian-speaking support agents are on hand at all times, including during Indonesian public holidays such as Idul Fitri, Idul Adha, and Nyepi.
• Email: [email protected] — include "Privacy Rights Request" in the subject line for faster routing to our Data Privacy team. Please allow up to 48 hours for an initial response to email inquiries.

When submitting a privacy request, please provide your registered 62hot username and, where applicable, a clear description of the Personal Data concerned and the right you wish to exercise. This helps us process your request accurately and without unnecessary delay.