Definitions
The following capitalised terms carry the meanings set out below wherever they appear in this Privacy Policy:
| Term | Meaning |
|---|---|
| "hot57" / "we" / "us" | The operator of the website https://hot57.cam and all associated services, operated as an internationally licensed online gaming platform. |
| "Platform" | The hot57 website (https://hot57.cam), mobile-optimised site, and any application or service operated by hot57. |
| "User" / "you" | Any individual who visits, accesses, registers on, or uses the hot57 Platform, including registered account holders and anonymous visitors. |
| "Personal Data" | Any information that identifies or could reasonably be used to identify a natural person, directly or indirectly, including name, identification number, email address, device identifiers, and financial details. |
| "Processing" | Any operation performed on Personal Data, including collection, storage, use, transmission, disclosure, erasure, or destruction. |
| "KYC" | Know Your Customer — the identity and address verification process required before withdrawals are processed on hot57. |
| "Cookies" | Small text files placed on a User's device by the Platform to enable functionality, analytics, and personalisation. |
Data Controller Identity
hot57 acts as the Data Controller in respect of all Personal Data collected through the Platform. hot57 is an internationally operated online gaming platform serving players in Indonesia and other eligible jurisdictions.
For all privacy-related enquiries, data access requests, or complaints concerning the handling of your Personal Data by hot57, please contact our Data Protection team using the contact details set out in Clause 15 (Contact Us). We aim to acknowledge all privacy enquiries within five (5) business days.
Categories of Personal Data We Collect
hot57 collects only the Personal Data that is necessary to provide, secure, and improve the Platform and its services. The following categories of data may be collected from Users:
Full legal name, date of birth, nationality, gender, and government-issued identification number (e.g., KTP — Indonesian National Identity Card, or passport number for non-Indonesian residents).
Email address, mobile phone number, and residential address. Used for account notifications, KYC correspondence, and support communications.
Bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history, deposit amounts, and withdrawal records in IDR.
Betting history, game participation records, bonus usage, session duration, stakes placed, and game outcomes across all product categories including football, togel, live casino, and slots.
IP address, device type and model, operating system, browser type and version, screen resolution, and connection type. Used for fraud detection, geolocation verification, and platform optimisation.
Records of live chat sessions, email correspondence with hot57 support, WhatsApp support interactions, and in-app messages. Retained for quality assurance, dispute resolution, and compliance audit purposes.
Sensitive Data: hot57 does not collect racial or ethnic origin, religious beliefs, political opinions, health data, or biometric data for identification purposes, except where required by applicable law or regulation (for example, where a facial photograph is submitted as part of KYC selfie verification — in which case the image is used solely for identity confirmation and deleted after the verification process is complete).
How We Collect Your Data
hot57 collects Personal Data through the following channels:
- Account Registration: When you create a hot57 account, you provide your name, date of birth, email address, mobile number, and residential address.
- KYC Verification: When you submit identity documents (KTP, passport, proof of address, selfie verification) to complete the mandatory KYC process before withdrawals are permitted.
- Deposits and Withdrawals: When you fund your hot57 account or request a withdrawal via a bank transfer or e-wallet, financial data is captured as part of the transaction record.
- Platform Use: Automatically, as you use the Platform — bet placement data, game session data, and technical/device data are logged continuously during active sessions.
- Customer Support: When you contact hot57 support via live chat, email, or WhatsApp, we record the interaction content and your contact details for quality assurance and dispute resolution.
- Cookies and Tracking Technologies: Via cookies, pixels, and local storage on your device — see Clause 9 for full details.
- Third-Party Verification Providers: Where we use third-party KYC or fraud-screening services to verify identity documents, we receive confirmation data from those providers.
Purpose and Legal Basis for Processing
hot57 processes Personal Data only where a lawful basis exists. The following table summarises the primary purposes for which we process your data and the corresponding legal basis:
Processing your Identity Data, Contact Data, and Financial Data is necessary to perform the contract between you and hot57 (i.e., to operate your account, process deposits, settle bets, pay winnings, and deliver customer support). Without this processing, the service cannot be provided.
hot57 is required by international anti-money laundering (AML) standards, Know Your Customer (KYC) regulations, and responsible gambling obligations to collect, verify, and retain certain categories of personal data. This includes identity verification for all withdrawal requests and ongoing transaction monitoring to detect and prevent financial crime.
hot57 processes Technical Data and Transactional Data on the basis of legitimate business interests — specifically: fraud prevention and account security, platform performance monitoring, responsible gambling intervention (detecting unusual betting patterns that may indicate problem gambling behaviour), and improving the user experience on the Platform for Indonesian players.
Where hot57 sends you marketing communications (promotional emails, bonus notifications, seasonal campaign alerts relating to events such as Idul Fitri, Indonesian Independence Day, or Imlek), we do so only where you have provided explicit consent. You may withdraw this consent at any time by contacting support at [email protected] or by using the unsubscribe mechanism included in every marketing email.
hot57 does not use Personal Data for automated decision-making that produces legal or similarly significant effects on Users, except in fraud-screening contexts where automated flags are always subject to human review before any account action is taken.
Data Sharing and Disclosure
hot57 does not sell, rent, or trade your Personal Data to third parties for their own marketing or commercial purposes. We may share data only in the following circumstances:
- Payment Processors and Banks: To facilitate deposits and withdrawals, necessary financial data is shared with Indonesian payment processors and banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja). These parties process your data only as required to complete the transaction.
- KYC and Fraud-Prevention Providers: Third-party identity verification and fraud-screening vendors may receive Identity Data and document images strictly for the purpose of completing KYC checks. All such vendors are contractually bound to data protection standards equivalent to those in this Policy.
- IT and Infrastructure Providers: Cloud hosting, security, and platform infrastructure providers process certain Technical Data as part of their service delivery to hot57. These are data processors acting under hot57's instruction.
- Regulatory and Law Enforcement Authorities: Where required by applicable law, court order, or regulatory directive, hot57 may disclose Personal Data to competent authorities. We will only do so to the extent legally required and, where permitted, will notify affected Users.
- Business Transfers: In the event of a merger, acquisition, or sale of substantially all of hot57's assets, Personal Data held by hot57 may be transferred to the successor entity, subject to equivalent privacy protections.
Data Retention
hot57 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. The following indicative retention periods apply:
- Account and Identity Data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in line with AML and KYC record-keeping requirements.
- Transactional and Financial Data: Retained for a minimum of five (5) years from the date of the transaction to support financial audits, dispute resolution, and regulatory compliance.
- Communications Data (support interactions): Retained for two (2) years following the resolution of the relevant support interaction, for quality assurance and dispute purposes.
- Technical and Cookie Data: Session-level technical data is retained for up to twelve (12) months; aggregated analytics data may be retained longer in anonymised form.
- Marketing Consent Records: Retained for the duration of the consent and for one (1) year following withdrawal of consent, as evidence of prior consent.
When data is no longer required, hot57 securely destroys or anonymises it using industry-standard data erasure protocols.
Data Security
hot57 implements a comprehensive suite of technical and organisational security measures to protect Personal Data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include, but are not limited to:
- 256-Bit SSL/TLS Encryption: All data transmitted between your device and hot57 servers is encrypted using Transport Layer Security (TLS 1.2 or higher). The hot57 Platform operates exclusively over HTTPS.
- Encrypted Data Storage: Sensitive fields within our databases — including financial account details and identity document references — are encrypted at rest using industry-standard symmetric encryption algorithms.
- Access Controls: Access to Personal Data is restricted on a strict need-to-know basis. hot57 employees and contractors are granted data access only to the extent required for their specific role, and all access is logged and audited.
- Multi-Factor Authentication: Internal systems handling sensitive Personal Data require multi-factor authentication. We also encourage Users to enable any available account-security features on their hot57 accounts.
- 24/7 Security Monitoring: Our security operations team monitors platform activity around the clock for anomalous access patterns, account-takeover attempts, and potential data breaches.
- Incident Response: In the event of a confirmed data breach that poses a risk to Users, hot57 will notify affected Users without undue delay and will take immediate remediation steps.
Cookies and Tracking Technologies
hot57 uses cookies and similar tracking technologies (including local storage and session storage) to operate and improve the Platform. The following categories of cookies are used:
These cookies are essential for the Platform to function. They maintain your session state, authenticate your login, and enable core features such as in-session bet placement and balance display. These cookies cannot be disabled — without them, the Platform cannot operate.
These cookies remember your preferences — such as display language, odds format, and preferred sports categories — so that your settings persist across sessions without requiring re-entry each time you log in.
hot57 uses analytics cookies to understand how Users navigate the Platform — which pages are visited most frequently, where users drop off, and how long sessions typically last. This data is collected in aggregate form and is used solely to improve the Platform experience. Analytics data does not personally identify individual Users.
These cookies assist in identifying unusual activity patterns — such as multiple account creation attempts from the same device, or rapid IP switching — that may indicate fraud or abuse. They are a critical component of hot57's account security infrastructure.
You may configure your browser to block or delete cookies. Please note that disabling strictly necessary cookies will prevent the hot57 Platform from functioning correctly. Instructions for managing cookies in common browsers (Chrome, Firefox, Safari, Edge) are available in those browsers' help documentation.
Your Data Protection Rights
Subject to applicable law, Users of hot57 have the following rights in respect of their Personal Data:
- Right of Access: You have the right to request a copy of the Personal Data that hot57 holds about you. We will respond to verified access requests within thirty (30) days.
- Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Contact our support team with the specific correction required.
- Right to Erasure ("Right to Be Forgotten"): You may request that hot57 delete your Personal Data. This right is subject to exceptions — specifically, we are legally required to retain certain data (KYC records, transaction records) for a minimum of five years even after account closure and cannot erase it upon request.
- Right to Restrict Processing: In certain circumstances (for example, while you contest the accuracy of data we hold), you may request that we restrict processing of your Personal Data.
- Right to Data Portability: Where processing is based on your consent or a contract, and is carried out by automated means, you have the right to receive your Personal Data in a structured, machine-readable format.
- Right to Withdraw Consent: Where processing is based on consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
- Right to Object: You have the right to object to processing of your Personal Data for direct marketing purposes at any time, with no requirement to justify your objection.
To exercise any of these rights, contact our Data Protection team at [email protected], clearly stating your full name, registered email address, and the right you wish to exercise. We may require identity verification before processing the request.
Minors — Under-21 Users
hot57 is strictly an adults-only platform. You must be at least 21 years of age to register an account, deposit funds, or place bets on hot57 — this age requirement reflects the Indonesian standard for adult entertainment services.
hot57 does not knowingly collect Personal Data from individuals under the age of 21. If we become aware that a User is under 21, their account will be immediately suspended, all funds will be returned to the verified deposit source, and any Personal Data collected will be securely erased as promptly as our KYC and AML obligations permit.
If you believe that a person under 21 has opened an account on hot57, please report this to us immediately at [email protected]. Parents and guardians are encouraged to use parental-control software to prevent minors from accessing online gambling platforms, including hot57.
Third-Party Links and Services
The hot57 Platform may reference or display content relating to third-party services — such as Indonesian banking institutions (BCA, BRI, BNI, Mandiri), e-wallet providers (OVO, DANA, GoPay), sports organisations (BRI Liga 1, the Football Association of Indonesia), and live streaming services. hot57 does not control these third parties' websites or their data practices.
This Privacy Policy applies solely to data collected by hot57 through the Platform. If you navigate to a third-party website or application, you are subject to that party's own privacy policy. hot57 accepts no responsibility or liability for the privacy practices of any third party.
International Data Transfers
hot57 is an internationally operated platform. Personal Data collected from Indonesian Users may be transferred to and processed in countries outside Indonesia, including the jurisdiction in which hot57's primary servers and operations are based.
Where Personal Data is transferred internationally, hot57 ensures that appropriate safeguards are in place — including contractual data-protection clauses with receiving entities that are equivalent in effect to the protections described in this Policy. hot57 does not transfer Personal Data to countries or entities that cannot provide a sufficient level of data protection.
Changes to This Privacy Policy
hot57 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, platform functionality, or data processing practices. The "Effective Date" at the top of this Policy will be updated whenever a material change is made.
For material changes that significantly affect how we process your Personal Data, hot57 will provide reasonable advance notice — either via an in-platform notification or an email to your registered address — before the updated Policy takes effect. Your continued use of the Platform after a Policy update constitutes your acceptance of the revised terms.
We encourage you to review this Privacy Policy periodically so that you remain informed about how hot57 protects your personal information.
Contact Us — Data Protection Enquiries
For any questions, concerns, or requests relating to this Privacy Policy or hot57's handling of your Personal Data, please contact our Data Protection team using the details below:
All privacy-related requests submitted to hot57 are logged, tracked, and handled by our Data Protection team. For account-specific support issues unrelated to data protection, please contact general support via live chat on the Platform.