LEGAL REFERENCE

Your privacy is how we build trust

We're transparent about what we collect, how we use it, and who we share it with. Your account data, payment details and gaming activity stay secure and private...

Data ProtectionPayment SecurityTransparencyYour ControlIndonesia-Focused
See the Lobby Read FAQ
hknalo Your privacy is how we build trust

What we collect and why

When you open an account on hknalo, we collect your name, email, phone number and identity details to verify who you are and comply with local regulations in supported regions. Payment information — including DANA, OVO, GoPay and QRIS references — is encrypted and never stored in plain text on our servers. We also track your gaming activity, session duration and betting

patterns to personalize your lobby, detect fraud and improve our platform. All processing follows Indonesian data protection principles and international security standards.

Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.

HELP CHANNELS

Privacy questions? We're here.

Email Support Reach our privacy team at [email protected] with any data request, deletion inquiry or concern about how we handle your information.
Live Chat Open the chat widget in your account dashboard to speak with a privacy officer about your personal data, account security or payment privacy.
Account Settings Access your privacy controls directly in your hknalo dashboard to review, download or request deletion of your personal data.
REVIEW SIGNALS

How we earn your trust

Encryption Standard

All data travels over TLS 1.3 encryption. Payment details for DANA, OVO, GoPay and QRIS are tokenized and never exposed to our internal systems.

Third-Party Audits

Our privacy infrastructure undergoes annual security reviews by independent firms to verify compliance with Indonesian and international data standards.

No Data Selling

We do not sell your personal information to marketers, brokers or third parties. Your data stays within hknalo unless you explicitly consent.

Transparent Logging

Every access to your account, payment history or personal details is logged with timestamp and purpose. You can request an audit trail anytime.

Jurisdiction Compliance

Our policy reflects regulations in supported regions where hknalo operates, including local data protection laws and financial privacy rules.

Incident Response

If a breach occurs, we notify affected users within 72 hours and work with authorities. Your account security is restored before service resumes.

Consistency across hknalo pages

Terms of Service
Defines account rules, game rules and dispute resolution. Privacy Policy focuses on data collection — read both for full platform understanding.
Payment Policy
Covers deposit, withdrawal and transaction processing. Privacy Policy protects your payment data — both work together to secure your account.
Cookie Policy
Details how we use cookies and trackers for login and analytics. This privacy policy covers the personal data those cookies may reference.
Player guidance Info
Lists account pause and limit tools. Privacy Policy does not cover account restrictions — check our account tools for deposit or session limits.
Affiliate Privacy
If you refer a friend via our affiliate scheme, their data is covered here. Referral rewards and commission terms are in our Affiliate Agreement.
Mobile App Privacy
Our hknalo mobile app follows this same privacy standard. Device permissions for location or camera are requested only for account security.
KYC Process
Identity verification happens during sign-up to comply with local law. The verification document you upload is covered under this privacy policy.
AT A GLANCE

What defines our data approach

01
Zero Third-Party Ads We do not share your gaming data with advertisers. Your browsing and betting patterns stay inside hknalo and drive only your own lobby personalization.
02
Instant Data Requests Request a copy of all data we hold on you anytime. We deliver a complete export within 5 business days in a portable, readable format.
03
Geo-Locked Servers Your account data is stored in supported Indonesian regions. We do not transfer personal information to servers outside your jurisdiction.
04
Payment Token Vault DANA, OVO, GoPay and QRIS tokens are stored separately from your profile. A breach of account data cannot expose your payment methods.
05
Session Replay Disabled We do not record or replay your screen during gameplay. Analytics tools track only non-sensitive metrics like session length and feature clicks.
06
Annual Transparency Report We publish yearly data on how many user requests we received, which requests were fulfilled and which were denied for privacy or legal reasons.

Privacy questions answered

We retain account data for as long as your account is active plus 2 years after closure for compliance and dispute resolution. After that, we delete it unless law requires otherwise. Payment records are kept for 7 years to meet financial regulations.

No. Our cookies only work inside hknalo.app to keep you logged in and to track your gameplay and lobby navigation. We do not plant tracking pixels on other websites or sell your data to ad networks.

Yes. Request account deletion in your settings or email [email protected]. We delete your personal data within 30 days, though we keep transaction records for 7 years as required by law in supported regions.

Completely. Payment details are tokenized immediately upon entry — meaning we never see your full DANA account number, OVO ID, GoPay token or QRIS reference. Payment processing is handled by PCI-DSS certified partners only.

Only authorized support staff can see your data, and only when you submit a request or we detect suspicious activity. Our CEO and engineering team cannot browse user accounts. All access is logged and audited monthly.

We have insurance and incident response protocols. If a breach occurs, we notify all affected users within 72 hours with details of what was exposed, steps we took to stop it and free credit monitoring where appropriate.

Only when required by valid court order or warrant in supported regions where we operate. We will notify you of the request unless law prohibits it. We never voluntarily hand data to authorities.