hanabiPrivacy Policy
This page describes what we collect when you use hanabi and how we keep that data protected. We collect personal information only when you create an account, deposit funds, or contact our support team. We never sell your data to third parties. Your payment information (credit card numbers, e-wallet tokens) is discarded after each transaction settles; we do not retain it. Our servers may sit outside your jurisdiction, but all data transmission is encrypted and our access controls ensure only authorised staff can view your records.
Our privacy commitments apply across all hanabi services: football markets (Liga 1, Piala AFF, Champions League), live-dealer tables (blackjack, roulette, baccarat, Dragon Tiger), slot games (Aviator, Sweet Bonanza, Gates of Olympus, Fortune Tiger, Mahjong Ways), and esports selections (Mobile Legends, Free Fire, PUBG Mobile). Whether you deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank virtual accounts (mobile banking, local payment, online payment, e-wallet), your payment data is handled identically and discarded after settlement.
If you have questions about how we handle your data, contact our support team via the form on hanabi. We aim to respond within one business day. This policy may be updated as our service evolves; we will notify you of material changes by email or by displaying a notice on your account dashboard.
What data we collect on hanabi
We collect information in several categories:
- Account creation: Your legal name, date of birth, national identity number, email address, phone number, and residential address. These details are required for know-your-customer (KYC) verification before you can withdraw funds.
- Payment information: During deposits and withdrawals, we receive transaction details from your bank or e-wallet provider. We do not store your credit card number, bank account number, or e-wallet login credentials. These are discarded immediately after the transaction settles.
- Activity logs: We track your login dates and times, game sessions (which game, when, your stake and outcome), selections placed, and withdrawal requests. This data helps us detect fraud and resolve disputes.
- Support communications: If you contact our support team, we keep a record of your inquiry, our response, and any follow-up. This helps us track issue resolution and improve our service.
- Device information: We log your IP address, browser type, and operating system. This helps us identify unusual access patterns (such as login from a new country) and protect against unauthorised access.
We do not collect your browsing history outside hanabi, your location (beyond what your IP address reveals), or any biometric data. We do not track you across other websites.
Key takeaways
- We collect your name, identity number, email, phone, and address for KYC verification.
- Payment information is discarded after each transaction; we never store card or account numbers.
- We track your login dates, game activity, and support inquiries to detect fraud and resolve issues.
- We log your IP address and device type for security and fraud prevention.
- We do not sell your data to third parties or track you across other websites.
How we use your data on hanabi
We use your information for the following purposes:
- Account management: Your name, email, and phone allow us to send you account statements, password-reset links, and notifications of unusual activity (such as a login from a new device).
- KYC verification: Your identity number and residential address are checked against official records to confirm you are who you claim to be. This is required by anti-money-laundering (AML) regulations in supported jurisdictions.
- Fraud prevention: We compare your login location, device, and transaction patterns against historical data. Unusual activity (such as rapid deposits and withdrawals, unusually large selections, or account access from multiple countries in minutes) triggers manual review. We may request additional documentation or temporarily restrict withdrawals while we investigate.
- Dispute resolution: If you claim a game malfunctioned or a payout was incorrect, we review your activity logs and game session records to investigate and correct the issue if warranted.
- Service improvement: We analyse anonymised activity trends (such as popular games or peak usage times) to improve hanabi. This analysis does not identify you personally.
We do not use your data to market to you outside hanabi. We do not share your details with advertisers, data brokers, or marketing partners. Your data is shared only with staff members who need it to serve you (such as our finance team processing your withdrawal or our support team responding to your inquiry), and only as required by law.
Third-party processors and data location
Our payment processors (banks, e-wallet providers, and payment gateways) receive your transaction details when you deposit or withdraw. They handle this data under their own privacy policies and are bound by payment-processing regulations. We do not control their systems, but we require them to encrypt your data and limit access.
Our servers may be located outside your jurisdiction (for example, in Singapore, Australia, or the United States). Data stored on these servers is encrypted at rest and in transit. We do not replicate your personal data across multiple locations; it stays on primary servers with encrypted backups.
We do not use third-party analytics services (such as Google Analytics) to track your behaviour on hanabi. We monitor our own servers to track performance and detect technical issues, but this monitoring does not identify you personally.
Your rights on hanabi
You have the right to access your data. Log into your hanabi account to view your profile information, activity logs, and transaction history. If you want a complete copy of your personal data in a portable format, contact our support team and we will provide it within 30 days.
You have the right to correct your data. If your name, address, or email is incorrect, update it in your account settings or ask our support team to make the change. We may request documentation (such as an updated identity card) to verify the change.
You have the right to request deletion of your data after account closure. Once you close your hanabi account, we retain your data only as required by law (typically 5-7 years for AML and tax purposes). After that retention period, we delete or anonymise your personal information. You cannot delete your account while you have an outstanding balance or a withdrawal under review.
You have the right to lodge a complaint with your local data-protection authority if you believe we have mishandled your data. Contact details for data-protection authorities in major Indonesian cities (Jakarta, Surabaya, Bandung, Medan) are available through your regional government websites.
Cookies and similar tracking technologies
We use cookies (small files stored on your device) to maintain your login session and remember your preferences (such as your language choice). These cookies expire after a set period (typically when you close your browser or after 30 days of inactivity). We do not use cookies to track you across other websites.
We do not use third-party cookies for advertising or analytics. Our own session cookies are necessary for hanabi to function; you cannot use hanabi without accepting them. You can delete cookies from your browser settings at any time, but doing so will log you out of hanabi.
Security and data retention
We encrypt all data in transit (using HTTPS) and at rest (using AES-256 or equivalent). Your password is hashed using a strong algorithm; we never store it in plain text. Payment information is discarded immediately after settlement; we do not retain card numbers, account numbers, or e-wallet tokens.
We retain your account data (name, email, activity logs) for as long as your account is active, plus a retention period required by law (typically 5-7 years for AML compliance). After that, we delete or anonymise your personal information. If your account is inactive for more than two years, we may close it and begin the deletion process.
We implement access controls: only authorised staff (such as finance, support, and fraud-prevention teams) can view your personal data, and only for the purposes listed above. All staff sign confidentiality agreements. We monitor access logs to detect unauthorised attempts to view your data.
Changes to this privacy policy
We may update this policy as our service evolves or as regulations change. Material changes (such as new uses of your data or third-party processors) will be notified to you by email or a notice displayed on your account dashboard. We will not sell your data to third parties or use it for purposes other than those listed here without your explicit consent.
If you do not agree to this privacy policy, you should not use hanabi. By creating an account or depositing funds on hanabi, you consent to this policy. If you have questions, contact our support team via the form on hanabi. We aim to respond within one business day.