hurajp Privacy Policy

hurajp ("we," "us," or "our") operates the online sportsbook and casino platform accessible at hurajp.cam. We are committed to protecting the privacy and personal data of every individual who accesses or uses our Platform. This Privacy Policy explains in clear terms what data we collect, why we collect it, how we use and protect it, and what rights you have in relation to your personal information.

By registering an account on hurajp or otherwise using our Services — including sports betting on BRI Liga 1, EPL, La Liga, and international tournaments; live casino; slots; togel (Indonesia's numbers lottery); and other gaming products — you acknowledge that you have read and understood this Privacy Policy and you consent to the data practices described herein.

If you do not agree with any part of this Privacy Policy, please discontinue use of the hurajp Platform and contact us to request Account closure.

1. Definitions

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, directly or indirectly. This includes your name, email address, Indonesian national identity number (NIK on KTP), bank account details, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, deletion, or any combination thereof.
• "Data Controller" means hurajp, the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means any third party that processes Personal Data on behalf of hurajp under a formal contractual arrangement (e.g., payment processors, KYC verification providers).
• "User" or "you" means any natural person who accesses, registers, or interacts with the hurajp Platform in any capacity.
• "Services" means all products, features, and functionalities offered through the hurajp Platform, including sports betting, live casino, slot games, lottery, and customer support.
• "Cookies" means small text files stored on your device by the Platform to remember preferences, maintain session state, and collect usage analytics.
• "KYC" (Know Your Customer) means the identity verification and due-diligence process required to confirm your identity, age, and eligibility before allowing deposits, withdrawals, or full Account access.

2. Personal Data We Collect

hurajp collects the following categories of personal data, depending on the nature of your interaction with the Platform:

2.1 Identity and Registration Data

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify 21+ age requirement)
• Gender (optional)
• Indonesian national identity number (NIK, from KTP) — for KYC verification purposes
• Username and password (stored in hashed/encrypted form; we cannot read your password)
• Profile photograph (if submitted for KYC)

2.2 Contact Information

• Email address (primary communication and account recovery channel)
• Mobile phone number (for SMS alerts, 2FA, and WhatsApp support)
• Residential address in Indonesia (city, province, postal code)

2.3 Financial and Payment Data

• Bank account details: account holder name, account number, bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata)
• E-wallet identifiers: registered phone number or account ID for OVO, DANA, GoPay, ShopeePay, or LinkAja
• Transaction records: deposit amounts, withdrawal amounts, dates, and payment method used
• Currency and transaction history in Indonesian Rupiah (IDR)

hurajp does not store full credit or debit card numbers. All payment data is processed through PCI DSS-compliant third-party payment processors.

2.4 Gaming and Betting Activity Data

• Betting history: wagers placed, markets selected, stakes, odds, outcomes, and returns
• Casino game history: games played, session duration, win/loss records, and RNG outcomes
• Account balance and bonus balance history
• Responsible gaming settings: deposit limits, loss limits, session limits, and self-exclusion records

2.5 Technical and Device Data

• IP address and approximate geolocation (city/province level)
• Device type, operating system, and browser version
• Session timestamps and page interaction logs
• Referring URL and entry page data
• Cookie and tracking data (see Section 9 for full details)

2.6 Communications Data

• Live chat transcripts (retained for quality assurance and dispute resolution)
• Email correspondence with the support team
• WhatsApp chat records related to account inquiries
• Voluntary feedback, survey responses, and complaints

3. How We Collect Data

hurajp collects personal data through the following methods:

3.1 Direct Collection

You provide data directly to hurajp when you:

• Register an Account on the Platform
• Complete the KYC identity verification process by submitting documents (KTP, passport, etc.)
• Make deposits or request withdrawals through Indonesian banks or e-wallets
• Contact customer support via live chat, email, or WhatsApp
• Configure responsible gaming tools or self-exclusion preferences
• Complete surveys or feedback forms (where offered)

3.2 Automated Collection

We automatically collect certain technical and usage data when you interact with the Platform through:

• Cookies and local storage: Session management, preference storage, and analytics tracking
• Log files: Server-side recording of IP addresses, page requests, browser types, and error events
• Analytics tools: Aggregated and anonymized behavioral data to understand Platform usage patterns
• Device fingerprinting: Anonymized device characteristics used for fraud detection and security monitoring

3.3 Third-Party Sources

We may receive supplementary data from trusted third-party sources, including:

• KYC verification providers: Identity and document verification results
• Payment processors: Transaction status and fraud alerts from Indonesian bank networks and e-wallet providers
• Anti-fraud partners: Risk scores and flagged activity alerts related to account security

4. How We Use Your Data

hurajp processes your personal data for the following clearly defined purposes:

4.1 Service Delivery and Account Management

• Creating, maintaining, and administering your Account
• Processing deposits and withdrawals via Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallets (OVO, DANA, GoPay)
• Delivering betting markets, casino games, and all other Platform features
• Settling wagers, applying bonuses, and updating your Account balance
• Providing customer support in English and Bahasa Indonesia

4.2 Identity Verification and Compliance

• Verifying that you are at least 21 years of age (minimum age requirement)
• Confirming your identity and residency as required by KYC and AML regulations
• Detecting and preventing fraudulent activity, money laundering, and unauthorized access
• Complying with applicable legal, regulatory, and reporting obligations

4.3 Security and Fraud Prevention

• Monitoring Account activity for unusual patterns or suspicious transactions
• Detecting and blocking unauthorized login attempts and multi-accounting
• Investigating reported security incidents and account compromises
• Enforcing responsible gaming restrictions (deposit limits, self-exclusion)

4.4 Communication and Marketing

• Sending transactional notifications (deposit confirmations, withdrawal approvals, bet settlements)
• Providing promotional communications about bonuses, new features, and seasonal offers (with your consent, where required)
• Delivering customer service responses via live chat, email, and WhatsApp
• Notifying you of changes to our Terms, Privacy Policy, or platform features

You may opt out of marketing communications at any time by contacting our support team. Opting out will not affect transactional or service-related notifications.

4.5 Platform Improvement and Analytics

• Analyzing aggregated, anonymized usage data to improve Platform performance and user experience
• Testing new features and optimizing existing ones based on behavioral data
• Measuring the effectiveness of promotional campaigns

5. Legal Basis for Processing

hurajp processes your personal data under the following legal grounds:

5.1 Contractual Necessity

Processing is necessary to perform the contract between you and hurajp (the Terms and Conditions). This includes account creation, payment processing, service delivery, and customer support.

5.2 Legal Obligation

Processing is required to comply with applicable laws and regulations, including:

• Anti-Money Laundering (AML) and Counter-Terrorism Financing (CTF) regulations
• Know Your Customer (KYC) identity verification requirements
• Age verification and responsible gaming obligations (21+ minimum age)
• Tax reporting and financial audit requirements

5.3 Legitimate Interests

Processing is necessary for hurajp's legitimate business interests, including fraud prevention, security monitoring, platform improvement, and analytics — provided these interests do not override your fundamental rights and freedoms.

5.4 Consent

Where required by law, we obtain your explicit consent before processing certain types of data (e.g., marketing communications, optional data collection). You may withdraw consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

6. Data Sharing and Disclosure

hurajp does not sell, rent, or trade your personal data to third parties for marketing purposes. We may, however, share your data with the following categories of recipients under strict confidentiality and data protection agreements:

6.1 Service Providers and Data Processors

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals
• KYC Verification Providers: Third-party services that verify identity documents and perform background checks
• Cloud Hosting Providers: Secure data centers that host the Platform infrastructure
• Customer Support Tools: Live chat platforms and helpdesk systems that enable support interactions
• Analytics Providers: Tools that process anonymized usage data to generate insights (no personally identifiable information is shared)

6.2 Legal and Regulatory Authorities

We may disclose your personal data to law enforcement, regulatory bodies, or courts when legally required to do so, including:

• In response to a valid subpoena, court order, or legal process
• To comply with AML/CTF reporting obligations
• To investigate suspected fraud, money laundering, or other illegal activity
• To protect the rights, property, or safety of hurajp, our users, or the public

6.3 Business Transfers

In the event of a merger, acquisition, asset sale, or corporate restructuring, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer, and the new entity will be bound by this Privacy Policy.

7. Data Retention

hurajp retains your personal data only as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, and resolve disputes. Retention periods vary by data category:

• Identity and KYC data: Retained for the duration of your Account plus 5 years (required for AML compliance and legal defense)
• Financial transaction records: Retained for the duration of your Account plus 7 years (required for tax and audit purposes)
• Gaming and betting history: Retained for the duration of your Account plus 5 years (required for dispute resolution and regulatory reporting)
• Technical data and logs: Retained for 13 months from collection (used for security monitoring and fraud detection)
• Marketing consents and preferences: Retained until you withdraw consent or for 3 years of inactivity

After the applicable retention period expires, your personal data is securely deleted or anonymized such that it can no longer be linked back to you.

7.1 Account Closure

If you close your Account, we will retain your data only as long as legally required. Once the mandatory retention period expires, all personal data associated with your Account will be permanently deleted from our systems.

8. Security Measures

hurajp employs industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security framework includes:

8.1 Technical Safeguards

• 256-bit SSL/TLS encryption: All data transmitted between your device and our servers is encrypted using bank-grade encryption protocols
• Data encryption at rest: Sensitive data stored in our databases (including passwords, financial details, and KYC documents) is encrypted using AES-256 encryption
• Multi-factor authentication (2FA): Optional 2FA available via SMS or authenticator app for enhanced account security
• Firewall and intrusion detection: Real-time monitoring and automated threat prevention systems
• Regular security audits: Penetration testing and vulnerability assessments conducted by independent security firms

8.2 Organizational Safeguards

• Access controls: Personal data is accessible only to authorized employees and contractors on a need-to-know basis
• Staff training: All personnel handling personal data receive data protection and security training
• Confidentiality agreements: All employees and contractors sign non-disclosure agreements
• Incident response plan: Documented procedures for detecting, reporting, and responding to data breaches

8.3 Your Responsibilities

While hurajp implements robust security measures, you also play a critical role in protecting your Account. You agree to:

• Choose a strong, unique password and never share it with anyone
• Enable multi-factor authentication (2FA) if available
• Log out of your Account after each session, especially on shared or public devices
• Notify hurajp immediately if you suspect unauthorized access to your Account

9. Cookies and Tracking Technologies

hurajp uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain session state, and collect usage analytics.

9.1 What Are Cookies?

Cookies are small text files stored on your device by your web browser when you visit the Platform. They allow the Platform to recognize your device and remember your preferences across sessions.

9.2 Types of Cookies We Use

• Essential Cookies: Required for the Platform to function (e.g., session management, authentication, security). These cannot be disabled without impairing Platform functionality.
• Performance Cookies: Collect anonymized data about how users interact with the Platform to identify errors and optimize performance.
• Functional Cookies: Remember your preferences (e.g., language selection, display settings) to enhance usability.
• Analytics Cookies: Track aggregated, anonymized usage patterns to help us understand user behavior and improve the Platform.

9.3 Managing Cookies

You can control and delete cookies through your browser settings. Most browsers allow you to:

• View which cookies are stored and delete them individually or in bulk
• Block third-party cookies while allowing first-party cookies
• Set your browser to notify you when a cookie is being set

Please note that disabling essential cookies may prevent you from using certain features of the Platform.

10. Your Rights

Under applicable data protection laws, you have the following rights with respect to your personal data:

10.1 Right to Access

You have the right to request a copy of the personal data we hold about you. We will provide this information in a structured, commonly used, and machine-readable format within 30 days of your request.

10.2 Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to request that we correct or update it. You can update most Account information directly through your Account settings.

10.3 Right to Erasure (Right to be Forgotten)

You have the right to request deletion of your personal data in certain circumstances, including:

• The data is no longer necessary for the purposes for which it was collected
• You withdraw consent (where consent was the legal basis for processing)
• The data was processed unlawfully

This right is subject to exceptions, including where we are legally required to retain the data (e.g., for AML compliance or tax purposes).

10.4 Right to Restrict Processing

You have the right to request that we limit the processing of your personal data in certain situations, such as when you contest the accuracy of the data or object to its processing.

10.5 Right to Data Portability

You have the right to receive your personal data in a portable format and to transmit it to another data controller where technically feasible.

10.6 Right to Object

You have the right to object to processing based on legitimate interests or for marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your rights.

10.7 Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

10.8 Exercising Your Rights

To exercise any of the rights above, please contact our support team via live chat, email ([email protected]), or WhatsApp. We will respond to all requests within 30 days. We may require identity verification to protect your data from unauthorized access.

11. Children's Privacy

hurajp strictly enforces a 21+ age requirement. Our Services are not intended for individuals under the age of 21, and we do not knowingly collect personal data from minors.

If we become aware that we have inadvertently collected personal data from an individual under 21 years of age, we will take immediate steps to delete that data and permanently ban the associated Account. Parents and guardians who believe their child has provided personal data to hurajp should contact us immediately.

12. Amendments to This Privacy Policy

hurajp reserves the right to update, modify, or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will notify you by:

• Posting a prominent notice on the Platform homepage
• Sending an email notification to your registered email address
• Displaying an in-app notification upon your next login

Changes become effective immediately upon posting unless otherwise specified. Your continued use of the Platform after changes are posted constitutes acceptance of the revised Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. The "Last Updated" date at the top of this document indicates when the most recent changes were made.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact hurajp through any of the following channels:

• Live Chat: Available 24/7 in-app (fastest response time: 2-5 minutes during WIB hours)
• Email: [email protected] (response within 12-24 hours)
• WhatsApp Support: Listed on our Contact page (urgent privacy inquiries)

Our customer support team operates in both English and Bahasa Indonesia and is available 24 hours a day, 7 days a week (WIB / Western Indonesia Time, UTC+7). For data protection inquiries, please clearly indicate "Privacy Request" in your message subject line to ensure priority handling.