Privacy Policy BigHoki

BigHoki collects various types of personal information from members during the registration process, platform usage, and ongoing communications. Data collection is conducted transparently and solely for legitimate purposes related to platform operations.

Information You Provide Directly

• Identity Information: Full name, date of birth, identity card or passport number (for KYC verification purposes)
• Contact Information: Email address, phone number, and current residential address
• Account Information: Username, password (stored in encrypted form), security questions
• Financial Information: Bank account details, digital wallet account numbers, and deposit and withdrawal transaction records
• KYC Documents: Copies of identity documents, proof of address, and facial images where required for verification

Automatically Collected Information

When you use the BigHoki platform, our systems automatically record certain technical information to ensure the platform operates correctly and securely. This includes your IP address, browser type and version, device operating system, pages visited, time and duration of visits, and navigation patterns within the platform.

This technical information is used solely for diagnostic, security, and user experience improvement purposes. It is not used to personally identify you unless associated with your account data in the context of a legitimate security investigation.

All personal data collected by bighoki is used strictly within permitted purposes. We do not use your data for any purpose unrelated to platform operations without your explicit consent.

BigHoki uses your transaction data and gameplay patterns to identify early signs of problem gambling. This is part of our commitment to the Responsible Gaming programme and is not used for marketing purposes. Should we identify any concerning patterns, our team will proactively reach out to offer the support you need.

BigHoki's core policy is to never sell, rent, or disclose members' personal data to third parties for their own marketing purposes. However, there are limited situations where information sharing is necessary and permitted.

Permitted Sharing Situations

• Trusted Service Providers: We work with carefully selected third-party providers for payment processing, identity verification, and technical infrastructure. All such providers are bound by strict confidentiality agreements.
• Legal Requirements: BigHoki will disclose required information when ordered by a competent authority or as required by applicable law, including suspicious activity report (SAR) obligations under anti-money laundering legislation.
• Security Protection: In the event of a serious security threat or suspected fraudulent activity, BigHoki reserves the right to share relevant information with authorities or security partners to protect the interests of the platform and other members.
• Business Transfers: In the event of a merger, acquisition, or sale of bighoki assets, member data may be transferred as part of that transaction. Members will be notified before their data becomes subject to a different privacy policy.

International Data Transfers

As bighoki operates in a global digital environment, your personal data may be processed on servers located outside Malaysia. We ensure that any such international data transfers are protected by equivalent safeguard mechanisms, including data processing agreements that comply with international standards.

BigHoki uses cookies and similar tracking technologies to enhance the user experience, understand platform usage patterns, and ensure the security of your login session. Our use of cookies is transparent and controlled.

Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled as they are essential for platform operation.
• Performance Cookies: Collects information about how you use the platform — which pages are visited most frequently, error messages received, and how you navigate between pages. This data is used in aggregate for platform improvements.
• Functionality Cookies: Allows the platform to remember your preferences such as language, display settings, and login information (if you choose to save them) for a more convenient ongoing experience.
• Analytics Cookies: Helps us understand how visitors interact with the platform as a whole through recognized analytics tools. This information is used to make decisions about platform improvements.

You can control and manage cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of the BigHoki platform. For more information on managing cookies, refer to your web browser's help documentation.

BigHoki implements multiple layers of technical and organisational security to protect your personal data from unauthorised access, loss, or misuse. Data security is not an add-on — it is a core pillar of our platform.

Our Layers of Protection

• Data Encryption in Transit: All communications between your browser and bighoki's servers are secured by TLS 1.3 protocol with regularly renewed 256-bit SSL certificates.
• Data Encryption at Rest: Sensitive data such as financial information and KYC documents is stored in encrypted format using industry-standard encryption algorithms.
• Strict Access Controls: A role-based access control (RBAC) system ensures that only staff with legitimate business needs can access sensitive member data.
• 24/7 Monitoring: Our security team monitors platform activity around the clock to detect and respond to security threats promptly.
• Two-Factor Authentication: BigHoki supports and encourages the use of two-factor authentication (2FA) for an added layer of protection on member accounts.
• Regular Security Audits: Our platform undergoes regular security audits and penetration testing by independent third parties.

As a data subject, you have certain rights regarding your personal information held by bighoki. We fully respect these rights and have clear procedures in place to facilitate their exercise.

BigHoki retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by applicable law. When data is no longer needed, it will be securely deleted or anonymised.

Specific Retention Periods

• Active Account Data: Retained for the entire duration your account remains active with bighoki
• KYC Records and Identity Verification: Retained for a minimum of 5 years after account closure in accordance with AML legal requirements
• Financial Transaction Records: Retained for a minimum of 7 years for audit and tax compliance purposes
• Support Communication Logs: Retained for 3 years after the last interaction
• Technical Log Data: Retained for 12 months then anonymised for long-term analytics
• Marketing Data (with consent): Retained until you withdraw consent or close your account

Once the relevant retention period has expired, your data will be securely deleted or fully anonymised so that it can no longer be associated with you as an individual. This deletion and anonymisation process is carried out in accordance with strict security procedures.

BigHoki is an adult entertainment platform accessible only to individuals aged 18 and above. We take the protection of children's and minors' privacy extremely seriously.

Our platform does not knowingly collect any personal information from individuals under the age of 18. Our registration process involves strict age verification, including identity document checks through our KYC process, to ensure only eligible adults can open an account.

Should we discover that we have inadvertently collected personal information from a minor, we will take immediate steps to delete that information and close the account in question without delay. Parents or guardians who suspect their child has registered an account at bighoki are encouraged to contact our support team immediately.

The BigHoki platform may contain links or integrations with third-party services such as payment providers and identity verification platforms. This Privacy Policy applies solely to the BigHoki platform itself and not to those third-party websites or services.

Every third-party provider we engage has undergone a rigorous selection process and is bound by data processing agreements requiring them to protect your information to the same strict standards as bighoki's internal policies. Nevertheless, we encourage you to read the privacy policies of your chosen payment service providers to understand their own privacy practices.

BigHoki is not responsible for the privacy practices or content of third-party websites that may be linked from our platform. Your access to such third-party websites is entirely at your own risk.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how bighoki handles your personal data, our Data Protection Officer (DPO) team is ready to assist.

You can reach us through the following channels:

• In-Platform Live Chat: Available 24 hours a day, 7 days a week for immediate response
• Privacy Email: [email protected] (response within 2 business days)
• Help Centre: Privacy & Security section in your account settings

We are committed to responding to all privacy-related inquiries within 30 business days. For more complex requests, we will keep you informed of our investigation progress on a regular basis. bighoki takes every privacy complaint seriously and will conduct a thorough investigation before providing a complete response.

This Privacy Policy may be updated from time to time to reflect changes in our privacy practices, new legal requirements, or service improvements. Any significant changes will be communicated to you via your registered email or in-platform notification. We encourage you to review this page periodically to stay up to date with the latest BigHoki Privacy Policy.