Data Retention
We delete inactive account data after 24 months. Most platforms keep it indefinitely. You can request deletion anytime.
LEGAL REFERENCE
Your Data. Your Control. Our Commitment.
We built herobet168 around your privacy. Every account detail, payment record and gaming session stays encrypted and protected. This policy explains exactly how we handle your information —...
Data EncryptedPayment SecureYour ControlTransparent PolicySupport Always
Privacy Policy Overview
herobet168 operates under privacy frameworks designed for supported regions in Indonesia. We collect account information, payment details and gameplay data solely to deliver your lobby access, process DANA, OVO, GoPay and QRIS transactions, and maintain platform security. Your personal data is never sold to third parties. We retain information only as long as your account remains active or as required by local
law. You can request data access or deletion by contacting our support team. This policy is reviewed quarterly to reflect changes in local regulations and platform features.
Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.
PLAYER SUPPORT
Privacy Questions? We're Here.
Your privacy concerns matter. Reach out through any of these channels and we'll respond within 24 hours with clear answers about how your data is handled.
Live Chat
Open the chat widget in the bottom-right corner of your account dashboard. Our team responds to privacy questions during platform hours.
Email Support
Send privacy requests to [email protected]. Include your account email and we'll investigate within one business day.
Account Settings
Visit your account privacy centre to review permissions, download your data or adjust notification preferences directly.
REVIEW SIGNALS
Why Your Privacy Matters Here
We've invested in infrastructure and processes that put your data security first. Every section of this policy reflects real commitments we've made to protect you.
SSL Encryption
All account logins, payment submissions and personal data transfers use 256-bit SSL encryption. Your browser confirms this with a padlock icon.
PCI Compliance
Payment card data is handled under PCI DSS standards. We never store full card numbers on our servers; payment processors handle that securely.
Data Minimisation
We ask for only the information needed to verify your account, process payments and comply with local regulations. No unnecessary fields.
Regular Audits
Third-party security firms audit our systems quarterly. Results inform updates to this policy and our data-handling procedures.
Staff Training
Every team member with access to account data completes privacy training annually. Breaches are reported to you within 72 hours.
Transparent Logs
You can view a log of who accessed your account and when. Download this from your privacy centre anytime.
PLATFORM COMPARISON
How We Stack Up
Privacy policies vary widely across gaming platforms. Here's how herobet168 compares on the commitments that matter most to you.
Third-Party Sharing
We never sell your data to advertisers or data brokers. Some platforms monetise user lists; we don't.
Payment Privacy
DANA, OVO, GoPay and QRIS transactions are tokenised. Your wallet details never touch our servers directly.
Cookie Transparency
We list every cookie on our site with its purpose. You can disable non-essential cookies without losing account access.
Breach Notification
If a breach occurs, we notify you within 24 hours with details and next steps. Industry standard is 30–90 days.
Data Portability
Export your account history, transaction records and preferences as a single file. Most platforms don't offer this.
Policy Updates
We notify you 30 days before any material privacy change. You can opt out of new terms by closing your account.
What Defines Our Privacy Approach
Privacy isn't a checkbox for us — it shapes how we design every feature. From account creation to your last session, these principles guide our decisions.
Account Verification
We verify your identity once during signup using your email and phone. No repeated verification requests unless you change account details.
Session Security
Your login session expires after 30 minutes of inactivity. You can extend it with one click or log out manually anytime.
Payment Tokenisation
DANA, OVO, GoPay and QRIS payments are tokenised so your wallet credentials stay private. We see only transaction confirmations.
Gameplay Privacy
Your game history, bet amounts and session times are visible only to you and our support team if you request help.
Device Management
View all devices logged into your account. Remove any device remotely if you suspect unauthorised access.
Communication Preferences
Choose which emails and notifications you receive. Unsubscribe from promotions without affecting account security alerts.
Privacy Questions Answered
We collect your email, phone number, full name and date of birth during signup. Payment information is handled by our processors; we store only transaction tokens. We also log your IP address, device type and gameplay activity for security and platform improvement.
We delete personal data within 24 months of account closure. Transaction records required by local law are retained separately and anonymised. You can request immediate deletion by emailing [email protected] with your account email.
We never sell your data. We share information only with payment processors (for DANA, OVO, GoPay, QRIS transactions), hosting providers and legal authorities when required by law. All partners sign strict confidentiality agreements.
Payments are tokenised — your wallet credentials never reach our servers. We use 256-bit SSL encryption for all transactions. Payment processors handle card and account data under PCI DSS compliance. You can view transaction history anytime in your account.
Yes. Visit your account privacy centre to download a complete data export in standard format. You can also request deletion of specific data types. Account closure deletes all personal information within 24 months, with legal-hold exceptions noted in our policy.
We notify you within 24 hours with details of what was accessed and steps we've taken. We also report to relevant authorities in supported regions. Our quarterly security audits help prevent breaches; we maintain cyber insurance for additional protection.
You can disable non-essential cookies in your browser settings without losing account access. Our cookie banner lists every tracker with its purpose. Essential cookies (login, security) cannot be disabled but are never used for advertising or profiling.