hugo4d Privacy Policy

Data We Collect on hugo4d

We collect information in several categories. First, account creation data: your email address, username, and a password you create. We use this to authenticate your login and send account notifications. Second, identity verification data: your full legal name, date of birth, and national ID number (KTP for Indonesian residents). We collect this once during your KYC process to verify you are the legitimate account holder and comply with anti-money-laundering regulations.

Fifth, device and usage data: when you use our Android app or iOS browser, we collect your device type (Android, iPhone), app version, IP address, and approximate location (city-level) for security and fraud prevention. Sixth, communication data: if you contact our support team via chat or email, we store those conversations for service quality review and dispute resolution.

Finally, we use cookies in our browser version to remember your login session and user preferences. Cookies are small files your browser stores locally; we do not use them for cross-site tracking. You can disable cookies in your browser settings, though some hugo4d features may not work without them.

How We Use Your hugo4d Data

We use your email and password to authenticate you when you log in. We use your KYC data (legal name, DOB, national ID) for identity verification—we submit it to a third-party verification service that cross-checks against government records. Once verification is complete, we retain this data to confirm your identity during withdrawal requests and to satisfy regulatory requirements.

We use your payment data to confirm deposits have been received, reconcile your account balance, and process withdrawal requests. We use your gameplay data to maintain your game history, settle disputes (e.g., if you claim a game round did not credit properly), and generate compliance reports for regulators. We use your device and usage data to detect fraud—unusual login patterns, geographic anomalies, or rapid deposit-withdrawal cycles may trigger additional verification or account suspension.

We use communication data from support conversations to improve our service, train our support staff, and resolve disputes. We do not use your data for marketing—we will not send you promotional emails or sell your contact information to third parties unless you explicitly opt in.

Third-Party Data Processors

We work with trusted partners to operate hugo4d. Our payment processors (e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, and bank partners) receive your transaction data. They handle deposits and withdrawals according to their own privacy policies. We recommend reviewing their policies if you have concerns about payment data handling.

Our identity verification partner receives your KYC data (name, DOB, national ID) to cross-check against government records. This partner is bound by confidentiality agreements and deletes unverified data after a fixed retention period. Our customer support platform may be hosted outside Indonesia—your support chat messages may be processed or stored on servers in other jurisdictions subject to different data protection laws.

We do not share your data with advertisers, data brokers, or unrelated third parties. We do share limited data (transaction history, gameplay data, KYC status) with regulators if required by law or if we detect suspicious activity suggesting fraud or money laundering.

How Long We Keep Your hugo4d Data

We retain your account data (email, password hash, username) as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where we are required by law to retain it longer. We retain gameplay data and transaction history for at least 5 years for tax and regulatory compliance, even after account deletion.

We retain KYC data (identity documents) for at least 5 years to satisfy anti-money-laundering regulations. Some regulators require longer retention. We retain support conversation data for 3 years unless you request deletion.

We delete device and usage data (IP addresses, device identifiers) after 90 days of account inactivity, except where fraud investigation requires longer retention. If your account is suspended due to suspicious activity, we retain all data relevant to the investigation indefinitely.

Account data

Retained while account is active; deleted 30 days after account closure unless legally required otherwise.

KYC identity data

Retained at least 5 years for regulatory compliance.

Gameplay and transaction history

Retained at least 5 years for tax and compliance audits.

Support conversations

Retained for 3 years; deletion available on request.

Device and usage data

Deleted after 90 days of inactivity unless fraud investigation requires retention.

Your Rights Regarding hugo4d Data

You have the right to access all personal data we hold about you. You can request a copy of your KYC records, transaction history, and account data by contacting our support team. We will provide this within 30 days at no charge.

You have the right to correct inaccurate data. If your name, date of birth, or address is incorrect in our system, contact support and we will update it. You have the right to request deletion of your account and associated personal data, subject to legal retention requirements—we will delete what we can and retain only data required by law.

You have the right to object to certain data uses. If we process your data for fraud prevention and you believe we are misusing it, you can lodge a complaint with our support team or your local data protection authority. You also have the right to data portability—we can provide your data in a machine-readable format so you can transfer it to another service.

Data Security at hugo4d

We encrypt all personal data in transit (using HTTPS) and at rest (using AES-256 encryption). Your password is hashed using industry-standard algorithms so even our staff cannot read it in plain text. Access to your data is restricted to hugo4d employees with legitimate business need—our support team cannot see your KYC details unless investigating a specific dispute.

We maintain regular security audits and penetration testing to identify vulnerabilities. We monitor for unauthorized access attempts and alert account holders if we detect suspicious login activity. If we suffer a data breach, we will notify affected users and relevant authorities within the timeframe required by law.

We do not guarantee absolute security—no system is entirely risk-free. We recommend enabling two-factor authentication (2FA) on your hugo4d account, using a strong password, and never sharing your login credentials. If you notice unauthorized activity on your account, change your password immediately and contact our support team.

International Data Transfer

We operate hugo4d from servers that may be located outside Indonesia. When you use hugo4d, your data may be processed, transmitted to, or stored on servers in other countries where data protection laws differ from Indonesian law. By creating a hugo4d account, you consent to international transfer of your data as described in this policy.

We ensure that international data transfers comply with applicable law. We use data processing agreements with international partners to ensure your data receives protection equivalent to Indonesian standards, even when processed abroad.

If you access hugo4d from Jakarta, Surabaya, Bandung, Medan, or another Indonesian city, your data may be transmitted to other countries for processing. You accept this risk by continuing to use our platform. If you do not consent to international data transfer, do not use hugo4d.

Children and hugo4d

We do not intentionally collect data from children under 18. Our Terms of Service require account holders to be at least 18 years old. If we discover we have collected data from a child, we will delete that account and data immediately.

If you are a parent or guardian and believe your child has created a hugo4d account, contact our support team immediately. We will verify the account holder's age and take appropriate action.

Changes to Our hugo4d Privacy Policy

We may update this privacy policy to reflect changes in our data practices, new regulations, or platform improvements. We will notify you of material changes by posting the updated policy on hugo4d.id and sending an email to your account address. Material changes take effect 30 days after notification. Continued use of hugo4d after the effective date constitutes acceptance of the updated policy.

We recommend reviewing this policy periodically to stay informed about how we handle your data.

Contact Us About Privacy

If you have questions about this privacy policy, how we collect and use your data, or your rights, contact our support team via in-app chat, email, or our support portal. We operate in English and Indonesian. We aim to respond to privacy inquiries within 5 business days.

If you have a privacy complaint or believe we are mishandling your data, you can lodge a formal complaint with our support team. We will investigate and respond within 30 days. If you remain unsatisfied, you can escalate your complaint to your local data protection authority or regulatory body.

This privacy policy is effective as of the date published on hugo4d.id. We are committed to protecting your data and respecting your privacy rights.