mihoyo Platform Privacy Notice
This page describes what we collect when you use mihoyo and how we keep that data protected. We at mihoyo take your privacy seriously — every account registration, deposit, withdrawal, and game session generates data that we hold to specific standards of confidentiality and security.
Our privacy commitment is simple: we collect only what is necessary to operate our platform, process your payments, and comply with local law. We do not sell your data to third parties, and we do not use your personal information for marketing without your consent. This notice explains our full practice.
What Data We Collect on mihoyo
Account and identity information
When you register on mihoyo, we collect your email address, username, password (encrypted), and date of birth. We ask for your full legal name, residential address, and phone number during account verification. We use this information to confirm your identity, prevent fraud, and comply with Know Your Customer (KYC) requirements that apply to financial platforms operating in your jurisdiction.
We also collect document information when you provide proof of identity. This may include a scanned government ID, passport, or driving licence. We store these documents securely and delete them after verification is complete, unless local law requires us to retain them for a specified period.
Payment and transaction data
We record every deposit and withdrawal on your mihoyo account. When you fund your account via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer (mobile banking, local payment, online payment, e-wallet), we log the payment method, amount, timestamp, and transaction status. We retain this data to reconcile your balance, respond to disputes, and meet anti-money-laundering (AML) obligations.
We do not store your full payment card or wallet details — that information is encrypted or tokenized by the payment processor. We receive only a confirmation that the transaction succeeded. This separation protects your payment credentials from mihoyo systems.
Gameplay and betting activity
We record your betting activity, game selections, stakes, and outcomes. This includes sportsbook wagers (Liga 1, Piala AFF, Champions League, Premier League, MotoGP, badminton), live-dealer table sessions (blackjack, roulette, baccarat, Dragon Tiger, Sic Bo), slot game spins (Aviator, Sweet Bonanza, Gates of Olympus, Fortune Tiger, Mahjong Ways), and esports markets (Mobile Legends, Free Fire, PUBG Mobile). We retain this data to settle disputes, detect fraud, and calculate your account balance.
We also log your session activity — login times, IP addresses, device types, and browser information. This helps us detect unusual account access and protect you from unauthorised use.
Communications and support
If you contact our English-language support team via live chat, email, or in-app messaging, we store your questions, our responses, and any personal information you share during the conversation. We use this data to improve our support processes and train our team to better assist players in Jakarta, Surabaya, Bandung, Medan, Semarang, and other regions.
- Retention period
- We retain account and transaction data for at least seven years to meet regulatory requirements. You may request deletion of non-regulatory data.
- Third-party access
- We share data with payment processors, game providers (Playtech, Pragmatic, others), and compliance partners only as needed to operate mihoyo.
- Server location
- Our servers may sit outside your jurisdiction. We apply equivalent data-protection standards regardless of physical location.
- Your rights
- You may request access, correction, or deletion of your personal data. Contact our privacy team to exercise these rights.
Our Data Protection Practices on mihoyo
Encryption and storage security
We encrypt sensitive data in transit using TLS (HTTPS) and at rest using AES-256 or equivalent. Your password is hashed, not stored in plain text — we cannot retrieve it even if you forget it. Payment information is either encrypted or tokenized by our payment processor, so mihoyo systems do not retain full payment details.
Our databases are protected by firewall, access controls, and intrusion detection. We undergo regular security audits and penetration testing. If we detect a data breach, we notify affected users and relevant authorities within timelines required by law.
Third-party processors
We work with payment processors, game providers (such as Playtech for live dealers), and compliance verification services. Each processor has signed a data-protection agreement requiring them to protect your data to standards matching our own. We do not allow processors to use your data for their own marketing.
Game outcomes on mihoyo are determined by certified software. Playtech live-dealer tables are managed by Playtech's systems, not ours — but we receive only settlement data, not raw logs of dealer activity. Similarly, sportsbook odds and payouts are calculated by our odds system, and we log only the outcome, not intermediate calculations.
Cookies and tracking
We use cookies to keep you logged in, remember your preferences, and analyse how you use mihoyo. Session cookies expire when you close your browser. Persistent cookies last longer and may track your activity across visits. You can disable cookies in your browser settings, though this may limit mihoyo functionality.
We do not sell cookie data to advertisers. We may use it internally to improve our platform — for example, to understand which games are most popular or which payment methods are most used in Jakarta or Semarang.
We at mihoyo believe transparency and user control are essential. This notice reflects our actual practices, not marketing promises. You can request your data anytime, and we will respond within timelines required by law.
Your Rights and Contact
Data subject rights
Depending on your jurisdiction, you may have the right to access, correct, delete, or port your personal data. You may also object to certain processing activities. To exercise these rights, contact our privacy team via email or through your mihoyo account settings. We will respond within 30 days and confirm what action we have taken.
If you believe we have misused your data or violated your privacy rights, you may lodge a complaint with your local data-protection authority. We will cooperate fully with any investigation.
Changes to this notice
We may update this privacy notice as our operations evolve or as law changes. We will notify you of material changes via email or in-app notification. Your continued use of mihoyo after such changes constitutes acceptance of the updated terms.
Contact mihoyo
If you have questions about our privacy practices, contact our privacy team at [email protected] or through the contact form in your mihoyo account. Our English-language support team can also assist with privacy concerns during business hours. We will respond to all privacy inquiries within 14 days.
Our commitment is to protect your data while delivering a reliable, transparent gaming platform. We operate under the principle that your information belongs to you, and we are custodians of it only for as long as you maintain your mihoyo account or law requires us to retain it.