Privacy Policy

1. Introduction

At koi388, we recognize that privacy and data protection are fundamental rights. This Privacy Policy explains how we collect, use, store, protect, and share your personal information when you use our online gaming platform, website located at https://koi388.cam, and all associated services including casino games, sports betting, live dealer experiences, lottery games including togel (Indonesia's traditional numbers lottery), and related functionality (collectively, the "Services").

This Privacy Policy applies to all users of koi388 Services and should be read in conjunction with our Terms and Conditions. By creating an account, accessing our platform, or using any of our Services, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy.

We are committed to complying with applicable Indonesian data protection laws and regulations, industry best practices, and international standards for information security. We implement robust technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction.

2. Data Controller and Contact Information

koi388 is the data controller responsible for your personal information collected through our Services. If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us through the following channels:

• Email: [email protected] (Response within 2-4 hours)
• 24/7 Live Chat: Available directly on our website
• WhatsApp: +62-812-3456-7890 (Available 06:00 - 02:00 WIB)
• Postal Address: koi388 Customer Privacy Team, Jakarta, Indonesia

Our Data Protection Officer is available to address privacy concerns and can be reached at the email address above with the subject line "Privacy Request - DPO".

3. Information We Collect

3.1 Information You Provide Directly

We collect personal information that you voluntarily provide when you:

• Create an Account: Full legal name, date of birth, gender, residential address, email address, mobile phone number, username, and password.
• Complete KYC Verification: Government-issued identification documents (KTP, passport, driver's license), proof of address documents (utility bills, bank statements), selfie photographs, and proof of payment method ownership.
• Make Financial Transactions: Bank account details, e-wallet information, deposit and withdrawal amounts, transaction history, and payment method preferences.
• Contact Customer Support: Support inquiry details, chat transcripts, email correspondence, complaint information, and any additional information you choose to provide.
• Participate in Promotions: Bonus claims, promotional code usage, tournament entries, and marketing preference selections.
• Use Responsible Gaming Tools: Deposit limits, loss limits, session time limits, self-exclusion preferences, and reality check settings.

3.2 Information We Collect Automatically

When you access or use our Services, we automatically collect certain technical and usage information:

• Device Information: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage Data: Pages visited, games played, bet history, session duration, click patterns, navigation paths, timestamps, and feature usage statistics.
• Location Information: Approximate geographic location based on IP address to ensure compliance with territorial restrictions and regulatory requirements.
• Cookies and Similar Technologies: Session cookies, preference cookies, analytics cookies, and security tokens. See Section 9 for detailed cookie information.
• Gaming Activity: Bet amounts, game selections, win/loss records, account balance history, bonus utilization, and gameplay patterns.

3.3 Information from Third Parties

We may receive information about you from third-party sources including:

• Payment Processors: Transaction verification, payment method validation, and fraud detection data from banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay, ShopeePay).
• Identity Verification Services: Document authentication, age verification, and identity confirmation from KYC service providers.
• Fraud Prevention Services: Risk assessment data, suspicious activity alerts, and blacklist information from specialized security vendors.
• Marketing Partners: Referral source information and attribution data (only with your consent where required).

4. How We Use Your Information

We use your personal information for the following legitimate business purposes:

4.1 Service Provision and Account Management

• Create, maintain, and manage your gaming account
• Process deposits, withdrawals, and financial transactions
• Provide access to games, betting markets, and platform features
• Track account balances, bet history, and gaming activity
• Implement and manage responsible gaming tools and limits
• Facilitate customer support and respond to inquiries

4.2 Legal and Regulatory Compliance

• Verify your identity, age (21+), and eligibility to use our Services
• Comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
• Prevent, detect, and investigate fraud, cheating, collusion, and prohibited activities
• Enforce our Terms and Conditions and other platform policies
• Respond to legal requests, court orders, and regulatory inquiries
• Maintain records required by applicable laws and licensing requirements

4.3 Platform Security and Integrity

• Protect against unauthorized access, hacking, and security breaches
• Monitor for suspicious patterns, bot activity, and abuse
• Prevent money laundering, terrorist financing, and financial crimes
• Ensure fair play and detect advantage play or exploitation
• Protect our systems, networks, and infrastructure

4.4 Service Improvement and Analytics

• Analyze user behavior, preferences, and engagement patterns
• Improve platform functionality, user experience, and performance
• Develop new features, games, and services
• Conduct research, testing, and quality assurance
• Generate aggregated, anonymized statistics and reports

4.5 Marketing and Communications (With Consent)

• Send promotional offers, bonuses, and special deals (only with your opt-in consent)
• Deliver personalized recommendations based on your gaming preferences
• Notify you about new games, features, and platform updates
• Send transactional communications (account notifications, withdrawal confirmations, security alerts)

5. Legal Basis for Processing

Under applicable data protection laws, we process your personal information based on the following legal grounds:

• Contractual Necessity: Processing required to provide Services, manage your account, and fulfill our Terms and Conditions.
• Legal Obligation: Compliance with KYC, AML, age verification, taxation, and other regulatory requirements under Indonesian law.
• Legitimate Interests: Fraud prevention, platform security, service improvement, and analytics, balanced against your privacy rights.
• Consent: Marketing communications, optional cookies, and other processing activities where we specifically request your permission.

6. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. We may share your information with the following categories of recipients for legitimate business purposes:

6.1 Service Providers and Business Partners

• Payment Processors: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay) to process deposits and withdrawals.
• Game Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and other software providers to deliver gaming content.
• Identity Verification Services: Third-party KYC providers to verify your identity, age, and documentation authenticity.
• Fraud Prevention Services: Specialized vendors providing fraud detection, risk assessment, and security monitoring.
• Cloud Hosting Providers: Secure data storage and infrastructure services operating under strict confidentiality agreements.
• Customer Support Tools: Live chat platforms and helpdesk systems to facilitate support interactions.
• Analytics Providers: Services helping us understand platform usage and improve user experience (anonymized where possible).

6.2 Legal and Regulatory Authorities

We may disclose your information to government agencies, law enforcement, regulators, courts, or other authorities when required by law or when we believe disclosure is necessary to:

• Comply with legal obligations, court orders, subpoenas, or regulatory requests
• Enforce our Terms and Conditions or other agreements
• Protect our rights, property, safety, or the rights and safety of others
• Prevent, detect, or investigate fraud, security breaches, or illegal activities
• Respond to claims of illegal content or violation of third-party rights

6.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the successor entity, subject to the same privacy protections outlined in this Policy.

6.4 Data Sharing Safeguards

All third-party service providers and partners are carefully vetted and bound by strict contractual obligations to protect your data, use it only for specified purposes, and maintain confidentiality. We implement technical and organizational measures to ensure secure data transfers and limit access to the minimum necessary information.

7. International Data Transfers

Your personal information may be transferred to, stored, or processed in locations outside Indonesia, including servers and service providers in other jurisdictions. When we transfer data internationally, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by data protection authorities
• Adequacy decisions recognizing equivalent data protection standards
• Binding corporate rules for transfers within corporate groups
• Technical security measures including encryption in transit and at rest

By using our Services, you consent to the transfer of your information to countries that may have different data protection laws than Indonesia, with the understanding that we implement appropriate protections regardless of storage location.

8. Data Security Measures

We implement comprehensive security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• Encryption: 256-bit SSL/TLS encryption for all data transmissions between your device and our servers
• Access Controls: Role-based access restrictions limiting employee access to personal data on a need-to-know basis
• Authentication: Multi-factor authentication options, strong password requirements, and session management
• Network Security: Firewalls, intrusion detection systems, DDoS protection, and continuous security monitoring
• Data Encryption: Encryption of sensitive data at rest in our databases and storage systems
• Regular Audits: Periodic security assessments, penetration testing, and vulnerability scanning
• Employee Training: Mandatory data protection and security awareness training for all staff
• Incident Response: Documented procedures for detecting, responding to, and reporting security incidents

While we implement industry-leading security measures, no method of transmission or storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials and notifying us immediately of any suspected unauthorized access.

9. Cookies and Tracking Technologies

9.1 What Are Cookies

Cookies are small text files placed on your device when you visit our website. We use cookies and similar technologies (pixels, web beacons, local storage) to enhance your experience, maintain session continuity, analyze usage patterns, and deliver personalized content.

9.2 Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential Cookies	Required for login, session management, and core platform functionality	Session
Functional Cookies	Remember preferences, language selection, and customization settings	30-90 days
Analytics Cookies	Understand usage patterns, page views, and user behavior for improvements	1-2 years
Security Cookies	Detect fraud, prevent unauthorized access, and enhance platform security	Session

9.3 Cookie Management

You can control cookie preferences through your browser settings. However, disabling essential cookies may impair platform functionality and prevent you from accessing certain features. Most browsers allow you to reject cookies, delete existing cookies, or receive alerts before cookies are placed.

10. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Active Accounts: Data retained for the duration of your active account plus regulatory retention periods
• Financial Records: Transaction history retained for 7 years to comply with tax and AML regulations
• KYC Documents: Identity verification documents retained for 7 years after account closure
• Gaming Records: Bet history, game logs, and account activity retained for 7 years for regulatory compliance
• Marketing Communications: Deleted upon unsubscribe or within 90 days of account closure
• Support Inquiries: Chat transcripts and email correspondence retained for 3 years

After retention periods expire, we securely delete or anonymize your information in accordance with data protection requirements. Anonymized data used for statistical analysis may be retained indefinitely as it cannot identify you.

11. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal information:

• Right to Access: Request a copy of the personal information we hold about you
• Right to Rectification: Correct inaccurate or incomplete personal information
• Right to Erasure: Request deletion of your personal information (subject to legal retention obligations)
• Right to Restriction: Limit how we process your information in certain circumstances
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for marketing purposes
• Right to Withdraw Consent: Withdraw previously given consent for specific processing activities
• Right to Lodge a Complaint: File a complaint with relevant data protection authorities

To exercise these rights, contact us at [email protected] with the subject line "Privacy Rights Request". We will respond within 30 days and may request additional information to verify your identity before processing your request.

12. Children's Privacy

Our Services are strictly intended for adults aged 21 and over. We do not knowingly collect, use, or retain personal information from individuals under 21 years of age. If we discover that we have inadvertently collected information from someone under 21, we will immediately delete that information and close the associated account. Parents or guardians who believe their child has provided information to koi388 should contact us immediately for removal.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will notify you by updating the "Last Updated" date at the top of this Policy and may provide additional notice through email or prominent website notification. Your continued use of our Services after such changes constitutes acceptance of the updated Privacy Policy. We encourage you to review this Policy regularly to stay informed about how we protect your information.

14. Third-Party Links

Our platform may contain links to third-party websites, services, or content. This Privacy Policy applies only to koi388 and does not govern the privacy practices of external sites. We are not responsible for the privacy policies or practices of third parties. We encourage you to review the privacy policies of any third-party services before providing personal information.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact our Privacy Team:

• Email: [email protected] (Subject: Privacy Inquiry)
• 24/7 Live Chat: Available on our website
• WhatsApp: +62-812-3456-7890

We are committed to addressing your privacy concerns promptly and transparently. Our Data Protection Officer reviews all privacy-related inquiries and ensures compliance with applicable data protection regulations.