Privacy Policy

1. Introduction

koi228 ("we", "us", "our", "Company") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use our online betting and gaming platform located at https://koi228.cam (the "Service", "Platform", "Website"). This policy applies to all users accessing our Service from Indonesia and other jurisdictions where we operate.

By creating an account, making a deposit, or otherwise using koi228 services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein. If you do not agree with this Privacy Policy, please do not use our Service.

This Privacy Policy should be read in conjunction with our Terms and Conditions and Responsible Gaming policies. Together, these documents form the complete agreement between you and koi228 regarding your use of our platform.

2. Information We Collect

koi228 collects various types of personal information to provide, maintain, and improve our services. The information we collect falls into the following categories:

2.1 Information You Provide Directly

When you register for a koi228 account, we collect:

• Identity Information: Full legal name, date of birth, gender, and nationality as shown on your government-issued identification document (Indonesian KTP, passport, or driver's license).
• Contact Information: Email address, mobile phone number, and residential address in Indonesia including street, city, province, and postal code.
• Account Credentials: Username, password (stored in encrypted form), and security questions/answers.
• Financial Information: Bank account details for withdrawals including bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata), account number, and account holder name. E-wallet information for OVO, DANA, GoPay, ShopeePay, or LinkAja including registered phone number.
• Verification Documents: Copies of government-issued ID, proof of address (utility bills, bank statements), and any additional documentation required for KYC (Know Your Customer) compliance and anti-money laundering verification.

2.2 Information Collected Automatically

When you access and use koi228, we automatically collect:

• Transaction Data: Complete history of deposits, withdrawals, bets placed, game rounds played, wins, losses, and bonus claims. All transactions are timestamped and recorded in Indonesian Rupiah (IDR).
• Technical Information: IP address, device type (mobile, tablet, desktop), operating system (Android, iOS, Windows, macOS), browser type and version, screen resolution, and language preferences.
• Usage Data: Pages visited, features accessed, time spent on platform, click patterns, game preferences, search queries, and session duration. We track which sports betting markets you view (BRI Liga 1, EPL, La Liga, Champions League), which slot games you play, and which live casino tables you join.
• Location Data: Approximate geographic location derived from IP address to ensure compliance with jurisdictional restrictions and to provide localized content (WIB time zone, Indonesian Rupiah currency, local payment methods).
• Communication Records: Transcripts of live chat conversations with customer support, emails exchanged with our team, and WhatsApp messages (when you contact us via WhatsApp). These are retained for quality assurance and dispute resolution purposes.

2.3 Information from Third Parties

We may receive information about you from third-party sources including:

• Payment Processors: Transaction confirmation, payment method verification, and fraud detection signals from Indonesian banks and e-wallet providers.
• Identity Verification Services: Age verification, ID document authentication, and watchlist screening results from third-party KYC providers.
• Game Providers: Game outcomes, RTP (Return to Player) data, and technical logs from our licensed game studio partners including Pragmatic Play, Evolution Gaming, Microgaming, and others.
• Affiliates and Marketing Partners: If you arrived at koi228 through a referral link or affiliate promotion, we may receive limited information about the source of your registration.

3. How We Use Your Information

koi228 uses the collected information for the following purposes:

3.1 Service Provision and Account Management

• Create and maintain your koi228 user account
• Process deposits and withdrawals via Indonesian payment methods
• Enable you to place bets on sports events (bandar bola markets, football betting, togel lottery) and play casino games
• Track your transaction history and betting activity
• Provide customer support via live chat, email, and WhatsApp in English and Bahasa Indonesia
• Manage your account preferences, deposit limits, and responsible gaming tools

3.2 Legal and Regulatory Compliance

• Verify your identity and age (21+ requirement for Indonesian users)
• Conduct KYC and anti-money laundering (AML) checks as required by international gaming regulations
• Detect and prevent fraud, collusion, bonus abuse, and other prohibited activities
• Comply with legal obligations including tax reporting, court orders, and regulatory inquiries
• Enforce our Terms and Conditions and protect koi228's legal rights

3.3 Service Improvement and Personalization

• Analyze usage patterns to improve platform performance, user experience, and game selection
• Personalize content and recommendations based on your betting preferences (e.g., highlighting BRI Liga 1 matches if you frequently bet on Indonesian football)
• Test new features, conduct A/B testing, and optimize website layout
• Generate aggregate statistics and reports (all personally identifiable information is anonymized)

3.4 Marketing and Communications

• Send promotional offers, bonus announcements, and special promotions tailored to Indonesian players
• Notify you of new game releases, tournament opportunities, and platform updates
• Share responsible gaming reminders and tips for safe betting practices
• Conduct customer satisfaction surveys (participation is voluntary)

You may opt out of promotional communications at any time through your account settings or by contacting customer support. Transactional communications (deposit confirmations, withdrawal notifications, security alerts) cannot be opted out of as they are essential to the service.

4. Information Sharing and Disclosure

koi228 does not sell, rent, or trade your personal information to third parties for their marketing purposes. We only share your data in the following limited circumstances:

4.1 Service Providers

We share information with trusted third-party service providers who perform services on our behalf, including:

• Payment Processors: To facilitate deposits and withdrawals via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and other Indonesian payment methods
• KYC Verification Providers: To verify your identity, age, and address during account registration
• Cloud Hosting and IT Services: To store data securely and maintain platform infrastructure
• Customer Support Tools: To manage live chat, email ticketing, and WhatsApp communications
• Analytics Services: To understand user behavior and improve the platform (data is anonymized where possible)

All service providers are contractually obligated to use your information only for the specific purposes we authorize and to maintain appropriate security measures.

4.2 Game Providers

When you play games from providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, or Spribe, minimal information (username, bet amounts, game outcomes) is shared with those providers to enable gameplay. Game providers are independent data controllers subject to their own privacy policies.

4.3 Legal Requirements

We may disclose your information if required by law, regulation, legal process, or governmental request, including:

• Compliance with court orders, subpoenas, or legal investigations
• Cooperation with law enforcement agencies investigating fraud, money laundering, or other crimes
• Response to regulatory inquiries from gaming authorities in our licensing jurisdiction
• Protection of koi228's legal rights, property, or safety, or the rights of our users and the public

4.4 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your personal information may be transferred to the successor entity. We will notify you via email and prominent notice on our website before your information is transferred and becomes subject to a different privacy policy.

5. Data Security Measures

Protecting your personal information is a top priority for koi228. We implement industry-standard technical and organizational security measures including:

5.1 Technical Safeguards

• SSL Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS encryption, the same security standard used by banks and financial institutions.
• Secure Data Storage: Personal information is stored on secure servers with restricted access. Passwords are hashed using industry-standard algorithms and are never stored in plain text.
• Firewall Protection: Our systems are protected by enterprise-grade firewalls that monitor and block unauthorized access attempts.
• Regular Security Audits: We conduct periodic penetration testing and vulnerability assessments by independent security firms.
• DDoS Protection: We employ distributed denial-of-service attack mitigation to ensure platform availability.

5.2 Organizational Safeguards

• Access Controls: Employee and contractor access to personal data is restricted on a need-to-know basis and logged for audit purposes.
• Confidentiality Agreements: All staff members with access to user data sign confidentiality agreements.
• Security Training: Employees receive regular training on data protection best practices and threat awareness.
• Incident Response Plan: We maintain a documented plan for responding to data breaches and security incidents.

5.3 Your Responsibility

While we implement strong security measures, you also play a critical role in protecting your account:

• Choose a strong, unique password for your koi228 account (minimum 8 characters with uppercase, lowercase, numbers, and symbols)
• Never share your password with anyone, including koi228 staff (we will never ask for your password)
• Log out of your account when using shared or public devices
• Enable two-factor authentication if offered in the future
• Report suspicious activity or unauthorized access to customer support immediately

Despite our best efforts, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

6. Data Retention

koi228 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal and regulatory obligations.

6.1 Active Accounts

For active user accounts, we retain all personal information, transaction history, and communications for the duration of your account's existence. This information is necessary to provide ongoing service, process transactions, and ensure fair play.

6.2 Closed Accounts

When you close your koi228 account voluntarily, we retain certain information for legal, regulatory, and business purposes including:

• Transaction Records: Financial transaction history (deposits, withdrawals, bets) is retained for a minimum of 7 years to comply with anti-money laundering regulations, tax laws, and audit requirements.
• Identity Verification: KYC documents and verification records are retained for 5 years after account closure as required by our licensing authority.
• Dispute Resolution: Communications and records related to disputes, complaints, or investigations are retained until the matter is fully resolved plus 2 years.
• Marketing Opt-Out: If you have opted out of marketing communications, we retain your email address indefinitely to honor your preference.

6.3 Suspended or Banned Accounts

For accounts suspended or terminated due to Terms and Conditions violations, fraud, or other prohibited activities, we retain all information indefinitely to prevent future abuse and to cooperate with law enforcement or regulatory investigations.

6.4 Anonymization

After the applicable retention period expires, we either delete your personal information or anonymize it such that it can no longer be associated with you. Anonymized data may be retained indefinitely for statistical analysis and business intelligence purposes.

7. Your Privacy Rights

As a koi228 user, you have certain rights regarding your personal information. The specific rights available to you may vary depending on your jurisdiction and applicable data protection laws.

7.1 Access and Portability

You have the right to request a copy of the personal information we hold about you. We will provide this information in a structured, commonly used, and machine-readable format within 30 days of your request. You can export your transaction history directly from your account dashboard.

7.2 Correction and Update

You have the right to correct inaccurate personal information and update your contact details. You can edit most information directly in your account settings. For changes to your legal name or date of birth, please contact customer support with supporting documentation.

7.3 Deletion (Right to be Forgotten)

You have the right to request deletion of your personal information in certain circumstances. However, this right is not absolute—we must retain certain information to comply with legal obligations (financial records for 7 years, KYC records for 5 years). If you wish to close your account and delete your data, please contact customer support. We will delete all information that is not required to be retained by law.

7.4 Object to Processing

You have the right to object to certain processing of your personal information, particularly for direct marketing purposes. You can opt out of promotional emails and SMS by clicking the unsubscribe link in any marketing message or by adjusting your communication preferences in your account settings.

7.5 Withdraw Consent

Where we rely on your consent to process personal information, you have the right to withdraw that consent at any time. However, withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal. Note that withdrawing consent for essential processing (e.g., KYC verification) may prevent us from providing services to you.

7.6 Lodge a Complaint

If you believe we have not handled your personal information properly, you have the right to lodge a complaint with the data protection authority in your jurisdiction. For Indonesian users, contact information for relevant authorities will be provided upon request.

To exercise any of these rights, please contact our Data Protection Officer at: [email protected] or through our regular customer support channels. We will respond to your request within 30 days and may require identity verification to protect your privacy.

8. Cookies and Tracking Technologies

koi228 uses cookies and similar tracking technologies to enhance your experience, analyze platform usage, and deliver personalized content.

8.1 What Are Cookies?

Cookies are small text files stored on your device by your web browser. They allow websites to recognize your device, remember your preferences, and track your activity. Cookies do not contain personal information themselves but may be linked to personal information stored on our servers.

8.2 Types of Cookies We Use

• Essential Cookies: Required for basic platform functionality including account login, session management, and security features. These cookies cannot be disabled without preventing core features from working.
• Performance Cookies: Collect anonymous information about how you use koi228, which pages you visit, and any errors you encounter. This helps us improve platform performance and user experience.
• Functional Cookies: Remember your preferences such as language (English or Bahasa Indonesia), currency (IDR), time zone (WIB), and game favorites.
• Advertising Cookies: Used to deliver relevant promotional offers based on your betting interests (sports betting vs slots vs live casino). These cookies are placed by koi228 only—we do not allow third-party advertising networks.

8.3 Managing Cookies

Most web browsers allow you to control cookies through browser settings. You can set your browser to refuse all cookies or to alert you when a cookie is being sent. However, if you disable essential cookies, some parts of koi228 may not function properly. To learn how to manage cookies in your specific browser, consult your browser's help documentation.

8.4 Other Tracking Technologies

In addition to cookies, we use:

• Local Storage: HTML5 local storage for storing user preferences and cached data to improve load times.
• Device Fingerprinting: Collection of device characteristics (browser type, screen resolution, installed fonts) to detect fraud and prevent multi-accounting.
• Server Logs: Automatic recording of IP addresses, timestamps, and requested URLs for security monitoring and troubleshooting.

9. Children's Privacy

koi228 is strictly an adult-only platform. We do not knowingly collect personal information from individuals under the age of 21, which is the minimum legal gambling age in Indonesia and the age restriction enforced by koi228.

All users must complete mandatory age verification during the KYC process by providing a government-issued ID (Indonesian KTP, passport, or driver's license) showing their date of birth. If we discover that we have inadvertently collected information from a person under 21 years of age, we will immediately delete that information and permanently close the associated account without possibility of appeal.

Parents and guardians are encouraged to monitor their children's internet usage and ensure minors do not access online gambling websites. If you believe a person under 21 has created an account on koi228, please report it immediately to our customer support team or our security department at [email protected].

10. International Data Transfers

koi228 operates internationally and may transfer your personal information to countries outside Indonesia for processing and storage. These countries may have different data protection laws than Indonesia.

When we transfer your information internationally, we ensure appropriate safeguards are in place including:

• Transferring data only to jurisdictions with adequate data protection laws recognized by international standards
• Implementing standard contractual clauses approved by data protection authorities
• Ensuring third-party processors meet international security and privacy standards
• Encrypting data in transit and at rest regardless of storage location

By using koi228 services, you acknowledge and consent to the international transfer of your personal information as described in this section.

11. Changes to This Privacy Policy

koi228 reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. When we make changes, we will:

• Update the "Last Updated" date at the top of this page
• Post the revised Privacy Policy on our website
• Notify you via email if the changes are material and affect your rights
• For significant changes, provide a prominent notice on our homepage for 30 days

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of koi228 services after changes are posted constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you should close your account and discontinue use of the Service.

Previous versions of this Privacy Policy are archived and available upon request.

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us through any of the following channels:

Data Protection Officer
Email: [email protected]
Subject Line: "Privacy Inquiry" or "Data Request"

Customer Support (General Inquiries)
24/7 Live Chat: Available on our website
Email: [email protected]
WhatsApp: +62 812-3456-7890 (08:00-00:00 WIB)

We are committed to resolving privacy concerns promptly and transparently. You can expect a response to privacy-related inquiries within 7 business days. For data access requests and other formal requests, we will respond within 30 days as required by law.