Privacy Policy — koy388

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that relates to an identified or identifiable natural person — including, but not limited to, your name, date of birth, email address, mobile phone number, residential address, identity document details, financial account numbers, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data, whether by automated means or otherwise, including collection, storage, use, disclosure, erasure, and destruction.
• "Controller" means koy388, acting as the entity that determines the purposes and means of processing your Personal Data.
• "Processor" means any third party engaged by koy388 to process Personal Data on koy388's behalf, under a binding data processing agreement.
• "User" / "you" means any individual who registers an Account on, or otherwise interacts with, the koy388 Platform.
• "Platform" means the koy388 website at https://koy388.cam, together with all related services, games, and digital interfaces.
• "KYC" means the Know Your Customer identity and age verification process required prior to withdrawal processing or full Account activation.
• "Cookies" means small data files placed on your device by the Platform for the purposes described in Clause 7.

koy388 collects the minimum Personal Data necessary to provide a secure, compliant, and high-quality gaming experience. The categories of Personal Data we collect are detailed in the table below:

koy388 collects Personal Data through the following channels:

3.1 Directly From You

• During Account registration, when you provide your name, date of birth, email address, and contact details.
• During KYC verification, when you submit identity documents including your KTP and proof of address.
• When you contact our customer support team via live chat or email.
• When you participate in promotions, surveys, or provide feedback about the Platform.
• When you update your Account profile or change your communication preferences.

3.2 Automatically

• Through Cookies and similar tracking technologies placed on your device when you browse the Platform (see Clause 7).
• Through server logs that automatically record your IP address, device information, and access times whenever your device connects to the Platform.
• Through Platform analytics tools that track your gameplay activity, betting history, and session behavior to support responsible gaming monitoring and Platform improvement.

3.3 From Third Parties

• From identity and age verification service providers engaged by koy388 to perform KYC checks on your submitted documents.
• From fraud detection and AML screening services that cross-reference your data against watchlists and sanctions databases as required by our licensing obligations.
• From payment processors (such as banks and e-wallet providers) that confirm transaction details in connection with your deposits and withdrawals.

koy388 processes your Personal Data on the following legal bases, depending on the purpose of the processing:

• Contractual Necessity: Processing required to perform the contract between koy388 and you (i.e., operating your Account, processing deposits and withdrawals, settling bets, and providing customer support). Without this processing, koy388 cannot provide its services to you.
• Legal Obligation: Processing required to comply with applicable laws and our international gaming license conditions, including AML screening, KYC identity verification, record-keeping obligations, and responding to lawful requests from regulatory or law enforcement authorities.
• Legitimate Interests: Processing carried out for purposes that serve koy388's legitimate business interests, where those interests are not overridden by your privacy rights — including fraud prevention, Platform security, improving the user experience, and responsible gaming monitoring.
• Consent: Processing for direct marketing communications (promotional emails and SMS) where you have provided an explicit opt-in. You may withdraw this consent at any time by contacting koy388 support or updating your Account preferences.

koy388 uses your Personal Data for the following specific purposes:

• Account Management: Creating, maintaining, and securing your koy388 Account, verifying your identity and age (21+), and managing your Account preferences and communication settings.
• Payment Processing: Facilitating deposits in Indonesian Rupiah (IDR) via BCA, BRI , BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, Bank Permata, BSI, OVO, DANA, GoPay, ShopeePay, and LinkAja, and processing your withdrawal requests to verified bank accounts or e-wallets registered in your name.
• KYC & Compliance: Verifying your identity documents, conducting AML screening, and maintaining records as required by koy388's international gaming license obligations.
• Customer Support: Responding to your inquiries, resolving disputes, processing complaints, and maintaining records of support interactions for quality assurance and regulatory purposes.
• Security & Fraud Prevention: Detecting, investigating, and preventing unauthorized Account access, bonus abuse, collusion, money laundering, and any other fraudulent or prohibited activity on the Platform.
• Responsible Gaming: Monitoring your gameplay patterns for indicators of problem gambling behavior, enforcing deposit limits and self-exclusion requests, and sending responsible gaming alerts where appropriate.
• Platform Improvement: Analyzing aggregated usage data to improve the design, performance, and content of the koy388 Platform, and to develop new features and game offerings tailored to the preferences of our Indonesian player base.
• Marketing & Promotions: Sending you relevant bonus offers, seasonal promotions tied to Indonesian cultural events (such as Idul Fitri, Ramadhan, and Indonesian Independence Day), and platform announcements — but only where you have provided explicit consent to receive such communications.
• Legal Compliance: Retaining records and disclosing data to regulatory authorities, law enforcement agencies, or courts where legally required to do so.

koy388 does not sell, rent, or trade your Personal Data to any third party for their own marketing purposes. We share your data only in the following limited and controlled circumstances:

• Payment Service Providers: We share financial data with Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, Bank Permata, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) strictly as necessary to process your deposits and withdrawals.
• KYC & Identity Verification Partners: We share identity document data with third-party KYC verification providers who are bound by confidentiality and data processing agreements that prohibit any secondary use of your data.
• AML & Fraud Screening Services: We share identifying information with AML compliance and fraud detection providers as required by our international gaming license conditions.
• Game Content Providers: When you play games powered by Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, or other licensed game studios, those providers may receive technical session data (such as session tokens, game round IDs, and bet amounts) strictly as necessary to deliver and settle game rounds. These providers do not receive your KTP number, bank account details, or other sensitive identity data.
• Regulatory & Law Enforcement Authorities: We disclose Personal Data to government bodies, regulators, or law enforcement agencies when required to do so by applicable law, court order, or regulatory directive. We will, where legally permitted, notify you of any such disclosure request.
• Professional Advisors: We may share data with our legal counsel, auditors, and other professional advisors under strict confidentiality obligations where necessary to obtain professional advice or manage legal proceedings.

koy388 uses Cookies and similar tracking technologies to operate the Platform securely, improve your experience, and gather analytics data. The types of Cookies used on the koy388 Platform are as follows:

7.1 Strictly Necessary Cookies

These Cookies are essential for the Platform to function. They enable core features such as session management (keeping you logged in), security token validation, and fraud detection. These Cookies cannot be disabled without rendering the Platform non-functional. No consent is required for their use.

7.2 Performance & Analytics Cookies

These Cookies collect aggregated, anonymized information about how Users interact with the Platform — including which pages are visited most frequently, how long sessions last, and where errors occur. This data helps koy388 identify and resolve technical issues and continuously improve Platform performance. These Cookies do not identify you personally.

7.3 Functionality Cookies

These Cookies remember your preferences — such as your selected language, preferred display settings, and last-played game category — so that you do not need to reconfigure them each time you visit. Disabling these Cookies may result in reduced personalization of your Platform experience.

7.4 Targeting & Marketing Cookies

Where you have consented, these Cookies track your browsing activity to help koy388 deliver relevant promotional content and measure the effectiveness of our marketing campaigns. You may withdraw consent for these Cookies at any time by adjusting your browser settings or contacting koy388 support.

koy388 retains your Personal Data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by our international gaming license conditions and applicable law. The following retention periods apply:

• Account & Identity Data: Retained for the duration of your active Account and for a minimum of five (5) years following permanent Account closure, to satisfy AML record-keeping obligations under our gaming license.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in line with international AML standards and gaming regulatory requirements.
• KYC Documents: Retained for a minimum of five (5) years from the date of verification or Account closure (whichever is later). After this period, documents are securely deleted unless an ongoing legal obligation requires their further retention.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, unless related to an ongoing complaint, dispute, or legal proceeding that requires longer retention.
• Marketing Preference Data: Retained for the duration of your Account. Opt-out records are retained indefinitely to ensure that withdrawn consent is permanently honored.
• Technical & Log Data: Server log files are typically retained for twelve (12) months, after which they are deleted or anonymized unless required for an active security investigation.

Upon the expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized in accordance with koy388's data lifecycle management procedures.

koy388 implements robust technical and organizational security measures to protect your Personal Data against unauthorized access, accidental loss, alteration, disclosure, or destruction. Our security infrastructure includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the koy388 Platform is protected by industry-standard 256-bit Secure Sockets Layer (SSL) encryption. Look for the padlock icon in your browser's address bar when using the Platform.
• Encrypted Data Storage: Personal Data stored in koy388's databases is encrypted at rest using AES-256 encryption, ensuring that data remains protected even in the unlikely event of a server breach.
• Access Controls: Access to Personal Data is strictly limited to koy388 personnel and authorized service providers who have a legitimate need for that access in connection with their specific roles. All access is logged and subject to regular audit review.
• Two-Factor Authentication (2FA): Where available, koy388 strongly recommends that all Users enable 2FA on their Accounts to add an additional layer of protection against unauthorized access.
• Regular Security Assessments: koy388 conducts regular internal security reviews and engages third-party penetration testing services to identify and remediate potential vulnerabilities in our Platform infrastructure.
• Incident Response: In the event of a confirmed personal data breach that poses a risk to your rights, koy388 will notify affected Users and, where required by applicable law, report the incident to the relevant regulatory authority within the timeframes prescribed by law.

koy388 operates as an internationally licensed gaming platform, and some of the third-party service providers we engage — including KYC verification partners, AML screening services, and game content providers — may store or process your data on servers located outside Indonesia. Where such international transfers occur, koy388 ensures that adequate safeguards are in place to protect your Personal Data, including:

• Binding contractual data processing agreements with all Processors that impose data protection obligations equivalent to those applied by koy388 directly.
• Transfers only to jurisdictions that are recognized as providing an adequate level of data protection under applicable international standards, or where other appropriate transfer mechanisms are in place.
• Regular review of our third-party Processors' security practices and data protection compliance to ensure ongoing adequacy of protection for your Personal Data.

By registering an Account and using the koy388 Platform, you acknowledge and consent to the transfer of your Personal Data to jurisdictions outside Indonesia for the purposes described in this Privacy Policy, subject to the safeguards described above.

As a User of the koy388 Platform, you have the following rights in relation to your Personal Data. To exercise any of these rights, please contact our support team at the email address provided in Clause 15.

• Right of Access: You have the right to request a copy of the Personal Data koy388 holds about you, together with information about how it is used and with whom it is shared.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete Personal Data held in your koy388 Account. For name or date-of-birth corrections, you may be required to submit updated identity documents via the KYC process.
• Right to Erasure: You have the right to request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis for processing exists. Note that koy388 may be legally required to retain certain data — particularly transaction and KYC records — for the retention periods described in Clause 8, notwithstanding an erasure request.
• Right to Restriction: You have the right to request that koy388 restrict the processing of your Personal Data in certain circumstances, such as while the accuracy of the data is contested or an objection to processing is under consideration.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your Personal Data carried out on the basis of koy388's legitimate interests, including for direct marketing purposes. If you object to direct marketing, we will cease processing your data for that purpose immediately.
• Right to Withdraw Consent: Where koy388 processes your data on the basis of your consent (such as for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

koy388 will respond to all valid rights requests within 30 calendar days of receipt. In cases of complexity or volume, this period may be extended by a further 60 days, and we will notify you of any such extension within the initial 30-day period.

The koy388 Platform is intended exclusively for adults aged 21 years and above. koy388 does not knowingly collect, store, or process Personal Data belonging to individuals under the age of 21. If koy388 becomes aware that Personal Data has been collected from a person under 21, that data will be deleted immediately and the associated Account will be closed without notice.

Parents and guardians who believe that a minor may have registered an Account on the koy388 Platform are urged to contact our support team at the earliest opportunity. koy388 will investigate all such reports promptly and take immediate remedial action where underage access is confirmed.

The koy388 Platform may contain references to or integrations with third-party services — such as game studios, payment processors, and customer support tools — that operate under their own privacy policies. koy388 is not responsible for the privacy practices of these third-party services and does not control the data they independently collect. We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of the koy388 Platform.

koy388 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, koy388 will provide notice to registered Users via email to the address associated with their Account, and will update the "Effective Date" at the top of this page.

We encourage you to review this Privacy Policy periodically to stay informed about how koy388 protects your data. Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Privacy Policy. If you do not agree with the changes, you should cease using the Platform and contact support to close your Account before the revised policy takes effect.

If you have any questions about this Privacy Policy, wish to exercise any of your rights described in Clause 11, or want to raise a complaint about how koy388 has handled your Personal Data, please contact our Data Privacy team using the details below.

koy388 is committed to resolving all privacy-related inquiries and complaints promptly and transparently. We aim to acknowledge all written privacy requests within 48 hours and to provide a full response within 30 calendar days.

If you are not satisfied with koy388's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection authority or gaming regulatory body in the jurisdiction in which koy388 holds its international gaming license.