koi800 Privacy Policy

In this Privacy Policy, the following terms have the meanings assigned to them below:

• "koi800" / "we" / "us" / "our" — the online gaming platform operated at koi800.club and its associated sub-domains.
• "Member" / "you" / "your" — any individual who visits the koi800 website, creates an account, or otherwise interacts with the platform.
• "Personal Data" — any information that can identify you directly or indirectly as a natural person, including but not limited to your name, date of birth, email address, phone number, device identifiers, and payment method details.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data. For koi800 members, koi800 acts as the Data Controller in respect of the data described in this policy.
• "KYC" — Know Your Customer; the identity and age verification process koi800 conducts to comply with internationally recognised anti-money-laundering and responsible gaming standards.
• "Cookie" — a small text file placed on your device by the koi800 website to enable certain functionality, remember your preferences, and support analytics.
• "Third Party" — any entity other than you and koi800, including payment processors, game studios, fraud-prevention providers, and analytics services.

koi800 is the Data Controller responsible for the Personal Data collected through the koi800.club platform. koi800 operates as an offshore online gaming platform under international licensing. Our registered operating entity details are available upon written request to [email protected].

While koi800 primarily serves English-preference players based in Indonesia — including those located in Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, Semarang, and other major cities — the platform operates under offshore jurisdiction and the applicable data protection framework is that of our licensing jurisdiction rather than Indonesian domestic data protection law. We nonetheless adopt privacy practices that we believe meet or exceed the standards expected by our Indonesian member base.

koi800 collects the following categories of Personal Data. We collect only what is necessary to operate the platform safely, securely, and in compliance with our responsible gaming obligations.

koi800 collects Personal Data through the following means:

• Direct Submission: Data you provide when creating an account, completing KYC, submitting a deposit or withdrawal request, or contacting customer support.
• Automated Technical Collection: Data collected automatically when you visit koi800.club, including via cookies, web beacons, and server-side logging. This includes your IP address, browser fingerprint, and session behaviour data.
• Third-Party Sources: Where necessary for fraud prevention or identity verification, koi800 may receive supplementary data from third-party identity verification providers or payment processors. In all cases, such third parties are contractually obligated to handle data in a manner consistent with this Privacy Policy.
• Gameplay and Transaction Systems: Our platform systems automatically log every bet placed, game session initiated, transaction submitted, and bonus claimed, as part of our normal operational record-keeping and responsible gaming monitoring.

koi800 processes your Personal Data for the following specific purposes:

• Account Management: Creating, maintaining, and administering your koi800 Member account, including authentication and access control.
• Identity and Age Verification (KYC): Confirming that you are a natural person, at least 21 years of age, and that the payment methods you use belong to you. This is a mandatory responsible gaming and anti-fraud measure.
• Transaction Processing: Crediting deposits and processing withdrawal requests to and from your nominated Indonesian bank account or e-wallet in IDR.
• Responsible Gaming Monitoring: Detecting signs of problem gambling behaviour, enforcing self-exclusion and deposit limit requests, and sending reality-check notifications as requested.
• Fraud Prevention and Security: Detecting and preventing unauthorised account access, bonus abuse, money laundering, and other fraudulent or criminal activity on the platform.
• Customer Support: Responding to your queries, complaints, and support requests via live chat and email, and maintaining records of those interactions for quality assurance.
• Legal Compliance: Complying with obligations imposed by our licensing authority, applicable anti-money-laundering regulations, and any court orders or regulatory instructions that may be issued.
• Platform Improvement: Using aggregated and anonymised analytics data to improve the koi800 platform, optimise game offerings (including slots from Pragmatic Play, Pocket Games Soft, and Spribe; live casino from Evolution Gaming), and enhance the user experience.
• Marketing Communications (opt-in/opt-out): Sending you promotional offers, bonus notifications, and event information — such as seasonal promotions for Ramadhan, Idul Fitri, Chinese New Year (Imlek), BRI Liga 1 fixtures, and major Champions League events — where you have not opted out of such communications.

koi800 processes your Personal Data on the following legal bases, depending on the purpose of processing:

• Contractual Necessity: Processing required to fulfil our contractual obligations to you under the koi800 Terms & Conditions — including account creation, transaction processing, and KYC. Without this processing, we cannot provide the service to you.
• Legitimate Interests: Processing undertaken to protect the security and integrity of the koi800 platform, prevent fraud and bonus abuse, and improve our services through anonymised analytics. We only rely on legitimate interests where those interests are not overridden by your own privacy rights.
• Legal Obligation: Processing required to comply with anti-money-laundering obligations, licensing requirements, and any regulatory instructions applicable to koi800's operating jurisdiction.
• Consent: Processing for optional marketing communications, where you have explicitly consented. You may withdraw this consent at any time by updating your communication preferences in your account dashboard or by emailing [email protected].

koi800 does not sell or rent your Personal Data to any third party. We share Personal Data only in the following limited and controlled circumstances:

• Payment Processors: Your bank account or e-wallet identifier and transaction amounts are shared with our payment gateway partners to process deposits and withdrawals in IDR. These partners include processors facilitating transfers via BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, and LinkAja. All payment partners are contractually bound to use your data solely to execute the requested transaction.
• KYC and Identity Verification Providers: Where koi800 uses a third-party identity verification service to support the KYC process, identity documents and related data are shared with that provider under a strict data processing agreement.
• Game Studio Providers: When you play games hosted by third-party studios (such as Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, or Pocket Games Soft), your user identifier and gameplay data may be transmitted to those studios to facilitate the game session. No additional Personal Data beyond what is operationally required is shared.
• Fraud Prevention and Security Services: koi800 may share Technical Data (IP addresses, device fingerprints, session metadata) with fraud-prevention partners to protect the platform and its members from criminal activity.
• Legal and Regulatory Authorities: koi800 will disclose Personal Data to competent authorities when required to do so by court order, regulatory instruction, or other legally binding mandate. We will, where legally permissible, notify you of any such disclosure.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of substantially all of koi800's assets, your Personal Data may be transferred to the acquiring entity, provided that entity agrees to process it in accordance with a privacy policy substantially equivalent to this one.

koi800 operates as an offshore platform. This means that your Personal Data may be stored and processed in a jurisdiction outside Indonesia. When we transfer Personal Data internationally, we take the following steps to ensure an adequate level of protection:

• We enter into data processing agreements with all third-party recipients that include appropriate data protection obligations and security requirements.
• Where data is transferred to payment processors, game studios, or KYC providers operating in jurisdictions without a formally recognised adequacy determination, we rely on contractual protections (standard contractual clauses or equivalent mechanisms) to safeguard the data in transit and at rest.
• We conduct periodic due-diligence reviews of the data protection practices of our key third-party processors.

By using the koi800 platform, you acknowledge that your Personal Data will be transferred to, stored in, and processed in jurisdictions outside Indonesia as described in this section.

koi800 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by our licensing obligations and applicable law. The following general retention periods apply:

Once the applicable retention period has expired, koi800 will securely delete or anonymise your Personal Data so that it can no longer be associated with your identity.

koi800 implements a layered security architecture to protect your Personal Data against unauthorised access, accidental loss, alteration, and disclosure. Our key security measures include:

• Transport Encryption: All data transmitted between your browser and koi800's servers is encrypted using TLS 1.2 or TLS 1.3 with 256-bit symmetric encryption.
• Password Security: Member passwords are hashed using bcrypt with a per-user cryptographic salt. koi800 staff cannot retrieve or read your password in plaintext.
• Encryption at Rest: Sensitive Personal Data and financial records stored in koi800's databases are encrypted at rest using AES-256.
• Access Controls: Access to systems containing Personal Data is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and audited.
• Continuous Monitoring: koi800 operates 24/7 automated intrusion detection and anomaly monitoring across its infrastructure. Unusual access patterns trigger immediate alerts to the security operations team.
• Vulnerability Management: Regular penetration testing and vulnerability assessments are conducted by independent security professionals to identify and remediate weaknesses in our systems.
• Incident Response: In the event of a confirmed Personal Data breach that poses a risk to your rights, koi800 will notify affected Members and, where required, the relevant regulatory authority, within the timeframe stipulated by applicable rules.

koi800 uses cookies and similar tracking technologies on the koi800.club website. Below is a summary of the categories of cookies we use:

Most modern browsers allow you to view, manage, and delete cookies through the browser settings menu. Please note that disabling strictly necessary cookies will impair the functionality of the koi800 platform. Clearing session cookies will log you out of your account. For detailed guidance on managing cookies, refer to your browser's official help documentation.

As a koi800 member, you have the following rights in respect of your Personal Data. To exercise any of these rights, contact us at [email protected] with the subject line "Privacy Request", or use the live chat function on the koi800 platform.

• Right of Access: You have the right to request a copy of the Personal Data koi800 holds about you, along with information about how it is processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete Personal Data we hold about you. For many data fields (such as your email address or phone number), you can update this directly in your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data. koi800 will act on such requests unless we are required to retain the data by law (e.g., to meet our AML and financial record-keeping obligations described in Section 9). If full erasure is not possible due to legal obligations, we will inform you of what data must be retained and why.
• Right to Restrict Processing: You may request that koi800 restrict the processing of your Personal Data in certain circumstances — for example, while we investigate a rectification request you have raised.
• Right to Data Portability: You have the right to receive a copy of the Personal Data you provided to koi800 in a structured, machine-readable format (where technically feasible), so that you can transfer it to another service provider.
• Right to Withdraw Consent: Where koi800 relies on your consent as the legal basis for processing (specifically, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of any prior processing.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including for direct marketing purposes. Upon a valid objection to marketing processing, koi800 will cease that processing immediately.

koi800 will respond to all privacy rights requests within 30 days of receipt. Where a request is complex or voluminous, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it.

koi800 strictly prohibits access to or use of the platform by any individual under the age of 21. The koi800 platform is intended exclusively for adults (21+). This is a firm requirement that koi800 enforces through its KYC verification process.

koi800 does not knowingly collect Personal Data from individuals under the age of 21. If we discover that Personal Data belonging to a person under 21 has been collected — whether through misrepresentation during registration or by any other means — we will:

• Immediately suspend the associated account.
• Permanently delete all Personal Data associated with that account from our live systems.
• Return any real-money deposits to the originating payment method after completing necessary verification.
• Void all gaming activity and winnings accrued on that account.

If you are a parent or guardian and believe that a minor has accessed koi800 using your payment details or personal information, please contact us immediately at [email protected]. We take these reports very seriously and will act on them with priority.

The koi800 platform integrates third-party services — such as game studios (Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Pocket Games Soft, Microgaming), payment processors, and analytics tools — that operate under their own privacy policies. koi800 is not responsible for the privacy practices of these third parties.

When you interact with a third-party game within the koi800 platform, that studio's software may independently collect certain technical data (such as your session identifier, bet history within that game, and device type) in order to deliver the game. We encourage you to review the relevant studio's privacy documentation if you have concerns about that studio's data practices.

koi800 does not include outbound links to external websites within the platform. However, if for any reason you navigate away from koi800.club, please be aware that any external website has its own privacy policy and koi800 accepts no responsibility for data collected by those external sites.

koi800 may update or revise this Privacy Policy from time to time to reflect changes in our data practices, the services we offer, or the legal and regulatory requirements applicable to our operations. When we make material changes to this policy, we will:

• Update the "Last updated" date displayed at the top of this page.
• Where reasonably practicable and where the change materially affects your rights or how we use your data, notify active Members via the email address registered to their koi800 account or via an in-platform notification at next login.

Your continued use of the koi800 platform after any revised Privacy Policy takes effect constitutes your acknowledgement of the updated policy. We recommend reviewing this page periodically. If you disagree with any change to this Privacy Policy, you may close your account in accordance with the process described in the koi800 Terms & Conditions.

For any question, concern, or formal request relating to this Privacy Policy or the way koi800 processes your Personal Data, please contact us through one of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly on the koi800 platform — including during Indonesian national holidays, Ramadhan, and Idul Fitri. This is the fastest route for urgent privacy concerns.
• Email: [email protected] — use the subject line "Privacy Request" for all data-rights submissions. We aim to acknowledge all privacy emails within 24 hours (WIB, UTC+7) and respond substantively within 30 days.

Our support team includes native Indonesian-speaking agents who can assist you in your preferred language, even though this Privacy Policy and the koi800 platform are presented in English.

This Privacy Policy was last reviewed and updated in January 2026. It supersedes all previous versions of the koi800 Privacy Policy. In the event of any discrepancy between a translation of this document and the English-language version, the English version shall prevail.