Privacy Policy

1.1 This Privacy Policy applies to all personal data processed by koi55 in connection with the operation of the online gaming and sportsbook platform accessible at koi55.cam, including all associated mobile web interfaces, customer support channels, and marketing communications.

1.2 By registering an Account or otherwise providing personal data to koi55, you acknowledge that you have read and understood this Privacy Policy and consent to the processing activities described herein. Where processing is based on consent, you retain the right to withdraw that consent at any time by contacting us at [email protected] — though withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.

1.3 This policy applies to all individuals who interact with koi55, including registered players, prospective players who browse the platform without registering, and individuals who contact our customer support team. It covers personal data collected directly from you, automatically through your use of the platform, and from third-party sources where permitted.

1.4 koi55 primarily serves players resident in Indonesia. Where Indonesian personal data protection legislation applies, koi55 complies with the applicable requirements of Law No. 27 of 2022 on Personal Data Protection (Undang-Undang Perlindungan Data Pribadi) and any implementing regulations. Where international data protection standards offer broader protections, koi55 endeavours to apply those standards as a matter of good practice.

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, location data, online identifiers, or factors specific to the physical, economic, cultural, or social identity of that person.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, storage, adaptation, retrieval, consultation, use, disclosure, combination, restriction, erasure, or destruction.
• "Controller" means koi55, the entity that determines the purposes and means of processing Personal Data.
• "Data Subject" means you — the individual to whom the Personal Data relates.
• "Third-Party Processor" means any organisation engaged by koi55 to process Personal Data on koi55's behalf under a binding data processing agreement.
• "Cookies" means small text files placed on your device by the koi55 platform to support functionality, analytics, and user experience optimisation.

3.1 koi55 collects the following categories of Personal Data in connection with your use of the platform:

3.2 koi55 does not intentionally collect special categories of sensitive Personal Data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) except where a government-issued ID document contains a photograph or national identification number that incidentally includes such information. In such cases, that data is used solely for identity and age verification and is not processed for any other purpose.

4.1 Directly from You. The majority of Personal Data we hold is provided directly by you during the Account registration process, during KYC verification, when you make a deposit or withdrawal, when you contact our support team, or when you choose to participate in a promotion.

4.2 Automatically. When you access the koi55 platform, we automatically collect Technical Data through server logs, cookies, and similar tracking technologies. This data is collected to maintain platform security, prevent fraud, optimise performance, and analyse aggregate usage patterns. Automatic collection occurs whether or not you are logged into your Account.

4.3 From Third Parties. koi55 may receive Personal Data from third parties in limited circumstances, including:

• Identity and fraud verification providers engaged to assist with KYC compliance.
• Payment processing intermediaries who relay transaction data necessary to credit or debit your Account.
• Affiliate and referral partners who introduce registered players to the koi55 platform, subject to that partner's own privacy disclosures.
• Publicly available sources where permitted by law for fraud prevention and due diligence purposes.

5.1 koi55 processes your Personal Data only where there is a lawful basis for doing so. The primary purposes and their corresponding legal bases are set out below:

5.2 koi55 will not use your Personal Data for any purpose that is materially different from the purposes disclosed in this Privacy Policy without first providing you with notice and, where required, obtaining your consent.

6.1 koi55 retains Personal Data only for as long as it is necessary to fulfil the purposes for which it was collected, or to comply with applicable legal, regulatory, or contractual requirements — whichever period is longer.

6.2 The table below sets out indicative retention periods for the principal categories of Personal Data held by koi55:

6.3 Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised such that it can no longer be linked back to any identifiable individual. Anonymised data may be retained for aggregate statistical analysis.

7.1 koi55 does not sell, rent, or trade your Personal Data to any third party for commercial or marketing purposes. Personal Data is shared with third parties only in the following circumstances:

• Service Providers and Processors: koi55 engages trusted third-party processors — including payment gateway providers, KYC verification platforms, fraud detection services, live chat and customer support software providers, and cloud hosting infrastructure providers — to deliver the koi55 platform. All processors are bound by contractual data processing agreements that restrict the use of Personal Data to the specific services being provided.
• Game Studios: When you play games provided by third-party studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Pocket Games Soft, limited game session data (such as player session tokens and bet history) may be transmitted to the relevant studio. These studios operate under their own data protection obligations as required by their gaming licences.
• Regulatory and Law Enforcement Authorities: koi55 will disclose Personal Data to competent authorities where required by applicable law, court order, or binding regulatory request. koi55 will notify you of any such disclosure where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of koi55's business, Personal Data held by koi55 may be transferred to the acquiring entity, subject to equivalent data protection commitments.
• With Your Consent: koi55 may share your Personal Data with additional third parties where you have given explicit prior consent.

8.1 As an internationally operating platform, koi55 may process or store Personal Data in countries outside of Indonesia. Where such international transfers occur, koi55 takes steps to ensure that an adequate level of data protection is maintained by implementing appropriate safeguards, including:

• Standard contractual clauses with receiving entities, ensuring binding obligations equivalent to those imposed under Indonesian personal data protection law.
• Transferring data only to jurisdictions that maintain internationally recognised data protection standards.
• Requiring all third-party recipients to implement technical and organisational security measures consistent with those described in Section 9 of this policy.

8.2 You may request details of the specific safeguards applied to any international transfer of your Personal Data by contacting our data protection team at [email protected].

9.1 koi55 employs a layered set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, and disclosure. Our security framework includes:

• Encryption at Rest: All Personal Data stored on koi55 servers is encrypted using AES-256 encryption. This means that even in the event of physical access to storage media, the data remains unreadable without the appropriate decryption keys.
• Encryption in Transit: All data transmitted between your device and the koi55 platform is protected by TLS 1.2 or TLS 1.3 encryption (colloquially referred to as SSL). The presence of the padlock icon in your browser's address bar confirms that your connection is encrypted.
• Access Controls: Access to Personal Data within koi55 is restricted on a strict need-to-know basis. Staff with access to Personal Data receive regular data protection training and are bound by confidentiality obligations.
• Intrusion Detection: The koi55 platform is monitored around the clock by automated intrusion detection systems that flag and respond to anomalous access patterns in real time.
• Password Security: Account passwords are stored in hashed form using industry-standard one-way hashing algorithms. koi55 staff are never able to view your password in plain text.
• Penetration Testing: The koi55 platform undergoes periodic independent security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.

9.2 Despite these measures, no digital platform can guarantee absolute security. You are responsible for keeping your Account credentials confidential and for notifying koi55 immediately at [email protected] if you believe your Account has been compromised.

10.1 koi55 uses cookies and similar tracking technologies to deliver, maintain, and improve the platform experience. The categories of cookies used are as follows:

10.2 You can manage or delete cookies through your browser settings at any time. Disabling strictly necessary cookies may prevent the koi55 platform from functioning correctly. Disabling functional or analytics cookies will not prevent you from accessing the platform but may degrade some features.

11.1 As a data subject, you hold the following rights with respect to your Personal Data held by koi55. These rights may be exercised by submitting a written request to [email protected] with the subject line "Data Rights Request":

11.2 koi55 will respond to all valid data rights requests within 30 days of receipt. Where a request is complex or voluminous, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it. Requests may be declined where they conflict with koi55's legal obligations (e.g., regulatory data retention requirements).

12.1 The koi55 platform is strictly intended for adults aged 21 years and older. koi55 does not knowingly collect, store, or process Personal Data belonging to any individual under the age of 21. Age verification is a mandatory step in the Account registration process, and additional KYC checks may be triggered at any time to confirm a player's age.

12.2 If koi55 becomes aware that Personal Data has been collected from an individual under the age of 21, that Account will be immediately suspended, all funds will be withheld pending investigation, and the Personal Data will be securely deleted as soon as any regulatory or legal obligations relating to the incident have been satisfied.

12.3 If you are the parent or legal guardian of a minor and believe that your child has registered an Account with koi55, please contact us immediately at [email protected] with the subject line "Underage Account Report". We will treat all such reports as urgent and respond within 24 hours.

13.1 The koi55 platform may contain references to or integrations with third-party services, including game studio interfaces, payment processing portals, and affiliate-originated landing pages. Each of these third parties operates under its own privacy policy and is independently responsible for its own data processing activities.

13.2 koi55 is not responsible for the privacy practices of any third party. When you interact with a third-party service accessible through or referenced by the koi55 platform, you do so under the terms of that third party's privacy policy. We encourage you to review the privacy policies of any third-party services you use in connection with your koi55 Account.

14.1 koi55 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, business practices, or platform features. Where changes are material — meaning they affect how your Personal Data is used in a way that could impact your rights — koi55 will provide advance notice via the email address registered to your Account and/or a prominent notice on the koi55 platform.

14.2 The "Last Updated" date at the top of this page reflects the date on which the current version of the Privacy Policy came into effect. Your continued use of the koi55 platform following the effective date of any revision constitutes acceptance of the updated policy.

14.3 You are encouraged to review this Privacy Policy periodically. If you have any concerns about a particular revision, please contact us at [email protected] before continuing to use the platform.

15.1 If you have any questions, concerns, or complaints regarding this Privacy Policy or koi55's data processing activities, please contact our data protection team using the details below. Our support team includes Indonesian-speaking agents available 24 hours a day, 7 days a week.

15.2 If you are not satisfied with koi55's response to a privacy complaint, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. For Indonesian residents, this is the Ministry of Communication and Digital Affairs (Kementerian Komunikasi dan Digital Republik Indonesia).

15.3 koi55 takes all privacy complaints seriously and commits to investigating every complaint thoroughly and responding with a substantive outcome within 30 days of receipt. Where an investigation requires additional time, we will notify you and keep you informed of progress.