koi77 Privacy Policy

The following definitions apply throughout this Privacy Policy:

koi77 is the Data Controller for all Personal Data collected and processed in connection with the koi77 platform and its Services. As Data Controller, koi77 is responsible for ensuring that Personal Data is processed lawfully, fairly, and transparently, in accordance with this Privacy Policy and applicable data protection law.

koi77 operates as an internationally licensed gaming platform. While the koi77 platform is accessible to and primarily used by players located in Indonesia — including in Jakarta, Surabaya, Bandung, Medan, Semarang, Bali, and Makassar — the platform is operated from an international jurisdiction. By using the koi77 platform, you acknowledge that your Personal Data may be processed in, or transferred to, the jurisdiction in which koi77 holds its operating license.

Where koi77 engages third-party Data Processors to perform processing activities on its behalf, koi77 ensures by contract that those processors apply data protection standards no less stringent than those described in this policy.

koi77 collects the following categories of Personal Data in connection with the registration and operation of player accounts:

koi77 collects Personal Data through the following channels:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal request, contact support, respond to a survey, or participate in a promotion.
• Automatically via the platform: Technical and usage data is collected automatically when you access the koi77 website or gaming environment, through server logs, session cookies, and analytics tools.
• From third-party identity verification providers: Where koi77 uses a third-party KYC or identity verification service to validate your identity documents, that provider may return verification results and associated identity data to koi77.
• From payment service providers: When you initiate a deposit or withdrawal via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, or any other supported payment method, the relevant payment provider may share transaction confirmation data with koi77 to facilitate settlement.
• From fraud and security monitoring tools: koi77 uses automated risk-assessment systems that may process Technical Data and Transaction Data to detect patterns indicative of fraud, money laundering, or bonus abuse.

koi77 processes your Personal Data for the following purposes, each of which is supported by a defined legal basis:

koi77 does not sell, rent, or trade your Personal Data. Limited data sharing occurs only in the following defined circumstances:

• Identity verification providers: koi77 shares identity documents and Personal Data with third-party KYC verification providers solely for the purpose of verifying your identity. These providers act as Data Processors under contractual data protection obligations.
• Payment service providers: koi77 shares the minimum necessary financial data with BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and other supported payment providers to process your deposit and withdrawal transactions.
• Game studios and platform providers: koi77's gaming environment is powered by licensed studio integrations (Evolution Gaming, Pragmatic Play, PG Soft, Microgaming, NetEnt, Spribe). These studios may receive session-level technical data necessary to deliver real-time game content. Game studios do not receive your Identity Data or Financial Data.
• Fraud prevention and security services: koi77 may share Technical Data and Transaction Data with third-party risk and fraud detection services to identify and prevent unauthorized account activity, collusion, or bonus exploitation.
• Legal and regulatory authorities: koi77 will disclose Personal Data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by law, court order, or in connection with the investigation of a suspected criminal offense. koi77 will notify affected players of such disclosures to the extent permitted by law.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or part of koi77's business, Personal Data may be transferred to the acquiring entity. Players will be notified of any such transfer and of any material change to the privacy terms that would result.

As an internationally operated platform serving players across Indonesia — including in Jakarta, Surabaya, Bandung, Medan, Bali, Semarang, Makassar, and Palembang — koi77 may process your Personal Data in, or transfer it to, countries outside Indonesia. These transfers occur in the following contexts:

• Platform infrastructure: koi77's servers and database infrastructure may be hosted in one or more international jurisdictions outside Indonesia. All data stored on koi77's infrastructure is subject to the same security standards regardless of where it is physically located.
• Third-party processors: KYC verification providers, fraud detection services, and game studio technology partners may process data from locations outside Indonesia. koi77 ensures by contract that all third-party processors apply adequate data protection standards equivalent to those in this policy.
• Support operations: koi77's customer support team operates across multiple time zones to provide 24/7 coverage, including Indonesian-speaking agents. Access to account data by support staff is role-restricted and logged.

By registering a koi77 account and using the koi77 platform, you expressly consent to the transfer of your Personal Data to the countries in which koi77 and its approved processors operate, subject to the protections described in this policy.

koi77 retains Personal Data for defined periods based on the purpose for which it was collected and any applicable legal retention obligation:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized so that it can no longer be attributed to any identifiable individual.

koi77 uses cookies and similar tracking technologies on its platform for the purposes described below. A cookie is a small text file stored on your device when you visit the koi77 website.

• Strictly necessary cookies: Required for core platform functionality, including session management, login authentication, and security token validation. These cookies cannot be disabled without rendering the platform non-functional.
• Functional cookies: Used to remember your preferences, such as language settings and game lobby filters, to provide a more personalized experience across sessions.
• Analytics cookies: Used to understand how players navigate the koi77 platform — which pages and games are most visited, how long sessions last, and where players encounter friction. This data is used exclusively for internal platform improvement.
• Security cookies: Used to detect and prevent fraudulent login attempts, session hijacking, and other unauthorized access patterns.

koi77 does not use third-party advertising cookies or tracking pixels that would allow external advertising networks to build a behavioral profile of your activity across other websites.

You may control cookie settings via your browser's privacy controls. Note that disabling strictly necessary cookies will impair or prevent your ability to log in and use the koi77 platform. For other cookie categories, browser-level controls are effective without affecting core functionality.

koi77 implements a layered set of technical and organizational security measures to protect your Personal Data against unauthorized access, accidental loss, destruction, alteration, or disclosure:

• Transport encryption: All data transmitted between your device and the koi77 platform is encrypted using TLS 1.3 (256-bit SSL). This applies to login, cashier, and all game session communications.
• Password hashing: Passwords are never stored in plain text. koi77 applies industry-standard one-way cryptographic hashing with salting to all account passwords.
• Two-factor authentication (2FA): koi77 offers 2FA to all account holders. Players are strongly encouraged to enable 2FA as an additional layer of account protection beyond their password.
• Access controls: Access to Personal Data within koi77's internal systems is restricted to staff with a legitimate operational need. All internal access is logged and subject to periodic review.
• Intrusion detection: koi77's infrastructure is monitored around the clock by automated intrusion detection systems. Anomalous access patterns trigger immediate security alerts.
• Data minimization: Staff with access to player data are provided only the minimum data fields necessary for their specific role. Full payment card numbers and full bank account numbers are never displayed in their entirety within internal systems.

As a koi77 player, you hold the following rights over the Personal Data that koi77 holds about you. These rights may be exercised by contacting the koi77 support team via live chat or email:

To exercise any of the above rights, contact the koi77 support team via live chat or at [email protected] (plain text — not a clickable link). koi77 will respond to verified rights requests within 30 days. In cases of complexity, the response period may be extended by a further 30 days, of which you will be notified in advance.

koi77 may need to verify your identity before processing a rights request to ensure that Personal Data is not disclosed to an unauthorized party. This verification step is standard and does not constitute a refusal of your request.

The koi77 platform is strictly intended for adults aged 21 and over. koi77 does not knowingly collect Personal Data from individuals under the age of 21 under any circumstances. Age verification is a mandatory step in the koi77 account registration process, and additional documentary age verification (KYC) is required upon reaching defined transaction thresholds.

If koi77 discovers that Personal Data has been collected from an individual who was under 21 at the time of registration, that account will be closed immediately, any balance will be handled in accordance with koi77's Terms & Conditions, and all associated Personal Data will be deleted as quickly as practicable within the limits of applicable legal obligations.

If you are a parent or guardian and believe that a minor under your care has accessed or registered on the koi77 platform, please contact koi77 support immediately at [email protected] (plain text — not a clickable link) so that the account can be investigated and closed without delay.

koi77 may update this Privacy Policy periodically to reflect changes in data processing practices, platform features, legal obligations, or regulatory requirements. The following process applies when the policy is updated:

• The revised Privacy Policy will be published on this page with an updated "Last updated" date.
• For material changes — those that substantially affect your rights or the way koi77 processes your Personal Data — koi77 will provide advance notice via email to your registered address and/or via a notification displayed upon your next login to the platform.
• Your continued use of the koi77 platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms.
• If you do not agree to a revised Privacy Policy, you must discontinue use of the koi77 platform and may close your account by contacting support. Any withdrawal of remaining balance will be processed subject to completed KYC verification.

koi77 recommends that you review this Privacy Policy periodically to stay informed of how your Personal Data is handled. The most current version of this policy is always accessible at koi77.asia/privacy-policy.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact koi77 through the following channels:

• Live chat: Available 24/7 via the koi77 platform. Accessible after login from any page.
• Email: [email protected] (plain text — not a clickable link). koi77 aims to respond to privacy-related inquiries within 5 business days.

When submitting a privacy request by email, please include your registered koi77 username and a brief description of your request. koi77 will need to verify your identity before processing any request that involves disclosing, modifying, or deleting Personal Data.

For privacy-related complaints that have not been resolved to your satisfaction after contacting koi77 support, you may have the right to lodge a complaint with a competent data protection supervisory authority in your country of residence. koi77 encourages players to contact us in the first instance so that we can attempt to resolve the matter directly before any formal escalation.