koi88 Privacy Policy

koi88 is a premium international online gambling platform primarily serving players based in Indonesia. We offer sports betting, live casino games, slot titles, virtual sports, and specialty card games — all denominated in Indonesian Rupiah (IDR) and accessible through local payment channels including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, and LinkAja.

In operating this platform, koi88 necessarily processes certain personal data about registered players and platform visitors. We recognize that your personal data belongs to you, and we are committed to handling it responsibly, transparently, and in accordance with applicable data protection principles. This Policy is designed to give you a clear, plain-English explanation of our data practices so that you can make informed decisions about your use of the koi88 Platform.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming page, both of which are incorporated by reference into this Policy.

For the purposes of applicable data protection law, koi88 — the operator of https://koi88.bio — acts as the data controller in respect of personal data collected from players and visitors to the Platform. As data controller, koi88 determines the purposes and means by which personal data is processed.

Where koi88 engages third-party service providers (such as game studios, payment processors, or KYC verification providers) to process personal data on its behalf, those parties act as data processors under written agreements that impose data protection obligations consistent with this Policy.

koi88 collects personal data across several categories, depending on your level of interaction with the Platform. The categories of data we collect are described below:

3.1 Registration and Account Data

When you register an account with koi88, we collect the information you provide during the registration process, which typically includes:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify that you meet the 21+ age requirement)
• Indonesian residential address (city, province, and postal code)
• Email address
• Username chosen by you at registration
• Account password (stored in hashed, irreversible form — koi88 staff cannot read your password)
• Contact phone number (optional, used for account security notifications)

3.2 KYC Verification Data

As part of our mandatory Know Your Customer (KYC) verification process — required before any withdrawal is processed — we collect copies of identity and address verification documents, including:

• Government-issued photo ID: Indonesian National Identity Card (KTP), valid passport, or Indonesian driving license (SIM)
• Proof of Indonesian residential address: utility bill, bank statement, or official government correspondence dated within the last three months
• Facial verification image or video (where requested to match against photo ID)
• Payment method verification documents (e.g., bank statement showing account holder name)

3.3 Financial Transaction Data

For every deposit and withdrawal transaction processed through your koi88 account, we collect and retain:

• Transaction amount and currency (IDR)
• Payment method used (bank name or e-wallet provider name — e.g., BCA, OVO)
• Transaction reference number and timestamp
• Account holder name on the payment instrument used
• Transaction status (pending, approved, rejected, reversed)

koi88 does not store full bank account numbers, full card numbers, or e-wallet credential details beyond what is necessary for transaction processing. Sensitive payment credentials are handled by our licensed payment processor partners under PCI-DSS compliant protocols.

3.4 Gaming Activity Data

We record details of your gaming activity on the Platform, including:

• Games played, betting markets accessed, and virtual sports events wagered on
• Wager amounts, game outcomes, and win/loss records
• Session start and end times, total session duration
• Bonus and promotion usage history
• Responsible gaming tool activations (deposit limit changes, cooling-off requests, self-exclusion applications)

3.5 Technical and Device Data

When you access the Platform, our servers and analytics systems automatically collect certain technical data, including:

• IP address and approximate geolocation (derived from IP)
• Browser type, version, and language settings
• Operating system and device type (desktop, mobile, tablet)
• Pages visited, time spent on each page, and navigation path through the Platform
• Referring URL (the website you visited immediately before arriving at koi88.bio)
• Cookie and session identifiers (see Section 8)

3.6 Communications Data

When you contact koi88 support by email or live chat, we retain records of those communications, including the content of your messages and our responses. This data is used for quality assurance, dispute resolution, and to provide continuity of support.

koi88 collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or update your account settings.
• Automatically — when you browse or interact with the Platform, through server logs, cookies, and similar tracking technologies (see Section 8).
• From third-party verification providers — when we conduct identity verification checks using licensed KYC providers, who may cross-reference your submitted details against public records and watchlists.
• From payment processors — transaction status updates, payment confirmation data, and fraud screening results received from banks and e-wallet providers including BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja.
• From game studios — aggregated game session data returned by third-party game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft, and others) integrated into the koi88 Platform.

koi88 uses the personal data it collects for the following specific purposes:

koi88 will not use your personal data for any purpose incompatible with the purposes listed above without first obtaining your explicit consent or establishing another valid legal basis.

For each purpose described in Section 5, koi88 relies on one or more of the following legal bases for processing your personal data:

• Contractual necessity: Processing that is necessary to perform our contractual obligations to you as a registered player — including account management, processing deposits and withdrawals, and delivering games. Without this processing, we cannot provide you with the koi88 service.
• Legal obligation: Processing required for koi88 to comply with applicable laws and regulations, including KYC/AML obligations imposed by our gaming license, and any applicable data retention requirements.
• Legitimate interests: Processing undertaken in pursuit of koi88's legitimate business interests — such as fraud prevention, platform security, responsible gaming monitoring, and analytics — where those interests are not overridden by your privacy rights and reasonable expectations.
• Consent: Where we rely on your consent as the legal basis for processing — most notably for marketing communications and optional personalization features — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

koi88 does not sell, rent, or trade your personal data. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

7.1 Payment Processors

To process deposits and withdrawals in Indonesian Rupiah, koi88 shares necessary transaction data (including your name and account reference) with our licensed payment processing partners, which include local bank transfer systems (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja). These partners process data only as instructed by koi88 and are contractually prohibited from using your data for their own purposes.

7.2 KYC and Identity Verification Providers

koi88 uses licensed third-party identity verification providers to conduct KYC checks. These providers receive the identity documents and registration details you submit for verification and return a verification result to koi88. They operate under strict data processor agreements and applicable data protection standards.

7.3 Game Studios and Content Providers

To deliver game content, koi88 passes a session token and your account balance information to game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft). Game studios receive the minimum data necessary to initiate and conclude a game session; they do not receive your full identity or contact details.

7.4 Regulatory and Law Enforcement Authorities

koi88 will disclose personal data to regulators, law enforcement agencies, or other government authorities where required to do so by applicable law, court order, or the requirements of our gaming license. In such cases, disclosure is limited to the data specifically required by the lawful request.

7.5 Professional Advisers

koi88 may share personal data with its legal advisers, auditors, and insurers on a confidential basis where necessary for the provision of those professional services. All such advisers are bound by professional confidentiality obligations.

koi88 uses cookies and similar tracking technologies on the Platform. A cookie is a small text file placed on your device by a website you visit; it allows the website to recognize your device on subsequent visits and to store certain preferences or session information.

8.1 Types of Cookies We Use

8.2 Managing Cookies

You may configure your browser to refuse all or certain types of cookies, or to alert you when a cookie is set. Note that disabling strictly necessary cookies will prevent you from logging in to your koi88 account and will impair core Platform functionality. Instructions for managing cookies are available in the help documentation of your browser (Chrome, Firefox, Safari, Edge, and others all provide cookie management controls).

koi88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and licensing obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized so that it can no longer be linked to an identified or identifiable individual.

koi88 implements a comprehensive set of technical and organizational measures to protect personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include but are not limited to:

• 256-bit SSL/TLS encryption on all data transmitted between players' devices and koi88 servers.
• Hashed password storage using industry-standard cryptographic hashing algorithms. koi88 staff cannot read or recover your password in plain text.
• Access controls limiting internal access to personal data strictly to employees and contractors who require it to perform their job functions, enforced through role-based permissions and multi-factor authentication on administrative systems.
• Regular security audits and penetration testing conducted by qualified third-party security professionals.
• Intrusion detection and monitoring systems that alert our security team to anomalous access patterns or potential breaches in real time.
• Data breach response procedures including notification protocols for reporting significant breaches to affected players and relevant authorities within the timeframes required by applicable law.

While koi88 takes all reasonable precautions to protect your data, no system connected to the internet can be guaranteed to be entirely free from security risk. You are responsible for maintaining the security of your own account credentials and for notifying koi88 immediately if you suspect unauthorized access to your account.

koi88 operates as an international online gaming platform and, in the course of providing its services to Indonesian players, may transfer personal data to third-party processors located in countries outside of Indonesia. Such transfers may occur, for example, when game studio partners or KYC verification providers process data on servers located in other jurisdictions.

Wherever personal data is transferred outside Indonesia, koi88 ensures that appropriate safeguards are in place to protect that data to a standard at least equivalent to the protections applicable in Indonesia. These safeguards may include contractual data transfer agreements with receiving parties, adequacy assessments of the receiving country's data protection framework, or other recognized transfer mechanisms.

If you would like further information about the specific safeguards applied to any particular international data transfer involving your personal data, please contact our support team at [email protected].

As a koi88 player, you have the following rights in relation to your personal data. koi88 is committed to honoring these rights promptly and without undue burden:

• Right of Access: You may request a copy of the personal data koi88 holds about you, along with information about how it is being used. We will respond to access requests within 30 days of receipt.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. You may update most account details directly through your Account settings, or by contacting support.
• Right to Erasure: You may request that koi88 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent and there is no other legal basis for processing, or where the data has been unlawfully processed. Note that certain data must be retained for legal and regulatory compliance purposes (see Section 9) and cannot be deleted on request during the applicable retention period.
• Right to Restriction: You may request that koi88 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified, or where you have objected to processing and we are assessing whether our legitimate interests override your rights.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you may request that we provide your personal data to you in a structured, commonly used, machine-readable format (such as CSV or JSON) so that you can transfer it to another service provider.
• Right to Object: You have the right to object at any time to the processing of your personal data where koi88 relies on legitimate interests as its legal basis. koi88 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without detriment. Withdrawal does not affect the lawfulness of any processing carried out prior to withdrawal.
• Right Not to Be Subject to Automated Decisions: koi88 does not currently make solely automated decisions that produce significant legal or similarly significant effects on players. Responsible gaming interventions and fraud screening involve human review at relevant decision points.

12.1 How to Exercise Your Rights

To exercise any of the rights listed above, please contact koi88 at [email protected] (plain text — not a clickable link) with the subject line "DATA RIGHTS REQUEST". Please include your registered account username and a clear description of the right you wish to exercise and the data it relates to. We will acknowledge your request within 5 business days and aim to fulfil it within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reasons for it.

koi88 will not charge a fee for responding to data rights requests unless they are manifestly unfounded or excessive, in which case a reasonable administrative fee may apply. We will notify you before charging any fee.

The koi88 Platform is strictly intended for adults aged 21 years or older. koi88 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the account registration and KYC process — players must confirm they are 21 or older before completing registration, and must provide a valid government-issued ID confirming their date of birth before any withdrawal is processed.

If koi88 discovers or is notified that it has inadvertently collected personal data from a person under the age of 21, it will take immediate steps to close the relevant account, refund any remaining balance, and securely delete the personal data concerned. If you believe that a minor has created a koi88 account, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

koi88 may send you promotional communications about our products, bonuses, seasonal offers (such as those tied to Indonesian national holidays including Idul Fitri, Idul Adha, and Independence Day on August 17), and new games or features, where you have given your explicit consent to receive such communications at the time of registration or subsequently through your Account settings.

Marketing communications may be delivered by email or through in-platform notifications. We will never send unsolicited marketing SMS messages to your phone number without your explicit opt-in consent.

14.1 Opting Out

You may withdraw your consent to receive marketing communications at any time by:

• Clicking the "unsubscribe" link included in the footer of every marketing email we send;
• Adjusting your notification preferences in your koi88 Account settings; or
• Contacting our support team at [email protected] and requesting removal from all marketing lists.

Opting out of marketing communications will not affect the delivery of transactional messages related to your account — such as deposit confirmations, withdrawal notifications, security alerts, and KYC status updates — which are sent as part of the core service and cannot be disabled while your account is active.

14.2 Personalization

Where you have consented, koi88 may use your gaming activity profile — including the types of games you play (for example, slot titles, live casino tables, or sportsbook markets such as BRI Liga 1 football, Champions League, or E-sports MPL events) — to personalize the promotions and content we present to you on the Platform and in marketing emails. You may withdraw consent for personalized marketing at any time without affecting your access to the Platform.

koi88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or our business operations. When we make material changes to this Policy — meaning changes that significantly affect your privacy rights or how we process your data — we will notify you by posting a prominent notice on the Platform and, where we have a valid email address for you, by sending a notification to your registered email address, at least seven (7) days before the changes take effect.

For minor, non-material amendments (such as typographical corrections or clarifications that do not alter the substance of our commitments), changes may take effect upon publication without advance notice. The "Last updated" date shown at the top of this page will always reflect the date of the most recent revision.

Your continued use of the koi88 Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated practices described therein. If you do not agree with any changes to this Policy, you must stop using the Platform and may request closure of your Account in accordance with our Terms & Conditions.

If you have questions, concerns, or complaints regarding this Privacy Policy, or if you wish to exercise any of your data rights as described in Section 12, please contact the koi88 Data Protection team through the channels below:

We take all privacy complaints seriously and will investigate every inquiry thoroughly. If you are not satisfied with our response to a privacy complaint, you may have the right to escalate the matter to the relevant data protection authority or regulatory body in your jurisdiction.