koi4d Privacy Policy

The following terms carry the meanings assigned to them throughout this Privacy Policy. Defined terms appear in title case for clarity.

• "Personal Data" means any information that identifies or could reasonably identify a living individual, either directly or in combination with other data — including name, mobile number, bank account details, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data — in this case, koi4d.
• "Data Processor" means a third party that Processes Personal Data on behalf of koi4d under a written data-processing agreement.
• "User" / "You" / "Your" means any individual who accesses, registers on, or interacts with the koi4d platform.
• "Platform" means the koi4d website, web application, and all associated services accessible via koi4d.ws.
• "KYC" means Know Your Customer — the identity verification process used to confirm a User's identity and assess risk in accordance with applicable anti-money-laundering obligations.
• "Cookie" means a small text file placed on your device by the Platform for the purposes described in Section 7.

koi4d acts as the Data Controller for all Personal Data collected through the Platform. As Data Controller, koi4d is responsible for determining the purposes for which your Personal Data is Processed and for ensuring those purposes are carried out in accordance with applicable data protection standards.

For all data protection enquiries, requests, and formal complaints, please contact our Data Protection team using the details provided in Section 15 of this policy. koi4d is committed to responding to all data-related requests within 30 days of receipt.

koi4d collects the following categories of Personal Data, depending on how you interact with the Platform:

3.1 Registration & Account Data

• Full legal name (as required for KYC verification);
• Date of birth (to verify the 21+ age requirement);
• Indonesian mobile number;
• Chosen username and hashed password;
• City of residence (e.g., Jakarta, Surabaya, Bandung, Bali, Yogyakarta).

3.2 KYC & Identity Verification Data

• Government-issued photo identification (KTP / SIM / Passport);
• Selfie or liveness check image for facial-match verification;
• Proof of payment method ownership (e.g., screenshot of BCA, BRI, BNI, or Mandiri account statement showing account name).

3.3 Financial Transaction Data

• Deposit and withdrawal amounts, dates, and methods;
• Bank account numbers and bank names (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata);
• E-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja account numbers);
• Transaction reference codes and timestamps.

3.4 Gameplay & Betting Data

• Bets placed, game types, stakes, odds, and outcomes;
• Session duration, frequency of play, and win/loss history;
• Responsible gaming tool usage (deposit limits set, self-exclusion requests).

3.5 Technical & Device Data

• IP address and approximate geographic location;
• Device type, operating system, and browser version;
• Session identifiers, access timestamps, and navigation logs.

3.6 Communications Data

• Live chat transcripts and support ticket content;
• WhatsApp message records (VIP Silver+ members only);
• Any documents or images voluntarily submitted to our support team.

koi4d collects Personal Data through the following channels:

• Directly from you — when you register an account, complete KYC, make a deposit or withdrawal, place a bet, or contact our support team;
• Automatically — through Cookies, server logs, and analytics tools as you navigate the Platform (see Section 7);
• From third parties — our KYC and identity verification provider may supply us with verification results; our payment processors confirm transaction statuses; fraud-prevention services may flag unusual activity patterns associated with your IP address or device fingerprint;
• From publicly available sources — where permitted by applicable law, koi4d may cross-reference information against public records or sanctions lists as part of our anti-money-laundering obligations.

koi4d processes your Personal Data on one or more of the following legal grounds:

Where koi4d relies on your consent as the legal basis for any Processing activity, you may withdraw that consent at any time by contacting our support team. Withdrawal of consent does not affect the lawfulness of any Processing carried out prior to the withdrawal.

koi4d uses the Personal Data described in Section 3 for the following purposes:

• Account management — creating and maintaining your koi4d Account, authenticating your login sessions, and communicating important account-related notices;
• Transaction processing — verifying deposit instructions, executing withdrawals to your registered IDR bank accounts and e-wallets, and maintaining an accurate transaction history;
• Identity verification — conducting KYC checks to confirm your identity, verify your age (21+), and satisfy our anti-money-laundering obligations;
• Fraud and security monitoring — detecting, investigating, and preventing unauthorised account access, Prohibited Activity as defined in our Terms & Conditions, and financial crime;
• Responsible gaming — monitoring gameplay patterns for indicators of problem gambling behaviour, applying player-requested limits, and intervening proactively where our monitoring systems flag a concern;
• Customer support — responding to your enquiries, resolving disputes, and maintaining records of support interactions;
• Platform improvement — analysing aggregated and anonymised usage data to improve the Platform's performance, game selection, and user experience;
• Marketing (opt-in only) — sending promotional communications about koi4d offers, seasonal promotions (such as Idul Fitri, Ramadhan, and Indonesian Independence Day specials), and new game releases, where you have consented to receive such communications;
• Legal and regulatory compliance — retaining records as required by our licensing authority, responding to valid legal requests from law enforcement, and fulfilling any other statutory obligations.

koi4d uses Cookies and similar tracking technologies to operate and improve the Platform. The categories of Cookies we deploy are as follows:

Strictly Necessary Cookies cannot be disabled as they are essential to the secure operation of the Platform. You may control Functional, Analytics, and Marketing Cookies through your browser settings. Note that disabling certain Cookies may affect your experience on the Platform — for example, your session may not persist correctly if functional Cookies are blocked.

koi4d does not use third-party advertising networks or cross-site tracking technologies that would allow external parties to build a profile of your browsing behaviour across websites other than koi4d.ws.

koi4d does not sell your Personal Data. We share it only in the following limited circumstances, and only to the extent necessary for each purpose:

• Payment processors — BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja receive the minimum transaction data required to execute your deposit or withdrawal instruction;
• Identity verification providers — our KYC partner receives the identity documents and biometric data you submit during the verification process. This partner operates under a data-processing agreement with koi4d and is prohibited from using your data for any purpose other than completing your verification;
• Fraud prevention services — device fingerprint data, IP addresses, and transaction patterns may be shared with our fraud-detection provider to identify and prevent financial crime and account takeover;
• Game content providers — studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive anonymised session and stake data necessary to deliver and audit their games. They do not receive your name, contact details, or financial account information;
• Legal and regulatory authorities — koi4d will disclose Personal Data to law enforcement agencies, regulatory bodies, or courts where required to do so by a valid legal obligation, court order, or our licensing authority's directive;
• Business transfers — in the event of a merger, acquisition, or sale of all or part of koi4d's business, your Personal Data may be transferred to the acquiring entity, subject to equivalent data protection commitments.

koi4d's primary servers are hosted in secure data centres within the Asia-Pacific region. However, some of our third-party service providers — including cloud infrastructure partners and certain KYC vendors — may process Personal Data in jurisdictions outside Indonesia.

Where Personal Data is transferred internationally, koi4d ensures that an appropriate level of protection is maintained through one or more of the following safeguards:

• Standard contractual clauses that bind the recipient to data protection standards equivalent to those applied by koi4d;
• Transfers to jurisdictions that have been assessed as providing an adequate level of data protection by recognised international standards;
• Binding corporate rules where the recipient is part of a group operating under a certified privacy framework.

You may request further information about the specific safeguards in place for any given international transfer by contacting our Data Protection team at the address provided in Section 15.

koi4d retains Personal Data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised. Anonymised data, which can no longer be attributed to any identifiable individual, may be retained indefinitely for aggregate statistical analysis.

Subject to applicable law and certain limited exceptions, you have the following rights in relation to your Personal Data held by koi4d. To exercise any of these rights, please contact us using the details in Section 15. We will respond within 30 days.

The koi4d Platform is strictly intended for adults aged 21 and over. koi4d does not knowingly collect Personal Data from individuals under the age of 21. All registration attempts are subject to date-of-birth verification, and accounts suspected to belong to users under 21 are suspended pending identity verification.

If you have reason to believe that a person under the age of 21 has registered on the Platform or provided Personal Data to koi4d, please contact us immediately via live chat or at [email protected]. Upon confirmation, koi4d will delete the relevant data and close the account without delay.

Parents and guardians are strongly encouraged to use parental controls available on their devices and internet service providers to prevent minors from accessing online gambling platforms.

koi4d employs a multi-layered security architecture to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and koi4d's servers;
• AES-256 encryption at rest for all sensitive Personal Data stored in our databases;
• Hashed and salted password storage — plain-text passwords are never stored;
• SMS OTP two-step verification available to all registered Users as an optional additional layer of account security;
• Role-based access controls — internal access to Personal Data is restricted to authorised personnel whose job function requires it, on a strict need-to-know basis;
• Real-time intrusion detection and 24/7 security monitoring of our server infrastructure;
• Regular penetration testing and vulnerability assessments conducted by independent security professionals;
• Automatic session expiry after a period of inactivity to reduce the risk of unauthorised access from unattended devices.

Despite these measures, no digital platform can guarantee absolute security. In the unlikely event of a data breach that poses a risk to your rights and freedoms, koi4d will notify affected Users without undue delay and will take all reasonable steps to contain and remediate the breach.

koi4d reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, koi4d will notify registered Users via a notice displayed prominently on the Platform or via the registered mobile number on file.

The effective date of the most recent revision is displayed at the top of this document. Your continued use of the Platform following any amendment constitutes your acknowledgement of the updated policy. If you do not agree with the revised terms, you must cease using the Platform and may request account closure by contacting our support team.

Users are encouraged to review this Privacy Policy periodically. The current version is always available at koi4d.ws/privacy-policy.

For all data protection enquiries, rights requests, and formal complaints, please contact koi4d's Data Protection team. All contact information is provided as plain text — none of the details below are clickable links.

• Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week via the chat widget present on every page of the Platform.
• WhatsApp (VIP Silver+ members only): +62 811 0000 4444
• Support hours: 24/7, with primary operations in WIB (UTC+7). Users in WITA (UTC+8, covering Bali and Sulawesi) and WIT (UTC+9, covering Maluku and Papua) may experience slightly longer response times during off-peak hours.

When submitting a data rights request or formal complaint, please include your registered username, a clear description of your request, and any relevant supporting information. This will allow our Data Protection team to locate your records and respond as efficiently as possible.

If you are not satisfied with koi4d's response to your complaint, you have the right to escalate the matter to the dispute resolution mechanism provided by koi4d's licensing authority, whose decision shall be final and binding on both parties.