Your Data, Your Control

At koi505, we are committed to transparency in how we handle your personal information. You have the right to know what data we collect, how we use it, who we share it with, and how you can access, correct, or delete it. This Privacy Policy is written in plain English to ensure you fully understand our data practices.

1. Introduction and Scope

This Privacy Policy applies to all personal information collected by koi505 through our website (https://koi505.cam), mobile-optimized platform, customer service channels, and any other means by which you interact with our services. By creating an account with koi505, you acknowledge that you have read, understood, and agree to the data practices described in this Privacy Policy.

koi505 operates as an online gaming platform serving Indonesian players with casino games, live dealer tables, sports betting, and lottery draws. We are committed to protecting your privacy in accordance with international data protection principles and Indonesian consumer protection regulations. This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern your overall use of koi505 services.

Data Controller: koi505 acts as the data controller for all personal information collected through our platform. We determine the purposes and means of processing your personal data and are responsible for its protection and lawful use.

2. Information We Collect

koi505 collects various types of personal information necessary to provide gaming services, comply with legal obligations, and improve your user experience. The categories of information we collect include:

2.1 Account Registration Information

When you create a koi505 account, we collect:

  • Identity Information: Full legal name, date of birth, gender, and nationality.
  • Contact Information: Email address, mobile phone number, and residential address (street address, city, province, postal code).
  • Login Credentials: Username and encrypted password (we never store passwords in plain text).
  • Verification Documents: Government-issued identification (Indonesian National Identity Card / KTP), proof of address documents (utility bills, bank statements), and selfie photographs for identity verification purposes as required by Indonesian banking regulations.

2.2 Financial Information

To process deposits and withdrawals, we collect:

  • Bank Account Details: Bank name (BCA, BRI, BNI, Mandiri, etc.), account number, and account holder name (which must match your verified identity).
  • E-Wallet Information: Account identifiers for OVO, DANA, GoPay, ShopeePay, or LinkAja as applicable.
  • Transaction History: Records of all deposits, withdrawals, bets placed, wins, losses, and bonus activities associated with your account.
  • Payment Provider Data: Information shared by third-party payment processors to verify transaction authenticity and prevent fraud.

2.3 Usage and Behavioral Data

When you use koi505 services, we automatically collect:

  • Technical Information: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
  • Gaming Activity: Games played, bet amounts, session duration, favorite games, win/loss ratios, and play patterns.
  • Website Interaction: Pages viewed, time spent on pages, click patterns, search queries within our site, and navigation paths.
  • Communication Records: Transcripts of live chat conversations with customer support, emails exchanged, and support tickets submitted.

2.4 Responsible Gaming Data

For player protection purposes, we collect and monitor:

  • Self-imposed limits (deposit limits, loss limits, session time limits).
  • Self-exclusion requests and cooling-off period preferences.
  • Responsible gaming assessment responses and risk indicators.
  • Patterns that may suggest problem gambling behavior for early intervention purposes.

Data Minimization

We collect only the personal information necessary to provide our services, comply with legal obligations, and protect your account security.

Purpose Limitation

Your data is used only for the specific purposes disclosed in this policy. We never sell your personal information to third parties.

Security by Design

Bank-grade 256-bit SSL encryption protects all data transmission. Sensitive information is encrypted at rest on secure servers.

Retention Limits

We retain your data only as long as necessary for service provision and legal compliance, then securely delete it.

Transparency

You have the right to access, correct, and request deletion of your personal information at any time through our support team.

Regulatory Compliance

Our data practices comply with international data protection standards and Indonesian consumer protection regulations.

3. How We Use Your Information

koi505 processes your personal information for the following legitimate business purposes:

3.1 Service Provision and Account Management

  • Creating and maintaining your gaming account.
  • Processing deposits, withdrawals, and other financial transactions.
  • Delivering gaming services including casino games, sports betting, and lottery draws.
  • Calculating and crediting winnings, bonuses, and loyalty rewards.
  • Managing your responsible gaming preferences and self-imposed limits.
  • Providing customer support and responding to your inquiries.

3.2 Legal and Regulatory Compliance

  • Verifying your identity and age to ensure you are at least 21 years old and legally eligible to gamble.
  • Complying with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations as required by Indonesian banking laws.
  • Detecting and preventing fraud, money laundering, underage gambling, and other illegal activities.
  • Maintaining records as required by our gaming license and applicable regulations.
  • Cooperating with law enforcement and regulatory investigations when legally obligated.

3.3 Security and Fraud Prevention

  • Monitoring for suspicious account activity, multiple account creation, collusion, and betting pattern anomalies.
  • Protecting against unauthorized access, hacking attempts, and data breaches.
  • Verifying the legitimacy of payment methods to prevent credit card fraud and identity theft.
  • Investigating disputes, chargebacks, and complaints.

3.4 Platform Improvement and Personalization

  • Analyzing usage patterns to improve website functionality, game selection, and user interface design.
  • Personalizing game recommendations based on your play history and preferences.
  • Conducting research and analytics to understand player behavior and optimize our services.
  • Testing new features and measuring their effectiveness.

3.5 Marketing and Communications (With Consent)

  • Sending promotional emails about new games, bonuses, and special offers (only if you have opted in).
  • Notifying you of important account updates, policy changes, and security alerts (transactional communications).
  • Inviting you to participate in customer satisfaction surveys and feedback requests.

Note: You may opt out of marketing communications at any time by clicking the unsubscribe link in emails or contacting customer support. Transactional communications (password resets, withdrawal confirmations, etc.) cannot be disabled as they are essential to service operation.

4. Information Sharing and Disclosure

koi505 does not sell your personal information to third parties. We share your data only in the following limited circumstances:

4.1 Service Providers and Business Partners

We engage trusted third-party service providers to perform functions on our behalf, including:

  • Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) process your financial transactions. We share only the information necessary to complete deposits and withdrawals.
  • Game Providers: Licensed casino game studios host the games you play on our platform. They may receive limited technical data (session identifiers, bet amounts) but do not receive your personal identity information.
  • Identity Verification Services: Third-party KYC providers verify your identity documents against government databases to comply with regulatory requirements.
  • Customer Support Tools: Live chat and helpdesk software providers may have access to your support communications to assist our customer service team.
  • Cloud Hosting and IT Infrastructure: Data center providers host our servers and databases under strict confidentiality and security agreements.

All third-party service providers are contractually obligated to protect your data, use it only for the specific purposes we authorize, and comply with applicable data protection laws.

4.2 Legal and Regulatory Authorities

We may disclose your personal information when required by law or in good faith belief that such disclosure is necessary to:

  • Comply with legal obligations, court orders, subpoenas, or regulatory requests from Indonesian authorities.
  • Investigate and prevent fraud, money laundering, or other illegal activities.
  • Protect the rights, property, and safety of koi505, our players, and the public.
  • Enforce our Terms & Conditions and investigate violations.

4.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or bankruptcy, your personal information may be transferred to the successor entity. You will be notified via email and prominent website notice before your data is transferred and becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information with other third parties when you have explicitly consented to such sharing, for example, when participating in joint promotions with partner brands.

5. Data Security Measures

koi505 implements comprehensive technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

5.1 Encryption and Secure Transmission

  • All data transmitted between your device and koi505 servers is encrypted using 256-bit SSL (Secure Socket Layer) technology, the same standard used by banks and financial institutions worldwide.
  • Sensitive data such as passwords and financial information is encrypted at rest using AES-256 encryption.
  • We never store your bank account passwords or payment card CVV codes.

5.2 Access Controls and Authentication

  • Access to personal data is restricted to authorized koi505 employees and contractors who require it to perform their job functions.
  • All staff with data access undergo background checks and sign confidentiality agreements.
  • Multi-factor authentication protects our internal systems from unauthorized access.
  • We maintain detailed access logs to track who accessed what data and when.

5.3 Infrastructure Security

  • Our servers are hosted in secure data centers with physical security controls including 24/7 monitoring, biometric access restrictions, and environmental safeguards.
  • Firewalls, intrusion detection systems, and vulnerability scanning protect against cyberattacks.
  • Regular security audits and penetration testing identify and remediate potential vulnerabilities.
  • Backup systems ensure data can be recovered in case of hardware failure or disaster.

5.4 Your Responsibility

While we implement robust security measures, you also play a crucial role in protecting your account:

  • Choose a strong, unique password and never share it with anyone.
  • Log out after each session, especially on shared devices.
  • Never respond to phishing emails claiming to be from koi505 requesting your password.
  • Keep your registered email address and mobile phone number secure.
  • Immediately notify customer support if you suspect unauthorized account access.

6. Data Retention and Deletion

koi505 retains your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

6.1 Active Account Data

While your account remains active, we retain all account information, transaction history, and gameplay records to provide ongoing services and comply with regulatory requirements.

6.2 Closed Account Data

When you close your account, we retain certain information for legal and regulatory purposes:

  • Financial Records: Transaction history, deposits, withdrawals, and tax-related information are retained for 7 years as required by Indonesian banking and tax regulations.
  • Identity Verification Documents: KYC records are retained for 5 years to comply with anti-money laundering regulations.
  • Dispute Records: Communications and evidence related to disputes are retained for 3 years or until final resolution, whichever is longer.
  • Marketing Data: If you opted into marketing communications, your contact information is retained until you unsubscribe or close your account, after which it is deleted within 30 days.

6.3 Data Deletion Process

After applicable retention periods expire, your personal information is securely deleted or anonymized so that it can no longer identify you. Anonymized data may be retained indefinitely for statistical analysis and research purposes.

7. Your Privacy Rights

You have the following rights regarding your personal information. To exercise any of these rights, contact our Data Protection Officer using the details in Section 9.

Right Description
Right to Access You may request a copy of all personal information we hold about you, including account details, transaction history, and communications.
Right to Rectification If your personal information is inaccurate or incomplete, you may request corrections. Some information (such as your legal name) can only be updated after providing supporting documentation.
Right to Erasure You may request deletion of your personal information after account closure, subject to our legal retention obligations for financial and regulatory records.
Right to Restrict Processing You may request that we limit how we use your data in certain circumstances, such as while we investigate a complaint about data accuracy.
Right to Data Portability You may request a copy of your personal information in a structured, machine-readable format (such as CSV or JSON) for transfer to another service provider.
Right to Object You may object to processing of your data for direct marketing purposes. You may also object to profiling and automated decision-making that significantly affects you.
Right to Withdraw Consent Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

We will respond to your requests within 30 days. In some cases, we may need to verify your identity before processing your request to protect your privacy and prevent unauthorized access to your data.

8. Cookies and Tracking Technologies

koi505 uses cookies and similar tracking technologies to enhance your browsing experience, analyze website usage, and deliver personalized content. Cookies are small text files stored on your device that allow us to recognize your browser and remember your preferences.

8.1 Types of Cookies We Use

  • Essential Cookies: Required for website functionality such as login authentication, session management, and security features. These cannot be disabled as they are necessary for service operation.
  • Performance Cookies: Collect anonymous information about how visitors use our website, including which pages are most popular and error messages. This helps us improve website performance.
  • Functionality Cookies: Remember your preferences such as language settings, favorite games, and display options to provide a more personalized experience.
  • Analytics Cookies: Help us understand user behavior through tools like Google Analytics. These cookies track page views, session duration, bounce rates, and traffic sources.

8.2 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to block all cookies, accept only certain cookies, or delete existing cookies. However, disabling essential cookies will prevent you from accessing certain website features and may degrade your user experience. Consult your browser's help documentation for specific instructions on managing cookies.

9. Contact and Data Protection Officer

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how koi505 handles your personal information, please contact us:

Data Protection Inquiries

Email: [email protected]

Subject Line: Privacy Policy Inquiry / Data Protection Request

Live Chat: Available 24/7 through the koi505 website

Response Time: We aim to respond to all privacy inquiries within 7 business days and fulfill data access requests within 30 days as required by law.

When contacting us about your personal information, please include your full name, registered email address, and account username (if applicable) to help us locate your records and verify your identity.

Policy Updates

koi505 reserves the right to update this Privacy Policy to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated via email to registered users and prominently displayed on our website at least 30 days before taking effect. Your continued use of koi505 services after notification constitutes acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your information.

Need More Information?

Our Terms & Conditions explain your legal rights and responsibilities, while our FAQ section answers common questions about account management, payments, and game rules. Our support team is available 24/7 to assist with any concerns.