Koi388 Privacy Policy – Your Data Protection

Introduction

Koi388 takes user privacy very seriously. As an online casino platform operating for Malaysian users, we understand the importance of the trust you place in us when you register and use our services. This Privacy Policy is formulated in accordance with the Malaysia Personal Data Protection Act 2010 (PDPA) and international industry best practices in user data management.

This policy applies to all users accessing the koi388 platform via koi388.fun or through our official mobile app for Android and iOS. It covers all types of interactions with our platform, including registration, gaming activity, financial transactions, and interactions with our customer support team.

We are committed to full transparency in all matters relating to your personal data. Should there be any material changes to how we handle your data, we will notify you via an in-platform notification or your registered email before such changes take effect.

Information We Collect

Koi388 collects your personal information through various channels as you interact with our platform. The following are the categories of data we collect and their purposes:

2.1 Information You Provide Directly

This is the information you enter directly when registering or using the koi388 platform:

• Identity Information: Full name, identity card number (MyKad), date of birth and gender.
• Contact Information: Active Malaysian mobile number and email address.
• Financial Information: Bank account number, bank name and digital wallet details (such as Touch 'n Go eWallet or GrabPay) for deposit and withdrawal purposes.
• KYC Verification Documents: Digital copies of your identity card, passport, or other official documents requested during the account verification process.
• Communication: Records of your conversations with our customer support team via Live Chat, email, or any other communication channel.

2.2 Information Collected Automatically

When you use our platform, certain information is collected automatically by our systems:

• Technical Data: IP address, web browser type and version, device operating system, screen resolution, and unique device identifier.
• Usage Data: Pages visited, session duration, games played, total wagers, game results, and transaction history.
• Location Data: General location information based on IP address for geographic compliance and account security purposes.
• Cookie Data: Session cookies, preference cookies and analytics cookies that help us understand platform usage patterns.

How We Use Your Data

Your personal data is used by koi388 solely for legitimate and clearly stated purposes. We do not use your data for any purpose unrelated to platform operations without your prior consent. The primary purposes of data use are as follows:

• Processing account registrations and verifying user identity through the required KYC process.
• Processing deposits, withdrawals and all financial transactions on the platform securely and accurately.
• Providing effective customer support and resolving any complaints or disputes.
• Sending important notifications related to your account, transactions, promotions and platform updates.
• Detecting and preventing fraud, money laundering, unauthorised access and other suspicious activity.
• To comply with legal and regulatory obligations applicable in Malaysia, including reporting requirements to the relevant authorities.
• Analysing usage patterns to improve the user experience and develop new platform features.
• Personalising content, promotions and game recommendations based on your preferences and gaming history.

Legal Basis for Processing

Koi388 processes your personal data on a valid legal basis under the Malaysia Personal Data Protection Act 2010. The processing bases we rely on are:

• Consent: For data processing related to marketing and promotional communications, we rely on the consent you provided during registration or through your account settings.
• Contract Performance: The majority of data processing is necessary to enable us to provide the koi388 platform services to you as you registered for.
• Legitimate Interest: We process certain data based on our legitimate interest in operating the platform safely, preventing fraud, and ensuring the security of all users.
• Legal Obligation: Data processing for KYC, AML and reporting to authorities is based on legal obligations binding us as a platform operator.

Data Sharing with Third Parties

Koi388 does not sell, rent, or trade users' personal data to any third party for their own commercial purposes. However, in certain situations, we may need to share your data with the following parties:

• Payment Providers: Payment service providers such as FPX, DuitNow and digital wallet providers that process financial transactions on our behalf. Data sharing is limited to information required to complete the transaction only.
• Game Software Providers: Game software development companies that provide casino games to our platform may receive non-personally identifiable game statistics data.
• Technical Service Providers: Third-party companies that assist us in technical operations such as cloud computing, cybersecurity, and platform analytics, subject to strict confidentiality agreements.
• Authority: Law enforcement agencies, regulatory bodies, or competent courts when required by Malaysian law or a valid court order.
• Business Transfer: In the event of a merger, acquisition, or sale of platform assets, user data may be transferred to the new entity, which will be subject to the same or equivalent Privacy Policy.

All third parties with whom we share data are required to comply with data protection standards equivalent to or higher than our own. We do not permit third parties to process user data for any purpose other than those specified in their agreement with koi388.

Data Storage and Security

6.1 Retention Period

Koi388 retains your personal data for the period necessary to fulfil the purposes stated in this Privacy Policy. Generally:

• Active account data is retained for the duration your account remains active and for any additional period required by law.
• Financial transaction records are retained for a minimum of seven (7) years in accordance with Malaysian legal requirements regarding financial records.
• Customer support communication logs are retained for three (3) years for reference and dispute resolution purposes.
• Technical data and activity logs are retained for two (2) years for security and internal audit purposes.

6.2 Security Measures

Koi388 implements multiple layers of technical and organisational security to protect your personal data from unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL data encryption for all data transmissions between your device and our servers.
• Encryption of sensitive data stored in databases using the AES-256 industry standard.
• Role-based access control (RBAC) ensures only authorised personnel can access user data.
• Regular security audits conducted by independent parties to identify and address any system vulnerabilities.
• 24/7 threat monitoring system and a comprehensive cybersecurity incident response plan.
• Two-factor authentication (2FA) for staff access to internal systems containing user data.

Cookies and Tracking Technologies

The koi388 platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. There are several types of cookies we use:

• Essential Cookies: Required for core platform operations such as login sessions and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies: Helps the platform remember your preferences such as display resolution and notification settings to deliver a more personalised experience.
• Analytics Cookies: Enables us to understand how users interact with the platform, the most frequently visited pages and session duration. This information is used in aggregate form to improve the platform.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and protect user accounts from unauthorised access.

You can manage your cookie preferences through your web browser settings. However, disabling certain cookies may affect the functionality and user experience of the koi388 platform.

Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010, you have certain rights regarding the personal data we hold about you. koi388 fully respects these rights and provides straightforward mechanisms for you to exercise them:

To exercise any of the above rights, please contact our Data Privacy Officer by email at [email protected], stating the right you wish to exercise along with your account information for identity verification.

Children's Data

The koi388 platform is strictly restricted to individuals aged 18 years and above only. We do not knowingly collect or process personal data of children under the age of 18. If we discover that a child's personal data has been collected without our knowledge, we will take immediate steps to delete that data and close the relevant account.

Parents or guardians who believe their child has registered an account on the koi388 platform are urged to contact us immediately via email or Live Chat so that we may take appropriate action.

Privacy Policy Amendment

Koi388 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or platform improvements. Each amendment will be marked with a new "Updated" date at the top of this document.

For material amendments that significantly affect how we process your data, we will send a notification to your registered email address or display a prominent notice on the platform at least 14 days before the amendment takes effect. Continued use of the platform after the amendment takes effect constitutes your acceptance of the revised policy.

Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact the koi388 Data Privacy Officer through the following channels:

You also have the right to lodge a complaint with the Department of Personal Data Protection Malaysia if you are dissatisfied with how we handle your privacy complaint.