ko155 Privacy Policy

ko155 operates the online betting and gaming platform accessible at ko155.club (the "Platform"). For the purposes of this Privacy Policy, ko155 acts as the data controller in respect of all personal data collected from players who access or register on the Platform.

ko155 is an internationally operated platform designed specifically for the Indonesian market. Our services are intended exclusively for adults aged 21 and above who are resident in Indonesia. All data handling practices described in this policy apply equally across our web platform, mobile-optimised interfaces, and any customer support channels operated by ko155.

If you have any questions about how ko155 processes your personal data, or if you wish to exercise any of the rights described in this policy, please contact us at [email protected]. Contact details are also provided in full in Section 14.

ko155 collects the following categories of personal data. We collect only what is necessary for the purposes described in Section 4 — we do not collect data speculatively or in bulk.

ko155 collects personal data through the following channels:

• Direct Interactions: Data you provide when creating an Account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or claiming a promotion.
• Automated Technologies: Technical and usage data collected automatically through cookies, server logs, and similar technologies when you access the Platform. See Section 8 for full cookie details.
• Third-Party Payment Processors: When you use a bank transfer or e-wallet to deposit or withdraw funds, ko155 receives confirmation data (transaction reference, masked account identifier, amount) from the relevant payment provider (e.g., your BCA or OVO account).
• KYC Verification Partners: ko155 may use regulated third-party identity verification services to validate the documents you submit during KYC. These services return a pass/fail result and a confidence score; they do not retain your documents on ko155's behalf.
• Fraud Prevention Services: ko155 uses industry-standard fraud detection tools that may cross-reference device fingerprints and IP addresses against known fraud databases. No additional personal data is shared beyond what is technically necessary for the check.

ko155 uses your personal data only for the purposes described below. Where a purpose has changed or a new purpose has arisen, we will notify you before processing begins under that new purpose.

ko155 will never use your personal data for the following purposes: selling your data to third-party advertisers, profiling you based on protected characteristics, or making fully automated decisions that produce significant legal effects without human review.

Every data processing activity at ko155 is carried out under one of the following legal bases:

• Contract Performance: Processing that is necessary to open your Account, process transactions, settle bets, and deliver the Services you have requested. Without this processing, ko155 cannot provide you with an Account.
• Legal Obligation: Processing required to comply with anti-money-laundering (AML) obligations, KYC verification requirements, fraud prevention duties, and record-keeping obligations imposed on internationally operating gaming platforms.
• Legitimate Interests: Processing for fraud detection, security monitoring, platform analytics, and responsible gaming monitoring — where ko155's legitimate business interests are not overridden by your fundamental privacy rights.
• Consent: Processing for personalised marketing communications and the setting of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing. Withdrawal of marketing consent does not affect your ability to use the Platform.

ko155 does not sell, rent, or trade your personal data. We share data only in the following limited and controlled circumstances:

• Payment Processors: Bank transfer and e-wallet providers (including BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja) receive only the transaction data necessary to execute your deposit or withdrawal. These providers operate under their own privacy policies and applicable Indonesian financial regulations.
• Identity Verification (KYC) Partners: Regulated third-party KYC service providers receive your identity documents solely for the purpose of verifying your identity and age. They are contractually prohibited from using your data for any other purpose.
• Fraud Prevention Partners: Industry-standard fraud detection platforms may process technical data (IP address, device fingerprint) to assess transaction risk. No full identity data is shared with these services.
• Game Content Providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe receive only the session token and player alias necessary to load and log game rounds. They do not receive your name, contact details, or financial data.
• Legal and Regulatory Authorities: ko155 may disclose personal data where required by a valid legal order, court process, or where disclosure is necessary to prevent or investigate fraud, money laundering, or other criminal activity.
• Business Transfers: In the unlikely event that ko155's business is acquired, merged with, or transferred to another entity, your personal data may be transferred as part of that transaction. You will be notified in advance of any such transfer and informed of your rights.

ko155 operates as an internationally hosted platform. This means that some of your personal data may be stored or processed on servers located outside Indonesia. Where this occurs, ko155 takes the following safeguards:

• Standard Contractual Clauses: Where personal data is transferred to processors in jurisdictions without a formal adequacy decision, ko155 puts in place standard contractual clauses or equivalent data transfer agreements to ensure your data receives the same level of protection it would within Indonesia.
• Data Minimisation on Transfer: Only the minimum data necessary for each processing purpose is transferred internationally. Full identity documents are stored in encrypted form in the primary data region and are not replicated unnecessarily.
• Processor Due Diligence: All international data processors used by ko155 are subject to due diligence assessments covering their security practices, data protection policies, and regulatory track record before engagement.

ko155 uses cookies and similar technologies to keep you logged in, remember your preferences, measure platform performance, and — with your consent — serve you relevant promotional content. The table below describes each category of cookie in use.

Essential cookies cannot be disabled, as they are required for the Platform to function securely. You may manage functional and analytics cookies through your browser settings. Disabling functional cookies may affect the quality of your experience but will not prevent you from accessing or using the Platform.

ko155 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulatory guidance. The following retention periods apply:

When data reaches the end of its retention period, ko155 securely deletes or anonymises it. Anonymised data (which cannot be linked back to any individual) may be retained indefinitely for aggregate statistical analysis.

As a ko155 player, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving your request.

ko155 applies a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our key technical and organisational measures include:

• TLS/SSL Encryption in Transit: All data transmitted between your device and ko155 servers is protected by industry-standard TLS 1.2 or higher encryption. The padlock icon visible in your browser confirms this protection is active.
• Encryption at Rest: Identity documents submitted during KYC, financial data, and other sensitive personal data stored on ko155 servers are encrypted using AES-256 or equivalent standards.
• Access Controls: Access to personal data within ko155's internal systems is restricted on a strict need-to-know basis. Staff who handle player data undergo mandatory data protection training and are bound by confidentiality obligations.
• Multi-Factor Authentication (MFA): All internal systems that store personal data require MFA for staff access. ko155 also encourages players to enable any available two-step login features on their Accounts.
• Intrusion Detection: ko155's infrastructure is monitored continuously for anomalous activity. Security incident response procedures are in place and tested regularly.
• Data Breach Notification: In the event of a personal data breach that poses a risk to your rights, ko155 will notify affected players without undue delay and will take all necessary remediation steps immediately.

While ko155 takes every reasonable precaution to protect your data, no internet transmission is 100% secure. You are responsible for keeping your Account password confidential and for logging out of shared devices after each session. If you suspect unauthorised access to your Account, contact ko155 support immediately.

ko155 operates a strict 21+ age policy. The Platform is not intended for, and ko155 does not knowingly collect personal data from, any person under the age of 21. This is both a legal safeguard and a core responsible gaming commitment.

• All new Accounts are subject to age verification as part of the KYC process. Registration requires you to confirm that you are at least 21 years of age.
• Where ko155 has reason to believe that a player may be under 21, the Account will be suspended immediately pending verification, and all activity during the period of uncertainty may be voided.
• If ko155 discovers that personal data has been collected from a person under 21, that data will be deleted as promptly as practicable, subject only to any legal obligations that require temporary retention for fraud investigation purposes.
• If you are a parent or guardian and believe that a minor has registered on ko155, please contact us immediately at [email protected]. We will take immediate action.

ko155 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the features and services we offer. The most current version will always be published at ko155.club/privacy-policy, with the "Last Updated" date revised accordingly at the top of the document.

• Where changes are material — meaning they significantly alter your rights or the way your data is used — ko155 will notify you via email or an in-platform notification at least seven (7) days before the changes take effect.
• Minor updates (such as clarifications that do not change the substance of the policy) may be published without prior notice, though the "Last Updated" date will always reflect the latest revision.
• Continued use of the ko155 Platform after any policy update constitutes your acknowledgement of the revised Privacy Policy. If you do not agree to the updated terms, you should cease using the Platform and may request Account closure by contacting support.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ko155 handles your personal data, please reach out through any of the following channels. All privacy-related enquiries are handled with strict confidentiality.

If you are not satisfied with ko155's response to your privacy concern, you have the right to escalate the matter to the relevant supervisory authority in your jurisdiction. ko155 will cooperate fully with any legitimate regulatory investigation and will not penalise any player for exercising their data protection rights.

Our Privacy Commitments at a Glance

The following six principles summarise ko155's core approach to data privacy. They are not aspirational statements — they are operational standards embedded in our platform design, staff training, and third-party contracts.