Privacy Policy

1. Introduction

koin90 is committed to protecting the privacy and security of your personal information. As an online betting platform serving Indonesian players, we recognize the importance of handling your data responsibly and in compliance with international data protection standards.

This Privacy Policy applies to all personal data collected through the koin90 website, mobile applications, and any other services we offer. This policy should be read in conjunction with our Terms & Conditions and Responsible Gaming policies, which collectively govern your use of koin90 services.

We collect only the personal information necessary to provide our services, verify your identity, comply with legal and regulatory obligations (including anti-money laundering and Know Your Customer requirements), process transactions, and improve your user experience on koin90.

2. Data We Collect

koin90 collects various types of personal data to operate our platform, provide betting services, and fulfill legal obligations. The categories of data we collect include:

2.1 Account Registration Data

When you create an account on koin90, we collect:

• Personal Identification Information: Full legal name (as it appears on your KTP / Indonesian National Identity Card), date of birth, gender, nationality
• Contact Information: Email address, mobile phone number, residential address (street, city, province, postal code)
• Account Credentials: Username, password (stored in encrypted form)

2.2 Identity Verification (KYC) Data

To comply with international anti-money laundering (AML) regulations and verify your identity before processing withdrawals, we collect:

• Government-Issued ID: Copy of your KTP (Indonesian National Identity Card) showing photograph, full name, date of birth, NIK (national identification number), and address
• Proof of Address: Recent utility bill, bank statement, or government correspondence (within the last 3 months) confirming your residential address
• Selfie Verification: Photograph of you holding your KTP next to your face for biometric comparison

All KYC documents are reviewed manually by our verification team and stored securely. We do not share KYC documents with third parties except as required by law or regulatory authorities.

2.3 Financial & Transaction Data

To process deposits, withdrawals, and betting transactions, we collect:

• Payment Method Information: Bank account details (bank name, account number, account holder name) for BCA, BRI, BNI, Mandiri transfers; e-wallet account details (OVO, DANA, GoPay phone number and account ID)
• Transaction History: Records of all deposits, withdrawals, bets placed, winnings, bonuses claimed, and account balance changes
• Payment Processing Data: Transaction timestamps, amounts, currencies (IDR), payment method used, transaction status (pending, completed, failed)

We do not store full bank account numbers or e-wallet passwords. Payment processing is handled securely through our payment gateway partners, and sensitive financial data is encrypted.

2.4 Betting & Gaming Data

To operate our betting services and ensure fair play, we collect:

• Betting Activity: Sports bets placed (football, basketball, tennis, esports), casino games played (slots, Baccarat, Blackjack, Roulette), togel lottery numbers selected, bet amounts, odds selected, bet outcomes (win, lose, push)
• Gaming Preferences: Favorite games, preferred betting markets, bet size patterns, session duration, play frequency
• Promotional Engagement: Bonuses claimed, wagering progress toward bonus requirements, promotional offers clicked or redeemed

2.5 Technical & Device Data

When you access koin90, we automatically collect technical data including:

• Device Information: Device type (desktop, mobile, tablet), operating system (Windows, Android, iOS), browser type and version, screen resolution
• Network Information: IP address, internet service provider (ISP), geographic location (city and province level, based on IP address), time zone (WIB, WITA, WIT)
• Usage Data: Pages visited, features used, buttons clicked, search queries, time spent on site, referring URLs, navigation paths
• Log Data: Server logs recording access times, error messages, API requests, system events

2.6 Communication Data

When you contact koin90 customer support via live chat, email, or WhatsApp, we collect:

• Contents of your messages, questions, complaints, and support requests
• Support ticket records, resolution notes, satisfaction ratings
• Audio recordings of phone calls (if applicable) with prior notice and consent

3. How We Use Your Data

koin90 uses your personal data for the following purposes:

3.1 Service Provision

• Create and manage your koin90 account
• Process deposits and withdrawals via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay
• Accept and settle sports bets, casino wagers, and togel lottery entries
• Calculate winnings and update account balances
• Provide customer support and respond to inquiries
• Send account notifications, transaction confirmations, and service updates

3.2 Identity Verification & Security

• Verify your identity through KYC procedures to comply with international AML regulations
• Confirm you are at least 21 years of age (Indonesia's legal gambling age)
• Detect and prevent fraud, money laundering, bonus abuse, multi-accounting, and other prohibited activities
• Monitor betting patterns for signs of match-fixing, collusion, or arbitrage
• Protect account security through two-factor authentication and login monitoring

3.3 Legal & Regulatory Compliance

• Comply with international gaming licensing requirements and regulations
• Respond to requests from regulatory authorities, law enforcement, or courts
• Maintain records of transactions and betting activity as required by law
• Report suspicious transactions to relevant financial intelligence units

3.4 Marketing & Promotions

• Send promotional emails about bonuses, free spins, cashback offers, and special events (with your consent)
• Display personalized promotions based on your betting preferences and activity
• Notify you of new games, features, and platform updates

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in emails or adjusting your account notification settings. Opting out does not affect essential service communications (transaction confirmations, security alerts, policy updates).

3.5 Platform Improvement & Analytics

• Analyze user behavior to improve website navigation, game selection, and features
• Conduct A/B testing to optimize user experience
• Monitor platform performance, identify technical issues, and fix bugs
• Generate aggregated, anonymized statistics about platform usage and betting trends

4. Data Sharing & Disclosure

koin90 does not sell, rent, or trade your personal information to third parties for marketing purposes. However, we may share your data in the following limited circumstances:

4.1 Service Providers

We share data with trusted third-party service providers who assist in operating koin90, including:

• Payment Processors: Banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay) process deposits and withdrawals. They receive only the information necessary to complete transactions.
• Game Providers: Third-party casino game suppliers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt) receive anonymized player IDs and bet data to operate live casino games and slots.
• KYC Verification Services: Identity verification partners assist in validating government-issued IDs and detecting fraudulent documents.
• Cloud Hosting Providers: Secure servers storing account data, transaction records, and KYC documents.
• Customer Support Tools: Live chat platforms, ticketing systems, and CRM software used by our support team.

All service providers are contractually bound to maintain data confidentiality and use your information only for the specific services they provide to koin90.

4.2 Legal & Regulatory Authorities

We may disclose your personal data when required by law, court order, subpoena, or regulatory request from:

• International gaming regulators and licensing authorities
• Financial intelligence units investigating money laundering or terrorism financing
• Law enforcement agencies investigating fraud, cybercrime, or other illegal activities
• Tax authorities (if applicable to your jurisdiction)

4.3 Business Transfers

In the event koin90 undergoes a merger, acquisition, sale of assets, or bankruptcy, your personal data may be transferred to the acquiring entity as part of the business assets. We will notify you via email and/or a prominent notice on the koin90 website before your data is transferred and becomes subject to a different privacy policy.

4.4 Consent-Based Sharing

We may share your data with other parties if you provide explicit consent, such as participating in a co-branded promotion with a third-party sponsor or integrating a third-party service with your koin90 account.

5. Data Security Measures

koin90 employs industry-standard security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction:

5.1 Encryption

• SSL/TLS Encryption: All data transmitted between your device and koin90 servers is encrypted using 256-bit SSL (Secure Socket Layer) technology, the same encryption standard used by banks.
• Data-at-Rest Encryption: Personal data stored on our servers is encrypted using AES-256 (Advanced Encryption Standard) to prevent unauthorized access in the event of a server breach.
• Password Hashing: Account passwords are hashed using bcrypt and never stored in plain text. koin90 staff cannot view your password.

5.2 Access Controls

• Access to personal data is restricted to authorized koin90 employees and service providers who require it to perform their duties.
• Multi-factor authentication and role-based access controls limit internal access to sensitive data.
• All access to personal data is logged and monitored for suspicious activity.

5.3 Security Audits & Compliance

• Regular security audits and penetration testing to identify and fix vulnerabilities
• PCI DSS (Payment Card Industry Data Security Standard) compliance for payment processing
• Incident response plans to quickly address data breaches or security threats

5.4 User Security Best Practices

We recommend you take the following steps to protect your account:

• Use a strong, unique password for your koin90 account (minimum 8 characters with letters, numbers, and symbols)
• Enable two-factor authentication (2FA) for an additional security layer
• Never share your login credentials with anyone, including koin90 staff (we will never ask for your password)
• Log out of your account when using shared or public computers
• Monitor your account activity regularly and report suspicious transactions immediately

6. Cookies & Tracking Technologies

koin90 uses cookies and similar tracking technologies to enhance your browsing experience, analyze site usage, and deliver personalized content.

6.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They allow the website to remember your preferences, login status, and browsing activity.

6.2 Types of Cookies We Use

• Essential Cookies: Required for the website to function properly. These cookies enable account login, secure connections (SSL), and session management. You cannot opt out of essential cookies.
• Performance Cookies: Collect anonymized data about how you use koin90, such as pages visited, time spent on site, and error messages encountered. This helps us improve website performance.
• Functionality Cookies: Remember your preferences (language, currency display, favorite games) to provide a personalized experience.
• Marketing Cookies: Track your activity across koin90 to display personalized promotions and measure the effectiveness of marketing campaigns.

6.3 Third-Party Cookies

Some cookies are placed by third-party services integrated with koin90, such as:

• Google Analytics for website traffic analysis
• Live chat widgets for customer support
• Game provider platforms for casino and slot games

6.4 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. However, disabling essential cookies may prevent you from using certain features of koin90, such as logging into your account or placing bets.

7. Your Privacy Rights

Under international data protection principles, you have the following rights regarding your personal data:

7.1 Right to Access

You have the right to request a copy of the personal data koin90 holds about you. To request your data, contact our support team at [email protected]. We will provide your data in a commonly used electronic format within 30 days.

7.2 Right to Rectification

If any personal information we hold is inaccurate or incomplete, you have the right to request corrections. You can update most account information directly in your koin90 account settings or by contacting support.

7.3 Right to Deletion

You may request deletion of your personal data under certain circumstances, such as:

• Your data is no longer necessary for the purposes it was collected
• You withdraw consent for data processing (where consent was the legal basis)
• You object to data processing and there are no overriding legitimate grounds for continued processing

Note that we may be legally required to retain certain data (transaction records, KYC documents) for a specified period to comply with AML regulations and licensing requirements. We will notify you if we cannot fulfill a deletion request due to legal obligations.

7.4 Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format and transmit it to another service provider. Contact support to request a data export.

7.5 Right to Object

You may object to the processing of your personal data for direct marketing purposes at any time. To opt out of marketing emails, click the "unsubscribe" link in any promotional email or adjust your notification preferences in your account settings.

7.6 Right to Withdraw Consent

Where data processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted before withdrawal.

8. Data Retention

koin90 retains your personal data only as long as necessary to fulfill the purposes described in this Privacy Policy and comply with legal obligations:

• Active Accounts: Personal data is retained for the duration your account remains active and operational.
• Closed Accounts: After you close your account, we retain transaction records, KYC documents, and betting history for 7 years to comply with AML regulations and licensing requirements.
• Marketing Data: If you unsubscribe from marketing communications, your contact details are retained on a suppression list to ensure we do not send future marketing emails.
• Legal Hold: If your data is subject to a legal dispute, regulatory investigation, or court order, we will retain it until the matter is resolved.

After the retention period expires, we securely delete or anonymize your personal data in accordance with data protection best practices.

9. Third-Party Services & Links

koin90 may contain links to third-party websites (payment processors, game providers, social media platforms) that are not operated by us. This Privacy Policy does not apply to third-party websites. We are not responsible for the privacy practices or content of external sites. We encourage you to review the privacy policies of any third-party services you visit.

10. Changes to This Privacy Policy

koin90 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will notify you by:

• Posting the updated Privacy Policy on the koin90 website with a new "Effective Date"
• Sending an email notification to your registered email address
• Displaying a prominent notice on the koin90 homepage

Continued use of koin90 services after the updated Privacy Policy becomes effective constitutes your acceptance of the revised terms. We recommend reviewing this Privacy Policy periodically to stay informed about how we protect your data.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how koin90 handles your personal data, please contact us:

• Email: [email protected] (for general privacy inquiries)
• Data Protection Officer: [email protected] (for formal data rights requests, complaints, or data breaches)
• Live Chat: Available 24/7 via the koin90 website
• WhatsApp: +62 812-3456-7890

Our Indonesian-speaking support team is available 24/7 to assist with privacy-related questions and data rights requests. We aim to respond to all inquiries within 48 hours.