Privacy Policy — ko1234 Data Protection

This Privacy Policy ("Policy") describes how ko1234 ("we", "us", "our", or "the Company") collects, processes, stores, and protects personal data submitted by or generated through the use of the ko1234 platform, accessible at https://ko1234.net (the "Platform").

This Policy applies to all registered players, prospective players who browse the Platform without registering, and any individual who contacts our support team. By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

ko1234 is operated as an international online gaming platform serving players primarily based in Indonesia. Our platform supports transactions denominated in Indonesian Rupiah (IDR) and integrates with local Indonesian payment channels including BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja. The processing of transactions through these channels necessarily involves the exchange of certain personal and financial data with those payment providers, as described in Section 5 of this Policy.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which contain additional provisions relevant to account holders.

We collect personal data through multiple touchpoints: directly from you when you register an account or interact with the Platform, automatically through your use of the Platform, and from regulated third-party verification providers where required for KYC (Know Your Customer) compliance.

We do not knowingly collect sensitive personal data beyond what is required for identity and age verification (such as the date of birth and ID document data listed above). We do not collect biometric data other than as strictly necessary for liveness checks conducted by our KYC provider.

ko1234 processes personal data only for defined, legitimate purposes. We do not use your data for purposes incompatible with those stated at the time of collection. The primary purposes for which we process your data are as follows:

• Account Management: Creating and maintaining your player account, authenticating your identity at login, and managing your account settings, preferences, and responsible gaming configurations.
• Transaction Processing: Processing deposits from and withdrawals to your registered Indonesian bank accounts and e-wallets, reconciling account balances, and maintaining an auditable transaction history.
• KYC & Regulatory Compliance: Verifying your identity and age (21+ requirement) prior to approving withdrawal requests and at any point where the Company deems verification necessary under its international operating licence obligations.
• Fraud Prevention & Security: Detecting and investigating suspicious activity, multi-accounting, bonus abuse, money laundering, and other forms of platform fraud. Technical data including IP addresses and device fingerprints are used for this purpose.
• Customer Support: Responding to your enquiries, resolving disputes, and maintaining records of support interactions for quality assurance and audit purposes.
• Platform Analytics & Improvement: Analysing aggregated, anonymised usage patterns to improve platform performance, game selection, and user experience. Individual player data is not used for this purpose beyond what is necessary for session-level technical diagnostics.
• Responsible Gaming Monitoring: Monitoring account activity against voluntary limits and self-exclusion orders set by the player, and identifying patterns that may indicate problem gambling behaviours requiring intervention.
• Legal Obligations: Retaining records as required by applicable law and responding to legitimate requests from regulatory or law enforcement authorities where we are legally obliged to do so.

Every data processing activity at ko1234 rests on one of the following legal bases. We are transparent about which basis applies to each category of processing:

Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. To withdraw consent, update your notification preferences in your account settings or contact the support team.

5.1 Categories of Recipients. ko1234 does not sell or rent your personal data to any third party. We share personal data only with the following categories of recipients, and only to the extent necessary for the stated purpose:

• Payment Processors: Indonesian local bank transfer processors and e-wallet gateways (including those facilitating transactions via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja) receive the financial and identity data necessary to execute and verify transactions.
• KYC & Identity Verification Providers: Regulated third-party KYC service providers receive identity documents and liveness check data solely for the purpose of verifying player identity and age in compliance with the Company's licence obligations.
• Fraud Detection Services: Specialised security and fraud detection platforms receive technical data (IP addresses, device identifiers, session metadata) to identify and prevent fraudulent activity. These providers are contractually bound to use the data only for fraud prevention.
• Game Content Providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive session-level data (player identifier, stake amounts, game results) through their game APIs for the purpose of game operation and fairness certification. They do not receive your full identity or financial data.
• Legal & Regulatory Authorities: Where required by applicable law or by a valid order from a competent regulatory, judicial, or law enforcement authority, the Company may disclose personal data. We will notify you of any such disclosure where we are legally permitted to do so.

5.2 International Transfers. Some of the third parties listed above operate outside Indonesia. Where personal data is transferred internationally, the Company applies contractual safeguards (including data processing agreements with appropriate transfer mechanisms) to ensure your data receives an equivalent level of protection to that which it would receive within Indonesia.

5.3 No Onward Sale. No recipient of your personal data is permitted to use it for their own commercial purposes or to share it with further parties beyond what is necessary to fulfil the stated service. All third-party data processors are bound by contractual data processing agreements.

6.1 Retention Periods. ko1234 retains personal data for as long as necessary to fulfil the purposes set out in this Policy, including meeting legal and regulatory obligations. The following retention periods apply as a general guide:

6.2 Post-Retention Deletion. Once data is no longer required for any of the purposes or obligations listed above, it is securely deleted or irreversibly anonymised. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes, as it no longer identifies any individual.

6.3 Self-Excluded Players. Where a player has activated the self-exclusion tool, their account data is retained for the minimum legally required period and flagged to prevent re-registration during the exclusion period. This is a player protection measure, not a punitive data retention practice.

7.1 What Cookies We Use. ko1234 uses the following categories of cookies and similar tracking technologies on the Platform:

7.2 No Advertising Cookies. ko1234 does not deploy third-party advertising networks, retargeting pixels, social media tracking tags, or any other form of advertising cookie on the Platform. Your browsing activity on ko1234 is not shared with advertising platforms.

7.3 Managing Cookies. You can configure your browser to block or delete cookies. Please note that disabling strictly necessary cookies will impair the functionality of the Platform, including the ability to log in and maintain a session. Instructions for managing cookies in common browsers are available from the browser manufacturer's support documentation.

As a player on the ko1234 Platform, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact our support team via Live Chat or at [email protected]. We will respond within 30 calendar days of receiving a verifiable request.

9.1 Technical Safeguards. ko1234 implements a layered set of technical and organisational security measures to protect personal and financial data against unauthorised access, disclosure, alteration, or destruction. Key measures include:

• 256-bit SSL/TLS encryption for all data in transit between player devices and our servers;
• Encryption at rest for sensitive data fields including identity documents, payment details, and authentication credentials;
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required by their specific role;
• Multi-factor authentication for all internal administrative systems;
• Regular penetration testing and vulnerability assessments conducted by independent security specialists;
• Automated intrusion detection and real-time alerting systems monitoring for anomalous access patterns;
• Secure, geographically redundant data centre infrastructure with physical access controls.

9.2 Your Responsibilities. The security of your account also depends on steps you take. You are responsible for keeping your login credentials confidential, not sharing your password with anyone, and logging out of your account when using a shared device. If you suspect unauthorised access to your account, notify us immediately via Live Chat or at [email protected].

9.3 Data Breach Response. In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, ko1234 will notify affected individuals promptly via their registered email address, providing details of the nature of the breach, the likely consequences, and the steps taken to address it.

10.1 Strict Age Policy. ko1234 operates a strict 21+ age policy across all real-money gaming activities. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the KYC process, and any account found to be held by a person under 21 will be immediately closed.

10.2 Data Collected from Under-21s. If we discover that personal data has been collected from a person who is under 21 years of age, that data will be deleted from our systems as promptly as technically possible, subject only to any retention required by law in relation to the investigation of the underage access incident itself.

10.3 Parental Awareness. If you are a parent or guardian and believe that your child may have provided personal data to ko1234 or accessed our Platform, please contact us immediately at [email protected]. We will prioritise investigation and remediation of any reported underage access case.

10.4 Device Sharing. If you share a device with a minor, we strongly recommend enabling device-level parental controls and ensuring that your ko1234 account credentials are not accessible to the minor. Log out of your account after each session and do not save your password in a shared browser profile.

11.1 Right to Amend. ko1234 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or operational requirements. We will post the revised Policy on this page with an updated "Last Updated" date at the top of the document.

11.2 Material Changes. Where a proposed change is material — meaning it could reasonably affect your rights or how we use your data — we will provide at least fourteen (14) days' advance notice by displaying a notice on the Platform and, where practicable, sending a notification to your registered email address.

11.3 Continued Use as Acceptance. Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the updated Policy. If you do not accept the changes, you must cease using the Platform and may request account closure in accordance with the Terms & Conditions.

11.4 Version History. The current version of this Policy is identified by the "Last Updated" date shown at the top of this page. Previous versions are available on request from the support team.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or need to report a privacy concern, please contact the ko1234 support team through any of the following channels:

• Live Chat: Available 24/7 directly on the Platform — average response time under 60 seconds.
• WhatsApp: +62 811 0000 1234 — average response time under 5 minutes.
• Email: [email protected] — average response time under 6 hours. For formal data subject access requests, please use email and include "Data Request" in the subject line along with your registered username.

Support is available 24 hours a day, 7 days a week, including all Indonesian public holidays. Our team includes Indonesian-speaking agents who can assist in both English and Bahasa Indonesia.

We will acknowledge all privacy-related enquiries within 2 business days and provide a full response within 30 calendar days. For complex requests, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it within the initial 30-day period.