Privacy Policy

1. Introduction and Commitment to Privacy

km79 ("we", "us", "our", "the Platform") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, store, share, and protect personal data you provide when registering an account, using our gaming services, or interacting with our website at km79.cam and associated mobile applications.

By accessing or using km79 services, you acknowledge that you have read, understood, and agree to the data practices described in this Privacy Policy. If you do not agree with our privacy practices, you must immediately cease using the Platform and refrain from providing any personal information.

km79 complies with international data protection standards and implements industry-leading security measures including 256-bit SSL encryption, secure server infrastructure, restricted data access protocols, and regular third-party security audits. We recognize that your trust is earned through consistent, transparent data handling practices, and we take that responsibility seriously.

2. Data Controller Information

km79 acts as the data controller for all personal information collected through the Platform. As data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring compliance with applicable data protection regulations.

For data protection inquiries, requests to exercise your privacy rights, or concerns about how your personal information is handled, please contact our Data Protection Officer at [email protected]. We will respond to all privacy-related inquiries within 7 business days and address data subject requests within 30 days as required by international data protection standards.

3. Information We Collect

3.1 Information You Provide Directly

When you register an account, complete identity verification (KYC), or use km79 services, we collect the following categories of personal information directly from you:

• Account Registration Data: Full legal name, date of birth, email address, phone number, residential address, username, password (stored in encrypted hash format), and security questions/answers.
• Identity Verification Documents (KYC): Government-issued photo identification (Indonesian National ID Card / KTP, Passport), proof of address (utility bill, bank statement, government correspondence), selfie photograph holding ID card, and any additional documentation requested for enhanced due diligence.
• Payment Information: Bank account details (account number, account holder name, bank name), e-wallet account information (OVO, DANA, GoPay, ShopeePay account identifiers), transaction history, deposit and withdrawal records, and payment method ownership verification documents.
• Communication Records: Live chat transcripts, email correspondence with customer support, phone call recordings (if applicable), feedback submissions, and complaint records.
• Responsible Gaming Data: Self-exclusion requests, deposit limit settings, loss limit settings, session time limit preferences, reality-check configurations, and self-assessment quiz responses.

3.2 Information Collected Automatically

When you access or use km79 services, we automatically collect certain technical and behavioral information through cookies, log files, and similar tracking technologies:

• Device Information: Device type (desktop, mobile, tablet), operating system and version, browser type and version, screen resolution, device identifiers (device ID, advertising ID), and hardware specifications.
• Usage Data: IP address (stored in anonymized format after 90 days), geolocation data (country, region, city level), pages visited, features used, buttons clicked, time spent on pages, navigation paths, referral sources, and session duration.
• Gaming Activity: Games played, bet amounts, win/loss records, bonus claim history, wagering progress toward bonus requirements, VIP tier progression, tournament participation, and gameplay patterns.
• Cookies and Tracking Technologies: Session cookies (expire when browser closes), persistent cookies (remain for set duration), authentication tokens, preference settings, and analytics identifiers. See Section 11 for detailed cookie information.

3.3 Information from Third Parties

We may receive limited personal information from trusted third-party service providers who assist us in delivering km79 services:

• Payment Processors: Transaction confirmation data, payment method verification results, fraud risk scores, and chargeback/dispute information from banks, e-wallet providers, and payment gateway partners.
• KYC Verification Partners: Identity verification results, document authenticity checks, age verification confirmation, and risk assessment scores from specialized identity verification services.
• Game Providers: Gameplay data, RNG results, game session information, and technical performance metrics from game studios (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, etc.).
• Anti-Fraud Services: Device fingerprints, IP reputation scores, multi-account detection results, and behavioral fraud risk indicators from specialized fraud prevention partners.

4. How We Use Your Information

km79 uses collected personal information for the following legitimate business purposes. We process personal data only to the extent necessary to achieve these purposes and maintain appropriate safeguards to protect your privacy:

4.1 Account Management and Service Delivery

• Create, maintain, and authenticate your km79 account and provide secure login access.
• Process deposits, withdrawals, and internal fund transfers between gaming wallets.
• Display your account balance, transaction history, and gameplay activity in your account dashboard.
• Calculate and award VIP tier benefits including cashback, faster withdrawals, and exclusive promotions.
• Enforce deposit limits, loss limits, session time limits, and other responsible gaming controls you have configured.
• Provide customer support via live chat, email, or phone and resolve account-related issues.

4.2 Legal Compliance and Security

• Verify your identity, age (21+ requirement), and residency to comply with international gaming regulations and prevent underage gambling.
• Conduct Know Your Customer (KYC) and Anti-Money Laundering (AML) checks as required by law and our operating licenses.
• Detect, prevent, and investigate fraudulent activity, bonus abuse, multi-accounting, collusion, and other prohibited behaviors.
• Monitor gameplay patterns and betting behavior to identify problem gambling warning signs and provide proactive responsible gaming interventions.
• Respond to legal requests, court orders, subpoenas, and government inquiries from law enforcement or regulatory authorities.
• Enforce our Terms & Conditions and protect km79's legal rights and interests.

4.3 Platform Improvement and Personalization

• Analyze usage patterns and gameplay data to improve game selection, user interface design, and overall Platform performance.
• Personalize game recommendations, bonus offers, and promotional content based on your preferences and activity history.
• Conduct A/B testing to optimize features, layouts, and user experience elements.
• Gather feedback through surveys and use responses to enhance service quality.

4.4 Marketing and Promotions (with Consent)

• Send promotional emails about new games, bonus offers, tournament announcements, and VIP program benefits (only if you opt-in to marketing communications).
• Deliver targeted advertisements on third-party platforms (only if you consent to interest-based advertising).
• Notify you of changes to terms, policies, or services that materially affect your rights or obligations.

You may opt-out of marketing communications at any time by clicking the unsubscribe link in emails, adjusting preferences in your account settings, or contacting [email protected]. Opt-out does not apply to transactional emails (account confirmations, withdrawal notifications, security alerts) required for service delivery.

5. Legal Basis for Processing (GDPR and International Standards)

km79 processes personal data under the following legal bases as recognized by international data protection frameworks including GDPR (General Data Protection Regulation) and similar privacy laws:

• Contractual Necessity: Processing required to fulfill our Terms & Conditions and deliver gaming services you requested (account creation, payment processing, game access, customer support).
• Legal Obligation: Processing required to comply with laws, regulations, court orders, or directives from regulatory authorities (KYC verification, AML checks, tax reporting, legal disclosures).
• Legitimate Interests: Processing necessary for our legitimate business interests that are not overridden by your privacy rights (fraud prevention, security monitoring, service improvement, internal analytics).
• Consent: Processing based on your explicit opt-in consent (marketing emails, interest-based advertising, non-essential cookies). Consent can be withdrawn at any time without affecting data processing based on other legal grounds.

6. How We Share Your Information

km79 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. We share personal data only in the following limited circumstances and implement contractual safeguards to ensure third parties protect your information:

6.1 Service Providers and Business Partners

We share personal information with trusted third-party service providers who perform functions on our behalf under strict confidentiality obligations:

• Payment Processors: BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and payment gateway providers who process deposits and withdrawals.
• Identity Verification Services: KYC partners who verify identity documents, confirm age, and assess fraud risk.
• Game Providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Playtech, Ezugi, Spribe, and other licensed game studios who deliver gaming content and track gameplay sessions.
• Cloud Infrastructure Providers: Secure server hosting and data storage partners who maintain the technical infrastructure supporting km79.
• Analytics and Fraud Prevention: Third-party tools that analyze usage patterns, detect fraudulent activity, and enhance security.
• Customer Service Platforms: Live chat software, email management systems, and helpdesk tools used to deliver customer support.

All service providers are contractually required to process personal data only according to our instructions, maintain appropriate security measures, and use data solely for providing services to km79. Service providers may not use your personal information for their own purposes.

6.2 Legal and Regulatory Disclosures

We may disclose personal information when required by law or when we believe disclosure is necessary to:

• Comply with legal processes including court orders, subpoenas, warrants, or government investigations.
• Respond to requests from law enforcement agencies or regulatory authorities investigating illegal activity.
• Enforce our Terms & Conditions and protect km79's legal rights, property, or safety.
• Prevent fraud, security breaches, or illegal activity that poses a threat to users or the public.
• Fulfill tax reporting obligations or provide information to financial regulators as required by anti-money laundering laws.

6.3 Business Transfers

In the event km79 is involved in a merger, acquisition, asset sale, bankruptcy, or similar business transaction, personal information may be transferred to the acquiring entity. You will be notified via email and/or prominent notice on the Platform if your personal information becomes subject to a different privacy policy as a result of such transaction.

7. Data Security Measures

km79 implements comprehensive technical, administrative, and physical security measures to protect personal information from unauthorized access, disclosure, alteration, or destruction:

7.1 Technical Safeguards

• Encryption: 256-bit SSL/TLS encryption for all data transmitted between your device and km79 servers. Sensitive data stored in databases is encrypted at rest using AES-256 encryption.
• Secure Authentication: Passwords stored using bcrypt hashing with salt. Optional two-factor authentication (2FA) available for enhanced account security.
• Firewall Protection: Network-level firewalls and intrusion detection systems monitor and block suspicious traffic.
• Regular Security Audits: Annual third-party penetration testing and vulnerability assessments to identify and remediate security weaknesses.
• DDoS Protection: Distributed denial-of-service mitigation to maintain Platform availability during attacks.

7.2 Administrative Safeguards

• Access Controls: Personal data accessible only to authorized employees who require access to perform job functions. Role-based access permissions limit data exposure.
• Employee Training: Regular privacy and security training for all staff handling personal data.
• Confidentiality Agreements: All employees and contractors sign confidentiality agreements prohibiting unauthorized disclosure of personal information.
• Incident Response: Documented data breach response procedures to quickly contain, assess, and remediate security incidents.

7.3 Physical Safeguards

• Servers hosted in secure, access-controlled data centers with 24/7 monitoring, biometric authentication, and environmental controls (fire suppression, climate control, backup power).
• Restricted physical access to facilities storing personal data with visitor logs and escort requirements.

Despite these measures, no method of internet transmission or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and should notify us immediately at [email protected] if you suspect unauthorized access to your account.

8. Data Retention

km79 retains personal information only as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods vary by data type:

When personal data is no longer needed for its original purpose and legal retention periods have expired, we securely delete or anonymize the information using industry-standard data destruction methods (cryptographic erasure, physical destruction of storage media). Anonymized data that cannot be linked back to an individual may be retained indefinitely for statistical analysis and service improvement.

9. Your Privacy Rights

You have the following rights regarding your personal information. To exercise these rights, contact our Data Protection Officer at [email protected] with your request. We will respond within 30 days and verify your identity before fulfilling requests.

9.1 Right of Access

You have the right to request a copy of all personal information km79 holds about you. We will provide the information in a structured, commonly used, machine-readable format (typically JSON or CSV). Access requests are free for the first request per year; subsequent requests may incur a reasonable administrative fee.

9.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal information. You can update most account information directly in your account settings. For information you cannot update yourself (e.g., verified KYC data), contact customer support with documentation supporting the correction.

9.3 Right to Erasure ("Right to be Forgotten")

You have the right to request deletion of your personal information in certain circumstances: (a) data no longer necessary for the purposes collected; (b) you withdraw consent and no other legal basis exists; (c) you object to processing and no overriding legitimate interests exist; (d) data processed unlawfully. Note: Deletion requests may be limited by legal retention requirements (e.g., financial records must be kept for 7 years). We will anonymize data that cannot be deleted due to legal obligations.

9.4 Right to Restriction of Processing

You have the right to request temporary suspension of data processing in certain cases: (a) you contest data accuracy while we verify; (b) processing is unlawful but you prefer restriction over deletion; (c) we no longer need the data but you need it for legal claims; (d) you object to processing while we verify overriding legitimate interests.

9.5 Right to Data Portability

You have the right to receive personal information you provided to km79 in a portable format and request transmission to another service provider where technically feasible. This applies to data processed based on consent or contract performance.

9.6 Right to Object

You have the right to object to processing based on legitimate interests (including profiling for fraud detection or personalized marketing). We will cease processing unless we demonstrate compelling legitimate grounds that override your interests, or processing is necessary for legal claims. You can object to marketing at any time by using unsubscribe links or contacting us.

9.7 Right to Withdraw Consent

Where processing is based on consent (marketing emails, non-essential cookies), you have the right to withdraw consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal and does not impact processing based on other legal grounds.

9.8 Right to Lodge a Complaint

If you believe km79 has violated your privacy rights or mishandled your personal information, you have the right to lodge a complaint with your local data protection authority or supervisory body responsible for enforcing data protection laws in your jurisdiction.

10. International Data Transfers

km79 operates internationally and may transfer personal information to servers located outside Indonesia or to third-party service providers in other countries. These transfers are necessary to deliver gaming services, process payments, and provide customer support.

When transferring personal data internationally, km79 implements appropriate safeguards to ensure your information receives adequate protection equivalent to the standards required in Indonesia and international frameworks like GDPR. Safeguards include: (a) Standard Contractual Clauses (SCCs) approved by regulatory authorities; (b) adequacy decisions confirming recipient countries provide sufficient data protection; (c) binding corporate rules for transfers within the km79 corporate group; (d) contractual obligations requiring third parties to implement equivalent security measures.

By using km79 services, you consent to international transfers of your personal information as described in this Privacy Policy. If you have concerns about international transfers, contact our Data Protection Officer at [email protected].

11. Cookies and Tracking Technologies

km79 uses cookies, web beacons, local storage, and similar technologies to enhance user experience, analyze usage patterns, and deliver personalized content. Cookies are small text files stored on your device that allow us to recognize your browser and remember preferences.

11.1 Types of Cookies We Use

• Essential Cookies: Required for basic Platform functionality including authentication, security, session management, and load balancing. These cookies cannot be disabled as they are necessary for service delivery.
• Performance Cookies: Collect anonymous usage data to analyze how visitors interact with the Platform (pages visited, time on site, navigation paths). Used to improve performance and user experience. Example: Google Analytics (anonymized IP).
• Functional Cookies: Remember your preferences (language, currency, display settings) to provide enhanced personalized features.
• Marketing Cookies: Track your activity across websites to deliver targeted advertisements. Only used with your explicit consent. You can opt-out via cookie preferences in your account settings.

11.2 Managing Cookie Preferences

You can manage cookie preferences through your account settings or browser controls. Most browsers allow you to block or delete cookies. Note: Disabling essential cookies will prevent you from accessing certain Platform features or may cause functionality issues. To opt-out of interest-based advertising, visit industry opt-out tools like the Network Advertising Initiative (NAI) or Digital Advertising Alliance (DAA).

12. Children's Privacy

km79 services are strictly for adults aged 21 years or older. We do not knowingly collect personal information from individuals under 21. If we discover that we have inadvertently collected data from a minor, we will immediately delete the information and terminate the associated account. All funds in accounts found to belong to minors will be forfeited.

Parents and guardians should monitor device usage and enable parental controls to prevent underage access to online gambling platforms. If you believe km79 has collected information from a minor, please contact us immediately at [email protected].

13. Changes to This Privacy Policy

km79 reserves the right to modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will notify you by: (a) updating the "Last Updated" date at the top of this document; (b) sending email notification to the address associated with your account (for significant changes affecting your rights); (c) displaying a prominent notice on the Platform homepage.

Your continued use of km79 services after Privacy Policy changes constitutes acceptance of the revised policy. If you do not agree with changes, you must stop using the Platform and may request account deletion. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

14. Third-Party Websites and Services

km79 may contain links to third-party websites, game providers, or payment processors. This Privacy Policy applies only to information collected by km79. We are not responsible for the privacy practices or content of third-party sites. Third-party sites have their own privacy policies governing data collection and use. We encourage you to read the privacy policies of any third-party services you access through km79.

Game providers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, etc.) may collect gameplay data directly for their own purposes (game optimization, RNG certification, dispute resolution). Review individual game provider privacy policies for details on their data practices.