km779 Privacy Policy

In this Privacy Policy, the following terms carry the meanings defined below unless the context requires otherwise.

km779 collects Personal Data through three primary channels: data you provide directly, data generated automatically by your use of the Platform, and data obtained from third-party sources where necessary and lawful.

2.1 Data You Provide Directly

When you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or participate in a promotional campaign, you provide us with data that may include:

• Identity data: Full legal name, date of birth, gender, nationality, and a copy of a government-issued photo ID (such as a KTP — Indonesian National Identity Card — or passport).
• Contact data: Email address, mobile phone number, and residential address in Indonesia.
• Financial data: Bank account details (bank name such as BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, or Bank Permata; account number; account holder name) and/or e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Communications data: The content of any messages, emails, or chat transcripts exchanged with our customer support team.

2.2 Data Generated Automatically

When you access or interact with the km779 Platform, our systems automatically record technical and behavioral data, including:

• Device and access data: IP address, browser type and version, operating system, device type, screen resolution, and language settings.
• Usage data: Pages visited, features accessed, time spent on each page, search queries within the Platform, links clicked, and navigation paths.
• Gaming activity data: Wagers placed (including on sports markets, live casino tables, and slot titles), stakes, outcomes, account balance movements, session durations, and in-game events.
• Cookie and tracking data: As described in Section 6 of this Policy.

2.3 Data from Third-Party Sources

We may receive additional Personal Data about you from the following third-party sources where this is necessary to fulfill our legal or operational obligations:

• Identity verification providers: Third-party KYC and document-verification services that help us confirm the authenticity of your submitted ID documents.
• Payment processors: Our bank transfer and e-wallet processing partners may share transaction confirmation data, including timestamps and reference numbers, to reconcile deposits and withdrawals.
• Fraud and risk intelligence providers: We may receive data signals from fraud-prevention networks to identify accounts associated with known patterns of fraudulent activity.

km779 uses the Personal Data we collect for clearly defined purposes only. We do not use your data for any purpose beyond those listed below without first obtaining your explicit consent or establishing a new lawful basis.

Every instance of Personal Data processing at km779 rests on one of the following lawful bases:

• Contractual necessity: Processing required to fulfill the agreement between you and km779 — including account registration, KYC, deposits, withdrawals, and gaming services — is carried out on the basis that it is necessary to perform the contract you have entered into with us.
• Legal obligation: Processing required to comply with applicable laws and regulations — including anti-money laundering (AML) obligations, identity verification mandates, and record-keeping requirements imposed by our licensing authority — is carried out on the basis of legal obligation.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and aggregated analytics is based on km779's legitimate business interests, provided those interests are not overridden by your rights and freedoms.
• Consent: Processing carried out for personalized promotional communications is based on your explicit opt-in consent. You may withdraw this consent at any time by updating your communication preferences in your account dashboard or by contacting customer support.

km779 does not sell your Personal Data. We share Personal Data with third parties only in the circumstances described below, and only to the minimum extent necessary for the stated purpose.

5.1 Service Providers and Data Processors

We engage trusted third-party service providers who process Personal Data on our behalf and under our written instructions. These include KYC and identity verification vendors, payment processing partners (handling bank transfers via BCA, BRI, BNI, Mandiri, and e-wallets), cloud hosting providers, customer support platform operators, and fraud-prevention services. All such providers are contractually bound to protect your data and may not use it for any purpose other than providing services to km779.

5.2 Game Content Providers

The live casino and slot game studios whose titles are available on the km779 Platform — including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Pocket Games Soft — may receive limited session and transaction data for the purposes of game round reconciliation, RTP auditing, and fraud detection within their gaming systems. These studios operate under their own certified data governance frameworks.

5.3 Legal and Regulatory Disclosure

We may disclose Personal Data to regulatory authorities, law enforcement agencies, or courts where we are legally compelled to do so by a valid legal process (such as a court order, regulatory directive, or statutory obligation), or where we believe in good faith that disclosure is necessary to prevent fraud, money laundering, or a serious threat to public safety.

5.4 Business Transfers

In the event that km779 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, Personal Data held by the Company may be transferred to the acquiring or successor entity as part of that transaction. We will notify affected users via email or an in-platform notification if such a transfer occurs and their data will be subject to a different privacy policy as a result.

The km779 Platform uses cookies and similar tracking technologies to enable essential functionality, improve user experience, and support our analytics and security operations. The following categories of cookies are used on the Platform:

You can manage optional cookie preferences through your browser settings. Note that disabling functional cookies may affect the usability of certain features. Disabling analytics cookies does not affect your ability to place bets, deposit, or withdraw. Strictly necessary and security cookies cannot be disabled without preventing core Platform functionality from operating correctly.

km779 retains Personal Data for no longer than is necessary to fulfill the purposes for which it was collected, subject to any longer retention period required by law or regulation. The following indicative retention periods apply:

• Account and identity data: Retained for the duration of the active account relationship, plus a minimum of five years following permanent account closure. This retention period reflects our AML and record-keeping obligations under the terms of our international gaming license.
• Transaction and financial records: Retained for a minimum of five years from the date of each transaction, in accordance with anti-money laundering standards and financial record-keeping requirements.
• KYC documents: Retained for the duration of the account relationship plus five years post-closure. Physical or digital copies of ID documents are stored in encrypted form in our secure document management system.
• Customer support communications: Retained for two years from the date of the most recent interaction in a support ticket or chat session.
• Responsible gaming records: Self-exclusion requests, deposit limit changes, and cooling-off period records are retained for a minimum of seven years to support ongoing responsible gaming obligations and to prevent the circumvention of self-exclusion arrangements.
• Analytics data: Aggregated and anonymized analytics data that cannot be used to identify individual users may be retained indefinitely for platform improvement purposes.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized in a manner that prevents recovery or re-identification.

km779 implements a comprehensive set of technical and organizational security measures designed to protect your Personal Data against unauthorized access, accidental loss, alteration, disclosure, or destruction. Key measures include:

• Encryption in transit: All data exchanged between your browser or app and km779 servers is encrypted using TLS 1.2 or higher with 256-bit AES encryption.
• Encryption at rest: Sensitive data fields — including ID document scans, bank account numbers, and e-wallet identifiers — are encrypted at rest in our database systems using AES-256.
• Access controls: Internal access to Personal Data is governed by role-based access controls. Staff are granted the minimum level of access required to perform their duties.
• Two-factor authentication: Privileged internal systems require multi-factor authentication for all staff logins. We also encourage users to enable any available two-factor authentication options on their km779 account.
• Penetration testing: km779 conducts regular third-party security audits and penetration tests to identify and remediate vulnerabilities in the Platform infrastructure.
• Incident response: We maintain a documented data breach incident response plan. In the event of a security incident that poses a material risk to your data, we will notify affected users within the timeframe required by our licensing obligations.

As a user of the km779 Platform, you have the following rights with respect to your Personal Data. To exercise any of these rights, please contact us using the details provided in Section 13 of this Policy.

• Right of Access: You may request a copy of the Personal Data that km779 holds about you, together with information about how it is being used and with whom it has been shared.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you may request that we correct or update it. We will action valid rectification requests within 15 business days (WIB).
• Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you believe the data has been processed unlawfully. This right is subject to our legal obligations — for example, we are required to retain certain financial and KYC records for a minimum period as described in Section 7.
• Right to Restriction of Processing: In certain circumstances — for example, while a rectification request is being assessed — you may request that we restrict our use of your Personal Data to storage only.
• Right to Data Portability: Where processing is carried out by automated means on the basis of your consent or contractual necessity, you may request that we provide your Personal Data to you in a structured, commonly used, machine-readable format.
• Right to Object: You may object to the processing of your Personal Data where that processing is based on legitimate interests. You may also object at any time to the use of your data for direct marketing purposes, and we will honor that objection immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.

We will respond to all verified data rights requests within 30 calendar days of receipt. In cases of particular complexity or volume, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

The km779 Platform is strictly for adults aged 21 and over. We do not knowingly collect, store, or process Personal Data belonging to any person under the age of 21. If you are under 21, you must not use the Platform, register an account, or submit any personal information to km779.

If we become aware that Personal Data has been submitted by a person under the age of 21, we will immediately suspend the relevant account, delete the associated Personal Data, and — where applicable — refund any deposits made. Parents or guardians who believe that a minor may have registered an account on the Platform are encouraged to contact our support team at once so that the account can be identified and closed promptly.

The km779 Platform may reference or integrate with third-party services whose own privacy practices are independent of this Policy. These include the game studios whose titles are hosted on the Platform, payment networks used to process your deposits and withdrawals (including the Indonesian banking system and e-wallet platforms such as OVO, DANA, GoPay, ShopeePay, and LinkAja), and any third-party customer support or live chat tooling.

km779 is not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party service that you interact with directly — for example, your bank's mobile app or e-wallet provider — as the data flows between you and those services are governed by their own policies, not this one.

km779 does not permit third-party advertising networks or data brokers to place tracking technologies on the Platform without your explicit consent.

km779 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable regulations, or business operations. When material changes are made, we will post the revised Policy on this page with an updated "Last Updated" date. Where changes are significant and affect your rights or the way we handle your data in a meaningful way, we will also send a notification to your registered email address or display a prominent notice within the Platform.

Your continued use of the km779 Platform following the publication of an updated Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with an updated Policy, you should discontinue use of the Platform and may request account closure by contacting customer support. We recommend reviewing this page periodically to stay informed of how we protect your data.

To exercise any of your data rights, submit a formal privacy complaint, or ask any question about this Privacy Policy and how km779 handles your Personal Data, please reach out through any of the following channels. All contact details are displayed as plain text for reference only.

• 24/7 Live Chat: Available on every page of the km779 Platform. This is the fastest channel for account-related queries, including immediate requests to restrict processing or initiate account lockdown in a security emergency.
• Email: support@km779.net — for formal data rights requests and written privacy complaints. Please include your registered username, a clear description of your request, and any supporting information. We aim to acknowledge all email requests within one business day (WIB) and to respond fully within 30 calendar days.
• WhatsApp: +62 811 0779 779 — for general queries during WIB business hours. Complex data rights requests are better directed to email for a complete written record.

When submitting a data rights request, please provide sufficient information to allow us to verify your identity before actioning the request. This is a security precaution to ensure that Personal Data is not disclosed to or deleted at the request of an unauthorized party.