km879 Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how km879 ("km879", "the Platform", "we", "us", "our") collects, uses, discloses, and protects the personal data of individuals ("Player", "User", "you") who access or use the km879 website at https://km879.pro and all associated gaming services, sportsbook markets, lottery products, live dealer tables, and customer support channels (collectively, the "Services").

This Policy is incorporated by reference into the km879 Terms & Conditions. By registering an account, making a deposit, or otherwise using the km879 Services, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you must not use the km879 Services.

km879 is committed to processing your personal data lawfully, fairly, and transparently. We apply internationally recognised data protection principles and maintain technical and organisational measures appropriate to the sensitivity of the data we handle.

1 Definitions

For the purposes of this Policy, the following terms have the meanings set out below:

2 Data Controller

km879 is the Data Controller responsible for Personal Data collected through the Services available at https://km879.pro. km879 is operated by an internationally licensed company holding a valid online gaming licence from a recognised regulatory authority.

For all data protection enquiries, requests to exercise your rights, or concerns regarding this Policy, you may contact our designated Data Protection contact via the details set out in Section 15 (Contact Us) of this Policy. We aim to acknowledge all data protection requests within five business days and to resolve them within 30 calendar days.

3 Data We Collect

km879 collects several categories of Personal Data from Players and prospective Players. The specific data points collected will depend on the nature of your interaction with the Platform. The main categories are as follows:

4 How We Collect Data

km879 collects Personal Data through the following channels and mechanisms:

• Directly from You: When you register an account, submit KYC documents, make a deposit or withdrawal, contact customer support, respond to a promotional offer, or update your account profile.
• Automatically: When you browse the km879 website, our servers and analytics tools automatically record Technical Data and Usage Data, including your IP address, device identifiers, and session behaviour. This occurs whether or not you are logged into an account.
• From Payment Providers: When you initiate a deposit or withdrawal, your bank (e.g., BCA, BRI, BNI, Mandiri) or e-wallet provider (e.g., OVO, DANA, GoPay) may share transaction confirmation data with km879 to reconcile the payment against your account.
• From Identity Verification Partners: Where km879 uses a third-party KYC or age-verification service, that provider may return a verification result and risk score to km879 in connection with your submitted documents.
• Via Cookies and Similar Technologies: As described in Section 10 of this Policy, km879 uses cookies, web beacons, and local storage to collect usage and session data automatically during your visits to the Platform.
• From Fraud and Security Services: km879 may receive data from fraud prevention and device fingerprinting providers that help us identify and block suspicious access attempts or multi-account activity.

5 Purposes of Processing

km879 processes your Personal Data only for clearly defined, legitimate purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. The primary purposes for which we process Personal Data are:

• Account Administration: Creating and managing your km879 account, verifying your login credentials, and maintaining the integrity and security of your account.
• Identity and Age Verification (KYC): Confirming that you are at least 21 years of age and a resident of Indonesia, as required by our responsible gaming obligations and licensing conditions.
• Payment Processing: Facilitating deposits and withdrawals via Indonesian bank transfer (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), and maintaining accurate financial records.
• Service Delivery: Providing access to casino games, slot titles, live dealer tables, sportsbook markets (including BRI Liga 1, EPL, Champions League, and other competitions), and togel (Indonesia's traditional numbers lottery) draw services.
• Customer Support: Responding to your enquiries, resolving disputes, and providing assistance via live chat and email through our Indonesian-speaking support team.
• Fraud Prevention and Security: Detecting and preventing fraudulent activity, money laundering, multi-account abuse, and any other conduct that threatens the integrity of the Platform or the safety of other Players.
• Responsible Gaming Compliance: Monitoring gaming behaviour to identify signs of problem gambling, enforcing self-exclusion requests, applying deposit and loss limits, and complying with our duty of care obligations.
• Legal and Regulatory Compliance: Meeting our obligations under the terms of our international gaming licence, record-keeping requirements, and any lawful requests from regulatory or law enforcement authorities.
• Platform Improvement and Analytics: Analysing aggregated usage data to improve the design, functionality, and performance of the km879 Platform.
• Direct Marketing (with Consent): Sending you personalised promotional offers, bonus notifications, and seasonal campaign information (e.g., Idul Fitri, Ramadhan, and Indonesian Independence Day promotions) where you have consented to receive such communications. You may withdraw consent at any time.

6 Legal Basis for Processing

km879 processes Personal Data on one or more of the following legal grounds, depending on the nature of the processing activity:

• Contractual Necessity: Processing required to enter into or perform the contract between you and km879 — including account creation, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC obligations, anti-money-laundering (AML) controls, and responsible gaming mandates imposed by our licensing authority.
• Legitimate Interests: Processing necessary for the legitimate interests of km879 — including fraud detection, platform security, analytics for service improvement, and responsible gaming monitoring — provided those interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

7 Data Sharing & Disclosure

km879 does not sell your Personal Data to third parties. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Service Providers: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the transaction data necessary to process your deposits and withdrawals. These providers are subject to their own privacy policies and applicable Indonesian financial regulations.
• KYC and Identity Verification Partners: Where we use a third-party verification service to process your submitted KYC documents, that provider receives the relevant identity data solely for the purpose of returning a verification result to km879.
• Game Studio Providers: Certified game studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive anonymised session data necessary to deliver their games and maintain game integrity. These providers do not receive your name, bank details, or KYC documents.
• Fraud Prevention and Security Services: Third-party fraud detection, device fingerprinting, and risk-scoring services receive Technical Data (IP address, device identifiers, browser fingerprint) to help km879 identify and prevent fraudulent access and multi-account activity.
• Analytics Providers: Aggregated, anonymised usage data may be processed by analytics platforms to help km879 understand platform performance. These platforms do not receive Personal Data that identifies individual Players.
• Regulatory and Law Enforcement Authorities: km879 will disclose Personal Data to competent regulatory bodies, law enforcement agencies, or courts when required to do so by law, court order, or formal regulatory request. We will notify you of such disclosure where legally permitted to do so.
• Professional Advisers: Lawyers, accountants, auditors, and insurers may access Personal Data on a confidential, need-to-know basis in connection with the provision of professional services to km879.
• Business Transfers: In the event that km879 undergoes a merger, acquisition, or sale of assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. You will be notified in advance and given the opportunity to exercise your rights.

8 Data Retention

km879 retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulatory obligations. The following table sets out our standard retention periods by data category:

Upon expiry of the applicable retention period, Personal Data is either securely deleted or irreversibly anonymised so that it can no longer be linked to any identified or identifiable individual. Where deletion is not immediately possible due to backup system constraints, the data is isolated, access-restricted, and queued for deletion at the earliest practicable opportunity.

9 Data Security

km879 implements a layered security architecture to protect your Personal Data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security measures include, but are not limited to:

• Encryption in Transit: All data exchanged between your browser and the km879 Platform is encrypted using TLS 1.2 or higher (256-bit SSL). Our website operates exclusively over HTTPS.
• Encryption at Rest: Sensitive Data categories — including KYC documents, password hashes, and bank account details — are encrypted at rest using AES-256 encryption.
• Access Controls: Access to Personal Data is restricted to km879 employees and authorised contractors who require it to perform their role. All access is governed by the principle of least privilege and is subject to audit logging.
• Password Security: Player passwords are never stored in plain text. They are processed using a one-way cryptographic hash algorithm with a unique salt per credential, making stored hashes non-reversible.
• Intrusion Detection: km879 operates continuous network monitoring and intrusion detection systems to identify and respond to anomalous access patterns or security incidents in real time.
• Penetration Testing: The km879 Platform is subject to periodic independent security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Staff Training: All km879 employees who handle Personal Data receive mandatory data protection and information security training commensurate with their role and access level.

10 Cookies & Tracking Technologies

The km879 website uses cookies and similar tracking technologies to deliver a functional, personalised, and secure gaming experience. The following table summarises the types of cookies we use and the purpose of each:

You can manage or disable non-essential cookies through your browser's settings menu. Please note that disabling certain cookies may impair the functionality of the km879 Platform, including your ability to log in or access certain game features. km879 does not use third-party advertising cookies or retargeting pixels on the Platform.

11 Your Data Rights

Subject to applicable law and certain regulatory limitations, you have the following rights with respect to your Personal Data held by km879:

• Right of Access: You have the right to request a copy of the Personal Data km879 holds about you, along with information about how that data is used and with whom it has been shared.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where there is no overriding legitimate interest for continued processing. Note that we may be required to retain certain data by law (e.g., KYC and financial records) even after an erasure request.
• Right to Restriction of Processing: You may request that km879 restrict the processing of your Personal Data in certain circumstances — for example, while a rectification request is being resolved.
• Right to Data Portability: You have the right to receive a structured, commonly used, machine-readable copy of the Personal Data you provided to km879, and to request that this data be transmitted directly to another controller where technically feasible.
• Right to Object: You have the right to object to the processing of your Personal Data where km879 relies on legitimate interests as its legal basis, including profiling for responsible gaming monitoring. km879 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on consent (primarily direct marketing), you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact our support team at support@km879.pro with the subject line "Data Rights Request". We will acknowledge your request within five business days and provide a substantive response within 30 calendar days. Where a request is complex or we receive a high volume of requests, we may extend this period by a further 30 days, in which case we will notify you promptly.

12 Minors & Age Restriction

The km879 Services are strictly intended for adults aged 21 and above. km879 does not knowingly collect, process, or retain Personal Data relating to individuals under the age of 21.

If km879 discovers or is notified that Personal Data has been collected from a person under 21 years of age, we will immediately suspend the associated account, initiate an investigation, and delete the relevant data as soon as practically possible. Any funds held in the account at the time of discovery will be returned to the payment source, net of any amounts already wagered, where recovery is feasible.

13 International Data Transfers

km879's primary servers and data infrastructure are maintained in a jurisdiction subject to our international gaming licence. In the course of delivering the Services, your Personal Data may be transferred to, and processed in , countries other than Indonesia. These may include the jurisdictions in which our licensed game studio partners (such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Pocket Games Soft) operate their infrastructure.

Where Personal Data is transferred outside Indonesia, km879 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy. Such safeguards may include:

• Standard Contractual Clauses: Legally binding contractual terms that impose data protection obligations on the recipient entity, ensuring your Personal Data is handled in accordance with internationally recognised standards.
• Adequacy Determinations: Where data is transferred to a jurisdiction that has been assessed as providing an adequate level of data protection, no additional safeguards are required beyond standard contractual arrangements.
• Processor Agreements: All third-party Data Processors who receive your Personal Data — regardless of their jurisdiction — are required to enter into a written data processing agreement with km879 that includes binding data protection obligations, security requirements, and sub-processor restrictions.

You may contact us at support@km879.pro to obtain further information about the specific safeguards applied to international transfers of your Personal Data.

14 Changes to This Policy

km879 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, regulatory requirements, or the evolution of the km879 Services. When we make material changes to this Policy, we will notify you through one or more of the following methods:

• Posting a prominent notice on the km879 homepage or within your account dashboard at the time you next log in.
• Sending a notification to the email address registered to your km879 account.
• Updating the "Last Updated" date displayed at the top of this Policy page.

Where a change to this Policy requires your renewed consent — for example, a material change to the purposes for which we use your data — we will request that consent explicitly before the change takes effect. Your continued use of the km879 Services following notification of non-material changes constitutes your acceptance of the revised Policy. If you do not agree with any amendment, you should cease using the Services and may request closure of your account.

We encourage you to review this Policy periodically to stay informed about how km879 protects your Personal Data. The version of the Policy currently published at https://km879.pro/privacy-policy is always the operative version.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way km879 processes your Personal Data, please contact our support team using the details below. Our Indonesian-speaking support agents are available 24 hours a day, 7 days a week, and are able to assist you in both English and Indonesian.

We are committed to resolving all privacy-related concerns promptly and transparently. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant supervisory authority in the jurisdiction applicable to your situation.