Privacy Policy

Last Updated: January 1, 2026

This Privacy Policy describes how koin68 ("we", "us", "our", "Platform") collects, uses, stores, shares, and protects personal information from users ("you", "your", "Player") of our online gaming platform accessible at https://koin68.cam. By creating an account or using koin68 services, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy.

We are committed to maintaining the highest standards of data protection and privacy in accordance with applicable Indonesian data protection regulations and international best practices. Your trust is essential to our business, and we take our responsibility to protect your personal information seriously.

1. Information We Collect

koin68 collects several categories of personal information necessary to provide our gaming services, verify your identity, comply with legal obligations, and improve your user experience.

1.1 Information You Provide Directly

When you register for a koin68 account or use our services, you provide the following information:

• Account Registration Data: Full legal name, date of birth, gender, residential address, email address, mobile phone number (Indonesian +62 format), chosen username and password.
• Identity Verification (KYC) Documents: Scanned copies or photographs of your Indonesian National Identity Card (KTP), selfie photograph holding your ID card, proof of address documents (if required), and any additional verification documents requested during enhanced due diligence.
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet account information (OVO, DANA, GoPay, ShopeePay, LinkAja phone numbers), deposit and withdrawal transaction records.
• Communication Records: Content of your communications with our customer support team via live chat, email, or WhatsApp, including complaints, inquiries, and feedback.
• Betting and Gaming History: Records of all bets placed, games played, deposits made, withdrawals requested, bonuses claimed, wagering activity, win/loss history, and account balance changes.

1.2 Information Collected Automatically

When you access and use koin68, our systems automatically collect certain technical and usage information:

• Device Information: Device type (desktop, mobile, tablet), operating system (Windows, iOS, Android), browser type and version, screen resolution, device identifiers (IP address, device ID).
• Connection Data: IP address, internet service provider, geographic location (country, city), connection timestamp, session duration.
• Usage Data: Pages visited, features used, clickstream data, time spent on each page, navigation patterns, search queries within the platform, game preferences, betting patterns.
• Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to recognize your device, remember your preferences, track session activity, and analyze platform usage. See Section 8 for detailed cookie information.

1.3 Information from Third Parties

We may receive information about you from third-party sources:

• Payment Processors: Transaction confirmation, payment status updates, and fraud detection signals from Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Identity Verification Services: Results from third-party KYC and anti-fraud verification services that validate your identity documents and check against watchlists.
• Game Providers: Gaming activity data from third-party game providers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, etc.) integrated into our platform.

2. How We Use Your Information

koin68 uses the personal information we collect for the following purposes:

2.1 Account Management and Service Provision

• Create and maintain your koin68 player account
• Verify your identity and age (21+ requirement)
• Process deposits, withdrawals, and internal fund transfers
• Enable you to place bets and play games on our platform
• Manage bonuses, promotions, and loyalty program benefits
• Provide customer support and respond to inquiries
• Communicate important account updates, platform changes, and service notifications

2.2 Legal and Regulatory Compliance

• Comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
• Verify that you meet legal age requirements (21+ in Indonesia)
• Detect and prevent fraud, money laundering, and other illegal activities
• Respond to legal requests, court orders, and regulatory inquiries
• Maintain records as required by gaming licensing authorities
• Enforce our Terms and Conditions and platform rules

2.3 Security and Risk Management

• Monitor accounts for suspicious activity, collusion, and bonus abuse
• Detect and prevent fraudulent transactions and unauthorized access
• Protect against system security threats, cyberattacks, and data breaches
• Verify the authenticity of withdrawal requests and payment destinations
• Identify duplicate accounts and enforce single-account-per-person policy

2.4 Platform Improvement and Analytics

• Analyze platform usage patterns to improve user experience and navigation
• Understand player preferences to optimize game selection and sports coverage
• Test new features, interface designs, and functionality enhancements
• Generate aggregate statistics and insights (no individual identification)
• Optimize platform performance, loading speeds, and technical stability

2.5 Marketing and Communications

• Send promotional offers, bonus notifications, and special event announcements (with your consent)
• Personalize content and recommendations based on your gaming preferences
• Conduct customer satisfaction surveys and feedback requests
• Notify you about new games, features, and platform updates

You may opt out of marketing communications at any time by clicking "unsubscribe" in promotional emails or adjusting your communication preferences in account settings.

3. Legal Basis for Processing (GDPR Compliance)

For users in jurisdictions covered by the General Data Protection Regulation (GDPR) or similar privacy laws, we process your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our contract with you (providing gaming services as outlined in our Terms and Conditions).
• Legal Obligation: Processing is required to comply with legal obligations including KYC, AML, age verification, and regulatory reporting requirements.
• Legitimate Interests: Processing serves our legitimate business interests in fraud prevention, security, platform improvement, and customer support, provided such interests do not override your privacy rights.
• Consent: For marketing communications and certain optional data processing activities, we rely on your explicit consent, which you may withdraw at any time.

4. Data Sharing and Disclosure

koin68 does not sell, rent, or trade your personal information to third parties for their marketing purposes. We share your data only in the following limited circumstances:

4.1 Service Providers and Business Partners

We share data with trusted third-party service providers who perform services on our behalf:

• Payment Processors: Indonesian banks and e-wallet providers process deposits and withdrawals on our behalf and receive necessary transaction information.
• Game Providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and other game suppliers receive minimal data (username, session ID) to enable gameplay and record results.
• Identity Verification Services: Third-party KYC and fraud detection services receive ID documents and personal information to verify your identity.
• Cloud Infrastructure Providers: We use secure cloud hosting services to store data and run our platform.
• Customer Support Tools: Live chat and ticketing platforms process communication data to enable support services.

All service providers are bound by strict confidentiality obligations and are prohibited from using your data for any purpose other than providing services to koin68.

4.2 Legal and Regulatory Requirements

We may disclose your personal information when required by law or when we believe disclosure is necessary to:

• Comply with legal process, court orders, or government requests
• Respond to regulatory inquiries from gaming licensing authorities
• Enforce our Terms and Conditions and protect our legal rights
• Investigate suspected fraud, money laundering, or illegal activity
• Protect the safety and security of koin68, our users, or the public

4.3 Business Transfers

In the event koin68 undergoes a business transaction such as merger, acquisition, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity. We will notify you via email and prominent platform notice before your data is transferred and becomes subject to a different privacy policy.

4.4 Aggregate and Anonymized Data

We may share aggregate, anonymized data that does not identify individual users (e.g., "20% of users prefer football betting over casino games") with business partners, researchers, or for public reporting purposes.

5. Data Security and Protection

koin68 employs industry-standard technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

5.1 Technical Security Measures

• Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocols, the same standard used by banks and financial institutions.
• Secure Storage: Personal data is stored in encrypted databases with access restricted to authorized personnel only.
• Password Protection: Account passwords are hashed using bcrypt with unique salts, making them unrecoverable even in the unlikely event of database compromise.
• Two-Factor Authentication: Optional 2FA via SMS provides an additional security layer for account access.
• Firewall Protection: Advanced firewall systems protect our infrastructure from unauthorized access and cyberattacks.
• Regular Security Audits: Quarterly penetration testing and vulnerability assessments by independent cybersecurity firms.

5.2 Organizational Security Measures

• Access to personal data is limited to employees and contractors who require it to perform their job functions
• All personnel with data access sign confidentiality agreements and receive privacy training
• We maintain detailed audit logs of all access to sensitive data
• Regular data backup procedures protect against data loss
• Incident response plan ready to address any potential data breaches

5.3 Data Breach Notification

In the unlikely event of a data breach affecting your personal information, we will notify you within 72 hours of discovering the breach via email and platform notification. The notice will describe what data was affected, what we are doing to address the breach, and steps you can take to protect yourself.

6. Data Retention

koin68 retains your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

6.1 Retention Periods

• Active Account Data: Retained for the duration of your active account plus an additional period as required by gaming regulations.
• KYC Documents: Retained for a minimum of 5 years after account closure as required by anti-money laundering regulations.
• Transaction Records: Retained for 7 years to comply with financial record-keeping requirements.
• Communication Logs: Customer support communications retained for 3 years for quality assurance and dispute resolution.
• Technical Logs: IP addresses and session data retained for 12 months for security and fraud prevention purposes.

6.2 Account Closure and Data Deletion

When you close your koin68 account (or we close it per our Terms), we will:

• Deactivate your account and prevent further login
• Process any outstanding withdrawals
• Retain necessary data to comply with legal obligations (KYC, financial records)
• Delete or anonymize data that is no longer required after applicable retention periods expire

You may request account deletion and data erasure at any time by contacting [email protected]. We will honor deletion requests within 30 days, subject to legal retention requirements.

7. Your Privacy Rights

Depending on your location and applicable privacy laws, you have the following rights regarding your personal data:

7.1 Right to Access

You have the right to request a copy of all personal information we hold about you. We will provide this information in a commonly used electronic format within 30 days of your request.

7.2 Right to Rectification

If your personal information is inaccurate or incomplete, you have the right to request correction. You can update most information directly in your account settings.

7.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal data, subject to legal retention requirements. We will delete data that is no longer necessary for legal or operational purposes.

7.4 Right to Restriction of Processing

You can request that we limit how we use your personal data in certain circumstances, such as while we verify the accuracy of disputed information.

7.5 Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format and transmit it to another service provider where technically feasible.

7.6 Right to Object

You may object to processing of your personal data for marketing purposes or when processing is based on legitimate interests. We will cease processing unless we have compelling legitimate grounds.

7.7 Right to Withdraw Consent

Where processing is based on your consent (e.g., marketing emails), you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

7.8 Exercising Your Rights

To exercise any of these rights, contact our Data Protection Officer at [email protected] with "Privacy Rights Request" in the subject line. We will respond within 30 days and may require identity verification before processing your request.

8. Cookies and Tracking Technologies

koin68 uses cookies and similar technologies to enhance your experience, analyze platform usage, and provide personalized content.

8.1 Types of Cookies We Use

8.2 Managing Cookies

You can control cookie preferences through your browser settings. Note that disabling essential cookies may affect platform functionality. To manage cookies:

• Browser Settings: Most browsers allow you to block or delete cookies through settings/preferences menus
• Opt-Out Tools: Use browser extensions or privacy tools to limit tracking
• Account Settings: Manage marketing cookie preferences in your koin68 account settings

9. Third-Party Links and Services

koin68 may contain links to third-party websites, game providers, or payment processors. This Privacy Policy applies only to koin68 services. We are not responsible for the privacy practices or content of third-party sites. We encourage you to review the privacy policies of any external sites you visit.

10. Children's Privacy

koin68 services are strictly for users aged 21 years and older. We do not knowingly collect personal information from anyone under 21. If we discover that we have inadvertently collected data from a minor, we will immediately delete the account and all associated information. Parents or guardians who believe a minor has provided personal information to koin68 should contact us immediately at [email protected].

11. International Data Transfers

koin68 primarily serves users located in Indonesia. However, some of our service providers and cloud infrastructure may be located outside Indonesia. When we transfer your personal data internationally, we ensure appropriate safeguards are in place through:

• Standard contractual clauses approved by data protection authorities
• Adequacy decisions recognizing equivalent data protection standards
• Binding corporate rules for intra-group transfers
• Your explicit consent where required by law

12. Changes to This Privacy Policy

koin68 reserves the right to update this Privacy Policy to reflect changes in our data practices, legal requirements, or platform features. Material changes will be communicated via:

• Email notification to your registered email address
• Prominent notice on the platform homepage
• Pop-up notification upon next login

We will provide at least 30 days' notice before material changes take effect. Your continued use of koin68 after the effective date constitutes acceptance of the updated Privacy Policy. If you do not agree with changes, you may close your account.

13. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

You also have the right to lodge a complaint with your local data protection authority if you believe we have violated your privacy rights.