Privacy Policy

Last Updated: January 1, 2026

1. Introduction

koin28 ("we," "us," "our") operates an online gaming platform serving Indonesian players. We understand that trust is fundamental to our relationship with you, and protecting your personal data is a core responsibility. This Privacy Policy outlines our commitment to data protection and transparency in accordance with applicable Indonesian data protection regulations and international best practices.

This policy applies to all users of the koin28 platform, including visitors who browse our website, registered account holders, and anyone who interacts with our services. We encourage you to read this Privacy Policy carefully and contact us at [email protected] if you have any questions or concerns about how we handle your information.

2. Information We Collect

To provide our gaming services and comply with regulatory requirements, koin28 collects several types of information from our users. We only collect data that is necessary for operating our platform, ensuring security, and delivering a personalized gaming experience.

2.1 Information You Provide Directly

When you register for a koin28 account or use our services, you voluntarily provide us with personal information, including:

• Account Registration Data: Full legal name, date of birth, email address, phone number, residential address, preferred username, and password.
• Identity Verification Documents: Government-issued identification (KTP or Indonesian national identity card, passport), proof of address (utility bills, bank statements), and proof of payment method ownership as part of our Know Your Customer (KYC) procedures.
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet information (OVO, DANA, GoPay account details), and transaction history related to deposits and withdrawals.
• Communication Data: Messages, inquiries, and feedback you send to our customer support team via live chat, email, WhatsApp, or Telegram.
• Preferences and Settings: Gaming preferences, notification settings, deposit limits, responsible gaming tool configurations, and language preferences.

2.2 Information We Collect Automatically

When you access the koin28 platform, we automatically collect certain technical and usage information through cookies and similar technologies:

• Device Information: Device type, operating system, browser type and version, screen resolution, and device identifiers.
• Connection Data: IP address, internet service provider, connection timestamps, and geographic location (country and city level based on IP address).
• Usage Data: Pages visited, features used, games played, bet history, session duration, click patterns, and navigation paths through our platform.
• Performance Data: Platform performance metrics, error reports, and technical diagnostics to improve service quality.
• Cookie Data: Session cookies, preference cookies, and analytics cookies that help us understand how users interact with our platform.

2.3 Information from Third Parties

We may receive limited information from third-party service providers, including:

• Payment Processors: Transaction confirmation, payment method verification, and fraud detection data from Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay).
• Game Providers: Game session data, RTP statistics, and technical performance metrics from our casino and slot game partners.
• Verification Services: Identity verification results from third-party KYC service providers used to confirm your age and identity.

3. How We Use Your Information

koin28 uses your personal information for the following legitimate purposes:

3.1 Service Provision and Account Management

• Create and maintain your user account
• Process deposits and withdrawals to your Indonesian bank accounts or e-wallets
• Enable access to gaming services including sports betting, casino games, live dealers, and togel draws
• Track your gaming activity, bet history, and account balance
• Apply bonuses, promotions, and loyalty rewards to your account
• Provide customer support and respond to your inquiries

3.2 Security and Fraud Prevention

• Verify your identity and age (21+ requirement) through KYC procedures
• Detect and prevent fraud, money laundering, and unauthorized account access
• Monitor for suspicious betting patterns, bonus abuse, and terms violations
• Protect the integrity of our platform and games
• Comply with anti-money laundering (AML) and counter-terrorism financing regulations

3.3 Legal and Regulatory Compliance

• Fulfill legal obligations under Indonesian law and international gaming regulations
• Respond to lawful requests from government authorities and law enforcement
• Maintain records required by gaming regulatory bodies
• Enforce our Terms & Conditions and resolve disputes

3.4 Platform Improvement and Analytics

• Analyze user behavior to improve platform functionality and user experience
• Conduct research and statistical analysis on gaming trends
• Test new features and optimize existing services
• Measure the effectiveness of marketing campaigns (without sharing your personal data)

3.5 Marketing and Communication (With Your Consent)

• Send promotional offers, bonus notifications, and updates about new games or features
• Deliver personalized content based on your gaming preferences
• Notify you about special events tied to Indonesian holidays (Independence Day, Idul Fitri)
• Send account-related notifications, security alerts, and important service updates

You may opt out of marketing communications at any time through your account settings or by contacting [email protected]. Please note that you will continue to receive essential account-related and transactional communications even if you opt out of marketing.

4. How We Protect Your Information

koin28 employs industry-standard security measures to protect your personal and financial information from unauthorized access, disclosure, alteration, or destruction. Our security framework includes:

4.1 Technical Security Measures

• Encryption: All data transmitted between your device and our servers is protected with 256-bit SSL (Secure Socket Layer) encryption, the same technology used by major banks.
• Secure Data Storage: Personal information is stored on secure servers with restricted access, protected by firewalls and intrusion detection systems.
• Password Protection: User passwords are hashed and salted using advanced cryptographic algorithms. We never store or have access to your plaintext password.
• Payment Security: Financial transactions are processed through PCI DSS compliant payment gateways. We do not store your complete bank account numbers or CVV codes.
• Regular Security Audits: Our platform undergoes regular security assessments and penetration testing to identify and address vulnerabilities.

4.2 Access Controls and Internal Policies

• Access to personal data is restricted to authorized koin28 personnel who require it to perform their duties
• All employees sign confidentiality agreements and receive data protection training
• We implement role-based access controls to limit data exposure
• Activity logs track all access to sensitive information for audit purposes

4.3 Your Responsibility

While we implement robust security measures, you also play a crucial role in protecting your account:

• Choose a strong, unique password and never share it with anyone
• Enable two-factor authentication if available
• Log out after each session, especially on shared or public devices
• Keep your registered email address and phone number secure
• Notify us immediately at [email protected] if you suspect unauthorized account access

5. Data Sharing and Disclosure

koin28 does not sell your personal information to third parties. We only share your data in the following limited circumstances:

5.1 Service Providers

We share necessary information with trusted third-party service providers who assist us in operating our platform, including:

• Payment processors (Indonesian banks and e-wallet providers) to process deposits and withdrawals
• Identity verification services to conduct KYC checks
• Game providers to deliver casino, slot, and live dealer content
• Cloud hosting providers to store data securely
• Customer support software providers to manage support tickets
• Analytics providers to understand platform usage (using anonymized data)

All service providers are contractually obligated to protect your information and use it only for the specific services they provide to koin28.

5.2 Legal Requirements

We may disclose your information if required by law or in response to valid legal processes, including:

• Court orders, subpoenas, or other legal demands from Indonesian authorities
• Investigations related to fraud, money laundering, or criminal activity
• Protection of koin28's legal rights, property, or safety
• Prevention of harm to users or the public

5.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or business restructuring, your personal information may be transferred to the acquiring entity, subject to the same privacy protections outlined in this policy.

6. Data Retention

koin28 retains your personal information for as long as necessary to provide our services and comply with legal obligations. Our retention practices include:

• Active Accounts: We retain all account information, transaction history, and gaming records for the duration of your active account and for a period after account closure as required by gaming regulations and tax laws (typically 5-7 years).
• Closed Accounts: After you close your account, we retain essential records for compliance purposes but delete or anonymize non-essential personal data.
• Marketing Data: If you opt out of marketing communications, we retain a record of your opt-out preference to honor your choice.
• Legal Requirements: Some information must be retained longer to comply with Indonesian financial regulations, anti-money laundering laws, and tax requirements.

7. Your Privacy Rights

Under Indonesian data protection principles and our commitment to transparency, you have the following rights regarding your personal information:

Right	Description
Access	Request a copy of the personal information we hold about you
Correction	Request correction of inaccurate or incomplete personal data
Deletion	Request deletion of your personal information (subject to legal retention requirements)
Objection	Object to certain processing activities, such as direct marketing
Data Portability	Request your data in a structured, commonly used format
Withdrawal of Consent	Withdraw consent for data processing activities that require consent

To exercise any of these rights, please contact our Data Protection Team at [email protected] with the subject line "Privacy Rights Request." We will respond to your request within 30 days. Please note that we may need to verify your identity before processing certain requests.

8. Cookies and Tracking Technologies

koin28 uses cookies and similar technologies to enhance your browsing experience, analyze platform usage, and deliver personalized content. Cookies are small text files stored on your device that help us recognize you and remember your preferences.

Types of Cookies We Use:

• Essential Cookies: Required for platform functionality, including login sessions, account security, and transaction processing. These cannot be disabled.
• Performance Cookies: Collect anonymous data about how users interact with our platform to improve performance and user experience.
• Functionality Cookies: Remember your preferences, such as language selection, game favorites, and display settings.
• Analytics Cookies: Help us understand user behavior through aggregated, anonymized data analysis.

You can manage cookie preferences through your browser settings. However, disabling essential cookies may limit platform functionality. Disabling analytics or functionality cookies will not affect core gaming services but may reduce personalization.

9. Children's Privacy

koin28 services are intended solely for adults aged 21 and older. We do not knowingly collect personal information from individuals under 21 years of age. If we become aware that a user is under the legal gambling age, we will immediately suspend the account, cease processing personal information, and take steps to delete the data from our systems. Parents or guardians who believe a minor has provided information to koin28 should contact us immediately at [email protected].

10. International Data Transfers

Your personal information is primarily stored on servers located within Indonesia or in secure data centers in Southeast Asia. In some cases, data may be transferred to service providers located outside Indonesia for specific operational purposes (e.g., cloud hosting, game content delivery). When we transfer data internationally, we ensure adequate safeguards are in place, including contractual data protection clauses and compliance with applicable data transfer regulations.

11. Changes to This Privacy Policy

koin28 reserves the right to update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or technological developments. Material changes will be communicated through email notification to your registered email address and prominent notice on our platform. The "Last Updated" date at the top of this policy indicates when the most recent changes were made. We encourage you to review this Privacy Policy regularly to stay informed about how we protect your information. Your continued use of koin28 services after changes are implemented constitutes acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how koin28 handles your personal information, please contact us:

• Email: [email protected]
• Subject Line: Privacy Policy Inquiry
• Response Time: We aim to respond to all privacy-related inquiries within 48 hours
• Support Hours: 24/7 via live chat and email

For data protection rights requests (access, correction, deletion), please include "Privacy Rights Request" in your subject line and provide sufficient information to verify your identity. Our Data Protection Team will review your request and respond in accordance with applicable data protection regulations.