Koi800 Privacy Policy — We Protect Your Data Like Our Own

1Information We Collect

Koi800 collects various types of information to provide a secure, transparent, and high-quality service to all members. The information we collect falls into two main categories: information you provide directly and information collected automatically as you use our platform.

1.1 Information You Provide Directly

When you register an account, complete your profile, or contact the koi800 support team, we collect the following information:

Type of Information	Purpose of Collection	Mandatory / Optional
Full name	Identity verification & withdrawal processing	Mandatory
Date of birth	Age verification (18+)	Mandatory
Email address	Account communications & security notifications	Mandatory
Phone number	2FA verification & customer support	Mandatory
Residential address	KYC verification & legal compliance	Mandatory
Identity document	KYC identity verification	Mandatory (during withdrawal)
Bank account / e-wallet information	Deposit & withdrawal processing	Mandatory

1.2 Information Collected Automatically

When you browse or use the koi800 platform, our systems automatically record certain technical information necessary to ensure the platform operates correctly and securely:

• IP address and approximate location: Used to detect suspicious login attempts and ensure regional compliance.
• Device and browser type: Helps us optimise how the platform displays on your device.
• Gaming activity history: Recorded for dispute resolution, audit, and compliance reporting purposes.
• Financial transaction history: Required for accounting records and anti-money laundering (AML) legal compliance.
• Session data and access logs: Used to detect and prevent fraudulent activity.
• Cookie and tracking technology data: To improve user experience and understand platform usage patterns.

2How We Use Your Data

Koi800 uses collected information solely for legitimate purposes directly related to the provision of our services. We do not use your data beyond the scope described in this Privacy Policy without first obtaining your consent.

2.1 Primary Purposes of Data Use

• Account management: Registering your account, verifying your identity, and allowing you to log in securely to the koi800 platform.
• Transaction processing: Processing deposits, withdrawals, and any other financial transactions you make on our platform.
• KYC verification & AML compliance: Meets legal requirements to verify member identity and prevent money laundering and financing of illegal activities.
• Customer support: Responding to enquiries, resolving technical issues, and processing complaints you submit to our team.
• Platform security: Detecting and preventing fraud, security breaches, and activities that violate koi800's Terms and Conditions.
• Service improvement: Analysing usage patterns to improve platform features, user experience, and game offerings.

2.2 Marketing Communications

With your consent, koi800 may send you information about promotions, bonuses, and special offers via email or in-app notifications. You may opt out of marketing communications at any time by updating your notification settings in your account or by contacting our support team. Opting out of marketing communications does not affect the receipt of important transaction or security notifications.

3Information Sharing

Koi800 takes seriously its responsibility to ensure your personal information is not shared without strict controls. We do not sell, rent, or transfer your personal data to third parties for marketing purposes under any circumstances.

3.1 Sharing with Authorised Third Parties

In certain circumstances, koi800 may need to share some of your information with selected third parties, solely to enable our services to function properly:

• Payment providers: FPX, Touch 'n Go eWallet, DuitNow QR, Boost, and partner banks receive the transaction information required to process your deposits and withdrawals.
• Game software providers: Third-party game studios providing games on the koi800 platform receive session data necessary to ensure game integrity.
• Technical service providers: Technical partners who assist us with hosting, cybersecurity, and infrastructure support may have limited access to data necessary to perform their duties.
• Law enforcement authorities: koi800 will disclose required information if ordered to do so by a competent court or authorised regulatory authority.

All third parties we work with are bound by strict confidentiality agreements and are required to meet data protection standards equivalent to or higher than those of koi800.

4Cookie Policy

Koi800 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your browser when you visit a website. They help us recognise you as a logged-in user, save your preferences, and ensure the platform runs efficiently.

4.1 Types of Cookies We Use

• Essential cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Collecting information on how you use the platform — such as the most frequently visited pages — to help us improve our services.
• Functional cookies: Saving your preferences such as language, display settings, and game choices to deliver a more personalised experience.
• Analytics cookies: Helps us understand overall usage patterns through anonymised data for platform improvement purposes.

4.2 Managing Your Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to block or delete cookies. However, disabling essential cookies may affect your ability to fully use certain features of the koi800 platform.

5Data Security

Koi800 continuously invests in robust security infrastructure to protect members' personal data from unauthorised access, loss, modification, or accidental disclosure. Key security measures we implement include:

• 256-bit SSL Encryption for all data in transit between your browser and koi800's servers.
• Encryption of data at rest for all sensitive personal data stored in our databases.
• Web application firewall (WAF) that monitors and filters incoming traffic to detect and block cyberattacks.
• Intrusion detection system (IDS) that monitors abnormal activity across our network in real time.
• Regular security audits by an independent third party to identify and address any system vulnerabilities.
• Role-based access control (RBAC) ensuring koi800 staff can only access data relevant to their respective roles.
• Automatic data backup performed on a regular basis to ensure rapid data recovery in the event of an incident.

6Your Rights

As a koi800 member, you have certain rights regarding your personal data. koi800 is committed to respecting and facilitating the exercise of these rights:

• Right of Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: If your data is inaccurate or incomplete, you have the right to request that we correct it.
• Right to Erasure: You may request that we delete your personal data, subject to applicable legal record retention obligations.
• Right to Restrict Processing: In certain circumstances, you may request that we restrict how we process your data.
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time.
• Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format.
• Right to Withdraw Consent: Where data processing is based on your consent, you may withdraw that consent at any time.

7Data Retention

Koi800 retains your personal data for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable laws and regulations. Retention periods vary by type of information:

• Active account data: Retained for as long as your account is active on the koi800 platform and for a specified period following account closure.
• Financial transaction records: Retained for a minimum of 7 years in accordance with accounting and AML compliance requirements mandated by law.
• KYC documents: Retained for the duration of the active account and up to 5 years after account closure for compliance purposes.
• Security and activity logs: Retained for 12 months for fraud detection and dispute resolution purposes.
• Support communication records: Retained for 24 months for service quality reference and improvement.

Once the retention period expires, your data will be securely deleted or anonymised in accordance with koi800's internal procedures.

8International Data Transfer

In some cases, your personal data may be transferred to and processed in countries other than your country of residence, particularly in connection with technical service providers or game software providers operating globally. koi800 ensures that any such data transfers are carried out with adequate safeguards, including:

• Data transfer agreements that meet recognised data protection standards.
• Thorough assessment of the data recipient's security practices before any transfer is approved.
• Use of standard contractual clauses that protect your rights as a data subject.

9Children's Privacy

The koi800 platform is exclusively for individuals aged 18 years and above. koi800 does not knowingly collect or process personal data from minors. Should we discover that a minor's personal data has been collected without our knowledge, we will take immediate action to delete that data and close the associated account.

If you suspect that a minor has registered for or is using the koi800 platform, please contact our support team immediately so we can take appropriate action.

10Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how koi800 handles your personal data, our Data Protection Officer (DPO) team is ready to assist.

You can reach us via live chat on the koi800 platform, available 24 hours a day, 7 days a week, or by email at [email protected]. We are committed to responding to all privacy-related inquiries within 3 business days.

For issues related to responsible gaming and self-protection, you may also visit the page Responsible Gaming us for additional information and support.