Privacy Policy

kig198 operates an online gaming and sports betting platform primarily serving users in Indonesia. As part of delivering our services — which include casino games, togel (Indonesia's traditional numbers lottery) markets, and sports betting — we necessarily collect and process certain personal information belonging to our registered users.

We recognize that privacy is a fundamental right. This policy has been drafted to give you complete visibility into our data practices, written in plain language so that every user — regardless of their familiarity with data law — can understand what information is held about them and how it is used.

This Privacy Policy applies to all personal data collected through the kig198 website, any associated mobile interface, customer support channels (live chat and email), and marketing communications. It should be read in conjunction with our Terms & Conditions, which form the overarching legal agreement governing your use of the Platform.

Throughout this Privacy Policy, the following terms carry the meanings defined below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, identity document number, email address, phone number, IP address, and financial account details.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, deletion, or any combination thereof.
• "Data Controller" — kig198, the entity that determines the purposes and means of processing your personal data.
• "Data Processor" — any third-party service provider that processes personal data on behalf of kig198, under contractual obligation and in accordance with our instructions.
• "User" / "You" — any individual who accesses or registers with the kig198 Platform.
• "Consent" — a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.
• "Cookies" — small text files placed on your device by the kig198 Platform for the purposes of session management, analytics, and personalization.

We collect only the personal data that is necessary to deliver our services securely and in compliance with applicable obligations. The categories of data we process are set out below:

Identity & Contact Data

Full legal name Date of birth KTP number Email address Phone number Residential address Nationality

Financial Data

Bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga) E-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja) Transaction history Deposit & withdrawal records

Account & Activity Data

Username Login timestamps Betting history Game session logs Bonus usage records Responsible gaming settings

Technical Data

IP address Device type & OS Browser type & version Geolocation (city/region level) Cookie identifiers Session tokens

Communications Data

Live chat transcripts Email correspondence Support ticket records Marketing preferences

kig198 collects personal data through the following channels:

• Account Registration: When you create a kig198 account, you directly provide identity, contact, and financial data through our registration form.
• KYC Verification: During identity verification, you submit government-issued documents (KTP), proof of address, and selfie photographs.
• Deposits & Withdrawals: Financial account details are captured when you initiate transactions through our supported payment channels.
• Platform Usage: We automatically collect technical and activity data as you navigate, bet, and interact with the Platform.
• Customer Support: Communications data is recorded when you engage with our live chat agents or email support team.
• Marketing Opt-In: If you subscribe to promotional emails or SMS notifications, your contact preferences and response data are recorded.
• Cookies & Tracking Technologies: See Clause 10 for a full description of our cookie practices.

We use your personal data only for legitimate purposes directly related to the delivery, improvement, and security of our services. The table below maps each processing activity to its stated purpose:

Processing Activity	Purpose
Account creation & management	To establish and maintain your user account and deliver platform services.
Identity verification (KYC)	To confirm eligibility (21+ age check), prevent fraud, and comply with anti-money-laundering (AML) obligations.
Payment processing	To facilitate deposits and withdrawals via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and other supported channels.
Transaction monitoring	To detect suspicious activity, prevent financial crime, and maintain platform integrity.
Customer support	To respond to inquiries, resolve disputes, and improve service quality through interaction records.
Responsible gaming monitoring	To identify at-risk users, enforce self-exclusion requests, and apply deposit or loss limits set by the user.
Marketing communications	To send promotional offers, bonus alerts, and seasonal campaign messages to users who have opted in.
Platform analytics	To understand user behavior, optimize the platform experience, and inform product development decisions.
Security & fraud prevention	To protect user accounts from unauthorized access, detect collusion, and enforce platform rules.
Legal compliance	To fulfill obligations imposed by applicable law, regulatory bodies, or court orders.

kig198 processes personal data on the following legal bases, depending on the nature of the activity:

• Contractual Necessity: Processing required to fulfill our obligations under the Terms & Conditions you accepted at registration — including account management, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable anti-money-laundering laws, identity verification regulations, and any lawful request from a competent authority.
• Legitimate Interests: Processing carried out for the purposes of fraud prevention, platform security, and service analytics, where those interests do not override your fundamental privacy rights.
• Consent: Processing for optional purposes such as marketing communications and non-essential cookies, where you have freely given explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

kig198 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data only in the following limited circumstances:

• Payment Service Providers: We share the minimum necessary financial data with banks and e-wallet operators (including BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja) to process your transactions.
• KYC & Identity Verification Partners: We engage specialist third-party identity verification providers to assist with document authentication and age verification. These providers are bound by strict data processing agreements.
• Game Content Providers: Licensed game studios such as Pragmatic Play, Evolution Gaming, Microgaming, and Spribe may receive anonymized session data necessary to deliver their game content within our Platform.
• Analytics & Technology Providers: We use platform infrastructure and analytics tools operated by vetted technology partners. All such partners process data solely on our instructions under contractual data protection terms.
• Legal & Regulatory Authorities: We will disclose personal data to law enforcement agencies, regulators, or courts where required by a valid legal obligation, court order, or regulatory directive.
• Business Transfers: In the event of a merger, acquisition, or asset sale involving kig198, personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy.

kig198 retains personal data for as long as is necessary to fulfill the purposes for which it was collected, subject to the following retention guidelines:

Data Category	Retention Period
Account & identity data	Duration of account plus 5 years post-closure for AML compliance.
Financial transaction records	7 years from the date of each transaction, in line with financial record-keeping standards.
KYC documents	5 years post-account closure or as required by applicable regulatory guidance.
Customer support communications	3 years from the date of last interaction, for dispute resolution purposes.
Marketing preferences & consent records	Until consent is withdrawn, plus 1 year for audit trail purposes.
Technical & session data	13 months from collection, in line with standard analytics retention practices.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be linked to an identifiable individual.

kig198 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, or disclosure. Our security framework includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the kig198 Platform is encrypted in transit using industry-standard TLS protocols.
• Encryption at Rest: Sensitive personal and financial data stored on our servers is encrypted using AES-256 encryption standards.
• Access Controls: Access to personal data is strictly limited to authorized kig198 personnel who require it to perform their job functions, governed by role-based access control policies.
• Two-Factor Authentication (2FA): Optional 2FA is available for all user accounts and is mandatory for administrative access to our internal systems.
• Regular Security Audits: Our platform infrastructure is subject to regular penetration testing and independent security audits conducted by qualified third-party specialists.
• Incident Response: We maintain a documented data breach response plan. In the event of a breach that poses a risk to your rights, we will notify affected users within 72 hours of becoming aware of the incident.

kig198 uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies we deploy are as follows:

• Strictly Necessary Cookies: Essential for core platform functionality, including user authentication and session management. These cannot be disabled without impairing your ability to use the Platform.
• Performance & Analytics Cookies: Used to measure how users interact with the Platform — which pages are most visited, where users encounter errors, and how navigation flows are used. Data collected is aggregated and anonymized.
• Functional Cookies: Enable the Platform to remember your preferences, such as your preferred language, display settings, and responsible gaming configurations.
• Marketing Cookies: Used to track users who have opted into promotional communications, so that we can deliver relevant offers and measure campaign effectiveness. These are only placed with your explicit consent.

You may manage your cookie preferences through your browser settings at any time. Disabling non-essential cookies will not affect your ability to access core gaming services, though some personalization features may be reduced in functionality.

As a kig198 user, you hold a set of defined rights with respect to the personal data we hold about you. We are committed to facilitating the exercise of these rights promptly and without undue restriction. Your rights include:

To exercise any of the above rights, please contact our support team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and complete it within 30 days, except in cases of complexity requiring a single 30-day extension, of which you will be informed.

The kig198 Platform is strictly intended for adults aged 21 years or older. We do not knowingly collect or process personal data belonging to individuals under the age of 21. If we become aware that an account has been registered by a minor, we will immediately suspend the account, delete all associated personal data, and refuse any pending withdrawal requests pending a full investigation.

If you are a parent or guardian and believe that a minor under your care has registered an account on kig198, please contact us immediately at [email protected]. We will act promptly to address the matter.

kig198 operates with the support of technology partners and infrastructure providers that may be located outside Indonesia. Where personal data is transferred to processors or sub-processors in other jurisdictions, we ensure that appropriate safeguards are in place to maintain a level of data protection equivalent to that described in this policy.

Such safeguards include contractual data protection clauses imposed on all international data processors, requiring them to handle your data with the same standard of care as kig198 itself. We conduct due diligence on all third-party processors before engaging their services and review these arrangements periodically to confirm continued compliance.

The kig198 Platform integrates with third-party game content providers, payment gateways, and technology services to deliver a complete gaming experience. These third parties operate under their own privacy policies, and kig198 is not responsible for the data practices of any external service accessed through links or integrations on our Platform.

Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft (PG Soft) may collect anonymized technical data necessary for game delivery. This data does not include personally identifiable information beyond what is strictly required for session integrity and fair-play verification.

Payment providers including BCA, BRI, BNI, Mandiri, OVO, DANA, and GoPay are independent data controllers for the portions of your financial data that they process on their own systems. We encourage you to review the privacy policies of any payment provider you use in connection with your kig198 account.

kig198 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When material changes are made, we will notify registered users by email to the address on their account and display a prominent notice on the Platform at least 7 days before the changes take effect.

The effective date at the top of this document will be updated each time a revision is published. We encourage you to review this policy periodically. Your continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy.

If you do not agree with an updated policy, you must cease using the Platform and contact our support team to request account closure and withdrawal of any remaining balance.

If you have any questions, concerns, or formal requests relating to this Privacy Policy or the personal data kig198 holds about you, our dedicated privacy support team is available 24 hours a day, 7 days a week.

• Email: [email protected] — please use the subject line "Privacy Inquiry" or "Data Rights Request" for routing to the appropriate team.
• Live Chat: Available directly through the Platform for immediate assistance with general privacy questions — typical response time under 2 minutes.
• Response Time: Formal data rights requests will be acknowledged within 5 business days and fully addressed within 30 days (WIB, UTC+7).