Privacy Policy

1. Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Platform" — the koy855 website at https://koy855.cam and any associated mobile interfaces operated by koy855.
• "Company" / "we" / "us" / "our" — koy855, the entity responsible for operating the Platform and processing personal data collected through it.
• "Player" / "you" / "your" — any individual who registers an account on, or otherwise accesses, the Platform.
• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, email address, postal address, date of birth, payment details, and device identifiers.
• "Processing" — any operation performed on Personal Data, whether automated or manual, including collection, storage, use, disclosure, and deletion.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data; for data collected through the Platform, this is koy855.
• "Data Processor" — a third party that processes Personal Data on behalf of koy855, subject to a binding data-processing agreement.
• "KYC" — Know Your Customer verification procedures used to confirm a Player's identity, age, and source of funds.
• "Cookies" — small text files stored on your device by the Platform to maintain session state and collect aggregate usage analytics.

2. Data Controller

koy855 acts as the Data Controller for all Personal Data collected through the Platform. All data-protection enquiries, access requests, and complaints should be directed to our designated data-protection contact:

• Platform: koy855 — https://koy855.cam
• Contact Email: [email protected]
• Response Language: English and Indonesian
• Response Time: Within 30 calendar days of a verified written request

3. Data We Collect

koy855 collects Personal Data from you in several ways — directly when you provide it during registration or KYC, automatically as you use the Platform, and occasionally from trusted third-party sources such as payment processors and fraud-prevention services.

We do not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, genetic data, or health data beyond what is strictly necessary to operate responsible-gaming tools (for example, if you disclose a gambling problem when activating a self-exclusion request).

4. Legal Basis for Processing

koy855 processes your Personal Data only where a valid legal basis exists. The primary legal bases on which we rely are:

• Contractual Necessity: Processing is required to perform the contract between koy855 and you — including account management, transaction processing, and customer support. Without this processing, we cannot provide the Services.
• Legal Obligation: Certain processing is required to comply with applicable legal and regulatory obligations, including anti-money-laundering (AML) requirements, counter-terrorism-financing (CTF) obligations, and KYC verification mandates.
• Legitimate Interests: We process some data on the basis of our legitimate business interests, including fraud detection, platform security, product improvement, and responsible-gaming monitoring — provided those interests are not overridden by your rights and freedoms.
• Consent: Where we send you direct marketing communications or deploy non-essential cookies, we rely on your prior, freely given, and specific consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. How We Use Your Data

koy855 uses the Personal Data we collect for the following purposes:

• Account Management: Creating and maintaining your player account, verifying your identity and age (21+ requirement), and administering your account settings and preferences.
• Transaction Processing: Facilitating deposits and withdrawals via local payment methods including BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja; reconciling your account balance; and processing bonus awards.
• Regulatory Compliance: Satisfying KYC, AML, and CTF obligations; responding to lawful requests from regulatory or law-enforcement authorities; and maintaining records as required by applicable law.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, money laundering, and other prohibited conduct.
• Responsible Gaming: Monitoring betting patterns to identify at-risk behaviour; applying player-requested limits, cooling-off periods, and self-exclusion measures; and contacting players where our responsible-gaming obligations require intervention.
• Customer Support: Responding to your enquiries, resolving disputes, and providing assistance via live chat, email, and other support channels.
• Platform Improvement: Analysing aggregate usage data to improve platform performance, user experience, game offerings, and the relevance of promotions.
• Direct Marketing: Sending you information about promotions, bonuses, and new features — but only where you have opted in to receive such communications. You may opt out at any time by contacting [email protected].

6. Data Sharing & Disclosure

koy855 does not sell, rent, or trade your Personal Data. We share data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment Processors: We share financial data with our payment-processing partners (including the banks and e-wallet providers listed in Section 3) solely to facilitate your deposit and withdrawal transactions. Each processor is bound by a data-processing agreement and applicable financial-sector data-protection requirements.
• KYC & Identity Verification Providers: We may share identity documents and biometric data with third-party KYC verification service providers to automate and expedite the verification process. These providers act as our Data Processors and are contractually prohibited from using your data for their own purposes.
• Game Software Providers: Game providers such as Pragmatic Play, Evolution Gaming, Microgaming, and Spribe may receive pseudonymised session and bet data necessary to operate their game engines and resolve game-outcome disputes.
• Fraud Prevention & AML Services: We share relevant account and transaction data with fraud-detection and AML screening services to fulfil our regulatory obligations and protect the integrity of the platform.
• Legal & Regulatory Authorities: We will disclose Personal Data to government agencies, regulators, law-enforcement bodies, or courts where we are legally required to do so, or where disclosure is necessary to protect our legal rights or the safety of other players.
• Corporate Transactions: In the event of a merger, acquisition, restructuring, or sale of all or substantially all of our assets, your Personal Data may be transferred to the acquiring entity, subject to that entity honouring the commitments set out in this Policy.

All third parties with whom we share data are required to implement appropriate technical and organisational security measures and to process data only for the purposes specified in their agreement with koy855.

7. Data Retention

koy855 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The table below sets out our standard retention periods by data category:

When Personal Data is no longer required and no legal obligation mandates its retention, koy855 will securely delete or anonymise it so that it can no longer be linked to an identifiable individual.

8. Security Measures

koy855 takes the security of your Personal Data seriously and implements a layered set of technical and organisational controls to protect it against unauthorised access, loss, destruction, or alteration. Our security programme includes:

• Encryption in Transit: All data transmitted between your browser or app and our servers is protected by TLS 1.3 encryption. Plain-HTTP connections are automatically redirected to HTTPS.
• Encryption at Rest: Personal Data and KYC documents stored on our servers are encrypted using AES-256.
• Access Controls: Access to Personal Data is restricted on a strict need-to-know basis. All staff with data access undergo background screening and regular data-protection training.
• Two-Factor Authentication: koy855 supports and encourages two-factor authentication (2FA) for player accounts to reduce the risk of unauthorised access.
• Intrusion Detection: Our infrastructure is monitored continuously by automated intrusion-detection and anomaly-alert systems.
• Penetration Testing: We engage independent security specialists to conduct periodic penetration tests and vulnerability assessments of the platform.
• Incident Response: In the event of a Personal Data breach that is likely to result in a risk to your rights and freedoms, koy855 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

9. Cookies & Tracking Technologies

koy855 uses cookies and similar technologies (such as local storage and session tokens) to operate core platform functionality and to understand how players use the site. We categorise our cookies as follows:

• Strictly Necessary Cookies: Required to provide the Service — for example, session authentication tokens, load-balancing cookies, and fraud-prevention tokens. These cannot be disabled without breaking core platform functionality.
• Performance & Analytics Cookies: Collect anonymised data about how players navigate the platform — which pages are visited most often, where errors occur, and how long sessions last. This data is used in aggregate form only to improve platform performance.
• Functional Cookies: Remember your preferences such as language settings, display options, and last-visited game category to personalise your experience on return visits.

koy855 does not use third-party advertising cookies, cross-site tracking pixels, or social-media retargeting technologies. You can manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will prevent you from logging in to your account.

10. Your Privacy Rights

Subject to applicable law and certain limited exceptions (such as legal-retention obligations and fraud-investigation constraints), you have the following rights regarding your Personal Data held by koy855:

To exercise any of the rights above, please contact us at [email protected] with the subject line "Data Rights Request" and include your registered username and a clear description of your request. We will verify your identity before acting on any request and will respond within 30 calendar days. In complex cases, this period may be extended by a further 60 days with prior notice to you.

11. International Data Transfers

koy855's primary servers are located in secure data centres within jurisdictions that maintain appropriate standards of data protection. In order to deliver the Services, some of your Personal Data may be transferred to, and processed in, countries outside Indonesia — for example, by game-software providers or cloud-infrastructure partners headquartered in other jurisdictions.

Where such transfers occur, koy855 ensures that appropriate safeguards are in place, which may include:

• Entering into standard contractual data-transfer clauses with the receiving entity that impose GDPR-equivalent data-protection obligations.
• Transferring data only to countries or entities that maintain a data-protection framework assessed as providing adequate protection.
• Requiring the recipient to maintain binding corporate rules or equivalent internal data-protection policies.

You may request further information about the safeguards in place for any specific international transfer by contacting us at [email protected].

12. Minors

The koy855 Platform is strictly intended for adults aged 21 and over. We do not knowingly collect Personal Data from persons under the age of 21. All registration attempts are subject to age-verification checks, and full KYC verification is required before any withdrawal is processed.

If a parent or guardian believes that their child has provided Personal Data to koy855 without consent, they should contact us immediately at [email protected]. Upon verification of the claim, we will promptly delete the data and close the account, returning any real-money balance deposited to the original payment source where fraud is not suspected.

13. Third-Party Links

The Platform may contain links to third-party websites or embedded content from third-party game providers. koy855 has no control over the privacy practices or content of those third-party sites and services, and this Privacy Policy does not apply to them.

We encourage you to review the privacy policy of any third-party site you visit. koy855 accepts no responsibility or liability for the privacy practices, content, or actions of third-party websites or services accessible through the Platform.

14. Policy Amendments

koy855 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data-processing practices, or the features of the Platform. When material changes are made, we will notify registered players by email or via a prominent in-platform notification at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this page indicates when the current version came into force. We recommend reviewing this Policy periodically. Your continued use of the Platform following the effective date of any update constitutes your acceptance of the revised Policy. If you do not accept the changes, you should close your account prior to the effective date of the amendment.

15. Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way koy855 handles your Personal Data, please contact us using the details below:

• Email: [email protected]
• Subject Line: "Privacy Enquiry" or "Data Rights Request" as applicable
• Response Time: Within 30 calendar days of a verified written request
• Support Hours: 24 hours a day, 7 days a week, including Indonesian public holidays
• Languages: English and Indonesian

If you are not satisfied with our response to a privacy complaint, you may have the right to lodge a complaint with the relevant data-protection supervisory authority in your jurisdiction. koy855 will cooperate fully with any such regulatory inquiry.