Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal information collected by km914 through our website located at https://km914.cam, mobile applications, customer service channels, and any other services we provide (collectively, the "Platform"). This policy governs our data collection and processing practices when you visit our Platform, register an account, place bets, contact customer support, or interact with our services in any capacity.

km914 operates as an online betting platform serving the Indonesian market. We are committed to compliance with applicable data protection laws and regulations, including Indonesian privacy legislation and international best practices for data security. This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern your use of the Platform.

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact our Data Protection Officer at [email protected]. We are committed to addressing your concerns promptly and transparently.

2. Information We Collect

km914 collects various categories of personal information necessary to provide our services, ensure platform security, comply with legal obligations, and improve user experience. The information we collect includes:

2.1 Information You Provide Directly

When you register an account or use our services, you voluntarily provide the following information:

• Identity Information: Full legal name, date of birth, gender, nationality, and government-issued identification numbers (Indonesian national ID / KTP number, passport number).
• Contact Information: Email address, phone number, residential address, and postal code.
• Account Credentials: Username, password, and security questions/answers.
• Financial Information: Bank account details (bank name, account number, account holder name), payment method information, transaction history, and deposit/withdrawal records.
• Verification Documents: Copies of government-issued identification (KTP, passport), proof of address documents (utility bills, bank statements), selfie photographs for identity verification, and bank account verification documents.
• Communication Records: Content of correspondence with customer support, including live chat transcripts, email exchanges, and phone call recordings (with your consent, where legally required).
• Survey and Feedback Information: Responses to surveys, questionnaires, promotional offers, and feedback forms.

2.2 Information Collected Automatically

When you access or use the km914 Platform, we automatically collect certain technical and usage information through cookies, web beacons, and similar technologies:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, Android ID, IDFA), and mobile network information.
• Connection Information: IP address, internet service provider, connection speed, and geographic location data derived from IP address.
• Usage Data: Pages visited, features used, time spent on pages, click patterns, navigation paths, referring/exit pages, date and time stamps, and frequency of visits.
• Gaming Activity: Bets placed, games played, wagering patterns, betting amounts, win/loss records, bonus usage, and gaming preferences.
• Cookie Data: Information stored in cookies and similar tracking technologies. For details, see Section 8 (Cookies and Tracking Technologies).

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment Processors: Transaction verification data, payment success/failure notifications, and fraud detection information from banks and payment service providers.
• Identity Verification Services: Verification status, risk scores, and identity confirmation data from KYC/AML service providers.
• Marketing Partners: Referral information, marketing attribution data, and aggregated demographic information (only if you interacted with km914 through partner channels).
• Public Sources: Publicly available information from government registries, sanctions lists, and politically exposed persons (PEP) databases for compliance purposes.

3. How We Use Your Information

km914 processes your personal information for the following legitimate business purposes and legal obligations:

3.1 Service Provision and Account Management

• Creating, maintaining, and managing your gaming account.
• Processing deposits, withdrawals, and other financial transactions.
• Enabling you to place bets and participate in games and betting markets.
• Calculating and crediting winnings to your account balance.
• Providing customer support and responding to inquiries.
• Sending transactional communications (deposit confirmations, withdrawal notifications, account updates).

3.2 Verification and Compliance

• Verifying your identity, age (21+ requirement), and eligibility to use our services.
• Conducting Know Your Customer (KYC) and Anti-Money Laundering (AML) checks.
• Complying with legal and regulatory obligations, including reporting requirements.
• Preventing underage gambling and unauthorized account access.
• Detecting and preventing multiple account creation (prohibited by our Terms).

3.3 Security and Fraud Prevention

• Detecting, investigating, and preventing fraudulent activities, cheating, and terms violations.
• Monitoring betting patterns for irregular activity, collusion, arbitrage betting, and bonus abuse.
• Protecting the integrity of our games and sports betting markets.
• Safeguarding our Platform from cyber attacks, unauthorized access, and technical vulnerabilities.
• Resolving disputes and enforcing our Terms & Conditions.

3.4 Marketing and Communications

• Sending promotional offers, bonus opportunities, and special campaigns (with your consent, where required).
• Personalizing marketing messages based on your gaming preferences and activity.
• Conducting market research, surveys, and customer satisfaction studies.
• Notifying you about new features, games, betting markets, and platform updates.

Your Choice: You can opt out of marketing communications at any time by clicking the unsubscribe link in promotional emails or contacting customer support. Opting out of marketing does not affect transactional or account-related communications, which are essential to providing our services.

3.5 Platform Improvement and Analytics

• Analyzing usage patterns to improve platform functionality, navigation, and user experience.
• Conducting A/B testing on features, layouts, and promotional offers.
• Identifying and fixing technical issues, bugs, and performance problems.
• Developing new games, betting markets, features, and payment methods.
• Generating aggregated, anonymized statistics for business intelligence (these statistics do not identify individual users).

3.6 Responsible Gaming

• Monitoring gaming behavior for signs of problem gambling.
• Implementing deposit limits, loss limits, and self-exclusion requests.
• Providing access to responsible gaming tools and resources.
• Enforcing cooling-off periods and permanent self-exclusion commitments.

4. Legal Basis for Processing (for EU/EEA Users)

While km914 primarily serves the Indonesian market, if you are located in the European Union or European Economic Area, we process your personal data based on the following legal grounds under the General Data Protection Regulation (GDPR):

• Contract Performance: Processing necessary to fulfill our contractual obligations to you under our Terms & Conditions (account management, transactions, service provision).
• Legal Obligation: Processing required to comply with applicable laws, including KYC/AML regulations, tax laws, and regulatory reporting.
• Legitimate Interests: Processing necessary for our legitimate business interests (fraud prevention, platform security, analytics, customer support) where such interests are not overridden by your fundamental rights.
• Consent: Processing based on your explicit consent (marketing communications, optional cookies). You may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

5. How We Share Your Information

km914 does not sell your personal information to third parties. However, we may share your information with selected third parties under the following circumstances:

5.1 Service Providers and Processors

We engage trusted third-party service providers to perform functions on our behalf, including:

• Payment Processors: Banks and payment service providers to process deposits and withdrawals.
• Identity Verification Services: KYC/AML verification providers to confirm your identity and conduct compliance checks.
• Cloud Hosting Providers: Secure data storage and server infrastructure providers.
• Customer Support Tools: Live chat platforms, helpdesk systems, and communication service providers.
• Analytics Providers: Web analytics and business intelligence platforms (using anonymized or aggregated data).
• Security Services: Fraud detection, DDoS protection, and cybersecurity service providers.

All third-party service providers are contractually obligated to handle your personal information securely, use it only for the specified purposes, and maintain confidentiality.

5.2 Legal and Regulatory Authorities

We may disclose your information to government authorities, law enforcement agencies, regulatory bodies, or courts when:

• Required by applicable law, regulation, legal process, or court order.
• Necessary to comply with tax obligations, anti-money laundering laws, or sanctions regulations.
• Requested by regulatory authorities conducting audits or investigations.
• Necessary to protect our legal rights, prevent fraud, or defend against legal claims.

5.3 Business Transfers

In the event km914 undergoes a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the successor entity or acquirer as part of the business transition. We will notify you via email and/or prominent notice on our Platform prior to such transfer.

5.4 Consent-Based Sharing

With your explicit consent, we may share your information with third parties for purposes not covered by this Privacy Policy. You have the right to withdraw such consent at any time.

6. Data Security Measures

km914 implements comprehensive technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction:

6.1 Technical Security

• Encryption: All data transmission between your device and our servers is protected by 256-bit SSL/TLS encryption. Sensitive data stored in our databases is encrypted at rest using industry-standard algorithms.
• Secure Infrastructure: Our servers are hosted in secure, access-controlled data centers with redundant power, climate control, and physical security measures.
• Firewall Protection: Multi-layer firewall architecture prevents unauthorized network access and protects against DDoS attacks.
• Intrusion Detection: Real-time monitoring systems detect and alert us to suspicious activity and potential security breaches.
• Regular Security Audits: Third-party security firms conduct periodic penetration testing and vulnerability assessments.
• Secure Payment Processing: Payment card data (if applicable) is processed in compliance with PCI-DSS standards. km914 does not store complete payment card numbers.

6.2 Organizational Security

• Access Controls: Personal information access is restricted on a need-to-know basis. Employees receive unique credentials and authorization levels based on their roles.
• Employee Training: Staff undergo regular data protection and information security training.
• Confidentiality Agreements: All employees and contractors sign confidentiality agreements prohibiting unauthorized disclosure of personal information.
• Incident Response Plan: We maintain a documented incident response plan to address potential data breaches swiftly and effectively.

6.3 Your Responsibility

While we implement robust security measures, you also play a critical role in protecting your account:

• Choose a strong, unique password and never share it with anyone.
• Enable two-factor authentication if available.
• Log out from your account on shared or public devices.
• Immediately report suspicious activity to customer support.
• Keep your contact information updated so we can reach you if needed.

7. Data Retention

km914 retains your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

7.1 Retention Periods

Data Category	Retention Period	Rationale
Account Information	Duration of account + 7 years	Legal compliance (AML/tax requirements)
Transaction Records	7 years from transaction date	Financial regulations, audit requirements
KYC Documents	7 years from account closure	Regulatory obligations, fraud prevention
Communication Records	3 years from last interaction	Customer support quality, dispute resolution
Marketing Consent Records	Duration of consent + 2 years	Consent management, compliance evidence
Website Usage Data	26 months	Analytics, platform improvement
Security Logs	2 years	Fraud investigation, security monitoring

7.2 Account Closure and Data Deletion

If you close your account, we will:

• Deactivate your account and prevent further use.
• Remove your personal information from active systems after resolving outstanding transactions.
• Retain certain information in archived form for the periods specified above to comply with legal obligations.
• Permanently delete archived data after retention periods expire, unless extended retention is legally required.

Note: Information may be retained longer if necessary for legal proceedings, investigations, or regulatory inquiries.

8. Cookies and Tracking Technologies

km914 uses cookies, web beacons, and similar technologies to enhance user experience, analyze platform usage, and deliver personalized content.

8.1 Types of Cookies We Use

• Essential Cookies: Required for basic platform functionality (login, session management, security). These cannot be disabled.
• Performance Cookies: Collect aggregated information about platform usage to identify performance issues and improve speed.
• Functional Cookies: Remember your preferences (language, layout settings) to enhance user experience.
• Analytical Cookies: Help us understand how visitors interact with the platform through anonymized statistics.
• Marketing Cookies: Track your browsing activity to deliver relevant promotional content (requires consent).

8.2 Managing Cookie Preferences

You can control cookie settings through your browser settings. Most browsers allow you to:

• View and delete existing cookies.
• Block third-party cookies.
• Block all cookies (note: this may impair platform functionality).
• Receive notifications when cookies are set.

Note that disabling cookies may affect your ability to use certain features of the km914 Platform.

9. International Data Transfers

km914 primarily serves users in Indonesia. However, some of our service providers and data storage facilities may be located outside Indonesia. When we transfer your personal information internationally, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by data protection authorities.
• Adequacy decisions recognizing equivalent data protection standards.
• Binding corporate rules for intra-group transfers.
• Your explicit consent where required by law.

All international transfers comply with applicable Indonesian and international data protection laws.

10. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

10.1 Rights Available to All Users

• Right to Access: Request confirmation of what personal information we hold about you and receive a copy.
• Right to Correction: Request correction of inaccurate or incomplete personal information.
• Right to Update: Update your account information directly through your account settings.
• Right to Withdraw Consent: Withdraw consent for marketing communications or optional data processing.
• Right to Complain: Lodge a complaint with relevant data protection authorities if you believe your privacy rights have been violated.

10.2 Additional Rights (EU/EEA Users Under GDPR)

• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data in certain circumstances.
• Right to Restrict Processing: Request limitation of how we process your data in specific situations.
• Right to Data Portability: Receive your personal data in a structured, machine-readable format and transmit it to another controller.
• Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.

10.3 Exercising Your Rights

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with:

• Your full name and registered email address.
• A clear description of your request.
• Proof of identity (to prevent unauthorized access to your information).

We will respond to verified requests within 30 days. In some cases, we may need to retain certain information to comply with legal obligations or establish/defend legal claims, even after a deletion request.

11. Children's Privacy

The km914 Platform is intended exclusively for adults aged 21 years or older. We do not knowingly collect personal information from individuals under 21 years of age. If we discover that we have inadvertently collected information from someone under 21, we will immediately delete such information and terminate the associated account.

If you are a parent or guardian and believe your child under 21 has provided personal information to km914, please contact us immediately at [email protected] so we can take appropriate action.

12. Changes to This Privacy Policy

km914 reserves the right to update this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or platform features. Material changes will be communicated through:

• Prominent notice on our Platform homepage.
• Email notification to registered users.
• In-platform notifications upon your next login.

The "Last Updated" date at the top of this policy indicates when the most recent changes were made. We encourage you to review this Privacy Policy regularly to stay informed about how we protect your information. Continued use of the Platform after policy changes constitutes your acceptance of the updated terms.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Data Protection Officer: [email protected]
• Customer Support: Available 24/7 via live chat (after login) and email
• Response Time: We aim to respond to privacy inquiries within 2-5 business days

Our Indonesian-speaking support team is available to assist you with privacy-related questions in your preferred language.