Privacy Policy KOI288 — Protecting Your Personal Data

1 Introduction & Scope of This Policy

This Privacy Policy is published by KOI288, an online entertainment platform accessible at koi288.pro. This document clearly and thoroughly explains how we collect, process, store, protect, and share your personal information as a user of our platform.

This policy applies to all users who access or use the KOI288 platform, including website visitors, registered users, and active members. By using our platform, you acknowledge that you have read and fully understood this Privacy Policy.

KOI288 regards user privacy as a non-negotiable priority. In the online entertainment industry, trust is our most valuable asset. We ensure every data-related decision is made with the interests and safety of our users first.

2 Personal Data We Collect

KOI288 only collects data that is strictly necessary to provide a quality, secure service that meets regulatory requirements. We do not collect excessive or irrelevant information beyond what is needed to operate the platform.

Data is collected through three main channels: (1) information you provide directly during registration or when contacting support; (2) data automatically generated while you use the platform; and (3) information from legitimate third-party service providers such as payment processors.

3 How We Use Your Personal Data

Every piece of data collected by koi288 has a clear and lawful purpose. We do not use your data for undisclosed purposes without first obtaining your additional consent.

• Processing account registration and verifying your identity through the KYC process required by industry regulations
• Processing deposits, withdrawals, and other financial transactions securely and accurately via supported payment methods including DuitNow, Touch 'n Go eWallet, Boost, and FPX
• Providing responsive and effective customer support whenever you need assistance
• Sending important account-related notifications such as transaction confirmations, security alerts, and service updates
• Monitoring gameplay activity to detect patterns that may indicate problem gambling, for the purpose of our responsible gaming program
• Detecting and preventing fraud, money laundering, and other unlawful activities that could compromise platform security
• Improving the user experience based on aggregated and anonymized platform usage analytics
• Fulfilling legal obligations and regulatory requirements applicable to our operations

4 Data Sharing With Third Parties

KOI288 does not sell, rent, or trade users' personal data to any party for marketing purposes. However, in certain limited and controlled situations, we may need to share information with the following parties:

• Payment Service Provider — Authorised payment processors such as banks and digital wallet operators receive only the minimum information necessary to securely process your transaction
• Game Providers — Third-party game platforms integrated with koi288 may receive session identifiers required to run the games, but not your full identity information
• KYC Service Provider — Approved identity verification companies help us securely verify identity documents and comply with regulatory requirements
• Regulatory Authority — When required by law or court order, we are obligated to disclose information to the relevant authorities
• Technology Infrastructure Providers — Cloud computing and infrastructure companies we use to operate the platform, subject to strict data processing agreements

All third parties we work with are required to meet data protection standards equal to or higher than koi288's own standards. Binding confidentiality and data protection agreements are signed with every service partner.

5 Cookies & Tracking Technologies

KOI288 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

• Essential Cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled without affecting platform functionality
• Preference Cookies: Saving your preferences such as language, display settings, and favourite game selections to make your experience more comfortable
• Analytics Cookies: Helping us understand how users interact with the platform in aggregate for continuous improvement — this data is processed anonymously
• Security Cookies: Used to detect suspicious activity, prevent unauthorized access, and protect your account from security threats

You can manage your cookie settings through your web browser at any time. However, disabling certain cookies may affect the functionality of some parts of our platform. For more information on managing cookies, refer to your web browser's help documentation.

6 Data Security Measures

KOI288 invests seriously in security infrastructure to ensure users' personal data is protected against unauthorized access, theft, damage, or accidental disclosure.

• 256-bit SSL/TLS encryption for all data transmitted across the network
• Passwords are stored using strong one-way hashing algorithms — even KOI288 staff cannot view your password
• Two-factor authentication (2FA) available for all user accounts
• Multi-layer firewall and intrusion detection system (IDS) active 24/7
• Regular security audits conducted by qualified independent parties
• Role-based access control (RBAC) to ensure staff only access data within the scope of their responsibilities
• Continuous monitoring to detect and respond to any security threats in real time
• A comprehensive incident response plan to ensure prompt action in the event of any security breach

7 Data Retention & Deletion Period

KOI288 does not retain your personal data longer than is necessary for the purpose it was collected, or longer than is required by applicable law.

• Active Account Data: Retained for the duration your account is active and for an additional period after account closure as required by law
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with applicable financial and taxation legal requirements in Malaysia
• Support Communication Logs: Retained for 3 years for reference and dispute resolution purposes
• KYC Verification Data: Retained for a minimum of 5 years after the business relationship ends, in accordance with anti-money laundering legal requirements
• Cookie & Session Data: Session cookies are deleted when you close your browser; persistent cookies are deleted according to their set expiry period

When the retention period expires, data is securely deleted using methods that ensure it cannot be recovered. For data stored in physical format, a secure document destruction process is applied.

8 Your Rights as a User

As a koi288 platform user, you have clear and enforceable rights regarding your personal data. koi288 fully respects and facilitates the exercise of these rights.