kotakwin Platform Privacy Notice

This page describes what we collect when you use kotakwin and how we keep that data protected. We process personal information — such as your email, identity documents, payment details, and account activity — only for account management, fraud prevention, regulatory compliance, and service delivery.

We at kotakwin comply with Indonesian data protection principles and international standards. Our servers and processors may be located outside Indonesia; we ensure contractual safeguards apply wherever your data travels. You have the right to access, correct, or request deletion of your personal information subject to legal and operational constraints.

If you have questions about our privacy practices or wish to exercise your data rights, contact our support team via the details provided at the end of this notice.

What data we collect on kotakwin

We collect personal information in several categories to operate the kotakwin platform safely and lawfully. When you register an account, we collect your email address, phone number, full name, and date of birth. These details form the basis of your account identity and are required before you can deposit funds or play any game.

For withdrawal eligibility, we require identity verification (KYC). You upload a clear photograph of your government-issued identity document (KTP, passport, or driver's licence) and a selfie. We process these documents to confirm your identity and prevent fraud, money laundering, and account takeover. Once verified, your identity documents are stored securely and accessed only by our compliance team.

We collect financial information when you deposit or withdraw. This includes your payment method details (e-wallet account, bank account number), transaction amounts, timestamps, and payment provider records. We also log your betting activity — which games you play, wager amounts, outcomes, balance changes, and timestamps. This activity log is retained for account auditing, dispute resolution, and regulatory reporting. We do not retain your complete payment card numbers; payment processors (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet) tokenize and secure sensitive payment credentials.

How we use your data

We use your personal information for the following purposes:

• Account operation: Creating and managing your kotakwin account, processing deposits and withdrawals, calculating loyalty tier progression and weekly cashback, and responding to your support requests.
• Fraud and security: Detecting unusual account activity, preventing account takeover, verifying your identity before withdrawals, and investigating disputes or chargebacks.
• Regulatory compliance: Reporting to Indonesian financial authorities if required, maintaining records for tax purposes, and complying with anti-money-laundering (AML) obligations.
• Promotional communication: Sending emails or SMS about tournament schedules, promotion eligibility, tier upgrades, and referral rewards — only to accounts that have not opted out.
• Improvement: Analysing aggregate usage patterns to improve game offerings, payment flows, and customer support quality.

We do not sell your personal information to third parties. We do not use your data for purposes outside these legitimate operational and legal grounds.

Third-party processors and international transfers

Our kotakwin platform relies on third-party service providers to deliver certain functions. Payment processors (mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment) handle payment tokenization and settlement. Cloud infrastructure providers host our servers and databases (which may be located outside Indonesia). Email and communication platforms send transactional and promotional messages. Analytics providers (with personal data pseudonymized) help us understand platform usage.

We require all processors to sign data processing agreements that impose confidentiality, security, and compliance obligations. We audit processor practices annually. Your personal information is only disclosed to processors who have a legitimate need to access it — for example, payment processors access payment details; identity verification services access your identity documents; support staff access your account history and communications only when handling your request.

Because our infrastructure spans multiple jurisdictions, your personal data may be transferred to and stored in countries outside Indonesia. We ensure that transfers occur only under contract terms that guarantee data protection equivalent to Indonesian standards. If you object to international transfer, contact our support team; we will advise whether account operation is possible within Indonesia-only storage (which may limit service availability).

Your rights and how to exercise them

You have the following rights regarding your personal information held by kotakwin:

• Right of access: You can request a copy of all personal data we hold about you, free of charge.
• Right of correction: If your data is inaccurate or incomplete, you can request that we correct it. You can also update your email, phone, or name directly via your kotakwin account settings.
• Right of deletion: Subject to legal retention requirements and active account status, you can request deletion of your data. We will retain activity logs for 7 years if required by financial regulations.
• Right to opt out of marketing: You can disable promotional emails and SMS via your account preferences or by contacting support.
• Right to lodge a complaint: If you believe our data practices violate applicable law, you can lodge a complaint with the Indonesian Data Protection Authority (if established) or pursue legal remedies.

To exercise any of these rights, contact our support team at the email or live chat details provided in your account. Include your account username, full name, and a description of your request. We will respond within 30 days. If we deny your request, we will explain our reasoning — for example, if your data is required by law for 7 years, deletion may not be possible until that period expires.

Cookies and tracking technologies

Our kotakwin platform uses cookies and similar technologies to enhance user experience and maintain account security. Session cookies remember your login state so you remain authenticated while browsing. Analytics cookies (non-personally identifying) track page usage and help us improve navigation. Security cookies enable two-factor authentication and fraud detection.

Most browsers allow you to decline cookies or clear them after each session. However, disabling cookies may impair kotakwin functionality — for example, you may be logged out after each page refresh or unable to complete transactions. We recommend enabling cookies to use kotakwin properly. Do-not-track (DNT) signals sent by your browser are not systematically honoured; we encourage you to manage cookies via browser settings instead.

We are committed to protecting your privacy while delivering a secure, compliant gaming and sportsbook platform on kotakwin.

Security measures and data breaches

We at kotakwin employ industry-standard security practices to protect your personal information from unauthorized access, alteration, or disclosure. Your account password is hashed (not reversible) and stored securely. Payment details are encrypted in transit using TLS/SSL protocols. Our servers are protected by firewalls, intrusion detection systems, and regular security audits. Access to sensitive data is restricted to authorized staff on a need-to-know basis.

If we discover a security breach or unauthorized access to your personal data, we will notify you via email and through your kotakwin account within the timeframe required by law (typically 72 hours). We will describe the nature of the breach, the data affected, and steps you should take to protect yourself. We will also notify relevant Indonesian authorities if required. No notification delay will be caused by investigation; we will provide an initial notification promptly and updates as we investigate.

Changes to this privacy notice

We may update this privacy notice if our practices change or if law requires it. We will post the updated notice on kotakwin at least 30 days before it takes effect. If changes materially affect how we use your data, we will send you an email notification. Your continued use of kotakwin after the effective date of updates constitutes acceptance of the revised notice. If you do not accept changes, you may request account closure and deletion of your data (subject to legal retention obligations).

Contact and complaints

If you believe our data handling violates Indonesian data protection law or your rights, you may lodge a complaint with the relevant Indonesian authority or pursue legal remedies in Indonesian courts. We are committed to resolving data privacy concerns collaboratively; please contact us first to attempt resolution.

Our kotakwin platform is operated in accordance with Indonesian law and international best practices. Service is available only in jurisdictions where online gaming is legally permitted. Before opening an account, confirm that your location allows online gaming and personal data processing by online platforms.

This privacy notice was last updated in May 2026 and is effective immediately. Thank you for using kotakwin.