Privacy Policy koi800 – Member Personal Data Protection in Malaysia

Koi800 takes the protection of personal data extremely seriously. As an online entertainment and betting platform operating in Malaysia and serving Malaysian users, we are subject to and fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA). All our data processing practices are designed to meet or exceed the legal requirements set out by the PDPA.

This Privacy Policy applies to all personal data we collect across every point of interaction — including account registration, platform usage, financial transactions, communications with our support team, and any other form of engagement between you and koi800. It also applies to data collected through automated technologies such as cookies and website analytics.

If you have any questions about how koi800 handles your personal data, we encourage you to reach out to us at support@koi800.best before using the platform. Our team communicates in Bahasa Malaysia and is ready to address any privacy-related enquiries openly and clearly.

Koi800 only collects personal data that is necessary to deliver our services safely, efficiently, and responsibly. We do not collect excessive or irrelevant data. The following are the categories of data we collect and the purposes for which they are used:

Data We Do Not Collect

• Full credit or debit card numbers (we do not store payment card details directly).
• Passwords in plain text form (all passwords are hashed using secure algorithms).
• Biometric data such as fingerprints or facial scans.
• Sensitive information relating to your religion, health, or political affiliation.

Koi800 uses the personal data we collect solely for legitimate purposes directly related to providing our services to you as a member. We will not process your data for any other purpose without first obtaining your additional consent.

Primary Purposes of Data Use

• Account Management: Creating, verifying, and maintaining your koi800 account, including the KYC process required for regulatory compliance.
• Transaction Processing: Processing deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as withdrawals to your bank account or e-wallet.
• Platform Services: Gives you access to all koi800 games and services, including Live Casino, slots, lottery, EPL and Malaysia Super League football betting, badminton, and e-sports.
• Security & Fraud Prevention: Detecting and preventing unauthorized access, fraud, money laundering, and activities that violate koi800's Terms & Conditions.
• Customer Support: Processing assistance requests, complaints, and enquiries submitted to our koi800 support team.
• Service Communications: Sending transaction notifications, account updates, security information, and important changes to koi800's Policy or Terms.
• Legal Compliance: To fulfil legal obligations under Malaysia's PDPA and other applicable laws.

Marketing Communications

Koi800 may send you promotional information, bonus offers, and updates on new games via email or platform notifications. You may opt out of these marketing communications at any time by contacting us at support@koi800.best or through the communication preference settings in your account. Please note that unsubscribing from marketing communications will not affect the receipt of important account-related notifications such as transaction confirmations.

Koi800 does not sell, rent, or trade your personal data to any third party for their marketing or commercial purposes. This is an absolute and unwavering commitment. However, there are limited situations where koi800 needs to share data with certain parties to enable our services to function properly.

Situations Where Data May Be Shared

• Payment Service Providers: Required transaction data is shared with e-wallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay) and banking institutions (via DuitNow and FPX) solely for the purpose of processing your financial transactions. They are subject to their own privacy policies and security standards.
• Game Providers: Limited game session information is shared with game software providers (such as Pragmatic Play and Microgaming) solely for technical purposes to ensure games run correctly.
• Security Services: We engage third-party services that specialise in fraud detection and cybersecurity. Data sharing is limited to what is necessary to protect your account.
• Legal Compliance: koi800 may be required to disclose your personal data when mandated by Malaysian law, a court order, or a directive from the relevant authorities.

Koi800 continuously invests in robust cybersecurity infrastructure to protect the personal data of all our members. Our approach to data security is multi-layered, combining technology, processes, and staff training to establish a comprehensive defence.

Technical Security Measures

• SSL 256-bit Encryption: All communications between your browser and koi800's servers are encrypted using the same TLS/SSL 256-bit protocol used by major Malaysian banking institutions.
• Data-at-Rest Encryption: Personal data stored in koi800's databases is also encrypted, ensuring protection even in the event of a physical breach.
• Two-Factor Authentication (2FA): Members are encouraged to enable two-factor authentication to add an extra layer of security to their accounts.
• 24/7 Monitoring: Our automated monitoring system detects and alerts on any suspicious activity or unauthorized access attempts around the clock.
• Regular Penetration Testing: koi800 conducts regular security assessments, including penetration testing carried out by independent security experts.
• Internal Access Management: Access to members' personal data within koi800 is restricted to staff who genuinely need it to perform their duties, in line with the principle of least privilege.

In the Event of a Data Breach

While koi800 takes all reasonable precautions, no system can be guaranteed 100% secure. In the event of a data breach affecting your personal information, koi800 is committed to notifying you in a timely manner in accordance with Malaysia's PDPA requirements, explaining the nature of the breach, the data that may have been affected, and the steps being taken to address it.

The koi800 platform uses cookies and similar tracking technologies to enhance your user experience, maintain session security, and help us understand how the platform is used so we can continue to improve it.

Types of Cookies Used

• Essential Cookies: Required for the platform to function properly. This includes session authentication cookies that keep you securely logged in while you use koi800. These cookies cannot be disabled.
• Functional Cookies: Helps the platform remember your preferences such as language, favourite game types, and display settings, allowing us to deliver a more personalised experience.
• Analytical Cookies: We use anonymised usage data to understand navigation patterns, the most popular games, and areas of the platform that need improvement. This data does not identify you personally.
• Security Cookies: Helps detect suspicious activity such as repeated login attempts or unusual betting patterns that may indicate unauthorised access.

Managing Your Cookie Preferences

You can manage or delete cookies through your web browser settings. Please note that disabling essential cookies may affect the functionality of the koi800 platform and you may be unable to log in or use certain features. For guidance on managing cookies in your specific browser, refer to your browser's support section.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and koi800's commitment to privacy, you have the following rights regarding the personal data we hold about you. koi800 respects and facilitates the exercise of all these rights.

Koi800 does not retain your personal data longer than is necessary for the purpose for which it was collected, unless a longer retention period is required under Malaysian law or applicable anti-money laundering (AML) regulations.

General Retention Period

• Active Account Data: Retained for the duration your account remains active and for the required period following account closure.
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date, in line with Malaysian financial regulatory requirements.
• KYC Records (Identity Verification): Retained for a minimum of 5 years after account closure in accordance with PDPA and AML requirements.
• Support Communication Logs: Retained for 2 years after case resolution for reference and quality control purposes.
• Technical Log Data: Server and security logs are retained for 90 days for threat detection purposes.

Once the retention period expires and there is no legal requirement for further storage, koi800 will delete or destroy your personal data securely using industry-recognised methods to ensure the data cannot be recovered.

The koi800 platform is exclusively for individuals aged 18 and above. We do not provide services to minors and we do not knowingly collect any personal data from individuals under the age of 18.

If koi800 discovers that we have inadvertently collected personal data from an individual under the age of 18, we will take immediate action to delete that data and close the associated account. Any remaining funds in the account will be handled in accordance with the relevant procedures, involving the appropriate authorities if necessary.

Koi800 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. All amendments will be published on this page with a clearly indicated update date.

For material amendments — meaning changes that significantly affect how we handle your data — koi800 will send a notice to your registered email address at least 14 days before the amendment takes effect. Continued use of the koi800 platform after the effective date of any amendment will be considered acceptance of the updated Privacy Policy.

If you have any questions, concerns, or requests relating to koi800's Privacy Policy or the way we handle your personal data, our team is here to help. We take every privacy-related enquiry seriously and are committed to providing transparent and satisfactory responses.

Contact Information for Privacy Enquiries

• Email: support@koi800.best
• Email Subject: Please include "Privacy Enquiry" or "Data Request" in the subject line to help us handle your request more efficiently
• Response Time: Privacy enquiries are typically responded to within 3 business days; data rights requests within 14 business days
• Language: Bahasa Melayu & English
• Operations: 24 hours a day, 7 days a week

For formal complaints regarding personal data handling that cannot be resolved through koi800's support channels, you have the right to lodge a complaint with the Personal Data Protection Department of Malaysia (JPDP) under the Ministry of Digital.