Koi388 Privacy Policy – Our Commitment to Members in Malaysia

1. Introduction

Koi388 ("we", "our platform") is committed to protecting the privacy and security of the personal data of every member using our online betting platform in Malaysia. This Privacy Policy ("Policy") explains how we collect, process, store, protect, and share your personal information when you use koi388's services through koi388.my and all associated platforms.

This Privacy Policy applies to all koi388 platform users, including visitors, registered users, and former members whose data remains in our system. We handle your personal data as the "data controller" under Malaysia's Personal Data Protection Act 2010 (PDPA).

By accessing the koi388 website or registering an account, you confirm that you have read, understood, and agreed to this Privacy Policy. If you do not agree, please stop using the platform immediately and contact us to request deletion of your data.

2. Types of Personal Data We Collect

Koi388 collects the following categories of personal data when you use our platform:

2.1 Identity Information

• Full name as stated on your identity card (MyKad)
• National identity card number (MyKad) or passport number
• Date of birth and gender
• Photo or copy of an identity document (if requested for verification)

2.2 Contact Information

• Active email address
• Malaysian mobile phone number
• Residential address in Malaysia

2.3 Financial Information

• Malaysian bank account number (Maybank, CIMB, Public Bank, and others)
• Digital wallet details used — Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, or DuitNow
• Deposit and withdrawal transaction history in RM
• Betting activity records and account balance

2.4 Technical Information

• IP address and general geographic location
• Device type, operating system, and web browser used
• Platform usage data, including pages visited and session duration
• Login and account activity records
• Cookie data and device identifiers

3. How We Collect Personal Data

Koi388 collects your personal data through the following methods:

• Account Registration: Information you provide when completing the registration form at koi388.my.
• Identity Verification (KYC): Documents uploaded during the account verification process, such as a copy of your MyKad or bank statement.
• Financial Transactions: Data automatically collected when you make a deposit via FPX, Touch 'n Go eWallet, GrabPay, or other supported payment methods.
• Platform Usage: Data collected automatically via cookies, tracking pixels, and similar technologies as you browse koi388.my.
• Support Communications: Information you provide when contacting the koi388 support team via live chat or email.
• Third-Party Sources: In certain cases, we may receive information from approved payment partners or identity verification bodies for legal compliance purposes.

4. Purposes of Personal Data Processing

Koi388 uses your personal data solely for the following legitimate and necessary purposes:

• Account Management: To create, verify, and manage your member account on the koi388 platform.
• Transaction Processing: Processing deposits in MYR via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, as well as withdrawals to your Malaysian bank account.
• Age and Identity Verification: To ensure all members meet the minimum age requirement of 18 and to verify identity for KYC/AML compliance purposes.
• Platform Security: Detecting and preventing fraud, money laundering, multi-account usage, and other unlawful activities on the koi388 platform.
• Customer Support: To respond to member inquiries, complaints, and support requests more effectively.
• Responsible Gambling: Monitoring betting patterns to identify members who may need assistance and to enforce limits set by members themselves.
• Legal Compliance: To fulfill legal obligations under Malaysia's PDPA, anti-money laundering laws, and related reporting requirements.
• Marketing Communications: Sending information about relevant koi388 promotions, bonuses, and offers — only if you have consented to receive them.

5. Sharing Data with Third Parties

Koi388 does not sell or trade your personal data. However, we may share your information in the following limited circumstances:

• Payment Service Providers: Payment processing partners such as FPX, Touch 'n Go eWallet, GrabPay, and other service providers required to complete your financial transactions.
• IT Service Providers: Cloud hosting and cybersecurity companies that support the technical operations of the koi388 platform, subject to strict confidentiality agreements.
• Identity Verification Partners: Approved KYC service providers for identity verification and anti-money laundering compliance purposes.
• Legal Authorities: Law enforcement agencies, regulatory bodies, or courts in Malaysia when we are required to do so by law or court order.
• Business Transfer: In the event that koi388 is involved in a merger, acquisition, or asset sale, your personal data may be transferred as part of that business transaction, with advance notice provided to you.

All third parties that receive your personal data from koi388 are required to protect it to a standard no less stringent than the one we apply ourselves.

6. Data Security

Koi388 continually invests in security infrastructure to protect your personal data. The security measures we have in place include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers
• Data-at-rest encryption for stored sensitive information
• Tiered access controls — only authorised personnel may access personal data, in accordance with the principle of least privilege
• Round-the-clock security monitoring to detect suspicious activity or attempted data breaches
• Periodic security audits by independent third parties
• Mandatory data protection training for all koi388 staff who handle personal data
• A comprehensive data incident response plan to ensure any breach is handled promptly and accurately

While koi388 takes all reasonable steps to protect your data, no system can be guaranteed 100% secure against all cyber threats. We encourage you to take precautions on your end as well, such as using a strong password and keeping your login credentials confidential.

7. Cookies and Tracking Technologies

Koi388 uses cookies and similar tracking technologies to enhance your experience on our platform. We use several types of cookies:

• Essential Cookies: Required for core platform functions such as login, session management, and security. Cannot be disabled.
• Performance Cookies: Collects anonymous data on how users interact with the platform to help us improve website performance.
• Functional Cookies: Saving your preferences such as language and display settings for a more convenient experience in the future.
• Marketing Cookies: Used to display relevant promotions to you. You may opt out of these cookies through your browser settings.

You can manage or disable cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality of the koi388 platform.

8. Your Rights Under Malaysia's PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by koi388:

Rights	Description	How to Make a Claim
Right of Access	Request a copy of the personal data we hold about you	Email us at support@koi388.my
Right of Rectification	Request correction of inaccurate or incomplete data	Via account settings or email
Right to Erasure	Request data deletion when it is no longer required	Email us at support@koi388.my
Right to Object	Object to the processing of your data for direct marketing purposes	Opt out via email or account settings
Right to Restriction	Request a restriction on the processing of your data in certain circumstances	Email us at support@koi388.my
Right to Portability	Receive your data in a machine-readable format	Email us at support@koi388.my

Koi388 will process all data rights requests within 14 business days of receiving a complete request. We may require additional identity verification before processing your request to ensure data security.

9. Children's Privacy

The koi388 platform is intended for users aged 18 and above only. We do not knowingly collect or process personal data from individuals under the age of 18. Should we discover that personal data belonging to someone under 18 has been inadvertently collected, we will take immediate steps to delete that data and close the account in question.

If you believe we may have collected data from someone under the age of 18, please contact us immediately at support@koi388.my so we can take appropriate action.

10. Cross-Border Data Transfers

In the course of operating the koi388 platform, your personal data may be transferred to and stored on servers located outside Malaysia. Where such transfers occur, koi388 ensures that adequate safeguards are in place to protect your data, including through data processing agreements that comply with recognised international standards.

We ensure that all cross-border data transfers comply with Malaysia's PDPA requirements and that recipients of data outside Malaysia are bound by equivalent data protection standards.

11. Data Retention Period

Koi388 retains your personal data for as long as necessary for the stated purpose or as required by Malaysian law. As a general guide:

• Active account data is retained for the duration the account remains active, plus 5 years after account closure for legal compliance purposes.
• Financial transaction records are retained for a minimum of 7 years in compliance with Malaysian accounting and anti-money laundering legislation.
• Log and security data is retained for 2 years for security incident investigation purposes if required.
• Customer support communication data is retained for 3 years for reference and service improvement purposes.
• Marketing data is retained until you withdraw your consent or request deletion.

Once the retention period expires, data will be permanently deleted or anonymised so it can no longer be linked to your identity.

12. Amendments to the Privacy Policy

Koi388 reserves the right to amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or service improvements. You will be notified of any material amendments through:

• An email notification to your registered email address at least 14 days before the amendment takes effect, for material changes
• Banner notice on the koi388.my homepage
• Update the "Last Updated" date at the top of this document

Continued use of the koi388 platform after any amendments take effect constitutes your acceptance of the updated Privacy Policy. It is your responsibility to review this page periodically.

13. How to Contact Us

For any inquiries, concerns, or requests regarding this Privacy Policy or your personal data, please contact koi388's Data Protection Officer through the following channels:

• Email: support@koi388.my
• Live Chat: Available 24 hours a day, 7 days a week through the koi388 platform

We are committed to responding to all privacy-related inquiries within 3 business days. For formal requests regarding data rights under the PDPA, please include "PDPA Data Rights Request" in your email subject line to help us process your request more efficiently.