Privacy Policy

Definitions

The following terms carry specific meanings throughout this Privacy Policy:

• "Personal Data" means any information that identifies or can reasonably be used to identify you as an individual, including your name, national identity number (KTP), date of birth, email address, phone number, bank account details, and IP address.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transfer, or deletion.
• "Data Controller" means km772, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third-party service provider engaged by km772 to process Personal Data on km772's behalf and under km772's documented instructions.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose.
• "KYC" means Know Your Customer — the identity and address verification process applied to all km772 accounts prior to withdrawal authorisation or as required by platform risk controls.
• "Platform" means the km772 website accessible at https://km772.app and all associated services, including the sportsbook, live casino, slots, and account management portal.

Data Controller

km772 acts as the Data Controller for all Personal Data collected and processed through the Platform. As the Data Controller, km772 is responsible for ensuring that your Personal Data is handled lawfully, fairly, and transparently, in accordance with applicable data protection principles.

All data protection enquiries, subject access requests, and consent withdrawal notices should be addressed to:

• Brand: km772
• Website: https://km772.app
• Contact Email: [email protected]
• Support Hours: 24 hours a day, 7 days a week (WIB, UTC+7)

Where km772 engages third-party Data Processors — such as payment gateway operators, game content providers, or identity verification services — km772 ensures that appropriate data processing agreements are in place to govern the handling of your Personal Data by those parties.

Data We Collect

km772 collects the following categories of Personal Data in connection with your use of the Platform:

km772 does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where health-related information is voluntarily provided by a Player in connection with a responsible gaming self-exclusion request.

How We Collect Your Data

km772 collects Personal Data through the following means:

• Direct Collection: Information you provide when registering a km772 account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion.
• Automated Collection: Technical and Usage Data collected automatically as you interact with the Platform, including through cookies, web beacons, and server log files. See Section 9 for full details on cookies and tracking technologies.
• Third-Party Sources: Identity verification data from KYC service providers engaged by km772; fraud risk signals from payment network partners; and device fingerprinting data from security service providers. km772 uses these data points solely to protect the integrity of the Platform and the security of your account.
• Payment Providers: Transaction confirmation data from Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, OCBC NISP, BSI) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja), to reconcile deposits and withdrawals against your km772 account balance.

How We Use Your Data

km772 processes your Personal Data for the following purposes:

• Account Management: Creating and maintaining your km772 account, authenticating your login sessions, and managing account preferences.
• KYC & Age Verification: Confirming that you are a resident of Indonesia, are at least 21 years of age, and are eligible to use the Platform under the Terms & Conditions.
• Transaction Processing: Processing deposits and withdrawals via your selected Indonesian bank or e-wallet, and maintaining a complete transaction history within your account dashboard.
• Fraud Prevention & Security: Detecting and preventing fraudulent activity, money laundering, duplicate account creation, and any other misuse of the Platform.
• Responsible Gaming: Monitoring account activity to identify patterns consistent with problem gambling behaviour, and applying any deposit limits, session limits, or self-exclusion settings you have configured.
• Customer Support: Responding to your enquiries, processing complaints, and maintaining records of support interactions for audit and quality assurance purposes.
• Promotions & Bonuses: Determining your eligibility for km772 bonuses and promotions, tracking wagering requirement progress, and issuing bonus credits to your account.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve game selection, interface design, payment flow performance, and overall platform quality.
• Marketing Communications: Sending promotional emails, SMS notifications, or in-platform messages about km772 offers, new games, and seasonal promotions — only where you have opted in to receive such communications.
• Legal & Regulatory Compliance: Meeting any applicable legal obligations, responding to lawful requests from regulatory authorities, and enforcing our Terms & Conditions.

Legal Basis for Processing

km772 processes your Personal Data on one or more of the following legal bases:

• Contractual Necessity: Processing required to perform the contract between km772 and you as a registered Player — including account creation, deposit and withdrawal processing, KYC verification, and customer support.
• Legitimate Interests: Processing necessary for km772's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and internal analytics — provided those interests are not overridden by your rights and interests.
• Legal Obligation: Processing required to comply with applicable laws, including identity verification requirements and financial crime prevention obligations.
• Consent: Processing for purposes that are not strictly necessary for the performance of the contract — specifically, marketing communications and optional analytics cookies — where your prior consent has been obtained. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Data Sharing & Disclosure

km772 does not sell your Personal Data to any third party. km772 may share your Personal Data only in the following limited circumstances:

• Identity Verification Providers: Third-party KYC and document verification service providers engaged by km772 to confirm the identity and age of new and existing Players. These providers process data solely on km772's instructions and are bound by confidentiality obligations.
• Payment Service Providers: Indonesian banking partners and e-wallet operators involved in processing your deposit or withdrawal requests. Data shared is limited to the minimum required to execute the transaction (e.g., account name, bank account number, transaction reference).
• Game Content Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive your Player ID and session token to facilitate game loading. These providers do not receive your full identity or financial data.
• Fraud Prevention & Security Partners: Third-party fraud detection and device intelligence services that assist km772 in identifying suspicious activity on the Platform. Data shared includes Technical Data such as IP addresses and device fingerprints.
• Legal and Regulatory Disclosure: km772 may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or in connection with the investigation of fraud or other criminal activity.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of km772's business, your Personal Data may be transferred to the successor entity. You will be notified of any such transfer and the privacy terms that will apply to your data going forward.

In all cases where km772 shares Personal Data with third parties, km772 ensures that appropriate contractual safeguards are in place to protect the confidentiality and security of your information.

Payment Data

km772 treats financial and payment data with the highest level of care. The following specific rules apply to the handling of your payment information:

• km772 does not store your full bank account credentials, debit card numbers, or e-wallet PINs on its servers at any point. Payment details are tokenised or handled directly through the payment provider's secure interface.
• Bank account names and numbers associated with your verified withdrawal methods are stored in encrypted form and are used solely for the purpose of processing withdrawal requests to your nominated account.
• Transaction data — including deposit amounts, withdrawal amounts, dates, and payment method references — is retained as part of your account record for fraud prevention, dispute resolution, and responsible gaming monitoring purposes.
• km772 applies transaction monitoring to all financial activity on the Platform. Unusual transaction patterns may trigger a manual review by the km772 compliance team, which may require you to provide additional documentation before a transaction is processed.
• All payment communications between your browser and the km772 Platform are encrypted via 256-bit SSL/TLS. Payment gateway communications use additional encryption layers provided by the relevant payment provider.

Cookies & Tracking Technologies

km772 uses the following categories of cookies and similar tracking technologies on the Platform:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They maintain your login session, preserve your language and display preferences, and enable security features such as CSRF protection. You cannot opt out of strictly necessary cookies without disabling access to the Platform entirely.
• Performance & Analytics Cookies: These cookies collect anonymised information about how visitors navigate and use the Platform — for example, which pages are visited most frequently and whether error messages are encountered. km772 uses this data in aggregate form to improve the Platform. You may decline these cookies via your browser settings without affecting your access to km772 services.
• Functional Cookies: These cookies remember choices you make on the Platform, such as your preferred display settings or the last game category you browsed, to provide a more personalised experience.

km772 does not use third-party advertising cookies or retargeting pixels. You can manage, restrict, or delete cookies at any time through your browser's settings. Note that disabling functional or analytics cookies may affect your experience on the Platform but will not prevent you from accessing your account, placing bets, or processing transactions.

Data Retention

km772 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your km772 account being open and active on the Platform.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in line with standard financial record-keeping obligations.
• KYC Documents: Retained for a minimum of five (5) years from the date of account closure or the date the document was last used for verification purposes, whichever is later.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, to support dispute resolution and quality assurance.
• Marketing Consent Records: Retained for the period of your active consent and for three (3) years following withdrawal of consent, as evidence of lawful processing.
• Closed or Suspended Account Data: Following account closure or permanent suspension, core identity and financial data is retained for five (5) years to meet legal obligations and to prevent re-registration by self-excluded players. Non-essential data (e.g., device preference cookies) is deleted within 90 days of account closure.

Upon expiry of the applicable retention period, km772 will securely delete or permanently anonymise your Personal Data.

Data Security

km772 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption: All data in transit between your browser and the km772 Platform is protected by 256-bit SSL/TLS encryption. Sensitive data fields in our databases (including KYC document references and financial account details) are encrypted at rest using industry-standard algorithms.
• Access Controls: Access to systems containing Personal Data is restricted on a strict need-to-know basis. All staff with access to Personal Data are subject to confidentiality obligations and receive regular data protection training.
• Infrastructure Security: km772 servers are hosted in access-controlled data centres with physical security, redundant power, and network monitoring. Firewall rules, intrusion detection systems, and DDoS mitigation are applied at the network perimeter.
• Penetration Testing: km772 conducts regular security assessments and third-party penetration testing of the Platform to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a confirmed data breach that is likely to result in risk to your rights and freedoms, km772 will notify affected Players without undue delay and take all reasonable steps to contain and remediate the breach.

While km772 takes all reasonable precautions, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your km772 account password and for logging out after each session, particularly when using shared or public devices.

Children's Privacy

The km772 Platform is strictly intended for adults aged 21 and above. km772 does not knowingly collect, process, or store Personal Data from any individual under the age of 21.

If km772 becomes aware that Personal Data has been collected from an individual who does not meet the minimum age requirement, the relevant account will be immediately suspended, all associated data will be securely deleted, and any balance held in the account will be returned to the originating payment method after identity confirmation.

If you believe that a minor has registered a km772 account, please notify us immediately at [email protected] so that we can take prompt corrective action.

Your Privacy Rights

As a km772 Player, you have the following rights in relation to your Personal Data. To exercise any of these rights, submit a written request to [email protected] from the email address registered to your km772 account, clearly stating the right you wish to invoke:

• Right of Access: You may request a copy of the Personal Data km772 holds about you, along with information about the purposes for which it is processed and the parties with whom it has been shared.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to Erasure: In certain circumstances — for example, where Personal Data is no longer necessary for the purpose for which it was collected — you may request that we delete your data. This right is subject to km772's legal and regulatory obligations, including minimum data retention requirements under financial compliance rules.
• Right to Restrict Processing: You may request that km772 limits the processing of your Personal Data in specific situations — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contract with you, you may request that we provide your Personal Data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to Object: You may object to the processing of your Personal Data where that processing is based on km772's legitimate interests. km772 will cease the relevant processing unless it can demonstrate compelling legitimate grounds that override your interests or the processing is required for the establishment, exercise, or defence of legal claims.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications, optional analytics), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

km772 will respond to all valid privacy rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 60 days, with notification provided to you before the initial 30-day period expires.

International Data Transfers

km772 operates primarily to serve players located in Indonesia (Jakarta, Surabaya, Medan, Bandung, Bali, Semarang, Makassar, and beyond). In certain circumstances, Personal Data may be processed or stored on infrastructure located outside Indonesia — for example, when game content is served by international providers such as Evolution Gaming, Pragmatic Play, or Pocket Games Soft, or when cloud infrastructure located in a different region is used for backup and disaster recovery purposes.

Where Personal Data is transferred internationally, km772 ensures that appropriate safeguards are in place to maintain a standard of data protection equivalent to that which applies within Indonesia. These safeguards may include:

• Data processing agreements containing standard contractual clauses that impose data protection obligations on the receiving party equivalent to those applied by km772.
• Transfer to recipients located in jurisdictions that provide an adequate level of data protection as determined by applicable regulatory standards.
• Technical measures including encryption of data in transit and at rest to protect data regardless of where it is stored or processed.

You may request further information about the specific safeguards km772 applies to international data transfers by contacting [email protected].

Policy Updates

km772 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the services we offer. The most current version of this Privacy Policy is always available at https://km772.app/privacy-policy.

Where an update constitutes a material change to the way we process your Personal Data, km772 will notify you via the email address registered to your km772 account at least 14 days before the change takes effect. For minor, non-material updates (such as corrections of typographical errors or clarifications that do not affect the substance of the Policy), km772 may update the Policy without prior individual notification.

Your continued use of the Platform following the effective date of a revised Privacy Policy constitutes your acknowledgement that you have reviewed the updated Policy. If you do not agree with any material change, you should cease using the Platform and may request account closure in accordance with the Terms & Conditions.

This Privacy Policy was last reviewed and updated on January 1, 2026.

Contact Us

For all privacy-related enquiries, data subject access requests, consent withdrawal notices, or complaints about km772's data processing practices, please contact the km772 data protection team using the details below:

• Email: [email protected]
• Response Commitment: All privacy enquiries will receive an initial acknowledgement within 24 hours. Substantive responses to data subject requests will be provided within 30 calendar days.
• Support Hours: 24 hours a day, 7 days a week. Native Indonesian-speaking agents are available across all shifts to assist with privacy enquiries in your preferred language.

When submitting a privacy request, please include your registered account username, the nature of your request, and — for data subject access or erasure requests — a clear statement of the right you are invoking. Providing this information at the outset will allow km772 to process your request promptly and accurately.

If you are not satisfied with km772's response to your privacy complaint, you have the right to escalate the matter to the relevant data protection authority or seek appropriate legal remedies in your jurisdiction.