Privacy Policy

km771 is committed to safeguarding the privacy of every individual who interacts with our platform. This commitment extends to all registered players, prospective users who browse our site without registering, and individuals who contact our customer support team. We recognize that the personal data you provide enables us to deliver a personalized, secure, and compliant gaming experience, and we take that responsibility seriously.

This Policy applies to all personal data processed in connection with your use of the km771 platform, including data collected through our website at km771.org, our customer support communication channels, and any third-party integrations (such as payment processors and identity verification providers) that we engage to deliver platform services. It does not apply to third-party websites or services that may be linked to or from our platform; those services operate under their own privacy policies.

We have structured this Policy to be as transparent and readable as possible. The section headings and summary highlights are provided for ease of navigation; the full clause text governs in all cases. If you have questions about anything in this Policy, please contact us using the details in Section 13.

For the purposes of this Privacy Policy, km771 acts as the data controller in respect of personal data collected from players using the platform at km771.org. As data controller, km771 determines the purposes for which and the means by which personal data is processed.

km771 operates as an internationally licensed online gaming platform serving players primarily based in Indonesia. Where km771 engages third-party service providers to process personal data on its behalf (for example, payment processors, KYC verification providers, and cloud hosting providers), those third parties act as data processors under binding data processing agreements that require them to process data only on km771's documented instructions and to apply equivalent security and confidentiality standards.

km771 collects personal data in the following categories. We collect only what is necessary to fulfill the specific purposes described in Section 5.

km771 collects personal data through the following channels:

• Direct Submission: Data you actively provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or updating your account profile.
• Automated Technical Collection: Data collected automatically by our servers and analytics systems when you access the platform, including IP addresses, device fingerprints, session logs, and in-platform behavioral data. This collection occurs regardless of whether you are a registered player or an anonymous visitor.
• Payment Processors: When you initiate a deposit or withdrawal via a local Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata) or an e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), our payment processing partners share transaction confirmation data with km771, including transaction reference numbers and payer name matching information for anti-fraud purposes.
• KYC Verification Providers: If km771 uses a third-party identity verification service to validate your KTP or other identity documents, that provider may return identity match scores, document authenticity assessments, and risk flags to km771 as part of the verification process.
• Cookies and Tracking Technologies: As described in Section 9, km771 uses cookies and similar technologies to collect session and behavioral data automatically. You can manage cookie preferences through your browser settings, subject to the impact on platform functionality described in Section 9.

km771 processes your personal data for specific, documented purposes. The following table sets out each processing purpose, the data categories involved, and the legal basis on which that processing rests:

km771 does not sell your personal data. We share personal data with third parties only in the following defined circumstances:

• Payment Service Providers: To process your deposits and withdrawals via Indonesian local bank transfer and e-wallet channels, km771 shares the minimum necessary financial and identity data with our payment processing partners. These partners are contractually bound to process the data solely for payment facilitation purposes.
• KYC and Identity Verification Providers: To fulfill our age verification (21+) and identity verification obligations, km771 may engage a third-party KYC provider to validate identity documents submitted by players. KYC providers process identity data under strict contractual data protection terms and are prohibited from retaining document images beyond the period required to complete the verification.
• Game Content Studios: Third-party game studios (including Evolution Gaming, Pragmatic Play, Spribe, and Pocket Games Soft) may collect limited technical data (e.g., session token, game round ID) directly through their game client to record game outcomes and calculate settlements. These studios operate under their own privacy policies and are independently certified.
• Cloud Infrastructure and Hosting Providers: km771's platform data is hosted on cloud infrastructure provided by third-party hosting services. These providers act as data processors under data processing agreements and do not have access to player data beyond what is required for infrastructure management.
• Regulatory and Law Enforcement Authorities: km771 will disclose personal data to competent authorities where required to do so by applicable law, valid court order, or regulatory direction. km771 will, where legally permitted, notify affected players of such disclosures.
• Professional Advisors: km771 may share personal data with legal counsel, auditors, and compliance consultants on a strictly need-to-know basis and under professional confidentiality obligations, where required to obtain professional advice or to establish, exercise, or defend legal claims.
• Business Transfers: In the event that km771 undergoes a merger, acquisition, restructuring, or sale of all or a substantial portion of its assets, player personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections being maintained. Affected players will be notified of any such transfer in advance.

km771 retains personal data for as long as necessary to fulfill the purpose for which it was collected, and for as long as required by applicable legal and regulatory obligations. The following retention guidelines apply:

• Active Account Data: Identity, contact, financial, and account data is retained for the full duration of your account's active status on the platform.
• Post-Closure Retention: Following the closure of your account — whether voluntary or by km771 — km771 will retain your core identity and financial transaction records for a minimum of five (5) years from the date of account closure. This retention period is required to comply with anti-money laundering (AML) regulations, financial record-keeping obligations, and to facilitate the resolution of any disputes or legal claims that may arise after closure.
• KYC Documents: Identity verification documents (KTP scans, selfies) are retained for the period required by the applicable KYC regulation and are securely deleted once that retention period expires.
• Communications Data: Customer support transcripts and complaint records are retained for a period of three (3) years following resolution of the relevant interaction, to support dispute escalation and quality assurance purposes.
• Technical and Usage Data: Server logs, IP address records, and behavioral analytics data are retained for up to twelve (12) months before being anonymized or deleted, except where a specific security incident or compliance investigation requires extended retention.
• Marketing Data: Marketing preference records are retained for the duration of your account's active status, plus one (1) year following account closure, to demonstrate that we honored opt-out requests made before closure.

km771 implements a layered, defense-in-depth approach to protecting the personal data of our players. Our technical and organizational security measures include:

• Transport Encryption: All data transmitted between your device and km771's servers is encrypted using TLS 1.2 or higher. HTTPS is enforced across all pages and API endpoints on km771.org.
• Password Security: Account passwords are never stored in plain text. km771 applies industry-standard one-way cryptographic hashing (with salt) to all user passwords before storage.
• Payment Data Tokenization: km771 does not store full bank account details or e-wallet credentials on our own servers. Payment data is tokenized and managed by our certified payment processing partners in compliance with applicable payment security standards.
• Access Controls: Access to personal data within km771's internal systems is restricted to staff members who require that access to perform their defined job functions. Access is controlled via role-based permissions, two-factor authentication (2FA) for administrative accounts, and audit logging of all data access events.
• Infrastructure Security: km771's platform infrastructure is hosted in secured, access-controlled data center environments with physical security, network firewalls, intrusion detection systems, and regular vulnerability scanning.
• Incident Response: km771 maintains a documented data breach response plan. In the event of a confirmed personal data breach that is likely to result in a risk to affected players, km771 will notify impacted players without undue delay and will take all available remediation steps promptly.

km771 uses cookies and similar tracking technologies (including local storage and session storage) on km771.org. The following cookie categories are used:

km771 does not use third-party advertising cookies or cross-site behavioral tracking cookies. No data collected via cookies on km771.org is shared with advertising networks or social media platforms for retargeting purposes.

You may manage or delete cookies through your browser's settings at any time. Note that disabling strictly necessary or fraud detection cookies will impair your ability to log in and use the platform securely. Instructions for managing cookies in major browsers are available through each browser's official help documentation.

As a player on the km771 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with "Data Rights Request" in the subject line. km771 will respond within 14 calendar days of receipt and will action valid requests within 30 calendar days, subject to identity verification.

• Right of Access: You have the right to request a copy of the personal data km771 holds about you, along with information about how it is being used and with whom it has been shared.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data km771 holds about you. You can update basic contact details directly in your Account profile without contacting support.
• Right to Erasure: You have the right to request deletion of your personal data where: it is no longer necessary for the purpose for which it was collected; you withdraw consent (where consent was the legal basis); or you object to processing and there is no overriding legitimate interest. This right is subject to km771's legal retention obligations — data required for AML compliance, dispute resolution, or regulatory record-keeping cannot be deleted before the applicable retention period expires.
• Right to Restrict Processing: You have the right to request that km771 restricts processing of your personal data in certain circumstances, such as while the accuracy of data you have disputed is being verified.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format where the processing is based on your consent or on contract performance, and is carried out by automated means.
• Right to Object: You have the right to object to km771 processing your personal data on the basis of legitimate interests, including any profiling carried out for direct marketing purposes. Where you object to direct marketing, km771 will cease that processing immediately without requiring justification.
• Right to Withdraw Consent: Where km771 processes your data on the basis of your consent (primarily for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing that occurred prior to withdrawal.

The km771 platform is strictly intended for adults aged 21 years or older. km771 does not knowingly collect or process personal data from individuals under the age of 21. Registration on the platform requires players to confirm, at the point of account creation, that they meet the minimum age requirement.

As part of our KYC verification process, km771 verifies the age of all players prior to approving their first withdrawal or upon any compliance-triggered review. Where a player is found, through KYC verification or other evidence, to be under the age of 21, km771 will:

• Immediately suspend the account and freeze any balance pending investigation;
• Refund any net deposits made during the period of underage use, less any promotional bonuses applied;
• Permanently close the account and delete or anonymize the associated personal data to the extent permitted by legal retention obligations;
• Record the incident in km771's compliance log in accordance with applicable regulatory requirements.

km771 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or platform functionality. When we make material changes to this Policy, we will:

• Update the "Last Updated" date displayed at the top of this page and in the sidebar table of contents;
• Display a prominent notice on the km771 platform informing registered players that the Privacy Policy has been updated;
• Where the change materially affects the way we process your personal data, send a direct notification to your registered email address at least seven (7) days before the updated Policy takes effect.

Your continued use of the km771 platform after the effective date of any updated Privacy Policy constitutes your acknowledgment of and agreement to the revised terms. If you do not agree with any update to this Policy, you should cease using the platform and contact support to request account closure in accordance with the Terms & Conditions.

Minor updates — such as clarifications of existing language, correction of typographical errors, or updates to contact information — may be made without prior notice, provided they do not alter the substance of km771's data processing commitments.

If you have any questions, concerns, or requests relating to this Privacy Policy or to km771's handling of your personal data, please reach out through the following channels:

• Email: [email protected] — please use the subject line "Data Privacy" for all data-related inquiries to ensure prompt routing to our data protection team.
• Live Chat: Available 24 hours a day, 7 days a week via the live chat widget on the km771 platform. Native Indonesian-speaking support agents are available at all hours. For formal data rights requests, email is preferred as it creates a written record.
• Response Time: km771 aims to acknowledge all data-related email inquiries within 48 hours (WIB, UTC+7) and to provide a substantive response or action confirmation within 14 calendar days.

km771 encourages players to contact us directly in the first instance if they have any concern about the handling of their personal data, as we are committed to resolving all data-related concerns fairly and promptly through our internal process. If you remain unsatisfied with km771's response to a data privacy concern, you may escalate the matter to the relevant supervisory or data protection authority applicable in your jurisdiction.

This Privacy Policy was last reviewed and updated on January 1, 2026. km771 reserves the right to update this Policy in accordance with Section 12. The most current version of this Policy is always available at km771.org/privacy-policy.