9koin Privacy Policy

1. Introduction

9koin ("we," "us," or "our") operates an online gaming platform at the domain 9koin.cam, serving players across Indonesia with sports betting, live casino, slot games, togel (traditional Indonesian numbers lottery), and sabung ayam (cockfighting) wagering services. We recognize that your privacy is of paramount importance, and we are committed to handling your personal information with the highest standards of care, transparency, and compliance with applicable data protection regulations.

This Privacy Policy governs the collection, processing, storage, and sharing of personal data provided by you ("Player," "you," or "your") when you register an account, access our platform, place wagers, communicate with customer support, or otherwise interact with 9koin services. By creating an account or using our platform, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy. If you do not agree with these practices, you must immediately cease using our services and refrain from providing any personal information.

This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern the overall use of the 9koin platform. In the event of any conflict between this Privacy Policy and the Terms & Conditions regarding data protection matters, the provisions of this Privacy Policy shall prevail.

2. Information We Collect

2.1 Information You Provide Directly

When you register a 9koin account, you are required to provide the following personal information:

• Identity Information: Full legal name (as it appears on government-issued identification), date of birth, gender, nationality, and place of birth.
• Contact Information: Residential address (street, city, province, postal code), valid email address, and Indonesian mobile phone number.
• Account Credentials: Username, password (stored in encrypted form), and security questions (if applicable).
• Financial Information: Bank account details (account holder name, bank name, account number) for deposits and withdrawals; e-wallet account identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja transactions.
• Verification Documents: Copies of government-issued identification (Indonesian national ID / KTP, passport, or driver's license) and proof of address documents (utility bills, bank statements) submitted during KYC (Know Your Customer) verification.

2.2 Information Collected Automatically

When you access or use the 9koin platform, we automatically collect certain technical and usage data:

• Device Information: Device type (mobile, tablet, desktop), operating system (Android, iOS, Windows, macOS), browser type and version, screen resolution, and device identifiers (IMEI, Android ID, IDFA).
• Connection Information: IP address, internet service provider (ISP), geographic location (city-level accuracy derived from IP), time zone (WIB, WITA, WIT), and connection timestamps.
• Usage Data: Pages visited, games played, bets placed, deposit and withdrawal transactions, session duration, click patterns, navigation paths, and interaction with promotional offers.
• Communication Records: Transcripts of live chat conversations with customer support, emails sent to or from 9koin support addresses, and phone call recordings (where legally permitted and with advance notice).

2.3 Information from Third-Party Sources

In limited circumstances, we may collect information about you from third-party sources to verify your identity, comply with anti-money-laundering regulations, or detect fraudulent activity. These sources may include:

• Payment processors and banks (transaction verification, fraud screening).
• Identity verification service providers (KYC compliance, age verification).
• Credit reference agencies (creditworthiness assessment where legally permitted).
• Publicly available databases (sanctions lists, politically exposed persons (PEP) screening, adverse media checks).

3. How We Use Your Information

9koin processes your personal data for the following lawful purposes:

3.1 Account Management and Service Delivery

• To create, maintain, and manage your player account.
• To process deposits, withdrawals, and internal fund transfers.
• To enable you to place wagers on sports, casino games, slots, togel, and sabung ayam.
• To calculate and credit winnings to your account balance.
• To apply bonuses, promotions, and loyalty rewards according to published terms.

3.2 Legal and Regulatory Compliance

• To verify your identity and age (enforcing the 21+ age restriction).
• To conduct KYC (Know Your Customer) checks as required by anti-money-laundering (AML) regulations.
• To screen against sanctions lists and politically exposed persons (PEP) databases.
• To detect and prevent fraud, money laundering, bonus abuse, and other prohibited activities.
• To comply with lawful requests from regulatory authorities, law enforcement agencies, and judicial bodies.

3.3 Customer Support

• To respond to your inquiries via live chat, email, or phone.
• To troubleshoot technical issues and resolve disputes.
• To provide assistance with account recovery, password resets, and security concerns.

3.4 Platform Improvement and Analytics

• To analyze usage patterns and optimize platform performance.
• To conduct A/B testing of new features and interfaces.
• To identify and fix bugs, crashes, and security vulnerabilities.
• To generate aggregated, anonymized statistical reports (which do not identify individual players).

3.5 Marketing and Promotional Communications

• To send you promotional offers, bonus announcements, and newsletters (only if you have consented to marketing communications).
• To notify you of new game releases, tournament schedules, and special events tied to Indonesian holidays (Ramadan, Idul Fitri, Independence Day, Chinese New Year).
• To personalize promotional content based on your gaming preferences and betting history.

You may opt out of marketing communications at any time by clicking the "Unsubscribe" link in any promotional email, adjusting your communication preferences in your account settings, or contacting customer support. Opting out of marketing does not affect transactional communications (deposit confirmations, withdrawal notifications, account security alerts), which remain necessary for service delivery.

3.6 Responsible Gaming

• To monitor your gaming behavior for signs of problem gambling.
• To enforce self-imposed deposit limits, loss limits, session time limits, and self-exclusion requests.
• To provide proactive intervention when concerning patterns are detected (e.g., rapid increase in bet frequency, exceeding personal limits).

4. Data Sharing and Third Parties

9koin does not sell, rent, or trade your personal information to third parties for their own marketing purposes. We share your data only in the following limited circumstances:

4.1 Service Providers and Processors

We engage trusted third-party service providers to perform functions on our behalf, including:

• Payment Processors: To facilitate deposits and withdrawals via BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja.
• KYC Verification Providers: To verify your identity, age, and address using government databases and document authentication technology.
• Hosting and Cloud Infrastructure: To store data securely on servers located in secure offshore data centers.
• Customer Support Tools: To manage live chat, email ticketing, and phone support systems.
• Analytics and Monitoring: To track platform performance, detect security threats, and optimize user experience.

All service providers are contractually bound to process your data solely on 9koin's instructions, to implement appropriate security measures, and to comply with data protection regulations. They are prohibited from using your data for their own purposes.

4.2 Legal and Regulatory Disclosures

We may disclose your personal information to regulatory authorities, law enforcement agencies, or judicial bodies when required by law or when we believe in good faith that disclosure is necessary to:

• Comply with a subpoena, court order, or other legal process.
• Cooperate with investigations into fraud, money laundering, or other criminal activity.
• Respond to lawful requests from gaming regulators or licensing authorities.
• Protect the rights, property, or safety of 9koin, our players, or the public.

4.3 Business Transfers

In the event of a merger, acquisition, asset sale, or bankruptcy, your personal information may be transferred to the acquiring entity or successor organization. In such cases, we will notify you via email and/or a prominent notice on our platform, and the new entity will be bound by this Privacy Policy unless you are given an opportunity to consent to a revised policy.

4.4 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified data (which does not personally identify you) with partners, affiliates, or the public for research, marketing, or statistical purposes. For example, we may publish anonymized reports on overall player activity, popular game titles, or regional betting trends.

5. Data Security Measures

9koin employs industry-standard technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption: All data transmitted between your device and 9koin servers is encrypted using 256-bit TLS 1.3 (Transport Layer Security) protocols. Sensitive data at rest (passwords, financial information) is encrypted using AES-256 encryption.
• Access Controls: Personal data is accessible only to authorized 9koin personnel on a need-to-know basis. Role-based access controls (RBAC) and multi-factor authentication (MFA) are enforced for all internal systems.
• Secure Infrastructure: Our servers are hosted in secure, audited data centers with 24/7 physical security, fire suppression systems, and redundant power supplies.
• Intrusion Detection: Automated monitoring systems detect and respond to suspicious login attempts, DDoS attacks, SQL injection attempts, and other security threats in real time.
• Regular Audits: Third-party security firms conduct annual penetration testing and vulnerability assessments of our platform and infrastructure.
• Incident Response: In the event of a data breach, we will notify affected players within 72 hours and take immediate remedial action, in accordance with applicable data breach notification laws.

While we implement robust security measures, no system is completely impenetrable. You also have a responsibility to protect your account by choosing a strong password, enabling two-factor authentication (2FA), and not sharing your credentials with third parties. 9koin will never ask you for your password via email, phone, or live chat.

6. Data Retention and Deletion

9koin retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods include:

• Active Accounts: Your account data, transaction history, and gaming records are retained for the duration of your active account relationship with 9koin.
• Closed Accounts: After you voluntarily close your account or after 9koin terminates your account, we retain core identification data, transaction records, and KYC documents for a minimum of 7 years to comply with anti-money-laundering regulations, tax reporting obligations, and to resolve disputes or respond to legal claims.
• Marketing Data: If you opt out of marketing communications, your email address is retained on our suppression list to ensure we do not re-contact you inadvertently.
• Communications Records: Live chat transcripts, support emails, and call recordings are retained for 3 years for quality assurance and dispute resolution purposes.
• Technical Logs: Server logs, IP address records, and device identifiers are retained for 12 months for security monitoring and fraud detection.

Upon expiration of the applicable retention period, your personal data is securely deleted or anonymized such that it can no longer be associated with you. Anonymized data may be retained indefinitely for statistical and research purposes.

7. Cookies and Tracking Technologies

9koin uses cookies, web beacons, and similar tracking technologies to enhance your browsing experience, analyze platform usage, and deliver personalized content. A cookie is a small text file stored on your device that allows us to recognize you on subsequent visits.

7.1 Types of Cookies We Use

• Essential Cookies: Necessary for the platform to function (e.g., session management, account authentication, shopping cart functionality). These cannot be disabled without impairing platform usability.
• Performance Cookies: Collect anonymous data on how you use the platform (pages visited, time on site, bounce rates) to help us improve performance and user experience.
• Functional Cookies: Remember your preferences (language, currency, layout settings) to provide a personalized experience.
• Advertising Cookies: Track your activity to deliver targeted promotional offers and measure the effectiveness of marketing campaigns.

7.2 Managing Cookies

Most web browsers allow you to control cookies through their settings. You can configure your browser to reject all cookies, accept only essential cookies, or prompt you before accepting each cookie. Note that disabling cookies may limit platform functionality (e.g., inability to stay logged in, loss of personalized settings). For more information on managing cookies, consult your browser's help documentation.

8. Your Privacy Rights

Subject to applicable data protection laws, you have the following rights regarding your personal information:

• Right of Access: You may request a copy of all personal data we hold about you. We will provide this information in a structured, commonly used, and machine-readable format (e.g., PDF or CSV).
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. You can update certain information (email, phone, address) directly via your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data, subject to legal retention obligations (e.g., we cannot delete KYC records or transaction history that must be retained for AML compliance).
• Right to Restriction of Processing: You may request that we temporarily suspend processing of your data (e.g., while we verify the accuracy of information you have disputed).
• Right to Data Portability: You may request that we transfer your data to another service provider in a machine-readable format, where technically feasible.
• Right to Object: You may object to processing of your data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to our demonstration of compelling legitimate grounds.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

To exercise any of these rights, please contact our Data Protection Officer via email at support@9koin.cam (plain text, not clickable) with "Privacy Rights Request" in the subject line. We will respond to your request within 30 days. You may also lodge a complaint with a data protection authority if you believe your rights have been violated.

9. Children's Privacy

9koin services are intended exclusively for adults aged 21 years or older. We do not knowingly collect, process, or retain personal information from individuals under 21. If we become aware that we have inadvertently collected data from a minor, we will take immediate steps to delete that information and terminate the associated account. If you believe a minor has registered an account on 9koin, please notify us immediately at support@9koin.cam (plain text, not clickable).

Parents and guardians are encouraged to monitor their children's internet activity and use parental control software to prevent minors from accessing age-restricted platforms.

10. International Data Transfers

9koin operates as an internationally licensed platform. Your personal data may be transferred to, stored in, and processed in jurisdictions outside of Indonesia, including countries that may not provide the same level of data protection as Indonesian law. When we transfer data internationally, we implement appropriate safeguards, including:

• Standard contractual clauses approved by data protection authorities.
• Ensuring that service providers adhere to recognized data protection frameworks (e.g., ISO 27001, SOC 2 Type II).
• Conducting regular audits of international data processing activities.

By using the 9koin platform, you consent to the transfer of your data to offshore jurisdictions as necessary to provide our services.

11. Changes to This Privacy Policy

9koin reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will notify you by email (to the address associated with your account) and/or by displaying a prominent notice on the platform homepage at least 14 days before the changes take effect. The "Last Updated" date at the top of this page will also be revised.

Continued use of the platform following the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us:

• Email: support@9koin.cam (plain text, not clickable)
• Live Chat: Available 24/7 via the platform interface
• Subject Line for Privacy Inquiries: "Privacy Policy Question" or "Data Protection Request"

For general platform information, visit our About Us page. For account terms, see our Terms & Conditions. For responsible gaming resources, visit our Responsible Gaming page.