km798 Privacy Policy

km798 operates the online gaming and sports betting platform accessible at km798.vip (the "Platform"). References to "km798", "we", "us", or "our" in this Privacy Policy refer to the operator of the km798 Platform.

km798 acts as the data controller for all personal data collected from players who register and use the Platform. As data controller, km798 determines the purposes and means by which your personal data is processed. Our primary support contact for data-related queries is [email protected].

km798 is operated with Indonesian players as its primary audience. Players located in Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, and across the Indonesian archipelago are served under this same Privacy Policy.

km798 collects the following categories of personal data, limited to what is necessary for the purposes described in Section 4:

km798 collects personal data through the following channels:

• Direct submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in a promotion.
• Automated technologies: Technical and usage data collected automatically when you access km798.vip via cookies, web beacons, server logs, and similar tracking technologies (see Section 9).
• Third-party payment providers: Transaction confirmation data relayed from Indonesian bank gateways and e-wallet providers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja) when you make a deposit or request a withdrawal.
• Identity verification partners: Data returned by third-party KYC/AML screening providers when we verify your identity and check against sanctions and fraud watchlists.
• Fraud prevention services: Device and behavioural signals shared by anti-fraud technology partners to help us identify and prevent account takeover and bonus abuse.
• Referral sources: If you arrive at km798.vip via an affiliate partner link, we may receive limited referral data (affiliate ID, click timestamp) from that partner to attribute your registration correctly.

km798 processes your personal data for the following clearly defined purposes:

• Account creation and management: To register your km798 account, verify your identity, maintain your account settings, and provide you with access to all Platform features.
• Transaction processing: To process deposits and withdrawals in IDR via your chosen local bank or e-wallet, reconcile transaction records, and resolve payment disputes.
• Identity verification (KYC) and fraud prevention: To comply with anti-money-laundering obligations, verify that you are at least 21 years of age, and detect and prevent fraudulent or unauthorised account activity.
• Gameplay and platform operation: To deliver game services, calculate and credit winnings, apply bonus offers to your account, and maintain accurate betting and gaming records.
• Customer support: To respond to your enquiries, process complaints, manage responsible gaming requests, and maintain a record of support interactions.
• Responsible gaming compliance: To monitor gameplay patterns for signs of problem gambling, enforce self-exclusion and deposit limits you have set, and proactively reach out where we identify potential harm.
• Platform security: To protect km798.vip from cyber threats, detect unauthorised access attempts, and maintain the integrity of game outcomes.
• Legal and regulatory compliance: To meet our obligations under applicable international gaming regulations and to respond to lawful requests from competent authorities.
• Marketing communications (where consent given): To send you promotional offers, bonus notifications, and news about new games or events on km798 — only where you have opted in to receive such communications. You may opt out at any time.
• Platform analytics and improvement: To understand how players use km798.vip, identify usability issues, and improve the overall gaming experience through aggregated, pseudonymised analytics.

km798 relies on the following legal bases to process your personal data:

• Contractual necessity: Processing required to register your account, provide gaming services, and process financial transactions is necessary for the performance of our contract with you as a registered player.
• Legal obligation: Processing carried out to fulfil KYC/AML requirements, age verification, and to respond to lawful requests from regulatory or law enforcement authorities is necessary to comply with applicable legal obligations.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, affiliate attribution, and aggregated analytics is based on km798's legitimate interest in operating a secure, fair, and sustainable gaming platform — provided those interests are not overridden by your fundamental rights.
• Consent: Processing for direct marketing communications and for the use of non-essential cookies is based on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

km798 does not sell, rent, or trade your personal data. We share personal data only in the following limited and controlled circumstances:

• Payment service providers: We share the minimum necessary financial data with Indonesian bank gateways and e-wallet providers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja) solely to process your deposits and withdrawals.
• Identity verification providers: We share KYC documents and identity data with accredited third-party verification partners who perform document checks and sanctions screening on our behalf. These partners process data under strict confidentiality obligations.
• Game studio providers: Game session data (bet amounts, outcomes, session duration) is shared with certified game studios (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Pocket Games Soft) solely for the purpose of game delivery, RNG audit, and RTP calculation. No Identity or Financial Data is shared with studios.
• Fraud prevention and security partners: Pseudonymised technical and behavioural data is shared with anti-fraud technology partners to identify suspicious account activity and protect the Platform.
• Affiliate partners: If you registered via an affiliate link, we share only a confirmation of registration and, where applicable, aggregated revenue metrics with that affiliate. No Identity, Financial, or KYC data is shared with affiliates.
• Legal and regulatory authorities: We may disclose personal data to law enforcement, regulatory bodies, or courts of competent jurisdiction where we are required to do so by applicable law or where disclosure is necessary to protect the safety of our players or the integrity of the Platform.
• Corporate restructuring: In the event of a merger, acquisition, or sale of assets involving km798, player data may be transferred to the successor entity, subject to equivalent privacy protections. Players will be notified of any such transfer.

km798 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and transaction data: Retained for a minimum of five (5) years following account closure, in order to satisfy anti-money-laundering record-keeping obligations and to resolve any post-closure disputes.
• KYC documents: Retained for a minimum of five (5) years from the date of verification, or from the date of account closure — whichever is later — to comply with applicable identity verification standards.
• Support and communications data: Retained for three (3) years after the closure of a support case or the end of your account relationship with km798, whichever is later.
• Marketing preferences and consent records: Retained for the lifetime of your account plus three (3) years after account closure, as evidence of consent management.
• Technical and usage logs: Typically retained for twelve (12) months from the date of collection for security and analytics purposes, then purged or anonymised.
• Responsible gaming records: Self-exclusion and responsible gaming interaction records are retained for the duration of any active exclusion period plus five (5) years to allow enforcement of re-registration restrictions.

When data is no longer required, km798 will securely delete or irreversibly anonymise it. If you request deletion before a mandatory retention period has expired, km798 will restrict active processing of your data while retaining it in a secure archive solely for legal compliance purposes.

km798 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure:

• Encryption in transit: All data transmitted between your device and km798 servers is encrypted using TLS 1.2 or higher (256-bit SSL).
• Encryption at rest: Sensitive data fields — including passwords (stored as salted cryptographic hashes), financial account numbers, and KYC documents — are encrypted at rest using AES-256 or equivalent standards.
• Access controls: Access to personal data within km798's internal systems is restricted on a strict need-to-know basis, with role-based access controls and multi-factor authentication required for all administrative personnel.
• Infrastructure security: km798's platform infrastructure is hosted in data centres with physical security controls, redundant power and connectivity, and regular penetration testing conducted by independent third-party security firms.
• Incident response: km798 maintains a documented data breach response plan. In the event of a breach that poses a risk to player rights, affected players will be notified without undue delay.
• Employee training: All km798 personnel with access to personal data receive mandatory data protection and information security training on an annual basis.

km798.vip uses cookies and similar tracking technologies to provide core platform functionality, enhance your experience, and gather analytics data. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cookies cannot be disabled without breaking core Platform functionality.
• Functional cookies: Remember your preferences such as language setting, display preferences, and whether you have acknowledged Platform notices. Disabling these may reduce your experience quality.
• Analytics cookies: Collect pseudonymised data on how players navigate km798.vip — pages visited, time on page, error events — to help us identify and fix usability issues. Used only with your consent.
• Marketing cookies: Used with your consent to attribute your visit to a referring affiliate partner and to deliver relevant promotional content within the Platform. km798 does not use third-party advertising network cookies.

You may manage your cookie preferences through your browser settings. Deleting or blocking cookies may affect the functionality of certain Platform features. km798 does not use cross-site tracking cookies to follow your activity outside km798.vip.

As a player on km798, you have the following rights with respect to your personal data. To exercise any of these rights, contact us at [email protected] or via live chat. km798 will respond to all verified rights requests within 30 days.

km798 will not charge a fee for processing rights requests submitted in good faith. Requests that are manifestly unfounded, excessive, or repetitive may be subject to a reasonable administrative fee or declined, with written explanation.

km798 strictly enforces a minimum age of 21 years for all registered players. The Platform is not directed at, and does not knowingly collect personal data from, any person under 21 years of age.

As part of our registration and KYC process, km798 verifies the age of all new players using government-issued photo identification. If km798 discovers at any point that an account belongs to a person under 21, the following steps will be taken immediately:

• The account will be suspended and access disabled.
• Any balance remaining in the account — whether from deposits or winnings — will be handled in accordance with our Terms & Conditions and applicable law.
• All personal data associated with the account will be deleted as soon as legally permissible, with the exception of records required for regulatory compliance and fraud prevention.

If you are a parent or guardian and believe that a minor under your care has registered on km798, please contact us immediately at [email protected]. We will investigate and act promptly.

km798.vip may contain references to third-party service providers — such as payment processors, game studios, and identity verification partners — whose services are integrated into the Platform. While these integrations are contractually governed by data processing agreements with km798, these third parties maintain their own privacy policies that govern their independent processing activities.

km798 is not responsible for the privacy practices of third-party services accessed independently outside the km798.vip Platform. We encourage you to review the privacy policies of any external service before providing your personal data directly to that service.

km798 operates as an internationally licensed gaming platform. As a result, some personal data may be processed or stored on servers or by service providers located outside Indonesia. Where such transfers occur, km798 ensures that appropriate safeguards are in place, including:

• Binding contractual clauses in data processing agreements with all international service providers, requiring them to apply data protection standards equivalent to those described in this Privacy Policy.
• Transfers only to jurisdictions or organisations that maintain adequate data protection frameworks as recognised by internationally accepted standards.
• Regular review of international transfer mechanisms to ensure continued adequacy as regulatory landscapes evolve.

Your personal data will not be transferred internationally for purposes beyond those described in Section 4 of this Privacy Policy.

km798 reserves the right to update this Privacy Policy at any time. Material changes — such as new categories of data collected, new purposes of processing, or new third-party recipients — will be communicated to registered players via the email address on file or via a prominent notice on km798.vip, no less than seven (7) days before the change takes effect.

The "Last Updated" date at the top of this document reflects the most recent revision. We encourage you to review this Privacy Policy periodically. Your continued use of the km798 Platform after the effective date of any amendment constitutes your acknowledgement of the updated policy.

Where an amendment requires a new legal basis — for example, a new category of data processing that requires fresh consent — km798 will seek that consent proactively and will not process your data under the new basis until consent is obtained.

If you have any questions about this Privacy Policy, wish to exercise a data right, or want to raise a concern about how km798 handles your personal data, please reach out through one of the following channels:

• Email: [email protected] — please include "Privacy Request" in your subject line for faster routing. Responses within 24 hours for general queries; rights requests are handled within 30 days.
• Live Chat: Available 24/7 within the km798 Platform. Our support team includes native Indonesian-speaking agents who can assist you with data enquiries in both English and Bahasa Indonesia.

When submitting a data rights request, please provide sufficient information to verify your identity (e.g., registered email address and account username). This is necessary to protect your data from unauthorised disclosure to third parties.