Last Updated: January 1, 2026 | Effective Date: January 1, 2026

Your Privacy Matters

km778 is committed to protecting the privacy and security of your personal information. This Privacy Policy explains what data we collect, how we use it, who we share it with, and the rights you have regarding your information. By using km778 services, you acknowledge that you have read and understood this policy and consent to our data practices as described herein.

1. Introduction and Scope

This Privacy Policy applies to all personal information collected by km778 through our website (https://km778.cam), mobile applications, customer support channels, and any other digital platforms operated under the km778 brand. This policy supplements and should be read in conjunction with our Terms and Conditions.

km778 operates as an online gaming platform providing sports betting, live casino games, table games, slot machines, and lottery services (including togel) to players in Indonesia. We are committed to compliance with international data protection standards and Indonesian privacy regulations.

As a data controller, km778 determines the purposes and means of processing your personal information. We take this responsibility seriously and have implemented comprehensive technical and organizational measures to ensure the confidentiality, integrity, and availability of your data.

2. Information We Collect

km778 collects various categories of personal information necessary to provide our services, comply with legal obligations, and improve user experience. The types of information we collect include:

2.1 Information You Provide Directly

When you register an account, use our services, or communicate with us, you directly provide the following information:

  • Account Registration Data: Full legal name, date of birth, email address, mobile phone number, residential address, username, and password.
  • Identity Verification Documents: Indonesian National Identity Card (KTP), proof of address documents, selfie photographs for facial verification, and any additional documentation required for enhanced due diligence.
  • Financial Information: Bank account details for deposits and withdrawals (account number, bank name, account holder name), e-wallet account information (OVO, DANA, GoPay, ShopeePay), and transaction history.
  • Communication Records: Content of customer support inquiries, live chat transcripts, email correspondence, WhatsApp messages, and feedback submissions.
  • Marketing Preferences: Communication preferences, subscription choices, and promotional opt-in/opt-out selections.

2.2 Information Collected Automatically

When you access km778 services, we automatically collect certain technical and usage information:

  • Device Information: IP address, device type, operating system, browser type and version, screen resolution, device identifiers (UDID, IMEI), and mobile network information.
  • Usage Data: Pages visited, games played, bet history, deposit and withdrawal patterns, session duration, click streams, referral sources, and navigation paths through our website.
  • Location Data: Geographic location derived from IP address to verify Indonesian residency and comply with territorial restrictions.
  • Performance Data: Website performance metrics, error reports, crash logs, and technical diagnostics.

2.3 Information from Third-Party Sources

In certain circumstances, we may receive information about you from external sources:

  • Payment Processors: Transaction confirmation data from Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers to verify deposits and process withdrawals.
  • Identity Verification Services: Verification results from third-party KYC providers that confirm the authenticity of submitted documents.
  • Fraud Prevention Services: Risk assessment data and fraud detection signals from specialized security vendors.
  • Public Databases: Information from publicly accessible sources to verify identity and comply with anti-money laundering regulations.
Data Category Collection Method Purpose Legal Basis
Account Information Direct Input Service Provision Contract Performance
Identity Documents Direct Upload Age Verification, KYC Legal Obligation
Transaction Data Automatic Collection Payment Processing Contract Performance
Device & Usage Data Automatic Collection Security, Analytics Legitimate Interest
Communication Records Direct Interaction Customer Support Contract Performance

3. How We Use Your Information

km778 processes your personal information for the following specific purposes, each supported by a legitimate legal basis:

3.1 Service Provision and Account Management

  • Creating and maintaining your player account
  • Processing deposits and withdrawals through Indonesian banks and e-wallets
  • Enabling sports betting, casino gaming, and lottery (togel) participation
  • Calculating and crediting winnings to your account
  • Providing customer support through live chat, WhatsApp, and email channels
  • Sending transactional communications (deposit confirmations, withdrawal notifications, account alerts)

3.2 Legal Compliance and Regulatory Obligations

  • Verifying your age (21+ requirement) and identity through KYC procedures
  • Preventing underage gambling and ensuring only eligible users access services
  • Complying with anti-money laundering (AML) and counter-terrorism financing (CTF) regulations
  • Detecting and preventing fraudulent transactions and suspicious activity
  • Maintaining records for audit and regulatory reporting purposes
  • Responding to legal requests and court orders from Indonesian authorities

3.3 Security and Fraud Prevention

  • Monitoring accounts for unusual betting patterns or potential abuse
  • Detecting multiple accounts (duplicate accounts) linked to the same individual
  • Preventing bonus abuse and coordinated betting schemes
  • Protecting against cyber attacks, unauthorized access, and data breaches
  • Investigating disputes and resolving account-related issues

3.4 Service Improvement and Analytics

  • Analyzing user behavior to enhance website functionality and user experience
  • Identifying popular games and betting markets to optimize our offering
  • Testing new features and conducting A/B experiments
  • Generating anonymized statistical reports on platform performance
  • Understanding Indonesian player preferences for sports (BRI Liga 1, EPL, La Liga) and games

3.5 Marketing and Communications (With Consent)

  • Sending promotional offers, bonus notifications, and new game announcements
  • Providing personalized recommendations based on your gaming history
  • Inviting participation in tournaments and special events
  • Conducting customer satisfaction surveys and feedback requests

Note: You may opt out of marketing communications at any time through your account settings or by contacting customer support. Opting out does not affect essential service communications.

4. Information Sharing and Disclosure

km778 does not sell your personal information to third parties. However, we may share your data with the following categories of recipients for specific business purposes:

4.1 Service Providers and Business Partners

  • Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay) receive transaction data necessary to process deposits and withdrawals.
  • Gaming Software Providers: Providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and Ezugi receive limited gameplay data to deliver their services and calculate results.
  • Identity Verification Services: Third-party KYC providers process submitted documents to verify your identity and age.
  • Cloud Hosting Providers: Secure servers hosted by reputable infrastructure providers store encrypted player data.
  • Customer Support Tools: Live chat and helpdesk platforms process communication records to facilitate support interactions.

All third-party service providers are contractually obligated to maintain confidentiality and use your data only for specified purposes. We conduct due diligence to ensure these providers implement adequate security measures.

4.2 Legal and Regulatory Authorities

We may disclose your information when required by law or in response to valid legal processes:

  • Compliance with Indonesian legal obligations and court orders
  • Cooperation with law enforcement investigations
  • Protection of km778's legal rights and interests
  • Prevention of fraud, illegal activity, or threats to public safety

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the successor entity. We will notify you of any such change and provide options regarding your data.

5. Data Security Measures

km778 employs comprehensive security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

5.1 Technical Security Controls

  • Encryption: All data transmission between your device and our servers uses industry-standard SSL/TLS encryption (minimum 256-bit).
  • Secure Storage: Personal information is stored on encrypted servers with restricted access controls.
  • Password Protection: Account passwords are hashed using advanced cryptographic algorithms and never stored in plain text.
  • Firewall Protection: Network firewalls and intrusion detection systems monitor and block unauthorized access attempts.
  • Regular Security Audits: Independent security assessments and penetration testing identify vulnerabilities.

5.2 Organizational Security Measures

  • Access Controls: Employee access to personal data is restricted based on job function and need-to-know principles.
  • Staff Training: Regular training ensures employees understand data protection responsibilities.
  • Confidentiality Agreements: All personnel with access to personal data sign legally binding confidentiality agreements.
  • Incident Response: Documented procedures enable rapid response to potential data breaches.

5.3 Player Security Responsibilities

While km778 implements robust security measures, you also play a critical role in protecting your account:

  • Choose strong, unique passwords and never share them with anyone
  • Enable two-factor authentication if available
  • Log out after each session, especially on shared devices
  • Immediately notify us if you suspect unauthorized account access
  • Be cautious of phishing attempts and verify communications claiming to be from km778

Data Breach Notification

In the unlikely event of a data breach that compromises your personal information, km778 will notify affected users within 72 hours of discovering the breach. Notifications will include details about the nature of the breach, data affected, and steps we are taking to address the situation. We will also provide guidance on protecting yourself from potential consequences.

6. Data Retention and Deletion

km778 retains your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

6.1 Retention Periods

  • Active Accounts: Information is retained for the duration of your active account and ongoing use of services.
  • Closed Accounts: After voluntary account closure, most data is deleted within 90 days, except information required for regulatory compliance.
  • Regulatory Records: Transaction history, identity verification documents, and AML-related records are retained for 5 years after account closure as required by international financial regulations.
  • Marketing Data: If you opt out of marketing communications, your contact information is added to a suppression list and retained indefinitely to honor your opt-out preference.
  • Backup Systems: Data in automated backup systems may persist for up to 90 days after deletion from production systems.

6.2 Data Deletion Requests

You may request deletion of your personal information by contacting our customer support team. We will comply with deletion requests subject to:

  • Retention requirements under applicable law (especially AML/CTF regulations)
  • Necessity for establishing, exercising, or defending legal claims
  • Completion of any pending transactions or unresolved disputes

Upon receiving a valid deletion request, we will delete or anonymize your information within 30 days, except for data subject to mandatory retention periods.

7. Your Privacy Rights

As a km778 user, you have the following rights regarding your personal information:

7.1 Right of Access

You may request a copy of the personal information we hold about you. We will provide this information in a structured, commonly used format within 30 days of your request. Access requests can be submitted through your account dashboard or by contacting customer support.

7.2 Right to Rectification

If any personal information we hold is inaccurate or incomplete, you have the right to request correction. You can update most information directly through your account settings or contact support for assistance with changes that require verification.

7.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal data, subject to legal retention requirements as described in Section 6. We will honor deletion requests unless we have a lawful basis for continued retention.

7.4 Right to Restrict Processing

You may request that we limit how we use your personal information in certain circumstances, such as when you contest data accuracy or object to processing. During restriction periods, we will store the data but not actively process it without your consent.

7.5 Right to Data Portability

You have the right to receive your personal data in a portable format and transmit it to another service provider. We will provide data in CSV or JSON format upon request.

7.6 Right to Object

You may object to processing of your personal data for direct marketing purposes at any time. We will immediately cease such processing upon receiving your objection. You may also object to processing based on legitimate interests by explaining your specific situation.

7.7 Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

7.8 Exercising Your Rights

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with "Privacy Rights Request" in the subject line. We will respond within 30 days and may require identity verification to protect against fraudulent requests.

8. Cookies and Tracking Technologies

km778 uses cookies and similar tracking technologies to enhance user experience, analyze website usage, and deliver personalized content. Cookies are small text files stored on your device that allow us to recognize your browser.

8.1 Types of Cookies We Use

  • Essential Cookies: Required for website functionality, including login authentication, session management, and security features. These cannot be disabled without impairing site functionality.
  • Performance Cookies: Collect anonymous data about how visitors use our website, helping us improve performance and user experience.
  • Functional Cookies: Remember your preferences (such as language settings and username) to provide enhanced features.
  • Analytics Cookies: Help us understand user behavior patterns, popular games, and traffic sources through aggregated statistics.

8.2 Managing Cookie Preferences

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer. Note that disabling cookies may limit your ability to use certain features of the km778 website. You can manage cookies through:

  • Browser settings (Chrome, Firefox, Safari, Edge all provide cookie management tools)
  • Third-party opt-out mechanisms for analytics services
  • Mobile device settings for app-based tracking

9. International Data Transfers

km778 primarily serves players in Indonesia, and we make efforts to process data within the region. However, some of our service providers and infrastructure partners are located outside Indonesia, which may involve transferring your personal information internationally.

When we transfer data across borders, we ensure adequate protection through:

  • Contractual commitments requiring recipients to maintain equivalent data protection standards
  • Use of encryption for data in transit
  • Selection of partners in jurisdictions with strong data protection frameworks
  • Regular audits of third-party data handling practices

10. Children's Privacy

km778 services are strictly intended for adults aged 21 years and older. We do not knowingly collect personal information from individuals under the age of 21. Our age verification processes are designed to prevent underage access.

If we discover that we have inadvertently collected information from someone under 21, we will immediately delete such data and permanently close the associated account. Any winnings will be forfeited, and deposits will be returned to the original payment source.

Parents or guardians who believe their child has accessed km778 services should contact us immediately at [email protected] so we can take appropriate action.

11. Policy Updates and Modifications

km778 reserves the right to update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will:

  • Update the "Last Updated" date at the top of this policy
  • Notify registered users via email at least 30 days before changes take effect
  • Display prominent notices on the website highlighting the changes
  • For significant changes, request renewed consent where required by law

Your continued use of km778 services after policy changes become effective constitutes acceptance of the revised policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

12. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Team:

  • Email: [email protected] (Subject: Privacy Inquiry)
  • Live Chat: Available 24/7 through the km778 website
  • WhatsApp: Indonesian-speaking support for privacy-related questions

We aim to respond to all privacy inquiries within 48 hours and resolve requests within 30 days. For complex requests requiring additional time, we will notify you of the delay and provide an estimated completion timeline.

Your Acknowledgment

By creating an account and using km778 services, you acknowledge that you have read, understood, and agree to this Privacy Policy. You consent to the collection, use, and disclosure of your personal information as described herein. If you do not agree with any aspect of this policy, please discontinue use of our services immediately.

Data Protection Principles

Core principles guiding our privacy practices

Security First

Bank-level encryption, secure servers, and regular security audits protect your data from unauthorized access and breaches.

Transparency

Clear communication about what data we collect, how we use it, and who we share it with. No hidden practices.

User Control

Full access to your data, ability to correct inaccuracies, opt out of marketing, and request deletion at any time.

Purpose Limitation

Personal information used only for specified, legitimate purposes. No selling of your data to third parties.

Data Minimization

We collect only the information necessary to provide services and comply with legal obligations. No excessive data gathering.

Limited Retention

Data retained only as long as necessary for business purposes and legal requirements, then securely deleted.

Questions About Privacy?

Our dedicated support team is available 24/7 to address your privacy concerns and data protection inquiries

Visit FAQ Return Home