Privacy Policy

In this Privacy Policy, the following definitions apply unless the context requires otherwise:

• "ko5000", "we", "us", "our" — the ko5000 online gaming platform, accessible at https://ko5000.ws, and its operating entity.
• "Player", "you", "your" — any individual who accesses, registers on, or uses any service provided by ko5000.
• "Personal Data" — any information that identifies or could reasonably be used to identify you as a natural person, including your name, date of birth, email address, phone number, residential address, financial account details, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, and deletion.
• "KYC" — Know Your Customer; the identity and age-verification process required under ko5000's responsible gaming and anti-money laundering obligations.
• "Services" — all gaming products and platform features offered by ko5000, including sports betting, live casino, slot gacor (Indonesia's popular high-volatility slot category), togel (Indonesia's traditional numbers lottery), baccarat, online poker, and e-sports markets.
• "Cookies" — small text files placed on your device by a website to store session and preference information.

ko5000 collects the following categories of Personal Data in the course of providing its Services to players across Indonesia:

Identity & Contact Data

• Full legal name as it appears on a government-issued identity document.
• Date of birth (used for age verification — players must be 21 or older).
• Residential address in Indonesia (city, province, postal code).
• Email address and mobile phone number.

Financial Data

• Bank account details for deposit and withdrawal processing, including account holder name, bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP), and account number.
• E-wallet identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja where used for transactions.
• Transaction history, including deposit amounts, withdrawal amounts, timestamps, and payment method used. All amounts are denominated in Indonesian Rupiah (IDR / Rp).

KYC & Verification Data

• Copies of government-issued photo identification (e.g., KTP, passport, SIM).
• Proof of address documents where required.
• Selfie images or liveness-check data used in automated identity verification processes.

Technical & Usage Data

• IP address, device type, operating system, and browser type.
• Session duration, pages visited, games played, bet amounts, and gameplay patterns.
• Login timestamps and geolocation data (city/region level only, derived from IP).

Communications Data

• Records of live chat conversations and email correspondence with ko5000 support.
• Any data you voluntarily submit via feedback forms or responsible gaming tool requests.

ko5000 collects your Personal Data through the following channels:

• Account Registration: Data you enter when creating your ko5000 account, including your name, date of birth, email address, and phone number.
• KYC Submissions: Identity documents and selfie images you upload when completing the identity verification process.
• Deposits & Withdrawals: Financial account details and transaction records generated when you make or receive payments through supported Indonesian banks and e-wallets.
• Platform Usage: Automatically collected technical and gameplay data generated as you browse and interact with the ko5000 platform.
• Cookies & Tracking Technologies: Data gathered via cookies, local storage, and similar technologies as described in Clause 7 of this policy.
• Support Interactions: Information you provide when contacting ko5000 support via live chat or email, including any documents you attach to a support request.
• Third-Party Verification Providers: KYC data returned by our identity verification partners when checking the validity of documents you have submitted.

ko5000 uses your Personal Data for the following specific purposes:

ko5000 does not use your Personal Data for automated decision-making that produces legal or similarly significant effects on you without human review, except for the automated fraud and AML screening that may trigger a temporary account hold pending manual investigation.

ko5000 processes your Personal Data on the following legal bases:

• Contractual Necessity: Processing required to create and manage your account, process deposits and withdrawals in IDR, and deliver the gaming Services you have requested. Without this processing, ko5000 cannot provide the Services.
• Legal Obligation: Processing required to comply with applicable anti-money laundering (AML) regulations, KYC obligations, and financial record-keeping requirements. This includes verifying that all players are at least 21 years of age.
• Legitimate Interests: Processing carried out in pursuit of ko5000's legitimate interests in preventing fraud, ensuring platform security, monitoring for responsible gaming concerns, and improving platform performance — provided such interests are not overridden by your privacy rights.
• Consent: Processing of your contact data for optional promotional communications (bonus offers, seasonal promotions tied to Idul Fitri, Ramadhan, or Indonesian Independence Day, and game recommendations). You may withdraw this consent at any time without affecting the Services you receive.

ko5000 does not sell your Personal Data. We share data only in the following limited circumstances:

• Game Studio Partners: Providers such as Evolution Gaming, Pragmatic Play, PG Soft, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive the minimum session-level data required to serve their games within the ko5000 platform. They do not receive your full identity profile.
• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the transaction data necessary to execute your deposit and withdrawal instructions. These providers are bound by their own regulatory obligations and privacy policies.
• KYC Verification Partners: Third-party identity verification service providers receive the documents and selfie images you submit during the KYC process. These partners are contractually required to process your data solely for verification purposes.
• Legal & Regulatory Authorities: ko5000 may disclose Personal Data to law enforcement agencies, financial intelligence units, or other competent authorities where required by applicable law or in response to a lawful order.
• Business Transfers: In the event that ko5000's business or a material part of it is acquired, merged, or transferred to a third party, your Personal Data may be transferred as part of that transaction. You will be notified of any such transfer and of any material change to this Privacy Policy that results from it.

All third parties with whom ko5000 shares Personal Data are required to maintain appropriate technical and organisational security measures and to process your data only for the purposes specified in their data processing agreement with ko5000.

ko5000 uses cookies and similar technologies to operate the platform, maintain your session, and understand how players interact with our Services. The categories of cookies we use are as follows:

ko5000 does not use third-party advertising or retargeting cookies. You can manage or delete cookies at any time through your browser's privacy settings. Disabling essential or security cookies may impair your ability to log in or use the ko5000 platform.

ko5000 implements a multi-layered security architecture to protect your Personal Data against unauthorised access, alteration, disclosure, or destruction:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or app and ko5000's servers is encrypted using industry-standard TLS protocols — the same encryption level deployed by major Indonesian banking institutions including BCA and Mandiri for their online banking platforms.
• Encrypted Data Storage: Sensitive Personal Data — including KYC documents, financial account details, and password hashes — is stored using encryption at rest. Plaintext passwords are never stored under any circumstances.
• Access Controls: Internal access to Personal Data is restricted on a strict need-to-know basis. ko5000 staff members are granted the minimum data access required to fulfil their specific operational role.
• Security Monitoring: ko5000 operates continuous monitoring of its infrastructure for intrusion attempts, anomalous access patterns, and data exfiltration signals. Security events are triaged and escalated according to a documented incident response plan.
• Breach Notification: In the event of a data breach that poses a material risk to your rights, ko5000 will notify affected players promptly, describing the nature of the breach, the data affected, and the steps being taken to mitigate harm.

While ko5000 takes all reasonable technical precautions, no internet transmission or electronic storage system is completely impenetrable. You also have a role to play: use a strong, unique password for your ko5000 account, do not share your credentials with anyone, and contact support immediately if you suspect unauthorised access.

ko5000 retains your Personal Data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Account & Identity Data: Retained for the duration of your active account plus a minimum of five years following account closure, in accordance with AML record-keeping requirements.
• Transaction Records: All deposit and withdrawal records — including amounts in IDR, timestamps, and payment methods used — are retained for a minimum of five years to satisfy financial compliance obligations.
• KYC Documents: Identity documents submitted during verification are retained for the life of the account plus five years post-closure, or longer where a specific legal or regulatory obligation demands extended retention.
• Support Communications: Live chat and email records are retained for three years following the date of the last exchange, unless a longer period is required due to an ongoing complaint or investigation.
• Gameplay & Session Data: Detailed gameplay logs are retained for twelve months in a format linked to your identity. After this period, the data may be aggregated and anonymised for analytical purposes without further personal data processing.
• Marketing Consent Records: Records of your opt-in or opt-out choices are retained for the duration of your account and for three years following account closure.

When Personal Data is no longer required and no retention obligation applies, ko5000 will securely delete or anonymise it in accordance with industry-standard data destruction practices.

As a player on ko5000, you hold the following rights with respect to your Personal Data. To exercise any of these rights, please contact ko5000 support via live chat or email as described in Clause 14:

• Right of Access: You may request a copy of the Personal Data ko5000 holds about you. We will provide a structured response within 30 days of receiving a verified request.
• Right to Rectification: If any Personal Data ko5000 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Minor details such as email address and phone number can be updated directly from within your Account settings.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected. Note that this right is subject to overriding legal retention obligations — ko5000 cannot delete transaction or KYC records during mandatory retention periods.
• Right to Restrict Processing: You may request that ko5000 limit the processing of your data in certain circumstances, such as while a dispute over data accuracy is being resolved.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including automated fraud-risk profiling. ko5000 will assess whether its legitimate interests override your objection on a case-by-case basis.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
• Right to Data Portability: You may request a copy of your Personal Data in a commonly used, machine-readable format for the data that you have provided to us and that is processed on the basis of consent or contractual necessity.

ko5000's Services are strictly for adults aged 21 and over. ko5000 does not knowingly collect, store, or process Personal Data belonging to individuals under the age of 21.

All accounts are subject to an age verification check as part of the KYC process. Where ko5000 has reason to believe that an account is held by a person under the age of 21, the account will be suspended immediately pending review. If the suspicion is confirmed, the account will be closed, any winnings will be forfeited, and any deposited funds will be returned to the original payment method used.

If you are the parent or guardian of a minor and believe they may have registered on ko5000, please contact our support team immediately via live chat. We will investigate and act on confirmed cases as a priority.

ko5000 also recommends the use of parental control software on shared or family devices to prevent minors from accessing gambling content.

ko5000 is an internationally operated platform and some of our technology partners — including game studio providers and KYC verification services — may process your data on servers located outside Indonesia. Where Personal Data is transferred to a jurisdiction with different data protection standards, ko5000 takes the following steps to safeguard your rights:

• We establish contractual data processing agreements with all international data processors, incorporating data protection obligations aligned with international best practice.
• We conduct due diligence on third-party processors to ensure they maintain appropriate technical and organisational security measures.
• We transfer only the minimum data necessary to enable the specific processing purpose, and we do not authorise international partners to use your data for their own purposes beyond the contracted scope.

By using ko5000's Services, you acknowledge that your Personal Data may be processed in jurisdictions outside Indonesia as described in this Clause. If you have concerns about international data transfers, please contact us via the details in Clause 14.

ko5000 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will notify you by one or more of the following methods:

• A prominent notice displayed on the ko5000 platform upon your next login.
• An email notification sent to the address registered on your account.
• An update to the "Last Updated" date shown at the top of this page.

Your continued use of ko5000's Services following the effective date of any amended Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any amendment, you should cease using the Services and may request account closure by contacting support.

We encourage you to review this Privacy Policy periodically to stay informed about how ko5000 protects your Personal Data. Archived versions of previous policies are available upon request from our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please reach out to the ko5000 Privacy & Support team through the following channels:

• Live Chat: Available 24/7 directly within the ko5000 platform. Our Indonesian-speaking support agents are on hand to assist you at any hour, across all time zones including WIB (UTC+7), WITA (UTC+8), and WIT (UTC+9).
• Email: support@ko5000.ws — please use the subject line "Privacy Request" to ensure your message is routed directly to the data privacy team. Email addresses are displayed as plain text and are not clickable links.

When submitting a data rights request, please include your registered username and the email address associated with your account so that we can verify your identity before processing the request. ko5000 will never ask for your password in any support interaction.