Privacy Policy — kdg89

1.1   kdg89 ("we", "us", "our") operates the online gaming platform accessible at kdg89.vip and is committed to protecting the privacy and personal data of every individual who visits, registers on, or interacts with our platform. This Privacy Policy describes in full the categories of personal data we collect, the purposes for which we process that data, the legal bases on which processing is conducted, how long we retain data, with whom we share it, and the rights available to you as a data subject.

1.2   This Privacy Policy applies to all data processing activities undertaken by kdg89 in connection with: (a) the registration and management of player accounts; (b) the provision of sports betting, live casino, slot, and other gaming services; (c) the processing of deposits and withdrawals via Indonesian local banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja); (d) customer support and communications; and (e) the operation and optimisation of the kdg89 website and mobile-browser interface.

1.3   By creating an Account on kdg89 or by continuing to use the platform after this Privacy Policy has been made available to you, you acknowledge that you have read and understood its contents. If you do not agree with any part of this Privacy Policy, you must cease using the platform and may request closure of your Account in accordance with our Terms & Conditions.

1.4   This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which form part of the contractual framework governing your relationship with kdg89.

2.1   kdg89 collects only the personal data necessary to deliver a safe, compliant, and high-quality gaming experience. The categories of personal data we collect are set out in the table below:

2.2   kdg89 does not collect special categories of sensitive personal data — such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data — except to the extent that identity documents submitted for KYC verification may incidentally contain such information. Any such incidental data is not extracted, processed separately, or used for any purpose other than confirming your identity.

3.1   kdg89 collects personal data through the following means:

• Direct provision by you: When you register an Account, complete your profile, submit a KYC document, make a deposit or withdrawal request, contact our support team, or opt in to a promotion, you provide personal data to us directly.
• Automated technical collection: When you access and use the kdg89 platform, we automatically collect Technical Data (IP address, device fingerprint, session data) via server logs, cookies, and similar technologies. See Section 9 for full details on our cookie use.
• Third-party service providers: We may receive identity-verification data from accredited KYC/AML service providers to whom you submit documentation as part of the account-verification process. We may also receive fraud-screening signals from our payment-processing partners.
• Publicly available sources: In limited circumstances — for example, where fraud is suspected — we may cross-reference information you have provided against publicly available databases or sanctions lists.

4.1   kdg89 processes your personal data for the following specific purposes:

• Account management: Creating and maintaining your Account, verifying your identity and age (21+ strictly enforced), managing your login credentials, and communicating Account-related notices.
• Service delivery: Processing bets, game rounds, deposits, and withdrawals; crediting and debiting your IDR balance; applying bonuses and wagering requirements; and providing access to all platform products including sportsbook, live casino, and slots.
• KYC and regulatory compliance: Verifying your identity against government-issued documents; screening against international sanctions and politically exposed persons (PEP) lists; fulfilling anti-money-laundering (AML) obligations; and retaining records as required by our licensing authority.
• Fraud prevention and security: Detecting and investigating suspicious account activity, duplicate account registrations, bonus abuse, and potential money-laundering patterns. Technical Data is analysed to identify anomalous access patterns.
• Customer support: Responding to enquiries, resolving complaints, processing withdrawal disputes, and providing account-recovery assistance.
• Responsible gaming: Monitoring gaming activity to identify indicators of problem gambling; enforcing deposit limits, cool-off periods, and self-exclusion measures; and sending responsible-gaming communications where warranted. See our Responsible Gaming page for full details.
• Marketing and promotions: Sending promotional communications (email and SMS) where you have opted in to receive them. Personalising bonus offers based on your gaming-activity profile where you have consented to this use.
• Platform analytics and improvement: Analysing aggregated, anonymised usage data to understand how players interact with the platform, identify technical issues, and improve the user experience.

4.2   kdg89 will not use your personal data for any purpose incompatible with those listed above without first providing notice and, where required, obtaining your consent.

5.1   kdg89 processes personal data under one or more of the following legal bases depending on the specific processing activity:

6.1   kdg89 does not sell or rent your personal data to any third party. We share personal data only in the circumstances described below, and only to the extent strictly necessary for the stated purpose:

• Payment processors and banking partners: Financial Data (bank account number, e-wallet identifier, transaction amounts in IDR) is shared with the relevant payment processing partner — including the Indonesian bank networks and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) — solely to execute deposit and withdrawal instructions.
• KYC and identity-verification providers: Identity Data and copies of identity documents are shared with our accredited third-party KYC verification partner to complete the account-verification process. These providers are contractually bound to process the data solely for verification purposes and to apply security standards equivalent to those applied by kdg89.
• Game content providers: Technical session data (not personally identifiable financial data) is shared with game studios including Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, and Microgaming to facilitate game-round integrity and RNG certification audits.
• Licensing and regulatory authorities: Where required by the conditions of our operating licence or by a lawful order from a competent regulatory or law-enforcement authority, kdg89 will disclose personal data to the relevant body. We will notify you of any such disclosure where legally permitted to do so.
• Fraud and AML screening services: Limited data may be shared with international sanctions databases, politically exposed persons (PEP) registries, and fraud-intelligence networks for the purpose of complying with our AML obligations.
• Professional advisers: Lawyers, auditors, and insurers acting in connection with the operation of kdg89's business may access personal data on a strictly confidential, need-to-know basis.

7.1   kdg89 is an internationally operated platform. Personal data collected from players — including those accessing the platform from Jakarta, Surabaya, Bandung, Bali, Medan, Yogyakarta, and other Indonesian cities — may be transferred to and processed in countries other than Indonesia, including the jurisdiction in which our licensing authority and data-centre infrastructure are located.

7.2   When personal data is transferred internationally, kdg89 takes all reasonable steps to ensure that appropriate safeguards are in place to protect the data in transit and at rest. These safeguards may include: contractual data-processing agreements incorporating standard data-protection clauses; transfer to jurisdictions recognised as providing an adequate level of data protection; and technical controls such as encryption in transit and at rest.

7.3   By registering an Account on kdg89 and accepting our Terms & Conditions, you acknowledge and consent to the international transfer of your personal data as described in this section, on the understanding that kdg89 will apply the protections described above.

8.1   kdg89 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by applicable law or our licensing obligations. The key retention periods applicable to each data category are summarised below:

8.2   At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with you as an individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytics purposes.

9.1   kdg89 uses cookies and similar tracking technologies on its platform. Cookies are small text files placed on your device when you visit a website. They allow the website to recognise your device across multiple page loads and sessions.

9.2   kdg89 uses the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function correctly. These include session authentication tokens, CSRF protection cookies, and load-balancing cookies. These cookies cannot be disabled without breaking core platform functionality.
• Performance and analytics cookies: Collect aggregated, anonymised data about how players navigate the platform — for example, which game categories are most visited and where players encounter errors. This data is used exclusively to improve the platform experience.
• Functional cookies: Remember your language and display preferences, game-lobby filter settings, and responsible-gaming tool configurations between sessions.

9.3   kdg89 does not use third-party advertising cookies, retargeting pixels, social-media tracking pixels, or any cross-site tracking technologies. You will not be tracked by kdg89 cookies when you visit other websites.

9.4   You may manage or disable cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair your ability to log in to your kdg89 Account and use the platform's core features.

10.1   As a data subject whose personal data is processed by kdg89, you have the following rights, which you may exercise at any time by contacting us through the channels set out in Section 15:

• Right of Access: You may request a copy of all personal data kdg89 holds about you, along with information about the purposes for which it is processed, the categories of data held, and any third parties to whom it has been disclosed.
• Right to Rectification: You may request that inaccurate or incomplete personal data be corrected or completed. For data you can update directly within your Account dashboard (such as email address or phone number), we encourage you to make corrections there in the first instance.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn your consent (and there is no other legal basis for processing), or where processing is unlawful. This right is subject to our legal obligations to retain certain data as described in Section 8.
• Right to Restriction: You may request that we restrict processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object at any time to the processing of your personal data for direct marketing purposes. You may also object to processing based on our legitimate interests, in which case we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent — such as the receipt of marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

10.2   kdg89 will respond to all valid data-subject requests within 30 days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day period.

10.3   kdg89 will not charge a fee for processing data-subject requests except in cases where requests are manifestly unfounded or excessive (for example, repetitive requests for the same data within a short period). In such cases, we reserve the right to charge a reasonable administrative fee or to refuse the request, explaining our reasons in writing.

11.1   kdg89 employs a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key measures include:

• 256-bit SSL/TLS encryption for all data in transit between your browser and our servers.
• Encryption of sensitive data at rest, including financial records and identity documents, using industry-standard encryption algorithms.
• Role-based access controls limiting internal access to personal data to authorised personnel whose job functions require it.
• Multi-factor authentication requirements for all internal staff accessing production systems containing player data.
• Regular third-party penetration testing and vulnerability assessments of the platform infrastructure.
• Comprehensive audit logging of all access to and modifications of personal data records.
• Business-continuity and disaster-recovery procedures including geographically distributed data backups.

11.2   In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, kdg89 will notify affected players without undue delay and will take all reasonable steps to mitigate the impact of the breach.

11.3   While kdg89 employs robust security measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own Account credentials. If you suspect that your Account has been compromised, please contact our support team immediately.

12.1   kdg89's gaming services are strictly for adults aged 21 and over. We do not knowingly collect, process, or retain personal data relating to individuals under the age of 21. Our registration process incorporates automated age-verification checks and manual KYC review to enforce this requirement.

12.2   If kdg89 becomes aware that personal data has been collected from an individual under the age of 21, we will immediately close the Account, delete all associated personal data to the extent not required for legal compliance purposes, and return any deposited funds to the original payment method. We will not process any wagers placed by an underage Account holder.

12.3   Parents and guardians who believe that a minor in their household may have accessed the kdg89 platform should contact our support team immediately via live chat (available 24/7 from within the platform). We treat all such reports with the highest priority.

13.1   The kdg89 platform may contain references to game studios (Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, Microgaming, Spribe, and others) and to sports organisations (BRI Liga 1, EPL, La Liga, Timnas Indonesia / Garuda). These references are provided for informational context only. kdg89 does not include outbound links to third-party websites within the platform interface.

13.2   To the extent that any third-party service embedded within the platform (such as a live game stream hosted by a game studio) processes personal data independently of kdg89, that third party's own privacy policy governs that processing. kdg89 is not responsible for the data-handling practices of independent third-party service providers beyond the contractual obligations described in Section 6.

14.1   kdg89 reserves the right to update this Privacy Policy at any time to reflect changes in our data-processing practices, platform features, or applicable law. Where changes are material, we will notify registered players by email to the address associated with their Account and by displaying a prominent notice on the platform for a period of not less than 14 days before the updated policy takes effect.

14.2   Your continued use of the kdg89 platform after the stated effective date of any amendment constitutes your acknowledgement of the updated Privacy Policy. If you do not accept the updated terms, you should close your Account before the effective date of the amendment.

14.3   The current version of this Privacy Policy is always available at kdg89.vip/privacy-policy. The "Last Reviewed" date at the top of this page indicates when the most recent review was conducted, regardless of whether substantive changes were made.

15.1   If you have any questions about this Privacy Policy, wish to exercise any of the rights described in Section 10, or want to raise a privacy-related complaint, please contact the kdg89 privacy team through either of the following channels:

• Email: [email protected] — please include "Privacy Request" or "Privacy Complaint" in the subject line.
• Live Chat: Available 24 hours a day, 7 days a week, from within the kdg89 platform after logging in to your Account. Live chat is the fastest channel for urgent privacy matters.

15.2   kdg89 will acknowledge receipt of all privacy-related enquiries within 2 business days (WIB, UTC+7) and will aim to provide a substantive response within 30 calendar days. Where additional time is needed to investigate a complaint fully, we will keep you informed of progress at regular intervals.

15.3   If you are not satisfied with kdg89's response to a privacy complaint, you may escalate the matter to the supervisory authority or data-protection regulator in the jurisdiction where kdg89 holds its operating licence. Details of the relevant authority will be provided upon request.