Privacy Policy koko11 — User Personal Data Protection

Welcome to the koko11 Privacy Policy page. We, the management of koko11, greatly value the trust you place in us when you use our online gaming platform. That trust comes with great responsibility, and we take every aspect of your privacy protection seriously.

This Privacy Policy explains in detail what personal information we collect, why we need it, how it is used, who it may be shared with, and what your rights are regarding that data. This document applies to all users who access the koko11 website, use our mobile app, register an account, or interact with any of the services we offer.

By registering an account or continuing to use the koko11 platform, you are deemed to have read, understood, and agreed to the terms set out in this Privacy Policy. If you do not agree with any part of this policy, we advise you to stop using the platform and contact our support team for further discussion.

Koko11 operates in full compliance with the provisions of Malaysia's Personal Data Protection Act 2010 (PDPA). We have a dedicated data protection officer responsible for ensuring all our data handling practices comply with applicable laws.

Koko11 collects your personal data through several means — directly when you provide it to us, automatically while you use the platform, and occasionally through trusted third-party sources. The following are the categories of data we collect:

We never collect information beyond what is necessary for platform operations. Every piece of data collected has a clear justification, and we only retain it for as long as needed to fulfil that purpose or as required by law.

Koko11 uses your personal data responsibly and only for legitimate purposes. We will not use your data for any purpose other than those stated below without first obtaining your consent:

• Account Management: Creating and maintaining your account, verifying your identity during the KYC process, and ensuring login security.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions accurately and securely.
• Legal Compliance: Meeting AML (Anti-Money Laundering), KYC, and other applicable legal compliance requirements in Malaysia.
• Customer Service: Providing technical support, resolving complaints, and enhancing your user experience.
• Platform Security: Detecting and preventing fraud, system abuse, unauthorised access, and unlawful activity.
• Responsible Wagering: Monitoring gameplay patterns to identify users who may need responsible gambling support.
• Service Communications: Sending transaction notifications, security updates, and important information related to your account.
• Marketing (with consent): Sending promotional offers, bonus information, and relevant marketing content — only if you have agreed to receive them.
• Platform Improvements: Analysing usage patterns in aggregate and anonymised form to help us improve our products and services.

The legal basis for our data processing depends on context: for account management and transactions, it is the necessity of performing a contract with you; for legal compliance, it is a legal obligation; for marketing, it is your consent, which may be withdrawn at any time.

Koko11 does not sell or rent your personal data to any third party. However, in the course of legitimate business operations, there are limited situations where we need to share your data with certain parties. Every instance of data sharing is carried out on a strict need-to-know basis and is subject to binding confidentiality agreements.

• Payment Service Providers: Payment gateways, banks, and e-wallet providers that process your transactions. They receive only the minimum data required to complete a transaction.
• Game Software Providers: Gaming software companies that provide game content on the koko11 platform, subject to strict data agreements.
• Regulatory Authority: Regulatory bodies, law enforcement authorities, or courts when required by law or court order.
• Identity Verification Services: Third-party KYC service providers that assist us in verifying user identities in accordance with compliance requirements.
• Auditors and Legal Advisors: Audit firms and legal advisors providing professional advisory services to koko11, subject to professional confidentiality obligations.

If koko11 is involved in a business merger, acquisition, or asset sale, user data may be transferred as part of that transaction. In such cases, we will notify you via a clear notice on the platform or by email before your data is transferred and becomes subject to a different privacy policy.

Koko11 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. They help us recognise you on subsequent visits and deliver a more personalised and efficient experience.

• Essential Cookies: Required for basic platform functions such as login session verification, security, and basic navigation. These cookies cannot be disabled.
• Performance Cookies: Collecting information about how you use our platform — pages visited, time spent, and errors encountered — to help us improve website performance.
• Functional Cookies: Saving your preferences such as language, region, and display settings to deliver a more personalised experience on future visits.
• Analytics Cookies: Helping us understand how users interact with our platform as a whole, enabling us to make data-driven decisions for continuous improvement.

You can manage cookie usage through your web browser settings. Most browsers allow you to view, manage, and delete cookies. Please note, however, that disabling certain cookies may affect the functionality of the koko11 platform and you may not be able to access some features in full.

Koko11 retains your personal data only for as long as necessary to fulfil the purposes stated in this policy, or for as long as required by applicable laws and regulations. Retention periods depend on the type of data and operational requirements:

• Active account data is retained for the lifetime of your account.
• Financial transaction records are retained for a minimum of 7 years in accordance with tax law and AML requirements.
• Security and activity logs are retained for 2 years for investigation purposes if required.
• Customer support communication data is retained for 3 years after a case is resolved.
• Marketing data (if you have opted in to receive it) is retained until you withdraw your consent.

On the technical security front, koko11 implements multiple layers of protection to safeguard the integrity and confidentiality of your data. Our security infrastructure includes 256-bit SSL encryption for all transmitted data, encryption of sensitive data stored in databases, advanced firewalls, an intrusion detection system (IDS), two-factor authentication (2FA) for administrative access, and periodic third-party security audits.

While we take all reasonable precautions, no security system is completely foolproof. In the event of a data breach that affects your rights and freedoms, we will notify you and the relevant authorities in accordance with applicable legal requirements.

As a koko11 user in Malaysia, you have certain rights regarding your personal data under the Personal Data Protection Act 2010 (PDPA). koko11 fully respects and facilitates the exercise of these rights:

To exercise any of the above rights, please contact our privacy team via email or Live Chat. We will process your request within the specified timeframe and may require identity verification before processing your request to ensure the security of your data.

The koko11 platform is strictly for adult users aged 18 and above. We do not intentionally collect, store, or process personal data of individuals under the age of 18. Account registration by minors is strictly prohibited and constitutes a serious violation of our terms of use.

During the registration process, we require age verification and identity verification (KYC) to ensure that only eligible users can access the platform. If we discover that we have inadvertently collected personal data of an individual under the age of 18, we will immediately take steps to delete that data and close the relevant account.

The koko11 platform may contain links to third-party websites or services in certain contexts. Please note that koko11's Privacy Policy applies only to our own platform and does not cover the practices of those third-party websites or services.

Each third-party website has its own privacy policy and data handling practices, which may differ from koko11's. We are not responsible for the content, privacy policies, or practices of any third-party website. We encourage you to independently read the privacy policy of every website you visit before providing any personal information to them.

The inclusion of links to any third-party websites on our platform does not imply that koko11 endorses or validates the content, products, or services offered by those sites. We do not control and are not responsible for the content or privacy policies of those websites.

Koko11 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, new legal requirements, or improvements in how we handle personal data. Any changes will take effect as soon as the updated version is published on our platform.

When we make significant changes to this Privacy Policy, we will notify you via a prominent notice on the platform's main page, an in-account notification, or an email to your registered address. The "Last Updated" date shown at the top of this page will always reflect the date of the latest version of this policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Continued use of the koko11 platform after any changes are published will be considered as your acceptance of the updated terms.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, the koko11 privacy team is ready to assist you. We are committed to responding to all privacy enquiries within 3 business days.

If you are not satisfied with our response, you have the right to lodge a complaint with Malaysia's Personal Data Protection Department or the relevant regulatory authority in your country.