Privacy Policy koi234 – Malaysian Member Data Protection

Koi234 collects your personal information through various channels when you use our platform. Below are the categories of information we collect and the purposes for which they are collected:

Some information is collected directly from you – for example, when you complete a registration form or submit identity verification documents. Other information is collected automatically as you use the platform – such as technical and usage data recorded by koi234's systems for security and operational purposes.

The personal data we collect is used solely for legitimate purposes directly related to the provision of koi234's services. The following are the purposes for which that data is used:

• Account management: Creating, verifying, and maintaining your koi234 member account, including the KYC (Know Your Customer) process required by law.
• Transaction processing: Processes deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, and manages withdrawal of winnings to your Malaysian bank account or e-wallet.
• Gaming service delivery: Provides access to slots, Live Casino, table games, poker, jackpots, lottery, Sports Betting, and e-sports.
• Fraud prevention: Detecting, investigating, and preventing fraud, system exploitation, money laundering, and violations of our terms of use.
• Customer support: Handles member inquiries, resolves complaints, and provides technical support via live chat, WhatsApp, and email.
• Service-related communications: Sending important notifications about your account, policy changes, system outages, and security information.
• Marketing communications: Sending information about promotions, bonuses, and special offers – only where you have given your consent to receive such communications.
• Responsible gaming: Monitoring gameplay patterns to identify early signs of problem gambling and providing appropriate support to members who need it.
• Legal compliance: Complying with all applicable legal requirements, regulations, and directives from competent authorities in Malaysia.

Koi234 will not use your personal data for any purpose not stated in this policy without first obtaining your consent. Should we need to use your data for a new purpose, we will notify you and seek the necessary consent.

Koi234 does not sell or rent members' personal data to any third party for marketing or commercial purposes. However, there are limited situations where koi234 needs to share data with specific parties for legitimate operational purposes:

• Payment providers: Transaction information that must be shared with payment service providers such as Touch 'n Go, GrabPay, DuitNow, FPX, Boost, and ShopeePay to process your deposits and withdrawals. These providers are bound by strict confidentiality agreements.
• Game providers: Usernames and game data that must be shared with game software providers (such as Pragmatic Play, PG Soft, Evolution Gaming) in order to operate the games you play on the koi234 platform.
• IT service provider: Server hosting providers, cybersecurity services, and fraud detection systems that help koi234 maintain a secure and stable platform operation.
• Legal authority: Where required by Malaysian law, court order, or a law enforcement agency in connection with a criminal investigation or regulatory compliance.
• Professional advisors: Lawyers, accountants, or auditors bound by professional confidentiality obligations, where required for legitimate business purposes.

Koi234 employs multiple layers of technical and organisational safeguards to ensure members' personal data remains secure and protected from unauthorised access, loss, destruction, or accidental disclosure:

• 256-bit SSL encryption: All communications between a member's device and koi234's servers are fully encrypted — data cannot be read by any unauthorised party, even if the transmission is intercepted.
• Data encryption at rest: Sensitive personal data stored in koi234's databases is also encrypted using modern encryption algorithms.
• Strict access controls: Only koi234 staff who require access to members' personal data for their job functions are permitted to do so, and this access is governed by a tiered authorisation system.
• 24/7 security monitoring: Intrusion detection and threat monitoring systems operate around the clock to proactively identify and respond to any suspicious activity.
• Two-factor authentication (2FA): koi234 offers a 2FA option for member accounts as an added layer of protection against unauthorised access.
• Regular security audits: Independent security assessments are conducted regularly to identify and address any vulnerabilities within koi234's systems.
• Staff training: All koi234 staff who handle members' personal data receive regular data protection and information security training.

While koi234 takes all reasonable measures to protect your data, no security system is completely foolproof. In the event of a data breach involving your personal information, koi234 will notify you and the relevant authorities as required by law within the stipulated timeframe.

Koi234 uses cookies and similar tracking technologies to enhance the user experience, understand how the platform is used, and ensure account security. The following are the types of cookies we use:

• Essential cookies: Required for the core functionality of the koi234 platform – including login session verification, bet slip management, and security. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Collects information on how members use the platform — pages visited frequently, time spent in each section, and errors encountered. This data is used in aggregate form to improve the platform.
• Functional cookies: Stores your preferences such as interface language, preferred odds format, and display settings so you do not need to reconfigure them each time you log in.
• Security cookies: Helps identify and prevent fraudulent activity by detecting unusual usage patterns from different devices or locations.

You can manage your cookie settings through your browser. However, disabling certain cookies may affect your ability to log in and use some features of the koi234 platform. koi234 does not use third-party cookies for advertising purposes.

As a koi234 member and an individual whose personal data we hold, you have the following rights under Malaysia's Personal Data Protection Act 2010 (PDPA):

• Right of access: You have the right to request a copy of the personal information we hold about you. koi234 will provide this information within 21 days of receiving your request.
• Right to rectification: You have the right to request correction of any personal information that is inaccurate, incomplete, or outdated. Updates will be carried out within 3 business days.
• Right to withdraw consent: You may withdraw your consent to receive marketing communications at any time by updating your preferences in your account settings or by contacting koi234 support.
• Right to restrict processing: Under certain circumstances, you may request that koi234 restrict how we process your personal data while your request or complaint is being resolved.
• Right to erasure: You may request the deletion of your personal data once your account is closed, subject to the record-retention obligations prescribed by Malaysian law (generally 7 years for financial records).
• Right to lodge a complaint: You have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia if you believe your privacy rights have been violated.

To exercise any of the above rights, contact the koi234 support team by email at support@koi234.best or via live chat within the platform. Please include your username and details of your request. koi234 may need to verify your identity before processing certain requests to ensure the security of your account.

Koi234 retains members' personal data only for as long as necessary for the purposes outlined in this policy, or as required under Malaysian law. The following guidelines apply to data retention periods:

• Active account data: Retained for as long as your account remains active with koi234, and for a reasonable period thereafter to handle any outstanding inquiries or disputes.
• Financial transaction records: Retained for a minimum of 7 years following each transaction in accordance with Malaysian financial regulations. This includes records of deposits, withdrawals, and winnings.
• Security logs: Retained for 12 months for the purpose of investigating security threats and fraud.
• Customer support records: Retained for 2 years after the relevant support interaction is concluded.
• Marketing data: Retained until you withdraw your consent or close your account.

Once the retention period has expired or a valid deletion request has been processed, koi234 will securely delete or anonymise your personal data so that it can no longer be linked to your identity. Anonymised data may be retained for aggregate statistical and analytical purposes and will contain no individually identifiable information.

If you have any questions, concerns, or requests regarding this Privacy Policy or how koi234 handles your personal data, you may reach us through the following channels:

• Email: support@koi234.best – for privacy enquiries that require detailed discussion or written acknowledgement.
• Live Chat: Available on the koi234 platform 24 hours a day, 7 days a week – for immediate enquiries.
• WhatsApp: Contact us via the number listed in the koi234 platform's support section for urgent privacy enquiries.

Koi234 is committed to responding to all privacy-related enquiries within 5 business days. For more complex requests such as data access or deletion applications, processing may take longer but will not exceed 21 days from the date a complete request is received.

This Privacy Policy may be updated from time to time in response to operational needs or changes in law. Any material changes will be communicated to members via email or in-platform notification before they take effect. The "Updated" date at the top of this document reflects the date of the most recent revision.