Privacy Policy

For the purposes of this Privacy Policy, the following terms shall carry the meanings set out below:

• "Personal Data" — Any information relating to an identified or identifiable natural person ("data subject"). An identifiable person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, account number, location data, or online identifier.
• "Processing" — Any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
• "Controller" — km507, the entity that determines the purposes and means of processing your Personal Data.
• "Processor" — Any third party that processes Personal Data on behalf of km507 under a written data processing agreement (e.g., payment processors, KYC verification providers).
• "Data Subject" — You, the individual whose Personal Data is being processed.
• "KYC Data" — Identity documents and supporting verification materials submitted by a Member during the Know Your Customer verification process, including copies of KTP (national identity card), SIM (driving licence), passport, and selfie photographs.
• "Transactional Data" — Records of all deposits, withdrawals, bets, game rounds, bonuses, and other financial activity associated with a Member's km507 Account.
• "Technical Data" — Device identifiers, IP addresses, browser type and version, operating system, session timestamps, and other data collected automatically when you access the Platform.
• "Consent" — A freely given, specific, informed, and unambiguous indication of a Member's agreement to the processing of their Personal Data for a stated purpose.

km507 collects the following categories of Personal Data in connection with your use of the Platform:

km507 collects Personal Data through the following channels:

1. Directly from You. When you register an account, complete KYC verification, make a deposit or withdrawal, place a bet, contact customer support, respond to a survey, or opt into a promotional offer, you provide Personal Data directly to km507.
2. Automatically via Technical Systems. When you access km507.bet, our servers and analytics systems automatically record Technical Data including your IP address, device characteristics, browser settings, and session behaviour. This data is collected using server logs, cookies, and similar technologies (see Section 7 — Cookies & Tracking).
3. From Third-Party Processors. km507 may receive Personal Data from authorised third-party processors, including:
   • Payment processors (to confirm deposit and withdrawal transaction status)
   • KYC verification service providers (to cross-reference identity document data)
   • Fraud detection and anti-money-laundering (AML) screening providers
   • Geolocation data providers (to verify your country of access)
4. From Public Sources. In limited circumstances, km507 may verify information against publicly available sources (for example, to confirm that a name provided during registration matches publicly available records) as part of our AML compliance programme.

km507 uses your Personal Data for the following purposes only:

1. Account Administration. To create, maintain, and manage your km507 Account, including processing your registration, verifying your identity, managing your Balance, and processing your login sessions.
2. Service Delivery. To provide the core betting and gaming services available on the Platform, including sportsbook markets, live casino games, slot titles, and togel (Indonesia's traditional numbers lottery) draws.
3. Payment Processing. To process deposits from and withdrawals to your nominated Indonesian bank accounts (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI), e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), and USDT TRC20 wallet.
4. KYC & Compliance. To verify your identity and age (21+), comply with anti-money-laundering (AML) obligations, detect and prevent fraud, and meet any applicable regulatory requirements to which km507 is subject as an internationally licensed gaming operator.
5. Security & Fraud Prevention. To monitor account activity for suspicious patterns, investigate potential breaches of our Terms & Conditions, prevent bonus abuse and multi-accounting, and protect the integrity of the Platform.
6. Customer Support. To respond to your queries, investigate complaints, process dispute resolutions, and improve the quality of our support services based on interaction history.
7. Responsible Gaming. To monitor betting patterns that may indicate problem gambling behaviour, apply deposit limits and self-exclusion restrictions at your request, and deliver responsible gaming tool notifications.
8. Platform Improvement. To analyse aggregate usage data, identify technical issues, optimise page performance, and develop new product features for Indonesian players.
9. Marketing & Promotions. To send you promotional offers, bonus notifications, and event-based campaigns (e.g., Idul Fitri specials, Ramadhan promotions, BRI Liga 1 season offers) where you have consented to receive such communications or where permitted under legitimate interests. See Section 13 for opt-out options.
10. Legal Obligations. To comply with applicable legal requirements, respond to lawful requests from competent authorities, and enforce our Terms & Conditions.

km507 processes your Personal Data only where a valid legal basis exists. The legal bases we rely on are as follows:

• Contractual Necessity — Processing required to perform the contract between km507 and you (i.e., the Terms & Conditions you accepted on registration), including account creation, payment processing, and service delivery.
• Legal Obligation — Processing required to comply with applicable law, including KYC/AML obligations, age verification requirements, and responses to lawful authority requests.
• Legitimate Interests — Processing for km507's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and general platform analytics — provided these interests are not overridden by your privacy rights.
• Consent — Processing for marketing communications and non-essential cookies, where you have provided explicit opt-in consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

km507 does not sell your Personal Data. We share Personal Data only in the limited circumstances described below, and only to the extent necessary for the specified purpose:

1. Payment Processors. We share financial and identity data with licensed Indonesian payment processors and banking partners (including those supporting BCA, BRI, BNI, Mandiri, CIMB Niaga, and e-wallet providers OVO, DANA, GoPay, ShopeePay, LinkAja) to process your transactions. These processors are bound by data processing agreements and are prohibited from using your data for any purpose beyond completing the relevant transaction.
2. KYC & Identity Verification Providers. We share KYC Data with accredited third-party identity verification service providers to fulfil our age verification (21+) and AML compliance obligations. These providers process data solely on km507's instructions.
3. Game Studios. When you play games provided by studios such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, or Pocket Games Soft, limited Technical Data (such as a session token and game round ID) is shared with the relevant studio to facilitate game delivery and outcome determination. Game studios do not receive your registration or financial data.
4. Fraud & Security Providers. We share Technical Data and behavioural signals with specialist fraud detection and cybersecurity partners to protect the Platform and our Members from account takeover, payment fraud, and bot activity.
5. Legal & Regulatory Authorities. km507 will disclose Personal Data to competent law enforcement agencies, regulators, or courts where required to do so by applicable law or in response to a valid legal order. km507 will, where legally permitted, notify affected Members of such disclosures.
6. Business Transfers. In the event of a merger, acquisition, restructuring, or sale of all or part of km507's business, Personal Data may be transferred to the acquiring entity, subject to equivalent privacy protections. Members will be notified of any such transfer in advance where legally possible.

km507 uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies may be active when you visit km507.bet:

You may manage cookie preferences at any time through your browser settings. Please note that disabling strictly necessary cookies will prevent the Platform from functioning correctly. For detailed instructions on managing cookies in your specific browser (Chrome, Firefox, Safari, Edge), refer to that browser's official support documentation.

km507 retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Registration & Account Data — Retained for the duration of the active Member Account, plus a minimum of 5 years following Account closure, to satisfy AML record-keeping requirements.
• KYC Documents — Retained for a minimum of 5 years from the date of verification, or longer where required by applicable anti-money-laundering law.
• Financial & Transactional Data — Retained for a minimum of 5 years from the date of each transaction, in accordance with standard financial record-keeping practice.
• Customer Support Records — Retained for 3 years from the date of the last support interaction, to support dispute resolution and service improvement.
• Technical & Log Data — Retained for up to 12 months, after which it is anonymised or deleted.
• Marketing Preference Data — Retained until you withdraw consent or opt out of marketing communications, at which point your preferences are updated and promotional data is removed within 30 days.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised in accordance with km507's data destruction procedures.

km507 employs a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction:

1. Encryption in Transit. All data transmitted between your device and km507's infrastructure is encrypted using TLS 1.2 or higher (256-bit SSL). This includes your login credentials, KYC document uploads, and all API calls between your browser and our servers.
2. Encryption at Rest. Stored Personal Data — including KYC documents, financial records, and account credentials — is encrypted at rest using AES-256 encryption on our secure servers.
3. Access Controls. Access to Member Personal Data is governed by role-based access controls (RBAC). Only authorised km507 personnel with a documented need-to-know basis may access specific data categories. All access is logged and subject to periodic audit.
4. Two-Factor Authentication (2FA). km507 offers optional 2FA for Member Accounts. We strongly encourage all Members to enable 2FA via their account security settings to provide an additional layer of protection against unauthorised login.
5. Penetration Testing. km507's infrastructure is subject to regular independent penetration testing and vulnerability assessments by accredited cybersecurity firms. Findings are remediated in accordance with a documented risk-based schedule.
6. Staff Training. All km507 staff with access to Personal Data receive regular data protection training. Background checks are conducted on staff in roles with elevated data access privileges.
7. Incident Response. km507 maintains a documented data breach response plan. In the event of a Personal Data breach that poses a risk to Members, affected Members will be notified without undue delay and in accordance with applicable notification requirements.

As a data subject, you hold the following rights in relation to your Personal Data held by km507. To exercise any of these rights, contact our support team via live chat or at [email protected]:

km507 will respond to all data rights requests within 30 calendar days of receipt. Where a request is complex or km507 receives a high volume of requests simultaneously, this period may be extended by a further 60 days, in which case you will be notified of the extension and its reason within the initial 30-day window. km507 reserves the right to verify your identity before fulfilling any data rights request, to ensure that Personal Data is not disclosed to unauthorised parties.

km507 is strictly an adults-only platform. You must be at least 21 years of age to register an account and use our services. km507 does not knowingly collect Personal Data from any individual under the age of 21.

1. Age Verification. As part of the KYC process, km507 verifies that all Members are 21 years of age or older using government-issued identity documentation. Any account found to belong to a person under 21 will be immediately suspended and permanently closed, and any funds held in the account will be dealt with in accordance with applicable legal requirements.
2. Parental Controls. If you are a parent or guardian and believe that a minor in your care has registered an account on km507.bet or provided Personal Data to km507 without your consent, please contact km507 customer support immediately via live chat or at [email protected]. km507 will investigate and take appropriate action, including deletion of the minor's data, within 72 hours of a verified parental notification.
3. Device-Level Protection. km507 recommends that parents and guardians install reputable third-party parental control software on any shared device that minors may access, to prevent access to gambling websites including km507.bet.

The km507 Platform may from time to time contain references to or integrations with third-party services — for example, live sports data feeds, streaming providers, or payment gateway redirect pages. This Privacy Policy applies solely to Personal Data processed by km507 in connection with km507.bet.

km507 is not responsible for the privacy practices of any third-party website, application, or service that you may access through the Platform or that forms part of the game delivery infrastructure. We strongly recommend that you review the privacy policies of any third party whose services you use in connection with your km507 experience. km507 has no control over and assumes no liability for the content, privacy policies, or data practices of third-party entities.

1. Opt-In Basis. km507 sends promotional emails, SMS notifications, and platform push notifications only to Members who have opted in to receive marketing communications. Opt-in consent is requested at the point of account registration and can be updated at any time through your account preferences.
2. Content of Communications. Marketing communications from km507 may include: deposit bonus offers, free spin promotions, cashback campaigns, seasonal promotions tied to Indonesian public holidays (such as Idul Fitri bonus events and Ramadhan reload offers), BRI Liga 1 betting markets, and new game launch announcements.
3. Opting Out. You may opt out of marketing communications at any time by:
   • Clicking the unsubscribe link included in every marketing email
   • Updating your notification preferences in the account settings section of the Platform
   • Contacting km507 customer support via live chat or at [email protected]
4. Effect of Opt-Out. Opting out of marketing communications does not affect your ability to use km507's services, and does not prevent km507 from sending you transactional communications (such as deposit confirmations, withdrawal receipts, or security alerts) that are necessary for the administration of your Account.
5. Self-Excluded Members. Members who are subject to a self-exclusion period are automatically removed from all marketing communications for the duration of the exclusion and, in the case of permanent self-exclusion, permanently.

km507 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. The following process applies to all material changes:

1. Notification. Where a change to this Privacy Policy materially affects how we process your Personal Data, km507 will notify you via a prominent notice on the Platform homepage and/or by email to your registered email address at least 7 calendar days before the updated Policy takes effect.
2. Version Control. The version number and effective date of the current Privacy Policy are displayed at the top of this page. The prior version of this Policy remains available on request from km507 customer support.
3. Continued Use as Acceptance. Your continued use of the km507 Platform following the effective date of an updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not accept the revised Policy, you may request Account closure as described in the Terms & Conditions.
4. Consent-Based Processing. Where a Policy change requires a new or expanded consent (for example, introducing a new category of data processing), km507 will seek fresh opt-in consent before commencing such processing. We will not retroactively apply expanded consent-based processing to data collected under a previous version of this Policy.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about km507's data practices, please contact our Data Protection team using the following details:

• Live Chat — Available 24/7 directly on km507.bet. Our Indonesian-speaking support agents are on hand around the clock to assist with any privacy-related query.
• Email — [email protected] (plain text — not a clickable link). Please include "Privacy Request" in the subject line of your email so that it is routed to the appropriate team. Response time: within 1 hour (WIB, UTC+7), 24 hours a day, 7 days a week.
• Support Hours — 24/7, including all Indonesian public holidays (Idul Fitri, Independence Day, Nyepi, and all other national holidays).

When contacting km507 regarding a specific data rights request, please have your registered username and the email address associated with your Account ready. This allows our team to verify your identity and process your request efficiently. km507 is committed to responding to all privacy-related queries with professionalism, transparency, and genuine care for your data rights.