Our Privacy Commitments
The six principles below summarise how kl108 approaches data protection. They reflect our obligations under applicable international data protection standards and our own internal policies designed specifically for Indonesian players.
Minimal Collection
kl108 collects only the personal data that is strictly necessary for account registration, identity verification, payment processing, and regulatory compliance. We do not gather data speculatively or for undefined future uses.
Strong Encryption
All data in transit between your browser and kl108 servers is protected by TLS 1.3 encryption. Sensitive fields such as passwords and payment credentials are stored using one-way hashing and tokenisation respectively — never in plain text.
Your Data, Your Rights
You have the right to access a copy of the personal data kl108 holds about you, to correct inaccuracies, to request deletion (subject to legal retention obligations), and to object to certain processing activities. Submit requests to [email protected].
No Data Selling
kl108 does not sell, rent, or trade your personal information to third-party marketing companies or data brokers. Data shared with our partners is limited to what is operationally required and governed by strict data processing agreements.
Defined Retention Periods
Personal data is retained only as long as necessary for the purposes for which it was collected, or as required by applicable law. Account data is typically retained for 5 years following account closure to satisfy anti-money-laun dering and fraud-prevention obligations.
Compliance-First Approach
kl108's data practices are aligned with internationally recognised privacy frameworks. Our internal compliance team reviews data-handling procedures regularly to ensure they remain fit for purpose as regulations and best practices evolve.
1. Definitions
The following terms carry the meanings set out below throughout this Privacy Policy:
- "kl108" / "we" / "us" / "our" — the kl108 online gaming platform operated at kl108.bio and all associated services.
- "Player" / "you" / "your" — any individual who accesses, registers on, or interacts with the kl108 platform.
- "Personal Data" — any information that identifies or could reasonably identify a natural person, directly or indirectly, including name, email address, phone number, national identity number, IP address, and device identifiers.
- "Processing" — any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transmission, or deletion.
- "Data Controller" — kl108, which determines the purposes and means of processing your Personal Data.
- "Data Processor" — a third party that processes Personal Data on behalf of kl108 under a contractual data processing agreement, such as a payment gateway or KYC verification provider.
- "Cookies" — small text files placed on your device by the kl108 platform to enable functionality, measure performance, and improve the user experience.
- "KYC" — Know Your Customer — the identity and payment-method verification process required to comply with kl108's internal anti-fraud and responsible gaming policies.
2. Data We Collect
kl108 collects Personal Data through several channels: directly from you when you register or interact with the platform, automatically through the platform's technical infrastructure, and from trusted third parties such as payment processors and KYC providers.
| Category | Examples | Collection Method |
|---|---|---|
| Identity Data | Full legal name, date of birth, Indonesian national identity number (NIK), KTP or passport scan | Provided by you during registration and KYC verification |
| Contact Data | Email address, mobile phone number, city of residence (e.g., Jakarta, Surabaya, Bandung) | Provided by you during registration or profile update |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history | Provided by you when making deposits or withdrawals; supplemented by payment processor data |
| Technical Data | IP address, browser type and version, device type and operating system, session timestamps, referring URL | Collected automatically via server logs and analytics tools |
| Behavioural Data | Pages visited, games played, bet amounts and frequencies, bonus usage patterns, login history | Collected automatically through platform activity tracking |
| Communications Data | Live chat transcripts, support ticket content, email correspondence with kl108 | Collected when you contact our support team |
Voluntary Provision: Where provision of Personal Data is voluntary (for example, optional profile fields), failure to provide that data will not prevent you from using the platform's core features. However, certain data — such as KYC documents — is mandatory before withdrawals can be processed.
Accuracy Obligation: You are responsible for ensuring that all Personal Data you provide to kl108 is accurate and kept up to date. Providing false, outdated, or misleading information constitutes a breach of the kl108 Terms & Conditions.
3. How We Use Your Data
kl108 uses the Personal Data it collects for the following purposes. Each purpose is paired with the lawful basis on which it relies, which is detailed further in Section 4.
Account Management: To create and maintain your kl108 account, authenticate your identity at login, enforce single-account policies, and manage account preferences and communication settings.
Payment Processing: To facilitate deposits via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI, and e-wallets including OVO, DANA, GoPay, ShopeePay, and LinkAja, and to process withdrawal requests to verified accounts in your name. All transactions are denominated in IDR.
KYC and Fraud Prevention: To verify your identity and payment methods, screen against fraud and money-laundering indicators, detect and investigate suspicious account activity, and comply with kl108's internal compliance obligations.
Platform Delivery and Improvement: To deliver the games, sportsbook markets, and other services you use on kl108, to diagnose and fix technical issues, and to analyse usage patterns in order to improve the platform's performance, stability, and content offering.
Responsible Gaming: To monitor betting patterns and identify indicators of problem gambling, to enforce deposit and loss limits you have set, and to administer self-exclusion and cool-off periods in accordance with our Responsible Gaming Policy.
Communications: To send you transactional messages (deposit confirmations, withdrawal updates, security alerts), service announcements, and — where you have opted in — promotional offers tailored to Indonesian players, including seasonal promotions tied to Idul Fitri, Ramadhan, and other local occasions.
Legal and Regulatory Compliance: To comply with any applicable legal obligation, respond to lawful requests from authorities, and to establish, exercise, or defend legal claims arising from your use of the kl108 platform.
4. Legal Basis for Processing
kl108 relies on the following lawful bases when processing your Personal Data:
| Processing Purpose | Lawful Basis |
|---|---|
| Account registration and management | Performance of a contract with you |
| Payment processing (deposits and withdrawals) | Performance of a contract with you |
| KYC verification and fraud prevention | Legitimate interests (platform integrity and security) |
| Responsible gaming monitoring | Legitimate interests (player welfare) and legal obligation |
| Platform analytics and improvement | Legitimate interests (service improvement) |
| Promotional communications | Consent (opt-in) — you may withdraw consent at any time |
| Legal and regulatory compliance | Legal obligation |
Where kl108 relies on legitimate interests as a lawful basis, we have assessed that our interests are not overridden by your rights and interests. You may object to processing based on legitimate interests by contacting us at [email protected].
5. Data Sharing
kl108 does not sell, rent, or trade your Personal Data. We share data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.
Payment Processors: Financial data is shared with our banking and e-wallet partners — including networks supporting BCA, BRI, BNI, Mandiri, OVO, DANA, and GoPay transactions — to process your deposits and withdrawals. These partners act as Data Processors bound by contractual data protection obligations.
KYC and Fraud Prevention Providers: Identity documents and verification data may be shared with third-party KYC platforms for automated and manual identity verification. These providers are contractually prohibited from using your data for any purpose beyond the verification service.
Game Content Providers: Technical and behavioural data (such as game session identifiers and bet timestamps) may be shared with our licensed game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — strictly to deliver their game content and ensure its integrity.
Legal and Regulatory Authorities: kl108 may disclose Personal Data to law enforcement agencies, regulators, or courts when required to do so by a valid legal obligation, court order, or to protect the rights, property, or safety of kl108, its players, or the public.
Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of kl108's business, Personal Data may be transferred to the relevant acquiring entity. You will be notified of any such transfer and your rights to object or request deletion will be preserved.
7. Data Retention
kl108 retains Personal Data for as long as is necessary to fulfil the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law.
Active Accounts: While your kl108 account is open, all Personal Data associated with the account is retained in full to enable the provision of services and to comply with ongoing compliance obligations.
Closed Accounts: Following account closure (whether by you or by kl108), core identity and transaction records are retained for a minimum of 5 years to satisfy anti-money-laundering, fraud-prevention, and dispute-resolution requirements. After this period, data is securely deleted or irreversibly anonymised.
Support and Communications Data: Live chat transcripts and email correspondence are retained for up to 2 years from the date of the last interaction, or longer if the correspondence relates to an ongoing dispute or legal claim.
Marketing Preferences: Records of your consent to or opt-out from marketing communications are retained for the lifetime of your account plus 3 years, to allow kl108 to demonstrate compliance with its marketing obligations.
Anonymised Analytics Data: Aggregated, anonymised analytical data that can no longer identify any individual may be retained indefinitely for platform improvement and business intelligence purposes.
8. Security Measures
kl108 implements a layered security architecture to protect your Personal Data against unauthorised access, loss, alteration, or destruction. Our key security measures include:
- TLS 1.3 Encryption: All data transmitted between your device and kl108 servers is encrypted in transit using Transport Layer Security version 1.3 — the current industry standard for web communications.
- Password Hashing: Account passwords are stored using bcrypt, a one-way cryptographic hash function with adaptive work factors, so that even in the event of a data breach, plaintext passwords cannot be recovered.
- Payment Tokenisation: Bank account numbers and e-wallet identifiers are tokenised — replaced with non-sensitive reference tokens — so that full financial credentials are never stored on kl108's primary application servers.
- Access Controls: Access to Personal Data within kl108's internal systems is restricted on a strict need-to-know basis, enforced through role-based access control (RBAC) and multi-factor authentication (MFA) for all staff with administrative access.
- Regular Security Audits: kl108's systems are subject to periodic penetration testing and vulnerability assessments conducted by independent security professionals. Identified vulnerabilities are remediated on a risk-prioritised basis.
- Incident Response: kl108 maintains a documented data breach response plan. In the event of a breach that is likely to result in a significant risk to affected individuals, kl108 will notify affected Players promptly at their registered email address.
9. Your Rights
kl108 respects your rights over your Personal Data. The following rights are available to all kl108 players. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request" and include your account username and a description of your request.
Right of Access: You may request a copy of the Personal Data kl108 holds about you. We will provide this within 30 days of receiving your verified request, in a commonly used electronic format.
Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as updating your email address) can be made directly through your account dashboard.
Right to Erasure: You may request that kl108 delete your Personal Data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (if consent was the lawful basis), or where the processing was unlawful. Note that erasure requests may be declined where retention is required by law — for example, transaction records subject to a 5-year statutory retention obligation.
Right to Restriction: You may request that kl108 restrict the processing of your Personal Data in certain circumstances — for example, while a rectification request is being assessed, or where you contest the legitimacy of a processing activity.
Right to Portability: Where processing is based on your consent or on a contract with you and is carried out by automated means, you may request that kl108 provide your Personal Data in a structured, machine-readable format for transfer to another service provider.
Right to Object: You may object to processing based on legitimate interests at any time. kl108 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests. You may also object to the use of your data for direct marketing at any time, with no requirement to provide a reason.
Withdrawal of Consent: Where processing relies on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw consent for marketing communications, use the unsubscribe link in any marketing email or contact [email protected].
kl108 will respond to all Data Rights Requests within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case you will be notified of the extension and the reasons for it.
10. Minors
The kl108 platform is strictly for individuals aged 21 and over. kl108 does not knowingly collect Personal Data from anyone under the age of 21. Age verification is a mandatory step during both registration and the KYC process, and accounts where the holder is found to be under 21 will be immediately suspended and all data deleted.
If you believe that a person under 21 has registered an account or provided Personal Data to kl108, please notify us immediately at [email protected] with the subject line "Minor Account Report". We will investigate and take appropriate action within 48 hours of receiving a verified report.
11. Third-Party Links
The kl108 platform may contain references to or integrations with third-party services — such as payment gateways for BCA, BRI, and e-wallet providers — whose own privacy policies govern their collection and use of your data. kl108 is not responsible for the privacy practices of any third-party service provider, and we encourage you to review their respective privacy policies before sharing any data with them directly.
kl108 does not embed third-party social media trackers, advertising networks, or data-sharing widgets on the platform without explicit player consent.
12. International Data Transfers
kl108 primarily serves players based in Indonesia, and the majority of data processing occurs within infrastructure hosted in data centres with strong data protection standards. However, certain service providers — including game studios such as Evolution Gaming and Pragmatic Play — operate globally, and your data may be processed in jurisdictions outside Indonesia.
Where Personal Data is transferred internationally, kl108 ensures that appropriate safeguards are in place, including contractual data protection clauses that require the recipient to maintain standards equivalent to those applied by kl108 itself. If you would like information about the specific safeguards in place for a particular transfer, contact [email protected].
13. Policy Updates
kl108 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes, we will update the "Effective Date" at the top of this page and, where the change significantly affects your rights, notify you via your registered email address with at least 14 days' advance notice.
We encourage you to review this Privacy Policy periodically. Your continued use of the kl108 platform following the effective date of any updated version constitutes your acceptance of the revised policy. Historical versions are available upon request at [email protected].
14. Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way kl108 handles your Personal Data, please contact our data protection team using the details below. Please do not use mailto links — copy the address directly into your email client.
| Contact Method | Details | Response Target |
|---|---|---|
| Email — Privacy & Data | [email protected] (subject: "Privacy Inquiry") | Within 2 business days |
| Email — Data Rights Request | [email protected] (subject: "Data Rights Request") | Within 30 calendar days |
| Live Chat | Available via the kl108 platform interface | 08:00 – 24:00 WIB daily |
All requests must be submitted in writing and must include your kl108 account username and sufficient information for us to verify your identity before actioning the request. This verification step is a security measure designed to protect your data from unauthorised access.
Explore kl108 With Confidence
Your data is protected. Your privacy is respected. Now explore everything kl108 has to offer — from BRI Liga 1 sportsbook markets to hundreds of live casino tables and premium slot titles.