Privacy Policy — k5555

k5555 ("we", "us", "our") operates the online betting and gaming platform accessible at k5555.lat. This Privacy Policy applies to all personal data processed in connection with your use of the k5555 website, mobile-optimised interface, account portal, customer support channels, and any related services (collectively, the "Platform").

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which are incorporated by reference. By registering an account or continuing to use the Platform, you confirm that you have read and understood this Privacy Policy and consent to the processing activities described herein.

k5555 primarily serves players based in Indonesia. References to "local" obligations, banking partners, and identification documents reflect the Indonesian context (e.g., KTP — Kartu Tanda Penduduk, the Indonesian national identity card). Where applicable, data handling practices are designed to align with internationally recognised privacy principles and the requirements of our operating licence.

For the purposes of this Privacy Policy, the data controller responsible for personal data collected through the Platform is the entity operating k5555.lat under its international gaming licence. Queries relating to data control, including subject access requests and deletion requests, should be directed to the contact details set out in Section 15 of this Policy.

Where k5555 engages third-party processors — such as payment gateway providers, KYC verification services, and game studio partners — those processors operate under contractual data processing agreements that require them to handle your data only as directed by k5555 and in compliance with applicable privacy obligations. k5555 remains accountable for your data throughout the processing chain.

k5555 collects personal data across several categories, depending on the nature of your interaction with the Platform. The table below provides a structured overview:

k5555 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information. If such data is inadvertently submitted through a support interaction, it will be deleted promptly and not processed further.

k5555 collects personal data through the following channels and mechanisms:

• Direct submission: Information you provide when registering an account, completing KYC verification, submitting a deposit or withdrawal request, contacting customer support, or responding to a promotional survey.
• Automated collection: Technical and behavioural data gathered automatically each time you visit the Platform, including IP address, browser characteristics, pages visited, session duration, and click-path data, collected via server logs, cookies, and similar tracking technologies.
• Third-party sources: Identity and fraud-risk data received from our KYC verification partners when you submit identity documents for account verification. Payment confirmation data received from bank and e-wallet gateways (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) to confirm deposit and withdrawal transactions.
• Device and network signals: Information derived from the device you use to access k5555, including device identifiers, mobile network operator data, and geolocation signals at the city level (e.g., Jakarta, Bandung, Surabaya, Bali) where your device or browser permits.

You are under no legal obligation to provide personal data to k5555, but certain data categories are strictly necessary for account registration, identity verification, and payment processing. Failure to provide required data in those contexts will prevent k5555 from opening or maintaining your account.

k5555 uses the personal data we collect for the following specific purposes:

• Account creation and management: To register your account, authenticate your identity at login, maintain your account preferences, and process account closure requests.
• Payment processing: To receive IDR deposits from your nominated bank account or e-wallet and to remit withdrawal amounts back to your registered payment method. All financial transactions are processed in Indonesian Rupiah (Rp).
• Identity verification (KYC): To comply with our licensing obligations by verifying that you are who you claim to be, that you are at least 21 years of age, and that your payment methods are registered in your own name.
• Service delivery: To provide access to all k5555 gaming products, including sportsbook markets, live casino tables, slot games, bingo, and togel (Indonesia's traditional numbers lottery) products, and to record the outcomes of your gameplay sessions.
• Fraud prevention and security: To detect and investigate suspicious account activity, including multi-accounting, bonus abuse, money laundering indicators, and unauthorised access attempts.
• Responsible gaming: To monitor gameplay patterns for signs of problem gambling, to administer self-imposed limits and cooling-off periods you request, and to flag accounts that may require responsible gaming intervention.
• Customer support: To respond to your enquiries, resolve disputes, and maintain records of support interactions for quality assurance and compliance purposes.
• Marketing communications: To send you promotional emails, bonus notifications, and seasonal campaign alerts — but only where you have provided explicit consent to receive such communications. You may withdraw consent at any time via your account settings.
• Platform improvement: To analyse aggregate usage data, identify technical issues, optimise page performance, and improve the overall user experience on k5555.
• Legal and regulatory compliance: To meet our obligations under applicable international gaming regulations, anti-money-laundering (AML) requirements, and the instructions of our licensing authority.

k5555 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

Where k5555 relies on legitimate interests as a legal basis, we have assessed that our interests do not override your fundamental rights and freedoms, taking into account the reasonable expectations of users of an online gaming platform.

k5555 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following limited and controlled circumstances:

• Payment processors: Your financial data is shared with the relevant bank or e-wallet operator (e.g., BCA, BRI, OVO, GoPay) solely to facilitate the specific deposit or withdrawal transaction you have initiated.
• KYC and identity verification partners: Identity documents and supporting data are transmitted to our third-party KYC verification service provider for the purpose of confirming your identity and age. These providers are contractually prohibited from using your data for any other purpose.
• Game studio providers: Minimal session-level data (e.g., a session token and account tier) is shared with game studios including Evolution Gaming, Pragmatic Play, PG Soft, NetEnt, and Spribe to initiate and authenticate your game sessions. These providers do not receive your full identity or financial data.
• IT and infrastructure providers: Cloud hosting, content delivery, and cybersecurity service providers may process technical data (such as server logs and IP addresses) in the course of providing their services to k5555. All such providers operate under strict data processing agreements.
• Legal and regulatory authorities: k5555 may disclose personal data to law enforcement agencies, regulatory bodies, or our licensing authority where required to do so by law, court order, or legitimate regulatory request. We will notify you of any such disclosure where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of k5555's business, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and of any changes to this Privacy Policy that result from it.

k5555 uses cookies and similar tracking technologies to operate the Platform, analyse usage patterns, and deliver a personalised experience. The following cookie categories are in use:

You can manage your cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies will impair or prevent your ability to log in to and use the k5555 Platform. Disabling functional or analytics cookies will not affect your ability to place bets or access games.

k5555 does not use cookies to track your activity on third-party websites unrelated to our Platform, nor do we share cookie-derived data with advertising networks for the purpose of building cross-site behavioural profiles.

k5555 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by our licensing authority and applicable law. The following retention periods apply:

• Account and identity data: Retained for the lifetime of your active account plus a minimum of 5 years following account closure, to meet AML record-keeping requirements.
• Transaction and financial data: Retained for a minimum of 5 years from the date of each transaction, consistent with standard financial compliance obligations.
• Gameplay and bet history: Retained for 2 years from the date of each session, after which data is aggregated and anonymised for statistical purposes.
• Customer support communications: Retained for 2 years from the date of the most recent interaction in a support thread.
• Marketing consent records: Retained for the duration of your consent plus 1 year following withdrawal, to demonstrate compliance with consent obligations.
• Technical logs (IP, device data): Retained for 90 days for security and fraud-investigation purposes, unless a specific incident requires extended retention.

Following the expiry of the applicable retention period, personal data is either securely deleted or irreversibly anonymised so that it can no longer be attributed to any individual.

k5555 implements a layered security framework to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and k5555's servers.
• Bcrypt password hashing — your account password is never stored in plain text.
• AES-256 encryption at rest for all sensitive personal and financial data stored in k5555's databases.
• Role-based access controls limiting employee access to personal data strictly to those whose job function requires it.
• Continuous intrusion detection and monitoring of all production systems, with automated alerts for anomalous activity.
• Regular independent security audits and penetration testing of the Platform's infrastructure.
• Multi-factor authentication (MFA) available and encouraged for all Member accounts, and mandated for all k5555 internal staff accounts.

Despite these measures, no online system can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, k5555 will notify affected Members without undue delay and will take all reasonable steps to contain and remediate the breach.

As a user of the k5555 Platform, you have the following rights in respect of your personal data. To exercise any of these rights, please contact us using the details in Section 15. We will respond to all verified requests within 30 calendar days.

• Right of access: You may request a copy of all personal data k5555 holds about you, along with information about how it is being processed.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where processing is unlawful. This right is subject to our legal retention obligations, which may require us to retain certain data for a defined period even following account closure.
• Right to restriction of processing: You may request that k5555 restrict the processing of your data while a dispute regarding its accuracy or lawfulness is being resolved.
• Right to data portability: Where processing is based on your consent or on a contract, you may request a copy of your data in a structured, machine-readable format (JSON or CSV) for transfer to another service.
• Right to object: You may object at any time to the processing of your data for direct marketing purposes. You may also object to processing based on legitimate interests, in which case k5555 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

The k5555 Platform is strictly intended for individuals who are 21 years of age or older. k5555 does not knowingly collect personal data from anyone under the age of 21. If we become aware that personal data has been submitted by or on behalf of a person under 21, we will immediately close the associated account, forfeit any balance, and delete the personal data in question.

If you are a parent or guardian and you believe that a person under 21 in your care has created an account on k5555, please contact us immediately at the address in Section 15. We will investigate and act promptly.

k5555 operates on internationally hosted infrastructure. As a result, your personal data may be transferred to and processed in countries outside Indonesia, including the locations of our cloud infrastructure providers, KYC partners, and game studio integrations. These countries may not have data protection laws equivalent to those in your home jurisdiction.

When transferring personal data internationally, k5555 takes the following safeguards to ensure your data remains protected:

• Contractual data processing agreements with all third-party processors, incorporating standard data protection clauses consistent with internationally recognised privacy frameworks.
• Technical safeguards, including end-to-end encryption for all data in transit across international network boundaries.
• Due diligence assessments of all new third-party processors before onboarding, including review of their security certifications and data handling practices.

By using the k5555 Platform, you acknowledge and consent to the transfer of your personal data to international jurisdictions as described in this section, subject to the safeguards outlined above.

k5555 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing activities, legal obligations, or business operations. When material changes are made, we will:

• Update the "Last Updated" date at the top of this page.
• Display a prominent notice on the Platform for a period of at least 14 days following the update.
• Where reasonably practicable, send a notification to the email address registered on your account.

Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Policy, you should cease using the Platform and request account closure in accordance with our Terms & Conditions.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a complaint about how k5555 has handled your personal data, please contact our support team through the following channel:

k5555 takes all privacy complaints seriously. Upon receipt of a complaint, we will acknowledge it within 3 business days and provide a substantive response within 30 calendar days. Where a complaint cannot be resolved to your satisfaction through our internal process, you retain the right to escalate the matter to the relevant supervisory authority or dispute resolution body consistent with our licensing terms.

For responsible gaming concerns — including requests for self-exclusion or deposit limit adjustments — please visit our dedicated Responsible Gaming page or contact support directly with the subject line "Responsible Gaming Request".