Privacy Policy & Data Protection

1. Introduction and Data Controller Information

yykoin ("we," "us," "our") is the data controller responsible for the personal data you provide when using our online betting and casino platform. We are committed to protecting your privacy and handling your personal data in accordance with international data protection laws and best practices.

This Privacy Policy applies to all users of yykoin services, including visitors to our website, registered account holders, and individuals who contact our customer support team. By creating an account or using yykoin services, you acknowledge that you have read, understood, and agree to the data practices described in this policy.

Data Protection Officer Contact: For questions, complaints, or requests related to your personal data or this Privacy Policy, please contact our Data Protection Officer at [email protected] or via our 24/7 live chat support.

2. What Personal Data We Collect

2.1 Information You Provide Directly

When you register for a yykoin account, use our services, or contact customer support, we collect the following categories of personal data:

• Identity Information: Full legal name, date of birth, gender, nationality, government-issued identification number (Indonesian KTP number, passport number, or driver's license number)
• Contact Information: Email address, mobile phone number, residential address (street address, city, province, postal code)
• Account Credentials: Username, password (stored in encrypted form), security questions and answers
• Financial Information: Bank account numbers (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata), e-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history, deposit and withdrawal records
• Verification Documents: Copies of government-issued photo identification, proof of address documents (utility bills, bank statements), payment method verification screenshots
• Communication Records: Customer support chat transcripts, email correspondence, WhatsApp messages, phone call recordings (where permitted by law and with your consent)

2.2 Information Collected Automatically

When you access the yykoin platform, we automatically collect certain technical and usage data:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IP address, device ID)
• Usage Data: Pages visited, features used, time spent on platform, click patterns, referring websites, search queries within the platform
• Location Data: Approximate geographic location based on IP address (city-level granularity, not precise GPS coordinates)
• Betting and Gaming Activity: Bets placed (sport, market, stake, odds, timestamp), game sessions (slot titles played, session duration, bet amounts), win/loss records, account balance history
• Cookies and Similar Technologies: Session cookies, preference cookies, analytics cookies, advertising cookies (see Section 8 for detailed cookie policy)

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment Processors: Verification of payment method ownership, transaction confirmations, fraud alerts from banks and e-wallet providers
• Identity Verification Services: Third-party KYC (Know Your Customer) verification providers that confirm your identity against government databases
• Fraud Prevention Services: Information from specialized fraud detection services that analyze betting patterns and flag suspicious activity
• Affiliate Partners: Referral source data if you registered via an affiliate marketing partner (affiliate ID, referral URL, promotional campaign identifier)

3. How We Use Your Personal Data

yykoin uses your personal data for the following purposes:

3.1 Account Management and Service Delivery

• Creating and maintaining your player account
• Processing deposits, withdrawals, and other financial transactions
• Providing access to betting, casino, and gaming products
• Calculating and distributing winnings
• Managing VIP tier progression and Black Diamond VIP program benefits
• Delivering customer support and responding to inquiries

3.2 Legal and Regulatory Compliance

• Verifying your identity and age (21+ enforcement) as required by international gaming licenses
• Conducting Know Your Customer (KYC) and Anti-Money Laundering (AML) checks
• Detecting, preventing, and investigating fraud, money laundering, and other illegal activities
• Complying with legal obligations, court orders, and requests from law enforcement or regulatory authorities
• Maintaining audit trails and records for regulatory reporting purposes

3.3 Platform Security and Risk Management

• Monitoring betting patterns to detect bonus abuse, arbitrage betting, and coordinated collusion
• Identifying and blocking duplicate accounts and unauthorized access attempts
• Protecting against distributed denial-of-service (DDoS) attacks and other cybersecurity threats
• Investigating disputes, complaints, and irregularities in betting outcomes

3.4 Marketing and Promotional Communications

• Sending promotional offers, bonus notifications, and tournament invitations (where you have opted in to receive marketing communications)
• Personalizing promotional content based on your betting preferences and activity history
• Conducting customer satisfaction surveys and collecting feedback
• Analyzing marketing campaign effectiveness and return on investment

3.5 Platform Improvement and Analytics

• Analyzing user behavior to improve website usability and mobile app performance
• Identifying popular games, betting markets, and features to inform product development decisions
• Conducting A/B testing of new features and interface designs
• Generating aggregate statistical reports (non-personally identifiable) for business intelligence purposes

4. Legal Basis for Data Processing

Under international data protection law, yykoin processes your personal data on the following legal bases:

• Contractual Necessity: Processing your data is necessary to perform the contract between you and yykoin (our Terms & Conditions), including account management, transaction processing, and service delivery.
• Legal Obligation: Processing is required to comply with legal obligations such as age verification, KYC/AML checks, tax reporting, and cooperation with law enforcement.
• Legitimate Interests: Processing is necessary for our legitimate business interests, including fraud prevention, platform security, customer support quality assurance, and business analytics, provided these interests do not override your fundamental rights and freedoms.
• Consent: For certain processing activities such as marketing communications and non-essential cookies, we rely on your explicit consent, which you may withdraw at any time.

5. Data Sharing and Third-Party Service Providers

5.1 When We Share Your Data

yykoin does not sell your personal data to third parties. However, we may share your data with the following categories of recipients:

• Payment Service Providers: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals
• Game Providers: Third-party software studios (Pragmatic Play, PG Soft, Microgaming, NetEnt, Evolution Gaming) that deliver casino games, slots, and live dealer products — game providers receive anonymized or pseudonymized player identifiers, not your full personal details
• Identity Verification Services: KYC/AML compliance providers that verify your identity documents against government databases
• Fraud Prevention Services: Specialized security firms that analyze transaction patterns and betting behavior to detect suspicious activity
• Cloud Hosting Providers: Infrastructure providers that host our servers and databases under strict data protection agreements
• Customer Support Tools: Live chat software, ticketing systems, and CRM platforms used by our support team
• Analytics and Marketing Platforms: Services like Google Analytics (anonymized data), email marketing providers (where you have opted in), and affiliate tracking platforms
• Legal and Regulatory Authorities: Law enforcement, tax authorities, gaming regulators, and courts when required by law or court order

5.2 Data Processing Agreements

All third-party service providers that process personal data on behalf of yykoin are bound by contractual data processing agreements that require them to:

• Process data only for the specific purposes instructed by yykoin
• Implement appropriate technical and organizational security measures
• Not disclose or use your data for their own purposes
• Return or delete data upon termination of the service agreement
• Cooperate with data protection audits and regulatory inspections

6. Data Retention and Storage

6.1 Retention Periods

yykoin retains your personal data for as long as necessary to fulfill the purposes for which it was collected and to comply with legal obligations:

• Active Accounts: Personal data is retained throughout the period your account remains active and for a minimum of 5 years after account closure to comply with financial record-keeping and AML regulations
• Transaction Records: Deposit, withdrawal, and betting history records are retained for 7 years as required by anti-money laundering laws
• Identity Verification Documents: KYC documents (ID scans, proof of address) are retained for 5 years after account closure or as required by our gaming license
• Marketing Communications: If you opt in to marketing emails, your contact information is retained until you unsubscribe or request deletion
• Customer Support Records: Support chat transcripts and email correspondence are retained for 3 years for quality assurance and dispute resolution purposes

6.2 Data Storage Locations

Your personal data is stored on secure servers located in jurisdictions with robust data protection laws. Primary data storage facilities are located outside Indonesia to comply with international licensing requirements. All data storage providers are contractually obligated to maintain security standards equivalent to or exceeding those required under international data protection regulations.

7. Data Security Measures

yykoin implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

7.1 Technical Security Controls

• Encryption: All data transmitted between your device and yykoin servers is protected by 256-bit SSL/TLS encryption. Sensitive data at rest (passwords, financial information) is encrypted using industry-standard AES-256 encryption
• Two-Factor Authentication (2FA): Optional 2FA is available to all players to add an extra layer of account security beyond username and password
• Firewalls and Intrusion Detection: Network-level firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS) monitor and block suspicious traffic
• Regular Security Audits: Independent third-party security firms conduct penetration testing and vulnerability assessments on a quarterly basis
• Access Controls: Role-based access controls (RBAC) ensure yykoin employees can only access personal data necessary for their specific job functions

7.2 Organizational Security Measures

• All employees with access to personal data undergo background checks and sign confidentiality agreements
• Mandatory data protection training for all staff members handling customer information
• Incident response plan and data breach notification procedures in place
• Regular backups and disaster recovery systems to ensure data availability

7.3 Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, yykoin will notify affected users and relevant data protection authorities within 72 hours of becoming aware of the breach, as required by law. Notifications will include information about the nature of the breach, the data affected, and steps being taken to mitigate harm.

8. Cookies and Tracking Technologies

8.1 What Are Cookies

Cookies are small text files placed on your device when you visit the yykoin website or use our mobile app. Cookies help us recognize your device, remember your preferences, and improve your experience on our platform.

8.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for platform functionality, including session management, login authentication, and shopping cart persistence. These cookies cannot be disabled without severely impacting platform usability.
• Performance and Analytics Cookies: Track how you use the yykoin platform to help us identify usability issues and improve performance. Examples include Google Analytics (with IP anonymization enabled).
• Functional Cookies: Remember your preferences such as language settings, time zone, and interface layout customizations.
• Marketing and Advertising Cookies: Used to deliver personalized promotional content and measure advertising campaign effectiveness. These cookies require your consent and can be disabled via cookie preferences.

8.3 Managing Cookie Preferences

You can manage your cookie preferences through your browser settings or via our cookie consent banner displayed on your first visit. Disabling certain cookies may affect platform functionality and your ability to access some features. Strictly necessary cookies cannot be disabled through the consent banner but can be blocked via browser settings (which may prevent you from using yykoin services).

9. Your Data Protection Rights

Under international data protection laws, you have the following rights regarding your personal data:

9.1 Right of Access

You have the right to request a copy of the personal data yykoin holds about you. You can access most of your account information directly through your yykoin account dashboard. For a comprehensive data export, contact our Data Protection Officer.

9.2 Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to request correction. You can update most account information directly through your account settings. For changes to verified identity information (name, date of birth), contact customer support with supporting documentation.

9.3 Right to Erasure ("Right to Be Forgotten")

You may request deletion of your personal data under certain circumstances. However, this right is subject to exceptions — yykoin may be legally required to retain certain data (transaction records, KYC documents) for regulatory compliance purposes for specified retention periods (typically 5–7 years). After mandatory retention periods expire, data is securely deleted.

9.4 Right to Restriction of Processing

You may request that yykoin limit how we process your personal data in certain situations, such as while we investigate a data accuracy dispute or assess the legitimacy of a deletion request.

9.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) and to transmit that data to another service provider where technically feasible.

9.6 Right to Object

You may object to processing of your personal data for direct marketing purposes at any time. You can unsubscribe from marketing emails via the unsubscribe link in each email or by contacting customer support. You may also object to processing based on legitimate interests — yykoin will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

9.7 Right to Withdraw Consent

Where processing is based on consent (such as marketing communications or non-essential cookies), you have the right to withdraw consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

9.8 Exercising Your Rights

To exercise any of these rights, contact our Data Protection Officer at [email protected] or via live chat. We will respond to requests within 30 days. Identity verification may be required to prevent unauthorized access to your personal data.

10. International Data Transfers

yykoin operates internationally and may transfer your personal data to countries outside Indonesia for processing and storage. When we transfer data to jurisdictions that do not provide an equivalent level of data protection as international standards, we implement appropriate safeguards such as:

• Standard contractual clauses approved by data protection authorities
• Binding corporate rules for transfers within our corporate group
• Adequacy decisions recognizing the destination country as providing adequate protection
• Certification under recognized data protection frameworks

All international data transfers comply with applicable data protection laws and ensure your personal data receives a level of protection consistent with international standards.

11. Children's Privacy

yykoin services are strictly for adults aged 21 and over. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that we have inadvertently collected data from a minor, we will take immediate steps to delete that information and close the account. If you believe a minor has registered an account on yykoin, please contact our customer support team immediately.

12. Changes to This Privacy Policy

yykoin reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or business operations. Material changes will be communicated via:

• Email notification to all registered users
• Prominent notice on the yykoin website homepage and account dashboard
• Update of the "Last Updated" date at the top of this policy

We encourage you to review this Privacy Policy periodically. Continued use of yykoin services after changes are posted constitutes acceptance of the revised policy. If you do not agree with any changes, you must cease using yykoin services and may request account closure.

13. Contact Us About Privacy

If you have questions, concerns, or complaints about this Privacy Policy or how yykoin handles your personal data, please contact us:

• Data Protection Officer Email: [email protected]
• Live Chat: Available 24/7 via your yykoin account dashboard
• WhatsApp: Contact number provided after account registration

We take privacy concerns seriously and will investigate and respond to all inquiries within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.