Privacy Policy

This Privacy Policy ("Policy") describes how kin555 ("we," "us," "our," or "the Platform") collects, processes, stores, shares, and protects personal data relating to individuals who visit, register with, or use the services available at https://kin555.cam ("the Website"). This Policy applies to all current and former players, prospective registrants who browse the Website without completing registration, and any individual who contacts kin555 via email or live chat.

kin555 is committed to handling personal data responsibly and in compliance with internationally recognised data protection principles, including those reflected in the General Data Protection Regulation (GDPR) framework and Indonesia's Personal Data Protection Law (UU PDP). Where the standards of these frameworks differ, kin555 applies the higher standard of protection.

By accessing the kin555 Website or creating an account, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to any provision of this Policy, you should discontinue use of the Platform and contact us to arrange account closure.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which form part of your agreement with kin555.

The following definitions apply throughout this Privacy Policy:

• "Personal Data" — any information that, alone or in combination with other data, can be used to identify a natural person directly or indirectly. This includes but is not limited to names, email addresses, phone numbers, IP addresses, financial account details, and government-issued ID numbers.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, organisation, retrieval, use, disclosure, transfer, or deletion.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, kin555 acts as the Data Controller in respect of all player Personal Data.
• "Data Processor" — a third party that processes Personal Data on behalf of and under instruction from kin555 (e.g., payment gateway providers, identity verification services, cloud hosting providers).
• "Sensitive Data" — a subset of Personal Data warranting heightened protection, including biometric data, financial account credentials, and government-issued identification document numbers.
• "Consent" — a freely given, specific, informed, and unambiguous indication of agreement to the processing of Personal Data, expressed through a clear affirmative act (such as ticking an opt-in checkbox or completing account registration).
• "Player" / "User" / "you" — any individual who registers an account on kin555 or browses the Website in any capacity.
• "KYC" — Know Your Customer; the identity and age verification process kin555 applies to player accounts in accordance with anti-money laundering obligations and responsible gaming commitments.

kin555 collects personal data in the categories outlined below. We collect only the minimum data necessary for the stated purpose — a principle known as data minimisation.

kin555 collects personal data through several channels, all of which are disclosed transparently below:

4.1 Direct Collection

The majority of personal data we hold is provided directly by you during the following interactions:

• Completing the account registration form on kin555, where you provide your name, date of birth, email address, mobile number, and city of residence.
• Submitting KYC verification documents (government-issued ID, selfie/liveness photo) through the account verification portal.
• Registering a payment method (bank account or e-wallet) for deposit and withdrawal transactions.
• Contacting our customer support team via live chat or email, in which case the content of your correspondence is recorded.
• Completing any on-platform survey, feedback form, or responsible gaming self-assessment tool.

4.2 Automated Collection

When you access the kin555 Website, certain technical data is collected automatically by our systems, including your IP address, device and browser specifications, pages visited, time spent on each page, and session identifiers. This data is collected using server logs, cookies, and similar tracking technologies (described further in Section 8 of this Policy). Automated collection occurs regardless of whether you are logged into an account and serves security, fraud prevention, and platform performance purposes.

4.3 Third-Party Sources

In limited circumstances, kin555 may receive personal data from third-party sources to supplement the information you have provided directly. These sources include:

• Identity Verification Providers: Accredited KYC service providers may cross-reference submitted identity documents against official databases to confirm authenticity.
• Payment Processors: When you initiate a deposit or withdrawal, payment intermediaries (including local bank transfer networks and e-wallet providers such as OVO, DANA, and GoPay) transmit transaction confirmation data to kin555.
• Fraud and AML Screening Services: kin555 may verify account holder information against international politically exposed persons (PEP) lists and sanctions databases as part of AML due diligence.
• Responsible Gaming Databases: With your consent, or where required for player protection, kin555 may check self-exclusion registers to prevent access by individuals who have previously requested self-exclusion.

kin555 processes personal data only for specified, explicit, and legitimate purposes. We do not use personal data in any manner incompatible with the purposes stated at the time of collection. The primary purposes for which we process your personal data are:

• Account Management: Creating, maintaining, and administering your kin555 player account, including processing login authentication, updating account settings, and managing account status changes.
• Identity and Age Verification (KYC): Verifying that you are a real person, that you meet the minimum age requirement of 21 years, and that the identity information you have provided is accurate and consistent across all submitted documents.
• Payment Processing: Facilitating deposits via Indonesian local bank transfers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), and processing withdrawal requests to your registered accounts.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, multi-accounting, chargeback abuse, account takeover attempts, and other security threats to the Platform and its player community.
• Anti-Money Laundering (AML) Compliance: Monitoring transactions for suspicious patterns, screening players against international sanctions and PEP databases, and retaining transaction records as required by applicable AML frameworks.
• Responsible Gaming: Monitoring gameplay patterns to identify indicators of problem gambling, enforcing deposit limits and loss limits set by players, administering self-exclusion requests, and conducting responsible gaming outreach where warranted.
• Customer Support: Responding to inquiries, resolving account disputes, processing complaints, and maintaining records of support interactions for quality assurance and compliance purposes.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve the Website's design, functionality, game offering, and overall player experience.
• Marketing Communications: Sending you promotional offers, bonus notifications, and event announcements — but only where you have provided explicit opt-in consent. You may withdraw this consent at any time through your account settings or by contacting support.
• Legal Compliance: Meeting regulatory obligations, responding to lawful requests from competent authorities, and exercising or defending legal claims.

Every processing activity conducted by kin555 rests on at least one of the following legal bases, consistent with internationally recognised data protection law:

• Contractual Necessity: Processing required to enter into and perform the player agreement with you — including account creation, KYC, payment processing, and gameplay — is carried out on the basis of contractual necessity. Without this processing, kin555 cannot provide its services.
• Legal Obligation: Certain processing activities, particularly AML record-keeping, sanctions screening, and identity verification, are carried out to comply with applicable legal and regulatory obligations.
• Legitimate Interests: kin555 processes certain technical and security data (IP addresses, device identifiers, login logs) on the basis of our legitimate interest in maintaining platform security, preventing fraud, and protecting our player community. We balance these interests against your privacy rights and apply proportionate data minimisation measures.
• Consent: Where processing is not required for contractual performance or legal compliance — particularly for direct marketing communications and optional analytics — kin555 relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Vital Interests: In rare circumstances, kin555 may process data to protect your vital interests or the vital interests of a third party — for example, where we need to share data with emergency services in response to a disclosed crisis.

kin555 does not sell, rent, or trade your personal data to any third party for commercial purposes. Personal data is shared only in the limited circumstances described below, and only with parties who are contractually bound to process your data solely for the specified purpose, under strict confidentiality obligations, and with appropriate technical security measures in place.

7.1 Authorised Data Processors

kin555 engages the following categories of third-party service providers as Data Processors to support Platform operations:

• Payment Gateway Providers: To facilitate deposit and withdrawal transactions via Indonesian local banks and e-wallets. These providers receive only the minimum financial and identity data required to execute the specific transaction.
• KYC and Identity Verification Services: Accredited identity verification providers process submitted KYC documents on kin555's behalf to confirm authenticity and age compliance.
• Cloud Hosting and Infrastructure Providers: kin555's Platform infrastructure is hosted on secure, internationally certified cloud servers. Hosting providers have access to encrypted data stored on their infrastructure but are contractually prohibited from accessing or using that data for any purpose beyond service delivery.
• Game Content Providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft integrate their game content within the kin555 Platform. Game session data may be processed by these providers solely to operate the games; they do not receive unnecessary identifying information beyond what is technically required.
• Customer Support Platform: Our live chat and ticketing system provider processes support correspondence data on our behalf for the sole purpose of delivering customer support services.
• AML and Fraud Screening Services: Specialised compliance technology providers process transaction and identity data to screen against sanctions lists, PEP databases, and fraud pattern models.

7.2 Regulatory and Legal Disclosure

kin555 may disclose personal data to competent governmental authorities, regulatory bodies, law enforcement agencies, or courts where we are legally required to do so by a valid court order, subpoena, regulatory direction, or applicable law. In such cases, kin555 will disclose only the minimum information required by the specific legal demand and will, where legally permissible, notify you of the disclosure request.

7.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of all or substantially all of kin555's assets, player personal data may be transferred to the successor entity as part of the transaction. You will be notified in advance of any such transfer and of any material changes to this Privacy Policy that result from it. The successor entity will be required to honour the commitments made in this Policy in respect of data collected prior to the transfer.

kin555 uses cookies and similar tracking technologies to operate the Website, maintain session security, analyse platform usage, and deliver a personalised experience. Below is a transparent breakdown of the cookie categories we deploy:

8.1 Strictly Necessary Cookies

These cookies are essential for the Website to function correctly. They enable core functions such as secure login session management, navigation between pages, and processing of transactions. Strictly necessary cookies cannot be disabled without breaking core platform functionality. They do not collect personally identifiable information beyond what is technically required for session operation.

8.2 Performance and Analytics Cookies

Performance cookies collect anonymised and aggregated data about how players interact with the Website — including which pages are visited most frequently, how long sessions last, and where technical errors occur. This data helps kin555 identify and fix usability issues and continuously improve the platform. We use privacy-compliant analytics tools that process data in aggregate form without building individual user profiles for advertising purposes.

8.3 Functional Cookies

Functional cookies remember your preferences and settings — such as your preferred display language, previously used payment methods, and interface customisations — so that you do not need to re-enter them on each visit. These cookies improve convenience but are not strictly necessary for core platform operation.

8.4 Managing Your Cookie Preferences

You may review and adjust your cookie preferences at any time through your browser settings. Most modern browsers allow you to block or delete cookies; however, disabling strictly necessary cookies may impair core platform functionality including login and payment processing. Instructions for managing cookies in common browsers are available via your browser's official help documentation.

kin555 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised such that it can no longer be associated with any individual. Where data is retained beyond account closure for legal compliance purposes, it is segregated from active player data and subject to restricted access controls.

kin555 implements a multi-layered security architecture designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include, but are not limited to, the following:

• Transport Layer Security (TLS/SSL): All data transmitted between your browser and the kin555 Platform is protected by industry-standard 256-bit TLS encryption, ensuring that your personal and financial data cannot be intercepted in transit.
• At-Rest Encryption: Sensitive data stored within our databases — particularly KYC documents, financial account details, and identity information — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within kin555 systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data necessary for their specific role, and all data access events are logged for audit purposes.
• Multi-Factor Authentication (MFA): Internal systems handling personal data require multi-factor authentication for all staff access. We also encourage players to enable MFA on their kin555 accounts for enhanced account security.
• Regular Security Audits: kin555's infrastructure undergoes regular independent security assessments, including penetration testing and vulnerability scanning, to identify and remediate potential weaknesses before they can be exploited.
• Staff Training: All kin555 personnel who handle personal data receive regular data protection and security awareness training as a condition of their employment.
• Incident Response: In the event of a data security incident that poses a risk to your rights and freedoms, kin555 maintains a formal incident response procedure. Affected players and relevant authorities will be notified in accordance with applicable notification obligations, without undue delay.

While kin555 employs best-practice security measures, no digital system can guarantee absolute security. We therefore encourage players to use strong, unique passwords for their kin555 accounts, enable two-factor authentication where available, and remain vigilant against phishing attempts.

As a player whose personal data is processed by kin555, you hold the following rights with respect to your personal information. To exercise any of these rights, please contact us at the details provided in Section 16 of this Policy. kin555 will respond to all valid data rights requests within 30 calendar days.

• Right of Access: You may request a copy of all personal data that kin555 holds about you, along with information on how it is being used and with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request its correction. You may update certain account details directly within your account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request that kin555 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the data has been unlawfully processed. Note that this right is subject to legal retention obligations — data that must be retained for AML compliance or legal proceedings cannot be deleted prior to the end of the mandatory retention period.
• Right to Restriction of Processing: You may request that kin555 temporarily suspend processing of your personal data where you contest its accuracy, where processing is unlawful, or where you have objected to processing pending verification of our legitimate interests.
• Right to Data Portability: Where processing is based on your consent or contractual necessity, and carried out by automated means, you may request that kin555 provide your personal data in a structured, commonly used, machine-readable format (such as JSON or CSV) so that you can transfer it to another service provider.
• Right to Object: You have the right to object at any time to processing of your personal data for direct marketing purposes. Upon receipt of such an objection, kin555 will immediately cease sending marketing communications to you. You may also object to other processing activities based on legitimate interests, in which case kin555 will assess your objection and cease processing unless compelling legitimate grounds override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.
• Right to Lodge a Complaint: If you believe that kin555 has failed to handle your personal data in accordance with this Policy or applicable data protection law, you have the right to lodge a complaint with the relevant data protection supervisory authority.

kin555 strictly prohibits the use of its services by individuals under 21 years of age. Online gambling is an adults-only activity, and kin555 is committed to preventing underage access to the Platform. We do not knowingly collect, process, or retain personal data from any individual under 21 years of age.

During the account registration process, all players are required to provide their date of birth. Players who indicate an age below 21 are automatically prevented from completing registration. Additionally, as part of our KYC verification process, kin555 cross-checks submitted government-issued identity documents to confirm the age stated at registration.

If kin555 becomes aware that personal data has been inadvertently collected from an individual under 21 years of age, that data will be deleted immediately, the account will be permanently closed, and any remaining account balance will be refunded in full to the payment method used for deposit.

Parents and guardians concerned about potential underage access to kin555 are encouraged to implement parental control software on devices used by minors, and to contact us immediately if they suspect an underage individual has created an account. kin555 cooperates fully with responsible gaming organisations and regulatory authorities on matters of underage gambling prevention.

kin555's Platform infrastructure and certain third-party service providers are located outside of Indonesia. As a result, personal data may be transferred to, and processed in, jurisdictions where data protection laws differ from those in Indonesia. Where such transfers occur, kin555 ensures that appropriate safeguards are in place to protect your personal data in accordance with this Policy.

Specifically, international data transfers are governed by the following protections:

• Standard Contractual Clauses: Data transfer agreements with third-party processors incorporate European Commission Standard Contractual Clauses (SCCs) or equivalent contractual safeguards that impose data protection obligations on the recipient equivalent to those applicable within the European Economic Area.
• Adequacy Decisions: Where personal data is transferred to jurisdictions that have been deemed to provide an adequate level of data protection by competent authorities (e.g., certain European Union member states, the United Kingdom under the UK GDPR), those transfers proceed on the basis of the adequacy decision.
• Data Processor Agreements: All third-party service providers that process personal data on kin555's behalf are contractually bound to implement appropriate technical and organisational security measures, to process data only in accordance with kin555's instructions, and to notify kin555 of any data breach without undue delay.

Despite the international nature of data processing, kin555 remains the Data Controller of all player personal data and retains full accountability for the security and lawfulness of processing, regardless of where that processing takes place geographically.

The kin555 Website may contain links to third-party websites, including game studio websites, payment provider sites, and responsible gaming resources. kin555 is not responsible for the privacy practices or content of any third-party website. Once you navigate away from https://kin555.cam to a third-party domain, that third party's privacy policy governs the collection and use of any information you provide.

We recommend that you review the privacy policy of any third-party website before providing personal data to that site. Links to third-party websites are provided for convenience and informational purposes only and do not constitute an endorsement by kin555 of the linked site's content or privacy practices.

kin555 reserves the right to amend this Privacy Policy at any time to reflect changes in our processing practices, regulatory requirements, technological developments, or business operations. Any material changes to this Policy will be communicated to active players by email to the address registered on your account, and the revised Policy will be published on the Website with a new "Effective Date" displayed at the top of the document.

By continuing to use the kin555 Platform after a revised Privacy Policy becomes effective, you acknowledge that you have read and accept the amended terms. If you do not agree to the revised Policy, you should discontinue use of the Platform and contact us to arrange account closure in accordance with our Terms & Conditions.

We encourage you to review this Privacy Policy periodically to stay informed about how kin555 is protecting your personal data. The current version of this Policy is always available on the Website via the footer link.

If you have any questions, concerns, or complaints regarding this Privacy Policy, or if you wish to exercise any of your data rights, please contact kin555's Data Protection team using the following contact details:

Email: [email protected]

Subject Line for Data Rights Requests: "Data Rights Request — [Access / Rectification / Erasure / Portability / Objection / Other]"

Response Timeframe: kin555 commits to responding to all privacy inquiries and data rights requests within 30 calendar days of receipt. Complex requests may require up to an additional 30 days, in which case we will notify you of the extension within the initial 30-day period.

kin555 takes your privacy seriously and values the trust you place in us by choosing to play on our platform. We are committed to handling your personal data with the highest standards of security, transparency, and respect for your rights.