Koboy89 Privacy Policy – Our Commitment to Protecting Your Personal Data

Koboy89 ("we", "platform") take the privacy of every user seriously. This Privacy Policy describes the data collection and management practices we uphold across our online casino platform — including our website, mobile app, and all digital services we provide to players in Malaysia.

This policy applies to all individuals who access or use the platform Koboy89, whether as a general visitor, a registered member, or a party communicating with us through our customer support channels. By browsing or registering on our platform, you confirm that you have read and understood this Privacy Policy.

Koboy89 complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards. We are committed to processing your data lawfully, fairly, and transparently in accordance with applicable laws in Malaysia.

Koboy89 only collects data that is strictly necessary to provide our services safely and effectively. The following are the categories of data we collect:

Your personal data is collected by Koboy89 through several different channels:

• Account Registration: Information you provide when registering a new account — your name, phone number, email address, and date of birth.
• KYC Process: Identity verification documents submitted during the Know Your Customer process (MyKad, bank statements, utility bills).
• Financial Transactions: Data collected when you make a deposit via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, Maybank2u, CIMB Clicks, or FPX — including amount, date, and payment method.
• Gaming Activity: A record of every game you play — slots, live baccarat, blackjack, roulette, sports betting, e-sports, and virtual sports — including stake amounts and outcomes.
• Automated Technologies: Cookies, pixel tracking, server logs, and session data collected automatically when you access the platform.
• Support Interactions: Information you share when communicating with our support team Koboy89 via live chat, email, or other channels.

Koboy89 uses your personal data only for the following lawful and transparent purposes:

• Account Management: Creates, verifies, and maintains your account, and processes all deposit and withdrawal transactions.
• Service Delivery: Enables you to access and enjoy all games and features on the koboy89 platform.
• Identity Verification (KYC): Fulfils legal obligations to verify user identity and prevent fraud and money laundering.
• Customer Support: Responds to enquiries, resolves complaints, and provides technical assistance.
• Platform Security: Detects and prevents fraud, misuse, and unlawful activity on the platform.
• Legal Compliance: Fulfils legal and reporting obligations to the relevant authorities where required.
• Marketing Communications: Sending information about promotions, bonuses, and new features — only to users who have given their consent (opt-in).
• Platform Improvements: Analyses usage patterns to improve service quality, interface design, and the overall user experience.

Koboy89 does not sell your personal data. However, in certain circumstances, we may need to share data with the following parties for legitimate operational purposes:

• Payment Processors: Malaysian payment providers such as Touch 'n Go, GrabPay, DuitNow, and FPX, to securely process your financial transactions. They receive only the minimum data necessary for each transaction.
• Game Providers: Casino game software providers (such as slots and live casino providers) that are required to verify each game transaction to ensure fairness and integrity.
• KYC Services: Third-party identity verification service providers that assist us in verifying the authenticity of documents submitted by users.
• Legal Authorities: We are obligated to disclose data to Malaysian authorities (such as the Royal Malaysia Police, Bank Negara Malaysia, or the courts) when required by law or a valid court order.
• Auditor: Independent auditors conducting security and compliance audits of the Koboy89 platform may be granted limited access to certain data under strict confidentiality agreements.

All third parties that receive data from Koboy89 are required to uphold data protection standards equal to or higher than our own, and are strictly prohibited from using that data for any purpose beyond what is contractually permitted.

Koboy89 retains your personal data for as long as your account remains active or as long as necessary to fulfil the purposes set out in this Privacy Policy. The specific retention period for each data category is as follows:

Once the retention period has expired, your data will be securely deleted or anonymised in accordance with data deletion procedures approved by our security team. Koboy89.

Koboy89 implement comprehensive technical and organisational security measures to protect your data against unauthorised access, disclosure, alteration, or destruction:

• End-to-End Encryption: All communications between you and the Koboy89 platform are encrypted using TLS 1.3 with 256-bit SSL certificates.
• Strict Access Controls: Only authorised personnel may access user data, and all access is logged and audited.
• Secure Data Centres: Data is stored in enterprise-grade data centres with layered physical security — biometric access control, 24/7 CCTV surveillance, and redundant cooling systems.
• Penetration Testing: Our platform undergoes regular security testing by independent experts to identify and address any vulnerabilities.
• Incident Response Procedure: We have a clear incident response procedure — in the event of any data breach, we will notify affected users within 72 hours as required by law.

Platform Koboy89 uses cookies to enhance the user experience and maintain the security of your login session. Below are the types of cookies we use:

You can manage and delete cookies through your web browser settings. Please note, however, that disabling essential cookies may affect the functionality of the platform. For more information on how to manage cookies, refer to your browser's documentation (Chrome, Firefox, Safari, or Edge).

Under Malaysia's Personal Data Protection Act (PDPA), you have important rights regarding your personal data held by Koboy89:

To exercise any of the above rights, submit a written request to support@koboy89.ws with the subject line "Personal Data Request", along with your full name and account number. Koboy89 will process your request within 14 working days.

Platform Koboy89 is intended solely for users aged 18 and above and is not suitable for children or minors. We do not knowingly collect or process personal data of individuals under the age of 18.

Should we discover that personal data belonging to an individual under the age of 18 has been collected without our knowledge, we will promptly delete that data and close the account in question. Any registration using a false identity to conceal an underage user's true age constitutes a serious violation of our Terms & Conditions.

Parents and guardians are encouraged to use parental control software to prevent children in their care from accessing the platform Koboy89.

Koboy89 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or new technologies. You will be notified of any significant changes via an in-platform notice or an email to your registered address.

The "Last Updated" date at the top of this document shows when the most recent changes were made. We encourage you to review this Privacy Policy periodically — at least once every six months — to stay informed about how we protect your information.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way Koboy89 handles your personal data, please contact us:

• Privacy Email: support@koboy89.ws (Subject: "Data Privacy Enquiry")
• Live Chat: Available 24/7 on the Koboy89 platform — please indicate that your enquiry relates to data privacy
• Response Time: We are committed to responding to all privacy enquiries within 3 working days (general enquiries) or 14 working days (data access/deletion requests)

If you are dissatisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia, the regulatory body overseeing PDPA compliance. That said, we always encourage you to contact us first so we can resolve any issue promptly and to your satisfaction.