This Privacy Policy explains how kepo66 collects, uses, stores, shares, and protects your personal information when you access or use the kepo66 platform. We are committed to handling your data with transparency, integrity, and the highest standard of security. By registering an Account or using our services, you acknowledge that you have read and understood this Privacy Policy.
This Privacy Policy applies to all personal data processed by kepo66 in connection with the operation of the kepo66 platform, accessible at kepo66.asia and any associated mobile-optimised interfaces. It covers data collected from registered Members, prospective registrants, visitors who browse the platform without registering, and any individual who contacts kepo66 through our support channels. This Policy should be read together with our Terms & Conditions and our Responsible Gaming guidelines, both of which form part of the contractual relationship between kepo66 and its Members.
For the purposes of this Privacy Policy, kepo66 acts as the data controller — the entity that determines the purposes and means by which your personal data is processed. kepo66 operates under international gaming regulations and applies globally recognised data protection principles, including data minimisation, purpose limitation, storage limitation, integrity, and confidentiality. These principles are broadly aligned with the General Data Protection Regulation (GDPR) framework, which kepo66 uses as its benchmark for responsible data governance, regardless of the formal jurisdictional applicability of that regulation to each individual Member.
This Privacy Policy applies to:
kepo66 collects personal data across several categories depending on your level of interaction with the platform. The table below summarises the primary data categories, specific data points, and the purpose each serves.
| Data Category | Data Points Collected | Primary Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, government-issued ID number (KTP / passport / SIM), nationality, selfie photograph for biometric KYC confirmation | LegalKYC |
| Contact Data | Email address, WhatsApp number, registered city (e.g., Jakarta, Surabaya, Bandung, Bali) | ServiceLegal |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata), e-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit and withdrawal transaction records denominated in IDR | AMLPayments |
| Account Data | Username, hashed password, account registration timestamp, preferred currency (IDR), account status, responsible gaming limit settings | ServiceSecurity |
| Transactional Data | Bet history, game session logs, stakes placed, odds accepted, winnings and losses, bonus redemption history, togel (Indonesia's traditional numbers lottery) draw participation records | LegalService |
| Technical Data | IP address, device type and operating system, browser type and version, session duration, pages visited, click-stream data, geolocation (city-level, derived from IP) | SecurityAnalytics |
| Communications Data | Live chat transcripts, email correspondence, WhatsApp message logs (where applicable), support ticket content and resolution notes | ServiceDisputes |
kepo66 does not collect sensitive special-category data (such as racial or ethnic origin, religious beliefs, health data, or political opinions) unless you voluntarily disclose such information in the course of a support interaction, in which case it is treated with the highest level of confidentiality and used solely to address your inquiry.
The majority of personal data kepo66 holds about you is provided directly by you during the following interactions:
When you visit kepo66.asia or use our platform, certain technical data is collected automatically by our servers and analytics infrastructure. This includes your IP address, device fingerprint, browser configuration, session timestamps, and navigation patterns. This data is used primarily to maintain platform security, detect suspicious access patterns, and optimise platform performance. See Clause 8 for details on cookies and tracking technologies.
In limited circumstances, kepo66 may receive personal data about you from third parties, including:
kepo66 processes personal data under one or more of the following lawful bases:
kepo66 uses your personal data to create and maintain your Account, verify your identity, process deposits and withdrawals in Indonesian Rupiah (IDR/Rp), settle wagers across all product verticals (sportsbook, live casino, togel lottery markets, virtual sports, and slot games), apply bonus credits to your Account, and deliver responsive customer support.
We use identity and financial data to fulfil our obligations under international AML standards, including screening transactions for suspicious patterns, conducting enhanced due diligence on high-value transactions, and filing mandatory reports to relevant authorities where required by law. Age verification data is used to enforce our strict 21+ minimum age requirement. Geolocation data derived from IP address is used to apply jurisdiction-specific access restrictions where legally required.
Technical and account data is used to detect and prevent unauthorised access to Member Accounts, identify patterns consistent with bonus abuse, multi-accounting, automated betting, and match-fixing, and to protect the integrity of kepo66's platform for all Members. Where suspicious activity is detected, kepo66 may temporarily restrict Account access pending investigation, as described in the Terms & Conditions.
Aggregated and anonymised session data is analysed to understand how Members interact with the platform, identify features that are performing well or poorly, optimise game lobby layout, and improve the overall user experience. This analytics processing does not involve profiling at an individual level for decision-making purposes.
Betting pattern data may be analysed to identify potential indicators of problem gambling, such as significantly escalating bet sizes, unusually frequent session activity, or patterns inconsistent with recreational play. Where such patterns are detected, kepo66 may proactively contact the Member with responsible gaming information or apply additional safeguards. This processing is conducted in your interest and is a core element of our duty-of-care obligations. See our Responsible Gaming page for full details.
kepo66 does not sell, rent, trade, or otherwise transfer your personal data to third parties for their own commercial or marketing purposes. Your personal information is not a product. Any sharing of data described in this clause is conducted solely to support the legitimate operation of the kepo66 platform and to fulfil our legal obligations.
kepo66 shares personal data with a limited set of third-party service providers who process data on our behalf and under our instruction, including:
All third-party processors are subject to contractual data processing agreements that require them to process data only as instructed by kepo66 and to maintain security standards equivalent to those applied by kepo66.
kepo66 may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other competent governmental authorities where we are legally compelled to do so, or where disclosure is necessary to prevent fraud, protect the safety of our Members, or defend the legal rights of kepo66. We will not disclose more data than is strictly required for the purpose of the lawful request.
In the event that kepo66 is subject to a merger, acquisition, sale of assets, or restructuring, your personal data may be transferred to the successor entity as part of that transaction. In such circumstances, kepo66 will notify affected Members via email and this Privacy Policy will be updated to reflect any changes to the identity of the data controller.
Personal data associated with an active kepo66 Account is retained for as long as the Account remains open and for a period of five years following the last Account activity or Account closure, whichever is later. This retention period is required to meet AML record-keeping obligations under international standards and to enable resolution of any disputes or regulatory inquiries that arise after closure.
Copies of identity documents provided for KYC verification are retained for a minimum of five years from the date of verification or from the date of Account closure. This is a standard AML retention requirement and is not discretionary.
All financial transaction records — including deposit and withdrawal logs, bet settlement records, and bonus redemption histories — are retained for a minimum of seven years to comply with financial record-keeping standards applicable to internationally regulated gaming operators.
Live chat transcripts, email correspondence, and WhatsApp support logs are retained for a period of three years from the date of the interaction, unless the interaction is associated with an ongoing dispute or investigation, in which case the relevant communications are retained for the duration of the matter plus two years.
Where you have the right to request deletion of your personal data (see Clause 10), kepo66 will delete or anonymise data that is no longer required for the purposes for which it was collected, subject to any overriding legal retention obligation. We cannot delete data that we are legally required to retain for AML, KYC, or tax compliance purposes during the applicable retention period.
Cookies are small text files placed on your device by a website when you visit it. kepo66 uses cookies and similar technologies (including session storage, local storage, and pixel tags) to operate the platform, remember your preferences, maintain your login session, and collect anonymised analytics data about how Members use kepo66.asia.
You can manage or delete cookies through your browser settings at any time. Disabling strictly necessary cookies will impair your ability to log in and use the kepo66 platform. To opt out of analytics cookies, update your preference in the Account Settings section of your kepo66 profile or contact support.
kepo66 employs a multi-layered security architecture to protect your personal and financial data. Our key security measures include:
As a kepo66 Member, you hold a meaningful set of rights with respect to your personal data. These rights are described below. To exercise any of them, contact [email protected] with the subject line [DATA REQUEST] — [Right]. kepo66 will respond within 30 days.
kepo66 strictly prohibits the use of its platform by individuals under the age of 21. kepo66 does not knowingly collect or process personal data from individuals under 21 years of age. If kepo66 discovers or is notified that a person under 21 has registered an Account or submitted personal data, the Account will be immediately closed, all data associated with it will be securely deleted to the extent permitted by law, and any deposits will be returned to the originating payment source.
Age verification is performed as part of the KYC process. Members who are unable to provide satisfactory proof of age will have their Accounts suspended until verification is completed. If you are a parent or guardian and believe your child has registered on kepo66 without your knowledge, contact us immediately at [email protected] and the matter will be resolved without delay.
kepo66 operates as an internationally regulated platform. Your personal data may be transferred to and processed in countries outside Indonesia by our service providers — including cloud infrastructure providers, KYC verification services, and game content studios such as Evolution Gaming, Pragmatic Play, and Microgaming, which maintain server infrastructure in multiple jurisdictions globally.
Where personal data is transferred internationally, kepo66 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy. These safeguards include contractual data processing agreements incorporating standard data protection clauses. kepo66 does not transfer personal data to jurisdictions known to lack adequate data protection frameworks without implementing such safeguards.
kepo66 reserves the right to update or replace this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform functionality. Where changes are material — for example, a change to the categories of data we collect, the purposes for which we use it, or the third parties with whom we share it — kepo66 will provide at least 14 days' advance notice to registered Members via email to the address associated with their Account. Continued use of the kepo66 platform following the effective date of an updated Privacy Policy constitutes acceptance of the revised terms.
The version number and effective date displayed at the top of this page (currently Version 2.4, effective 1 January 2026) will be updated with each revision. We recommend that you review this Privacy Policy periodically to stay informed of how kepo66 protects your data. The most current version of this Policy is always available at kepo66.asia/privacy-policy.
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by kepo66, please contact our support team using the details below. When submitting a data rights request, please include your registered username and a brief description of the right you wish to exercise, and use the subject line format [DATA REQUEST] — [Right Type] to ensure prompt handling.
If you are dissatisfied with how kepo66 has handled your personal data or responded to a data rights request, you have the right to escalate your complaint. kepo66 takes all privacy complaints seriously and will conduct a thorough internal review of any escalated matter. Please contact [email protected] with the subject line [PRIVACY COMPLAINT], and a senior member of the team will respond within 5 business days.
All data transmitted between your device and the kepo66 platform is protected by 256-bit SSL/TLS encryption. Your financial details — bank account numbers for BCA, BRI, Mandiri, and e-wallets like OVO and DANA — are never sent in plain text.
Identity verification protects both you and the platform. kepo66 verifies every Member using government-issued ID — KTP, passport, or SIM — ensuring no underage users gain access and that your Account cannot be fraudulently accessed by a third party.
kepo66 does not sell, rent, or trade your personal data to any third party for commercial purposes. Your information is used exclusively to operate your Account, process transactions, comply with legal obligations, and improve your platform experience.
Sensitive records stored in kepo66's secure databases — including KYC documents and financial transaction histories — are encrypted at rest using AES-256. Even in the unlikely event of a storage compromise, your data remains unreadable without the decryption key.
You have the right to access, correct, delete, and port your personal data. Submit a request to [email protected] and kepo66 will respond within 30 days. Your privacy rights are not a formality — they are a core commitment.
kepo66 applies internationally recognised data protection principles — including purpose limitation, data minimisation, and storage limitation — modelled on GDPR best practices. We hold ourselves to a global standard of privacy governance regardless of your location in Indonesia.
Your data is protected. Your transactions are encrypted. Your experience is our priority. Browse our full range of sports betting, live casino, togel markets, and premium slots — all on one platform built for Indonesian players who demand quality.
SSL Encrypted · Provably Fair · 21+ Only · Gamble Responsibly