At km897, protecting your personal information is a core responsibility — not an afterthought. This Privacy Policy explains exactly what data we collect, why we collect it, how we use and protect it, and the rights you hold as a member.
Effective Date: 1 January 2026 | Last Updated: 1 January 2026Six principles that govern every decision km897 makes about your personal data — from collection through to deletion.
km897 collects only the personal data that is strictly necessary for account management, identity verification, payment processing, and legal compliance. We do not collect data speculatively or for unspecified future uses.
All data transmitted between your browser and km897's servers is protected by 256-bit SSL/TLS encryption. Sensitive fields — including passwords and payment details — are encrypted at the application layer as well as in transit.
km897 does not sell, rent, or trade your personal data to third parties for commercial marketing purposes. Data shared with service partners (KYC providers, payment processors) is limited to what is needed for the specific service and governed by strict data processing agreements.
Data collected for a specific purpose — such as identity verification — is used only for that purpose. km897 does not repurpose personal data without your knowledge, and we will seek your explicit consent where a new processing purpose requires it.
Every km897 member has the right to request a copy of the personal data we hold about them, to correct inaccuracies, and — where permitted by law — to request deletion. Submit requests at any time to [email protected].
km897 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. When retention periods expire, data is securely deleted or anonymised.
Important Notice: This Privacy Policy applies to all personal data collected by km897 through the website https://km897.net, its subdomains, and any services delivered through them. By registering an account or using the km897 platform, you acknowledge that you have read this policy and consent to the processing of your personal data as described herein. If you do not agree, please discontinue use of the platform.
In this Privacy Policy, the following terms carry the meanings set out below:
km897 acts as the Data Controller for all personal data collected through the km897 platform. As Data Controller, km897 is responsible for ensuring that personal data is processed lawfully, fairly, and transparently in accordance with applicable data protection principles.
For all data protection enquiries, requests, and complaints, the designated point of contact is the km897 Data Protection team, reachable at [email protected] with the subject line "Data Protection Request — [Account Username]".
Our Commitment: km897 processes your personal data only for the purposes described in this policy. We do not use your data in ways that would surprise you or that conflict with the context in which you provided it.
km897 collects the following categories of personal data, depending on how you interact with the platform:
km897 does not collect special categories of sensitive data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where a member voluntarily discloses such information during a responsible gaming self-exclusion process (e.g., stating a gambling-related medical concern). Such disclosures are handled with strict confidentiality and used solely to facilitate the protective measure requested.
km897 collects personal data through the following channels:
km897 does not purchase personal data from data brokers or marketing list providers.
km897 processes your personal data for the following clearly defined purposes:
| Purpose | Data Categories Used |
|---|---|
| Account creation and management | Registration data, communications data |
| Identity and age verification (KYC) | Registration data, KYC data |
| Processing deposits and withdrawals | Financial data, KYC data |
| Fraud detection and prevention | Technical data, financial data, gameplay data |
| Responsible gaming monitoring | Gameplay data, registration data |
| Customer support | Registration data, communications data, gameplay data |
| Marketing communications (opt-in only) | Registration data, communications data |
| Platform analytics and improvement | Technical data, gameplay data (aggregated/anonymised) |
| Legal and regulatory compliance | All categories as required |
km897 does not use personal data for automated individual decision-making that produces legal or similarly significant effects on members, except where such processing is necessary for fraud prevention and is subject to human review upon request.
km897 processes personal data on the following legal bases:
km897 does not sell, rent, or commercially trade your personal data. We may share personal data with the following categories of recipients, strictly on a need-to-know basis:
Third-party organisations engaged by km897 to provide specific services, including:
All Data Processors are bound by written agreements requiring them to process data only on km897's documented instructions, maintain appropriate security measures, and refrain from using the data for their own commercial purposes.
Third-party game studios — including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Pocket Games Soft, and Spribe — may receive a session token and minimal technical identifiers (non-PII) to deliver game sessions to your browser. These studios do not receive your full personal profile, financial data, or KYC documents.
km897 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required by applicable law, a valid legal order, or where necessary to protect the rights, safety, or property of km897 or its members. km897 will, where legally permitted, notify affected members before complying with such a request.
In the event that km897 undergoes a merger, acquisition, or transfer of all or substantially all of its assets, personal data held by km897 may be transferred to the successor entity. Members will be notified of any such transfer and of any material change to this Privacy Policy that results from it.
No Cross-Border Transfers Without Safeguards: Where any Data Processor operates outside Indonesia, km897 ensures that appropriate contractual safeguards are in place — such as standard data protection clauses — to protect your data to a standard equivalent to that applied within Indonesia.
km897 uses cookies and similar technologies to ensure the platform functions correctly, to maintain your login session, and to analyse how members use the site so that we can improve the experience. The following categories of cookies are used:
| Cookie Type | Purpose | Can Be Declined? |
|---|---|---|
| Strictly Necessary | Session management, login persistence, security tokens, CSRF protection | No — required for the platform to function |
| Functional | Remembering your language preference, display settings, and responsible gaming tool configurations | Yes — via cookie settings |
| Analytics | Aggregated usage statistics (pages visited, session duration, feature engagement) used to improve platform performance | Yes — via cookie settings |
| Marketing | Tracking opt-in promotional interactions for personalised bonus offers | Yes — requires explicit consent |
You can manage or withdraw your cookie consent at any time through your browser settings. Note that disabling strictly necessary cookies will impair or prevent your ability to log in and use the km897 platform. km897 does not use third-party advertising networks or cross-site behavioural tracking cookies.
km897 implements a layered technical and organisational security programme to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key measures include:
In the event of a personal data breach that poses a risk to your rights and freedoms, km897 will notify affected members without undue delay and take all reasonable steps to contain the breach and prevent recurrence.
Your Role in Security: km897's security measures are most effective when members also take responsibility for their own account security. Use a unique, strong password for your km897 account, do not share your login credentials, and contact support immediately at [email protected] if you suspect unauthorised access to your account.
km897 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention schedule applies as a general guide:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Legal / contractual obligation |
| KYC identity documents | Duration of account + 5 years post-closure | Anti-money-laundering compliance |
| Financial transaction records | Duration of account + 5 years post-closure | Financial record-keeping obligation |
| Customer support records | 3 years from last interaction | Legitimate interest (dispute resolution) |
| Technical / server log data | 90 days (rolling) | Security monitoring |
| Marketing preference records | Until consent is withdrawn + 1 year | Consent record-keeping |
| Self-exclusion records | Duration of exclusion + 7 years | Responsible gaming obligation |
When retention periods expire, km897 securely deletes or irreversibly anonymises the data. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.
As a km897 member, you hold the following rights in relation to your personal data. To exercise any right, submit a written request to [email protected] with the subject line "Privacy Rights Request — [Account Username]". km897 will respond within fourteen (14) calendar days.
km897 will not charge a fee for handling privacy rights requests submitted in good faith. If a request is manifestly unfounded or excessive, km897 reserves the right to charge a reasonable administrative fee or decline the request, with a written explanation.
km897 strictly prohibits the registration and use of its platform by persons under 21 years of age. km897 does not knowingly collect personal data from individuals under 21. Age verification is a mandatory step in the KYC process, and accounts suspected of being held by minors are suspended pending verification.
If km897 discovers that personal data has been collected from a person under 21 without verifiable consent from a parent or guardian, that data will be deleted immediately and the associated account permanently closed. If you believe that a minor has registered on km897, please contact [email protected] immediately.
The km897 platform may display informational references to third-party services such as game studios (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Pocket Games Soft) and payment providers (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja). These references are provided for member convenience and do not constitute endorsement of those third parties' privacy practices.
km897 is not responsible for the privacy practices of third-party game studios or payment service providers. When your session interacts with a third-party game engine, that studio's own data processing terms may apply to the session token. km897 ensures that such interactions are governed by contractual data protection requirements, but members are encouraged to review the privacy policies of any third-party service they use independently.
km897 may update this Privacy Policy from time to time to reflect changes in data processing practices, legal obligations, or platform features. The updated policy will be published on this page with a revised effective date. Where changes are material — meaning they meaningfully affect how km897 processes your personal data or your rights — km897 will notify active members via their registered email address at least seven (7) days before the changes take effect.
Continued use of the km897 platform after the effective date of a revised Privacy Policy constitutes acceptance of the updated terms. If you do not accept the revised policy, you should close your account and cease using the platform. Any data already collected will continue to be processed under the terms in effect at the time of collection until any applicable retention period expires.
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by km897, please contact our Data Protection team using the details below:
Related Policies: This Privacy Policy should be read alongside km897's Terms & Conditions and Responsible Gaming page, both of which contain additional information about how km897 manages your account and protects your interests as a member.
km897 is committed to protecting your privacy every step of the way. Log in securely, explore our full game library, or visit our FAQ if you have questions about your account.
Login to km897 Visit FAQ Terms & Conditions