kotagg Privacy Policy — How We Protect Your Data

1. Data We Collect

When you register an account or use kotagg services, we collect several types of data to ensure the platform operates properly and securely. The data collected includes:

• Account information: full name, email address, phone number, date of birth, and identity documents required for verification (such as a national ID card or passport).
• Device and browser data: device type, operating system, browser version, IP address, and time zone. This data is used to detect unauthorized access and optimize the platform's display.
• Payment information: account holder name, bank account number or e-wallet account (GoPay, OVO, DANA) used for deposits and withdrawals in IDR. We do not store credit card numbers directly.
• Usage data: navigation history on the platform, games accessed, session duration, and display preferences. This data helps us improve service quality.
• Cookies and tracking data: information stored in your browser to maintain your login session and personalize your user experience.

All data collection is carried out based on legitimate operational needs and with user consent given at the time of account registration.

2. Purpose of Data Use

kotagg uses collected data for clear and limited purposes. We do not use user data for commercial interests outside of platform operations. The primary purposes of data use include:

• Verifying user identity and fulfilling Know Your Customer (KYC) obligations in accordance with industry standards.
• Processing deposit and withdrawal transactions in Indonesian Rupiah (IDR) securely and accurately.
• Sending important notifications regarding your account, transactions, and service updates via email or app push notifications.
• Detecting and preventing fraudulent activity, account misuse, and other security threats.
• Improving platform performance, fixing bugs, and optimizing the user experience on both Android and iOS devices.
• Fulfilling applicable legal and regulatory obligations.

We do not use user data for third-party advertising purposes or sell data to any data brokers.

3. Cookies & & Tracking Technologies

The kotagg platform uses cookies and similar technologies to maintain logged-in user sessions, store display preferences, and anonymously analyze platform usage patterns. The cookies we use fall into two main categories:

• Essential cookies: required for the platform to function correctly — including maintaining login status and session security. These cookies cannot be disabled.
• Analytics cookies: used to understand how users interact with the platform so we can make relevant improvements. Data from analytical cookies is aggregated and does not identify individual users.

You can control cookie usage through your browser settings. However, disabling essential cookies may affect core platform functionality. For mobile app users, similar controls are available through your device's notification settings and app permissions.

4. & Data Storage & Security

The security of user data is kotagg's top priority. All data stored in our systems is protected using industry-standard encryption, both while data is being transmitted and while it is stored on our servers. The connection between your device and kotagg servers uses the HTTPS protocol, ensuring that no third party can intercept your data communications.

Account data and payment information are stored on servers protected by multi-layered firewalls and active intrusion detection systems. Access to user data is restricted to employees who require it for legitimate operational purposes, and all access is recorded in an audit log. Data that is no longer needed is securely deleted according to our established data retention schedule. Users who close their accounts may request deletion of their personal data, subject to the minimum data retention obligations set by applicable regulations.

5. Sharing Data with Third Parties

kotagg does not sell, rent, or trade users' personal data to third parties for marketing purposes. However, under certain circumstances, user data may be shared with the following parties for limited and specific purposes:

• Payment service providers: local banks and e-wallet providers that process your IDR transactions require minimum transaction data to complete payments.
• Technical service providers: infrastructure partners who help us operate the platform, subject to strict confidentiality agreements.
• Legal authorities: if required by applicable law or court order, we may disclose necessary data to the relevant authorities.

All third parties working with kotagg are required to comply with data security standards equivalent to those we apply internally.

6. User Rights Over Personal Data

As a kotagg user, you have a number of rights regarding the personal data we hold. You may exercise these rights by contacting our support team via the available email address:

• Right of access: you have the right to know what data we hold about you and how that data is used.
• Right of rectification: if the data we hold is inaccurate, you have the right to request a correction. Some data changes (such as name or date of birth) may require re-verification of documents.
• Right of erasure: you may request deletion of your personal data after closing your account, subject to the minimum retention period required for audit and legal purposes.
• Right to restrict processing: under certain circumstances, you may ask us to restrict the way we process your data.

To submit a request regarding your personal data rights, please contact the kotagg support team by email [email protected] or through the live chat feature within the platform. We will respond to requests within a reasonable timeframe in accordance with applicable identity verification procedures. Further information is available on the FAQ policy.

7. Policy Changes & Contact

kotagg reserves the right to update this Privacy Policy at any time to reflect changes in data collection practices, legal requirements, or service changes. Significant changes will be communicated to registered users via email or in-platform notifications before the changes take effect. The latest version of this policy is always available on this page, with the update date shown at the top.

If you have any questions, concerns, or requests regarding your data privacy on the kotagg platform, please do not hesitate to contact us. Our support team is ready to assist via email [email protected] or via live chat available within our app and website. We are committed to responding to every privacy-related inquiry seriously and promptly.