Privacy Policy — kcmtix

Throughout this Privacy Policy, the following terms have the meanings assigned to them below:

• "kcmtix", "we", "us", or "our" refers to the kcmtix platform and its operators, accessible at https://kcmtix.cam.
• "Platform" refers to the kcmtix website, including all pages, tools, games, features, and services offered thereon.
• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, including names, identification numbers, location data, or online identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, deletion, or any combination thereof.
• "Player", "you", or "your" refers to any individual who accesses, registers on, or uses the Platform.
• "Third Party" means any natural or legal person other than kcmtix and the Player.
• "KYC Data" refers to identity and address verification documents submitted during the Know Your Customer process, including government-issued identity cards, passport copies, selfie photographs, and supporting financial documents.
• "Cookie" means a small text file stored by your web browser on your device at the instruction of a website, used to remember information about your session or preferences.

kcmtix collects the following categories of Personal Data in connection with your use of the Platform:

2.1 Registration Data

When you create an account, we collect: full legal name, date of birth, email address, mobile phone number, country and city of residence (e.g., Jakarta, Surabaya, Bandung), and your chosen username and password (stored in hashed, non-reversible form).

2.2 Identity Verification (KYC) Data

To comply with our anti-money laundering obligations and to verify your eligibility to play, we collect copies of your Indonesian National Identity Card (KTP) or passport, proof of address documents, selfie photographs taken during the verification process, and payment method ownership documentation.

2.3 Financial Data

We collect records of all deposit and withdrawal transactions, including the payment method used (bank account name for BCA, BRI, BNI, Mandiri, CIMB Niaga transfers; e-wallet identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja), transaction amounts in Indonesian Rupiah (IDR), timestamps, and transaction reference numbers. We do not store full bank account numbers or e-wallet PINs.

2.4 Activity and Behavioral Data

We collect data about how you interact with the Platform, including game play history (wagers placed, games accessed, win/loss records), betting history (sports markets, bet types including mix parlay accumulators and other selections, odds accepted), session durations, pages visited, and feature usage patterns. This data is used for account management, responsible gaming monitoring, and service improvement.

2.5 Technical and Device Data

We automatically collect technical information including: IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, referring URL, and time-zone setting. This data is used for fraud prevention, security monitoring, and platform optimization.

2.6 Communications Data

When you contact our support team via live chat or email, we retain records of those communications — including the content of messages, timestamps, and any files or screenshots exchanged — for quality assurance, dispute resolution, and training purposes.

kcmtix collects Personal Data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, place a bet, contact support, or participate in a promotion.
• Automatically — through cookies, server logs, and similar tracking technologies as you browse and use the Platform.
• From third-party verification providers — identity and fraud screening services used to assist with KYC compliance may share verification results with us.
• From payment processors — local bank transfer gateways and e-wallet providers (OVO, DANA, GoPay, etc.) share transaction confirmation data with us when you make deposits or withdrawals.

kcmtix uses the Personal Data we collect for the following purposes:

We will not use your Personal Data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another valid legal basis for processing.

kcmtix processes your Personal Data on one or more of the following legal grounds, depending on the specific processing activity:

• Contractual necessity: Processing required to perform the contract between you and kcmtix — including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including anti-money laundering (AML) and Know Your Customer (KYC) obligations.
• Legitimate interests: Processing carried out to pursue kcmtix's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and service improvement — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing carried out on the basis of your freely given, specific, informed, and unambiguous consent — such as sending you promotional communications or using non-essential cookies. You may withdraw your consent at any time without affecting the lawfulness of prior processing.

kcmtix does not sell your Personal Data. We may share your information with the following categories of recipients under the conditions described:

6.1 Service Providers and Processors

We engage carefully selected third-party service providers who process Personal Data on our behalf, strictly in accordance with our instructions and bound by confidentiality and data-protection obligations. These include:

• Payment processing partners (local bank transfer gateways; e-wallet integrations for OVO, DANA, GoPay, ShopeePay, LinkAja)
• Identity verification and KYC screening services
• Fraud detection and cybersecurity providers
• Game software providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) — these providers may process session data to deliver their games
• Customer support platform operators
• Cloud hosting and infrastructure providers

6.2 Legal and Regulatory Disclosure

We may disclose your Personal Data to law enforcement agencies, regulatory authorities, courts, or other public bodies where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of kcmtix, our players, or the public.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of kcmtix's business assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via the email address on your account prior to your data becoming subject to a different privacy policy.

kcmtix implements a comprehensive, multi-layered security framework to protect your Personal Data against unauthorized access, disclosure, alteration, and destruction. Our security measures include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and our servers.
• Encryption at rest for sensitive personal and financial data stored in our databases.
• Strict access controls — staff access to Personal Data is granted on a need-to-know basis only and is subject to role-based permission systems and audit logging.
• Regular penetration testing and independent security audits conducted by qualified third-party cybersecurity firms.
• Multi-factor authentication for all staff accessing production systems containing player data.
• Intrusion detection systems and 24/7 security monitoring of our infrastructure.
• Incident response protocols — in the event of a confirmed data breach affecting your Personal Data, we will notify you within 72 hours of becoming aware of the incident, in accordance with applicable data breach notification requirements.

kcmtix uses cookies and similar tracking technologies to operate the Platform effectively and to deliver a secure, personalized experience. The following table describes the categories of cookies we use:

kcmtix does not use third-party behavioral advertising cookies. You can manage cookie settings through your browser's built-in privacy controls. Note that disabling strictly necessary or security cookies may impair your ability to use the Platform.

We retain your Personal Data only for as long as is necessary to fulfill the purposes described in this Policy, or as required by applicable legal, regulatory, and compliance obligations. The following general retention periods apply:

• Account and registration data: Retained for the duration of your active account relationship with kcmtix, plus a minimum of 5 years following account closure, to comply with anti-money laundering record-keeping obligations.
• KYC documentation: Retained for a minimum of 5 years following the completion of verification or the closure of your account, whichever is later.
• Transaction and financial records: Retained for 5 years from the date of each transaction.
• Customer support communications: Retained for 2 years from the date of the interaction, unless the matter involves an unresolved dispute or legal proceeding.
• Technical and device data (logs): Retained for up to 12 months for security monitoring purposes, after which they are anonymized or deleted.
• Marketing preferences and consent records: Retained for as long as you maintain an account with us and for 2 years following account closure.

When retention periods expire, Personal Data is securely deleted or anonymized in a manner that prevents reconstruction of the original information.

As a player on the kcmtix Platform, you have the following rights with respect to your Personal Data. To exercise any of these rights, contact us at [email protected] with the subject line "Privacy Rights Request". We will respond within 30 calendar days:

The kcmtix Platform is strictly intended for adults aged 21 years and older. We do not knowingly collect, process, or retain Personal Data from individuals under the age of 21. All Players are required to confirm their age at registration, and age verification is enforced through our KYC process.

If we become aware that Personal Data has been collected from a person under the age of 21 without verified parental or guardian consent, we will take immediate steps to delete that information and close the associated account. If you believe that a minor has registered on our Platform, please notify us immediately at [email protected].

kcmtix operates as an international platform. Some of our service providers and infrastructure partners are located outside of Indonesia. Where we transfer Personal Data to recipients in other jurisdictions, we ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy.

Safeguards we use for international transfers include contractual data processing agreements incorporating standard data protection clauses, and careful vendor selection limited to providers who maintain internationally recognized security certifications (e.g., ISO 27001). We do not transfer Personal Data to jurisdictions that do not offer adequate data protection standards without implementing appropriate contractual or technical safeguards.

kcmtix reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal obligations, or Platform features. When material changes are made, we will notify you by email to the address registered on your account and by displaying a prominent notice on the Platform upon your next login.

The "Last Updated" date at the top of this document indicates when the most recent revision was made. Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you should stop using the Platform and may request account closure by contacting our support team.

We encourage you to review this Privacy Policy periodically to stay informed about how kcmtix is protecting your information.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way kcmtix handles your Personal Data, please reach out to our dedicated Privacy team through the following channels:

• Email: [email protected] — please use the subject line "Privacy Inquiry" or "Privacy Rights Request" for prompt routing.
• Live Chat: Available 24/7 directly on the Platform — our Indonesian-speaking support agents are on hand to assist.
• Response Time: We aim to acknowledge all written privacy inquiries within 5 business days (WIB, UTC+7) and to provide a substantive response within 30 calendar days.