Your Privacy Matters to Us
We built koi388 around your account security and data protection. Every transaction you make through DANA, OVO, GoPay or QRIS stays encrypted and private. This policy explains exactly...
How We Handle Your Information
koi388 collects personal data only to operate your account, process payments through DANA, OVO, GoPay and QRIS, and comply with local regulations in supported regions. We do not sell your information to third parties. Your payment details are tokenized and never stored in plain text on our servers. Account activity logs help us detect fraud and keep your balance secure. We retain
data for as long as your account is active, plus the period required by Indonesian law.
Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.
Privacy Standards We Follow
Encryption Standard
All data in transit uses TLS 1.2 or higher. Payment tokens are encrypted at rest using AES-256, meeting international banking security benchmarks.
Regular Audits
We conduct quarterly security reviews and penetration testing to identify vulnerabilities before they affect your account or payment methods.
Compliance Framework
Our privacy practices align with data protection principles applicable in supported Indonesian regions and international payment processor requirements.
Access Controls
Only authorized staff can view personal data, and only when needed to resolve account issues or process DANA, OVO, GoPay and QRIS transactions.
Incident Response
If a breach occurs, we notify affected users within 72 hours and provide guidance on protecting your account and payment information.
Third-Party Vetting
Payment processors, hosting providers and analytics partners sign data protection agreements and undergo annual security assessments.