App / Sports
This page sets out how koiroto handles your account data, what rights you hold under this policy, and where to direct any question about how your information is used. Access to our platform depends on local law and is available only where eligible regions permit.
Our legal policy governs how we collect, retain and act on the information attached to your koiroto account — from the moment you register through every session you open. When you link a local payment method such as DANA or OVO to your account wallet, the transaction data processed through that route is handled under the same policy framework. GoPay transfers routed via our checkout are subject to the same retention rules as any other account-linked payment event. Jurisdiction determines how this policy is applied in practice. Where local law in Indonesia imposes a specific requirement — on data retention periods, on your right to request a correction or on how long we may hold a closed-account record — that local requirement takes precedence over our general framework. We do not make legal certainty claims about jurisdictions where eligibility remains subject to regulatory review. If you are accessing from a region where our service is not yet confirmed as permitted, check the eligibility notice shown at account creation before proceeding. This policy does not cover third-party services you reach from our platform — external payment processors, linked identity verification partners or studio game servers hosted outside koiroto's own infrastructure fall outside the scope of what we control and therefore outside the scope of this document.
DANA wallet data linked at checkout is retained under the same account policy as all other payment-route information.
OVO transfers processed via your account wallet are logged at the transaction level; you can review the record in your account history.
GoPay payment events are stored in your account under our standard data-retention schedule, as disclosed in the details section.
QRIS scan-to-pay events are recorded as account transactions; the same correction and access rights apply to them as to any other entry.
Not every element of your koiroto experience falls under this single policy document. The table below draws a clear line between what we own and govern, and what sits with a third party or a separate legal framework. Where something falls outside our scope, we point you toward the right contact rather than leaving you without a path forward.
Login credentials, session records and account-status changes are fully within scope. Any question about access rights or account suspension is handled through our policy and our support team.
Deposits and withdrawals processed through DANA, OVO or GoPay appear in your account history. That record is within scope; the payment processor's own data practices are governed by their separate terms.
Game content served from Spadegaming, PlayStar, Bigtime Gaming and Microgaming titles is within our lobby scope, but the game studios operate under their own privacy and data standards for studio-side data.
Identity verification partners, external analytics tools and linked social login providers each operate under their own policies. We note where such a service is used, but we do not govern their data handling.
Your rights under this policy are not passive. After login, your account dashboard shows the full transaction history tied to your wallet — including any DANA, OVO or GoPay entries — and you can download or review that record without contacting support. If a detail in your account profile is incorrect, the account settings page carries the fields you can edit directly; for changes that require identity re-verification, the same settings page routes you to the verification flow. Where a question falls outside what self-service covers — for example, a data-processing query or a request to close an account and understand what is retained — our support channel is the right path, and we aim to acknowledge those requests within the period set out below. Indonesia-based legal requirements on data access and correction are reflected in how we handle these requests; if local law in your eligible region grants you a specific right, we apply it.
Open your account dashboard after login to see the full transaction log, session history and wallet entries. No support request is needed to access this view.
Account settings let you update contact information and profile fields directly. Changes that require identity re-verification follow the steps shown on that same page.
For data-processing or retention queries not covered by self-service, use the support contact route. We log every policy question and respond through the same channel you opened.
A closure request tells us to end your account and begin the applicable retention period for your data. Submit the request through support; the confirmation and retention timeline are sent to your registered contact.
Every policy question has a path to a real answer. Whether you are asking about a DANA transaction record, a data correction or account closure, the three routes below connect you to the right part of our team. Use the channel that matches the urgency of your question.
The live chat button is visible after you log in. Use it for account-specific policy questions where you need a direct, session-based response.
For formal data requests, correction submissions or account-closure notices, email is the documented channel. You will receive a written acknowledgement with a reference number.
The help centre holds self-service articles on account rights, wallet data and how our retention schedule works. Start here before opening a support ticket for faster resolution.
How we handle the information tied to your koiroto account reflects the obligations that apply in Indonesia-eligible regions. Cookies active on the site are limited to session management, fraud prevention and performance monitoring; no marketing-only cookie runs without a disclosure. Account security uses credential hashing and session expiry controls visible in your account settings. Data we collect at account creation is retained for the period local law requires after an account is closed — not indefinitely.
Session cookies keep your login active; analytics cookies track performance only. You can review the cookie categories active on your session via the cookie notice linked in the site footer.
Credentials are hashed; active sessions are listed in your account settings so you can review or end any session you do not recognise. Security alerts go to your registered contact method.
We keep account records for the period required by applicable local law after closure. Once that period ends, identifiable data is deleted or anonymised according to the retention schedule in force at the time.
Data-related requests — access, correction, deletion — go to our support team via the email channel. Each request receives a written reference; we apply the local requirement for response timelines where one is set.
The questions below address what koiroto players most often ask about data rights, account records and how to act on this policy. If your question is not covered here, the support routes in the section above are the next step.
Yes. Every DANA and OVO transaction processed through your account wallet is logged in your account history and falls within the scope of this policy. You can review that log in your account dashboard after login without needing to contact support.
Most profile fields — contact information, display name — are editable directly in account settings. Fields that require identity re-verification follow the steps shown on that same page. For anything outside self-service, submit the correction request via our email support channel.
After closure, we retain the data required by local law in your eligible region — typically transaction records and identity verification data — for the period that law specifies. Once that period ends, identifiable data is deleted or anonymised. The confirmed timeline is sent to your registered contact when you request closure.
Access to our platform depends on local law and is available where eligible regions permit. Where eligibility is unclear, the notice shown at account creation is the operative reference. This policy applies to your account data regardless, but platform access itself depends on regulatory status in your region.
Game content in our lobby comes from studios including Spadegaming, PlayStar, Bigtime Gaming and Microgaming. Those studios operate their own data practices for game-side data. Our policy covers what flows through your koiroto account; studio-side data is governed by each studio's own terms.
Send formal data requests through our email support channel. State whether you are requesting access, correction or deletion, and include your account identifier. We log every request, issue a written reference number and apply the response timeline set by local law in your eligible region.