Privacy Policy

This Privacy Policy ("Policy") describes how lkc12 ("lkc12", "we", "our", or "us") collects, uses, stores, shares, and protects the personal data of individuals ("Members", "you", or "your") who register for and use the lkc12 online sportsbook and casino platform, accessible at lkc12.net.

lkc12 is an internationally licensed and regulated online gaming operator serving players primarily based in Indonesia. We are committed to handling personal data responsibly, transparently, and in compliance with applicable international data protection standards. This Policy is incorporated by reference into lkc12's Terms & Conditions and forms a binding part of the agreement between lkc12 and each Member.

By creating an lkc12 account, completing the lkc12 Login process, depositing funds, or otherwise using the platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must not use the lkc12 platform.

lkc12 collects the following categories of personal data from Members and prospective Members:

2.1 Identity & Registration Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (for age verification — you must be at least 21 years old).
• Residential address in Indonesia (street, city, province, postal code).
• Nationality and citizenship.
• Username and encrypted password selected at registration.
• Contact email address and, optionally, a mobile phone number.

2.2 Identity Verification (KYC) Documents

• Scanned or photographed copies of government-issued photo ID: Indonesian National Identity Card (KTP), Passport, or Driver's License (SIM).
• Proof of residential address: utility bill, bank statement, or official government correspondence dated within the last three months.
• Payment method verification: evidence of ownership of the bank account or e-wallet used to transact on lkc12 (e.g., a screenshot of your BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, or ShopeePay account showing your registered name).
• In enhanced due-diligence cases: source-of-funds documentation as required by our AML compliance program.

2.3 Financial & Transaction Data

• Deposit and withdrawal history, including amounts, timestamps, and payment methods used.
• Bank account numbers and e-wallet identifiers (masked where possible in our UI).
• Bonus and promotional credit history.
• Running account balance and transaction ledger.

2.4 Betting & Gaming Activity Data

• Full record of all wagers placed — product type (sportsbook, slots, live casino, togel, etc.), stake, odds/RTP, outcome, and settlement time.
• Session duration, game history, and wagering pattern data used for responsible gaming monitoring.
• Self-exclusion elections, deposit limit settings, and cooling-off period requests.

2.5 Technical & Device Data

• IP address and approximate geolocation derived from IP.
• Device type, operating system, browser type and version.
• Device fingerprint identifiers used for fraud detection and multi-account prevention.
• Login timestamps, session duration, and navigation path within the platform.

2.6 Communication Data

• Records of all live chat conversations and email exchanges between you and lkc12 support staff.
• Complaint and dispute records.
• Responses to surveys, feedback forms, or promotional participation where you have voluntarily provided information.

2.7 Marketing Preferences

• Your communication preferences regarding promotional emails, SMS alerts, and platform notifications.
• Records of consent given or withdrawn for marketing communications.

lkc12 collects personal data through the following channels and mechanisms:

lkc12 processes personal data only for the purposes listed below. We rely on the following lawful bases for processing:

lkc12 does not use personal data for automated decision-making that produces significant legal or similarly significant effects on Members, except in the limited context of real-time fraud screening during deposit and withdrawal processing. Where automated decisions affect your account, you have the right to request human review — contact [email protected].

lkc12 does not sell personal data to any third party. Data sharing is strictly limited to the following categories of recipient, each engaged under a formal data processing agreement that requires them to maintain standards of data protection equivalent to those described in this Policy:

5.1 Licensed Game Providers

To deliver casino, slot, and live dealer games, lkc12 shares the minimum necessary Member data (typically a pseudonymous player ID and session token) with licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. These providers receive no personally identifiable information beyond what is required to initiate and settle a game session.

5.2 Payment Processors and Financial Institutions

Processing deposits and withdrawals via BCA, BRI, BNI, Bank Mandiri, CIMB Niaga, Bank Permata, BSI, OVO, DANA, GoPay, ShopeePay, and LinkAja requires sharing relevant financial identifiers and transaction data with those institutions. Each institution is independently regulated and maintains its own data protection obligations under Indonesian banking law.

5.3 Identity Verification and Fraud Prevention Providers

Third-party KYC and identity verification service providers may receive identity document images and personal details for the purpose of confirming the authenticity of submitted documents and screening Members against AML watchlists. These providers are engaged under strict data processing agreements and are prohibited from using Member data for any purpose other than fulfilling their verification function for lkc12.

5.4 Technology and Infrastructure Partners

Cloud hosting, content delivery, and cybersecurity partners may have incidental access to encrypted personal data in the course of providing infrastructure services. Such access is governed by contractual restrictions and technical controls that prevent unauthorized use or disclosure.

5.5 Regulatory and Law Enforcement Authorities

lkc12 will disclose personal data to competent regulatory authorities, law enforcement agencies, or courts of law where required to do so by a valid legal obligation, court order, or regulatory direction. Where permitted by law, lkc12 will notify the affected Member of any such disclosure request prior to compliance.

5.6 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or a substantial part of lkc12's business assets, Member personal data may be transferred to the acquiring entity as part of that transaction. In such cases, Members will be notified via the email address on file and provided with an opportunity to close their account before the transfer takes effect.

lkc12 uses cookies and similar client-side technologies to operate the platform effectively. The following categories of cookies are in use:

lkc12 does not use third-party advertising cookies, cross-site tracking pixels, or social media tracking technologies. You may manage cookie preferences through your browser settings, though disabling strictly necessary cookies may prevent access to certain platform features.

lkc12 retains personal data for the periods set out below. Retention periods are determined by the purpose for which data was collected, contractual obligations, and applicable legal requirements — primarily AML regulations that mandate retention of financial and identity records for a minimum of five years following the end of a business relationship.

Once the applicable retention period has expired, personal data is securely deleted or anonymized in accordance with our internal data destruction procedures. Anonymized or aggregated data that cannot be used to identify any individual may be retained indefinitely for statistical and platform improvement purposes.

lkc12 implements a comprehensive suite of technical and organizational security measures to protect personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Key measures include:

• Encryption in transit: All data transmitted between your browser or device and lkc12 servers is encrypted using TLS 1.2 or higher (256-bit SSL). The lkc12.net domain enforces HTTPS at all times; unencrypted HTTP connections are automatically redirected.
• Encryption at rest: Sensitive personal data categories — including KYC documents, payment identifiers, and password hashes — are encrypted at rest using industry-standard AES-256 encryption. Passwords are never stored in plaintext; they are stored as salted, one-way cryptographic hashes.
• Access controls: Access to personal data within lkc12's internal systems is restricted on a strict need-to-know basis. Role-based access controls ensure that employees can only access the data categories required for their specific job function. All internal access is logged and subject to periodic audit.
• Network security: lkc12's infrastructure is protected by enterprise-grade firewalls, intrusion detection systems (IDS), and DDoS mitigation services. Regular penetration testing is conducted by independent third-party security firms.
• Employee training: All lkc12 employees who handle personal data receive mandatory data protection and cybersecurity training upon onboarding and at least annually thereafter. Employees are subject to confidentiality obligations as a condition of employment.
• Incident response: lkc12 maintains a documented data breach response plan. In the event of a confirmed data breach that poses a risk to Member rights, affected Members will be notified without undue delay, and relevant regulatory authorities will be informed as required by applicable law.

As an lkc12 Member, you hold the following rights with respect to your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request — [Your Username]". lkc12 will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days.

lkc12 will not charge a fee for processing data rights requests unless they are manifestly unfounded or excessive. In such cases, lkc12 may charge a reasonable administrative fee or decline to respond, with written reasons provided. Identity verification may be required before lkc12 can process a data rights request, to prevent unauthorized access to another individual's personal data.

lkc12 strictly prohibits use of its platform by any person under the age of 21. lkc12 does not knowingly collect personal data from individuals under 21 years of age. All registration flows include a mandatory age declaration, and identity verification (KYC) procedures are designed to confirm that all Members meet the 21+ age requirement.

If lkc12 discovers or has reason to believe that personal data belonging to a person under 21 has been collected — whether through misrepresentation during registration or any other means — we will immediately suspend the associated account, delete the underage individual's personal data to the extent permitted by legal obligations, and forfeit any funds in the account in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that a person under 21 in your care has registered with lkc12, please contact us immediately at [email protected]. We will investigate and take appropriate action as a priority.

lkc12 operates as an internationally licensed platform. In the course of providing our services, personal data may be transferred to and processed in jurisdictions outside Indonesia — principally in connection with our cloud infrastructure providers, game studio partners, and fraud-prevention services that maintain servers in various countries.

Where personal data is transferred internationally, lkc12 ensures that appropriate safeguards are in place to maintain a level of data protection equivalent to the standards described in this Policy. These safeguards include:

• Contractual data processing agreements incorporating standard data protection clauses that require recipients to protect data to a defined minimum standard.
• Transfer only to jurisdictions that maintain an adequate level of data protection as assessed by lkc12's data protection officer.
• Technical controls including end-to-end encryption of data in transit, ensuring that data is protected regardless of the jurisdiction through which it passes.

By using the lkc12 platform, you acknowledge and consent to the international transfer of your personal data in accordance with the safeguards described in this clause.

lkc12 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. Material changes — those that significantly affect how your personal data is used or your rights as a Member — will be communicated to active Members via a prominent notice on the lkc12 platform and, where possible, by email to the address registered on your account, at least 14 days before the changes take effect.

Minor or administrative changes (such as corrections to typos or clarifications that do not alter the substance of the Policy) may be made without prior notice. The version date and version number displayed at the top of this page will be updated to reflect any changes, whether material or minor.

Your continued use of the lkc12 platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you object to any change, you must close your account and withdraw your available balance prior to the effective date of the change.

If you have questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by lkc12, please contact us through any of the following channels:

lkc12 is committed to resolving all privacy-related concerns promptly and transparently. We aim to handle every inquiry with the seriousness and professionalism that our Members deserve.