kok33 Privacy Policy

The following terms carry specific meanings throughout this Privacy Policy:

• "kok33" / "we" / "us" / "our" — the online betting and casino platform operated at kok33.bet, including all associated subdomains and mobile interfaces.
• "Member" / "you" / "your" — any individual who has registered an account on the kok33 platform, or any visitor who accesses the platform without registering.
• "Personal Data" — any information that identifies or could reasonably be used to identify a living individual, including name, date of birth, email address, phone number, IP address, device identifiers, and financial account details.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, alteration, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
• "KYC" — Know Your Customer; the identity and age verification process required before withdrawals are processed or account limits are upgraded.
• "Cookie" — a small text file placed on your device by the kok33 platform or a third-party service integrated within it, used to maintain session state, remember preferences, and collect anonymous analytics data.
• "Data Controller" — kok33, as the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" — a third party that processes Personal Data on behalf of kok33, such as a payment gateway, KYC verification provider, or cloud hosting service, acting under a written data processing agreement.
• "WIB" — Western Indonesia Time (UTC+7), the default time zone used for all kok33 operational matters.

kok33 is an internationally operated online betting and casino platform serving English-preference players across Indonesia. The platform offers sports betting markets — including BRI Liga 1, EPL, La Liga, Champions League, and other major competitions — alongside live casino games, slot titles from leading studios such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and Spribe, as well as Mahjong and Video Poker verticals.

As the Data Controller for all Personal Data collected through the kok33 platform, kok33 is responsible for determining how and why that data is processed, and for ensuring that processing is conducted lawfully, fairly, and transparently. kok33 operates under an internationally recognized online gaming license and is committed to maintaining data practices consistent with globally accepted privacy standards.

All platform accounts are denominated in Indonesian Rupiah (IDR) and support local payment methods including BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja, as well as international cards (Visa, Mastercard). The processing of payment data is handled by PCI-DSS compliant payment processors acting as Data Processors under binding contractual agreements with kok33.

kok33 collects the following categories of Personal Data, depending on how you interact with the platform:

kok33 collects Personal Data through the following channels:

• Directly from you: When you complete the account registration form, submit KYC documents, initiate a deposit or withdrawal, contact customer support via Live Chat or email, or respond to a voluntary survey or promotion.
• Automatically through platform technology: When you access the kok33 website or mobile interface, our servers automatically log technical data including your IP address, device identifiers, browser configuration, and navigation behavior. This data is collected via server logs, session cookies, and analytics scripts operating under the conditions described in Section 7 (Cookies & Tracking).
• From third-party identity verification providers: During the KYC process, kok33 may use licensed identity verification services to cross-reference the documents you submit against authoritative databases. These providers operate under data processing agreements and are not permitted to use your data for any purpose other than verification on kok33's behalf.
• From payment processors: kok33 receives transaction confirmation data from payment processors (confirmation status, transaction reference number, timestamp, and amount) to reconcile your Wallet Balance. Full financial account credentials are never transmitted to kok33's servers.
• From fraud detection systems: kok33 uses automated systems to analyze behavioral patterns — such as unusual betting volumes, rapid IP changes, or multiple account indicators — to detect and prevent fraud. These systems process Technical & Device Data and Betting History in real time.

kok33 processes your Personal Data only where a lawful basis exists. The following table maps each processing purpose to its legal basis:

Where kok33 relies on legitimate interests as a legal basis, we have assessed that our interests in fraud prevention, platform security, and service improvement do not override your fundamental rights and freedoms as a data subject. You may contact us to request details of this assessment.

Where processing is based on consent — specifically for marketing communications — you may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw marketing consent, visit your Account notification settings or contact [email protected].

kok33 does not sell, rent, or trade your Personal Data. We may share your data with the following categories of third parties, strictly for the purposes described:

• Payment Processors: To facilitate deposits and withdrawals via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, LinkAja, Visa, and Mastercard. These processors receive only the data necessary to complete the transaction and are bound by PCI-DSS standards and data processing agreements with kok33.
• KYC Verification Providers: To cross-reference identity documents submitted during the verification process against authoritative identity databases. These providers process your KYC data solely on kok33's instruction and may not use it for their own purposes.
• Game Content Providers: Studios such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft may receive anonymized session identifiers to deliver game content. No directly identifying Personal Data (such as your name, phone number, or KTP number) is shared with game studios.
• Cloud Infrastructure and Hosting Providers: kok33's platform is hosted on secure cloud infrastructure. The hosting provider stores data on kok33's behalf under strict data processing agreements prohibiting any independent use of the data.
• Fraud Detection and Security Services: Specialist third-party fraud detection systems may process Technical Data and anonymized behavioral signals to identify suspicious activity. These services operate under data processing agreements and do not independently retain identifiable member data beyond the contractual purpose.
• Regulatory and Law Enforcement Bodies: Where kok33 is under a legal obligation or receives a lawful request from a competent authority, we may be required to disclose specific member data. kok33 will notify affected members of such requests to the extent legally permissible.

kok33 uses cookies and similar tracking technologies to maintain session state, remember your preferences, prevent fraud, and collect anonymized analytics data to improve platform performance. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your login session, store your language and currency preference, and enable security features such as CSRF protection. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: These cookies remember choices you make (such as game preferences and notification settings) to provide a more personalized experience. They do not track your activity across other websites.
• Analytics Cookies: kok33 uses anonymized, aggregated analytics data to understand how members navigate the platform, which game categories are most popular, and where technical issues may arise. This data does not identify individual members and is used solely to improve the platform experience.
• Fraud Prevention Cookies: Device fingerprinting cookies are used to detect and prevent unauthorized access, bonus abuse, and multi-account registration. These cookies assign a pseudonymous identifier to your device; they do not store personal information directly.

kok33 does not use third-party advertising cookies or behavioral retargeting trackers. You will not see kok33 advertisements served to you on external websites based on your platform activity.

Most browsers allow you to control cookie settings through their preferences menu. Please note that disabling Strictly Necessary Cookies will impair your ability to log in and use the kok33 platform.

kok33 retains Personal Data for the periods set out below, after which data is securely deleted or anonymized unless a longer retention period is required by applicable law:

• Account and Registration Data: Retained for the full duration of the account relationship, plus 5 years after account closure, to meet standard financial record-keeping and anti-money laundering obligations.
• KYC / Identity Documents: Retained for 5 years from the date of submission, or 5 years from account closure, whichever is later. After this period, original document images are deleted; a record that verification was completed is retained indefinitely for compliance audit purposes.
• Financial Transaction Records: Retained for 5 years from the date of each transaction, consistent with standard financial record-keeping requirements applicable to internationally licensed gaming operators.
• Betting History: Retained for the duration of the account relationship, plus 3 years after account closure, for dispute resolution and responsible gaming reporting purposes.
• Technical and Device Data (server logs): Retained for 12 months on a rolling basis, after which logs are automatically purged.
• Communication Data (support transcripts): Retained for 2 years from the date of the final communication in each support thread.
• Marketing Preference Records: Retained for the duration of the account relationship plus 2 years to provide evidence of consent or withdrawal of consent.

Where a legal hold or dispute is active at the time a standard retention period would otherwise expire, kok33 will extend retention of the relevant data until the hold or dispute is fully resolved.

kok33 implements a comprehensive set of technical and organizational security measures to protect your Personal Data against unauthorized access, accidental loss, alteration, or disclosure:

• Encryption: All data is encrypted at rest using AES-256 and in transit using TLS 1.3. KYC documents are stored in a dedicated encrypted vault with access restricted to verified compliance staff.
• Access Controls: Internal access to member Personal Data is restricted to staff who require it to perform their role. Access is governed by role-based access control (RBAC), and all access events are logged and audited.
• Two-Factor Authentication: All internal kok33 staff accounts with access to member data require two-factor authentication. Members are also encouraged to enable 2FA on their own accounts.
• Penetration Testing: kok33 commissions independent penetration tests of its platform infrastructure at least annually, and after any significant system change. Identified vulnerabilities are remediated according to a defined severity-based timeline.
• Incident Response: kok33 maintains a documented data breach response plan. In the event of a breach that is likely to result in a risk to member rights and freedoms, kok33 will notify affected members without undue delay and no later than 72 hours after becoming aware of the breach.
• Secure Development Practices: The kok33 platform is developed under a secure software development lifecycle (SDLC) that includes code review, dependency scanning, and pre-production security testing.

As a member or visitor whose Personal Data is processed by kok33, you have the following rights. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request — [Your Username]".

• Right of Access: You may request a copy of all Personal Data kok33 holds about you, along with information about how it is being processed. kok33 will respond within 30 days of receiving a verified request.
• Right to Rectification: If any Personal Data kok33 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Some data corrections (e.g., name changes) require supporting documentation.
• Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been processed unlawfully. This right is subject to kok33's legal retention obligations — data required for financial record-keeping or ongoing dispute resolution cannot be deleted on request until the applicable retention period has expired.
• Right to Restriction of Processing: In certain circumstances — for example, where you contest the accuracy of data while kok33 verifies it — you may request that processing be restricted to storage only.
• Right to Data Portability: Where processing is based on contract or consent and carried out by automated means, you may request a copy of your Personal Data in a structured, commonly used, machine-readable format (such as JSON or CSV) for transfer to another service.
• Right to Object: You may object to processing based on legitimate interests at any time. kok33 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for the establishment, exercise, or defense of legal claims.
• Right to Withdraw Consent: Where processing is based on consent (such as for marketing communications), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of prior processing.

kok33 will not charge a fee for exercising any of these rights in normal circumstances. kok33 may request proof of identity before fulfilling a data rights request to protect against unauthorized access to member data.

The kok33 platform is strictly intended for adults aged 21 years and over. kok33 does not knowingly collect Personal Data from individuals under the age of 21 under any circumstances.

Age verification is a mandatory step in the account registration and KYC process. Any account found to belong to a person under 21 will be immediately closed, all associated funds returned to the deposit source, and all Personal Data associated with the underage account deleted from kok33's systems within 30 days of discovery, except where a legal retention obligation applies.

If you believe that a person under 21 has registered an account on kok33 or provided Personal Data to the platform, please contact us immediately at [email protected] so that we can investigate and take prompt remedial action.

Parents and guardians are encouraged to use parental control software to restrict access to gambling websites on shared or family devices. kok33 supports responsible gaming initiatives and will cooperate fully with any properly authorized request to close an underage account.

kok33 operates as an internationally hosted platform. As a result, your Personal Data may be transferred to and processed in countries outside Indonesia where kok33's cloud infrastructure, KYC providers, or game content partners are located. These countries may have different data protection standards from those applicable in Indonesia.

Where such transfers occur, kok33 ensures that appropriate safeguards are in place to protect your Personal Data, including:

• Data processing agreements incorporating standard contractual clauses that impose equivalent data protection obligations on the recipient.
• Transfers to recipients in jurisdictions recognized as providing an adequate level of data protection by relevant international standards.
• Where required, additional technical measures such as pseudonymization or encryption of data in transit to minimize risk during cross-border transfer.

By creating an account and using the kok33 platform, you acknowledge that your Personal Data may be transferred internationally as described in this section. If you wish to obtain further information about the specific safeguards in place for any particular transfer, please contact us at [email protected].

kok33 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, platform features, applicable law, or regulatory guidance. Where amendments are material — meaning they affect your rights or the way your Personal Data is used in a significant way — kok33 will provide at least 14 calendar days' advance notice to registered members via their registered email address and via a prominent notice on the platform.

The effective date displayed at the top of this page will be updated whenever a new version of this Privacy Policy is published. Your continued use of the kok33 platform after the effective date of an updated Privacy Policy constitutes your acknowledgment of, and agreement to, the revised terms.

If you do not agree with any amendment to this Privacy Policy, you should stop using the platform and may request account closure and a final withdrawal of your Wallet Balance before the amended policy takes effect.

Minor amendments — such as typographical corrections, updated contact details, or clarifications that do not change the substance of any provision — may be made without advance notice and will be effective immediately upon publication.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to report a concern about how kok33 handles your Personal Data, please contact us through the following channels:

• Email: [email protected] — please use the subject line "Privacy Inquiry" or "Data Rights Request" as appropriate. Target first response within 6 hours (WIB business hours); formal data rights requests will be fully resolved within 30 days.
• Live Chat: Available 24/7 directly on the platform once logged in to your Account. Live Chat is appropriate for general privacy questions; formal data rights requests should be submitted by email to maintain a full written audit trail.

If you are not satisfied with kok33's response to a privacy complaint, you have the right to escalate the matter to the data protection authority or regulatory body in the jurisdiction in which kok33 holds its operating license. kok33 will cooperate fully with any such regulatory investigation.

kok33 does not maintain a public telephone support line. All formal correspondence regarding this Privacy Policy should be submitted in writing via email to [email protected] to ensure a complete and verifiable audit trail.

This Privacy Policy was last reviewed and updated on 1 January 2026. kok33 reserves all rights not expressly granted herein. This policy should be read alongside the Terms & Conditions and the Responsible Gaming policy.