Privacy Policy

For the purposes of this Policy, the following terms carry the meanings set out below:

kok33 collects Personal Data from you through several channels — directly when you register or interact with the Platform, automatically as you navigate the site, and from trusted third-party sources for verification and fraud-prevention purposes. The categories of data we collect are described in the table below.

We do not intentionally collect special categories of sensitive personal data (e.g., racial or ethnic origin, political opinions, religious beliefs, biometric data beyond photo ID, health data) except where strictly required by applicable anti-money laundering regulations or expressly provided by you.

kok33 uses Personal Data for the purposes listed below. We process each category of data only to the extent necessary to fulfill the relevant purpose ("data minimization"). We do not use your data for automated profiling that produces legal or similarly significant effects without human review.

1. Account Management: Creating, maintaining, and securing your kok33 Account; verifying your identity and age (21+); responding to Account inquiries and support requests.
2. Transaction Processing: Facilitating deposits from and withdrawals to your nominated Indonesian bank account or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja) in IDR; maintaining accurate financial records.
3. Regulatory Compliance: Meeting Know Your Customer (KYC), anti-money laundering (AML), and counter-terrorism financing (CTF) obligations; fulfilling obligations to regulators and law-enforcement bodies where required by applicable law.
4. Platform Security & Fraud Prevention: Detecting, investigating, and preventing fraudulent activity, unauthorized Account access, multi-accounting, collusion, and bonus abuse; protecting other users and the integrity of the Platform.
5. Service Improvement: Analyzing aggregated and anonymized usage patterns to improve game selection, user interface, payment flows, and customer support quality.
6. Responsible Gaming: Monitoring account activity for signs of problem gambling; enforcing deposit limits, time-outs, and self-exclusion requests; sending welfare-check communications when appropriate.
7. Marketing & Promotions: Sending you relevant bonus offers, reload promotions, and seasonal campaign notifications (e.g., Idul Fitri, Ramadhan, and Indonesian Independence Day specials) where you have opted in to receive such communications. You may withdraw marketing consent at any time by updating your Account preferences or contacting our support team.
8. Legal Claims: Establishing, exercising, or defending legal rights in the event of a dispute arising from your use of the Platform.

kok33 processes Personal Data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing is required to perform the contract set out in our Terms & Conditions — e.g., creating your Account, processing transactions, and settling bets.
• Legal Obligation: Processing is necessary to comply with applicable laws and regulations, including KYC, AML, and CTF requirements under the laws of the Platform's licensing jurisdiction.
• Legitimate Interests: Processing is necessary for the legitimate interests of kok33, such as fraud prevention, Platform security, abuse detection, and service improvement — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where processing is based on your consent (primarily for direct marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

kok33 may share your Personal Data with the following categories of recipient, each bound by confidentiality obligations and, where applicable, written data-processing agreements:

1. Payment Processors & Financial Institutions: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) that facilitate deposit and withdrawal transactions. Shared data is limited to what is required to process the specific transaction.
2. Identity Verification Providers: Third-party KYC and AML screening services that validate the authenticity of identity documents and perform sanctions and politically exposed persons (PEP) screening.
3. Game Content Providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive limited technical identifiers (e.g., session tokens) strictly necessary to deliver game content and certify fair play. These providers do not receive your full identity profile.
4. IT & Cloud Infrastructure Providers: Hosting, content delivery, and cybersecurity service providers that store and protect Platform data. All providers operate under strict contractual data-security requirements.
5. Legal & Regulatory Authorities: Law-enforcement agencies, regulators, or courts that make a lawful request for Personal Data disclosure. In such cases, kok33 will disclose only the minimum data required and, where legally permissible, will notify you of any such request.
6. Business Successors: In the event of a merger, acquisition, restructuring, or sale of all or part of kok33's business, your Personal Data may be transferred to the successor entity, subject to that entity honoring the commitments made in this Policy.

kok33 uses cookies and similar technologies (local storage, session storage, pixel tags) to deliver a functional, secure, and personalized experience. The categories of cookies we use are:

You can manage or delete cookies at any time through your browser settings. Please note that disabling Functional or Analytical cookies will not affect your ability to place wagers or access your Account balance, but may reduce the quality of your personalized experience on the Platform.

kok33 retains Personal Data for as long as necessary to fulfill the purposes described in this Policy, or as required by applicable legal, regulatory, or contractual obligations. Our standard retention periods are:

• Active Account data (identity, contact, financial, account activity): Retained for the duration of your Account plus a minimum of five (5) years from Account closure, in line with standard AML record-keeping requirements.
• KYC documentation (ID scans, address proofs, selfies): Retained for a minimum of five (5) years from the date of the last transaction or Account closure, whichever is later.
• Transaction records (deposits, withdrawals, wager history): Retained for a minimum of five (5) years, consistent with anti-money laundering obligations.
• Customer support communications: Retained for three (3) years from the date of the final exchange, or for the duration necessary to resolve any open dispute or claim.
• Technical and log data (IP logs, session data): Retained for up to twelve (12) months, except where longer retention is required for a security investigation or legal proceeding.
• Marketing preference records: Retained until you withdraw consent, plus a short additional period to confirm unsubscribe status.

On expiry of the applicable retention period, Personal Data is securely deleted or anonymized so that it can no longer be associated with any individual User.

Subject to applicable law and the exceptions described in Clause 7 (mandatory retention), you have the following rights with respect to your Personal Data held by kok33. To exercise any of these rights, contact us at the email address in Clause 13. We will respond within thirty (30) calendar days of receiving a verified request.

kok33 implements a layered set of technical and organizational security measures designed to protect your Personal Data against unauthorized access, accidental loss, disclosure, alteration, or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your browser or device and the kok33 Platform is encrypted using industry-standard TLS 1.2 or higher protocols.
• Data-at-Rest Encryption: Sensitive data fields — including financial account identifiers, KYC document references, and authentication credentials — are encrypted in storage using AES-256 or equivalent standards.
• Access Controls: Access to Personal Data is restricted to authorized kok33 personnel and contracted service providers on a strict need-to-know basis. All access is logged and audited.
• Fraud Detection Systems: Automated systems monitor login activity, transaction patterns, and device signals to detect and flag anomalous behavior in real time.
• Incident Response: kok33 maintains a documented Data Breach Response Plan. In the event of a confirmed breach that poses a risk to your rights and freedoms, we will notify affected Users and relevant authorities within the timeframe required by applicable law.

We enforce age verification at registration through KYC controls. If we determine that a User has provided false date-of-birth information to circumvent our age restriction, we will immediately suspend the Account, void any pending withdrawals, and retain only the minimum data necessary for regulatory and dispute-resolution purposes before proceeding to delete the Account record. Parents or guardians who believe a minor has registered on the Platform should contact us immediately at the email address in Clause 13.

kok33 is an internationally operated platform and your Personal Data may be transferred to, stored in, and processed in countries outside Indonesia. These may include the Platform's licensing jurisdiction and the locations of our cloud infrastructure providers and game-content partners (e.g., Pragmatic Play, Evolution Gaming, Microgaming, NetEnt).

Whenever Personal Data is transferred internationally, kok33 takes steps to ensure that adequate safeguards are in place, including contractual protections equivalent to internationally recognized data-transfer standards. We do not transfer Personal Data to recipients in jurisdictions that lack appropriate data-protection frameworks without first implementing appropriate safeguards.

kok33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, applicable law, or regulatory guidance. When we make a material change, we will update the "Last Revised" date at the top of this page and post a notice on the Platform. Where the change materially affects how we process your Personal Data, we will notify you via the email address registered to your Account at least seven (7) days before the change takes effect.

Your continued use of the Platform after the effective date of any amendment constitutes your acknowledgment of the updated Policy. If you object to any change, you must stop using the Platform and may request Account closure by contacting our support team.

To exercise any of your rights described in Clause 8, to submit a privacy-related inquiry or complaint, or to request clarification on any aspect of this Policy, please contact the kok33 privacy team. We respond to all verified requests within thirty (30) calendar days. For general Account support, our team is available around the clock (WIB, UTC+7).

Email (plain text — not a clickable link):
[email protected]

When submitting a rights request, please include your full registered name, the email address associated with your kok33 Account, and a clear description of the right you wish to exercise. We may request additional identity verification before fulfilling a request to ensure we release data only to the correct individual.

For responsible gaming concerns, please visit our Responsible Gaming page or include "Responsible Gaming" in the subject line of your support email so that your message is directed to the appropriate team. You can find answers to common questions about privacy, Account security, and data handling on our FAQ page.