Privacy Policy

1. Introduction

koko77 is an internationally licensed online gaming and sports betting platform serving players primarily based in Indonesia. We understand that your personal data is sensitive and valuable, and we treat it with the highest degree of care. This Policy explains, in plain and precise terms, what happens to your data from the moment you first visit our website through the entire lifecycle of your player account.

We operate under internationally recognized privacy frameworks and apply data protection principles that are consistent with global best practices, even though Indonesian domestic law on data privacy continues to evolve. Our commitment to data protection is not merely a legal obligation — it is a core part of the trust relationship we seek to build with every player on our platform.

If you are a resident of Indonesia, you must be at least 21 years of age to use koko77. We do not knowingly collect personal data from persons under 21. If you believe that a minor has registered on our platform, please notify us immediately at [email protected].

2. Definitions

In this Privacy Policy, the following terms have the meanings set out below:

• Personal Data — Any information that identifies or can reasonably be used to identify a living individual, including name, email address, phone number, device identifiers, and financial account details.
• Processing — Any operation performed on personal data, including collection, storage, use, disclosure, transmission, or deletion.
• Data Controller — koko77, as the entity that determines the purposes and means of processing your personal data.
• Data Processor — Any third party that processes personal data on behalf of koko77 under a binding data processing agreement.
• KYC — Know Your Customer: the mandatory identity and age verification process applied to all koko77 accounts before withdrawal privileges are activated.
• Cookies — Small text files placed on your device by a website to store preference information, session data, and analytics signals.
• Consent — A freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a defined purpose.

3. Data We Collect

koko77 collects the following categories of personal data, depending on the nature of your interaction with our platform:

4. How Data Is Collected

koko77 collects personal data through the following channels:

• Direct submission: Information you actively provide when registering an account, completing KYC verification, making a deposit or withdrawal, or contacting our support team.
• Automated technical collection: Data gathered automatically by our systems when you visit or interact with any page on koko77 — including IP address, device fingerprint, browser configuration, and session activity logs.
• Payment processors: Transaction confirmation data returned by Indonesian payment gateways and bank transfer systems when you deposit or withdraw funds in IDR.
• Third-party game providers: Game session data (e.g., bets placed, outcomes, session duration) transmitted from licensed studios such as Evolution Gaming, Pragmatic Play, NetEnt, and Microgaming to our platform's central records system.
• Cookies and tracking technologies: Preference, session, and analytics data collected via cookies and similar technologies placed on your device, as described in Section 11.
• Fraud prevention services: Risk signals and device reputation data supplied by third-party anti-fraud and identity verification partners used to protect both the platform and its players.

5. Purpose of Processing

koko77 processes your personal data for the following defined purposes only:

1. Account creation and management: To register your player account, authenticate your identity on each login, and maintain accurate account records.
2. Age and identity verification (KYC): To confirm that you are at least 21 years of age and are who you claim to be, as required by our licensing obligations and responsible gaming commitments.
3. Payment processing: To facilitate deposits and withdrawals in Indonesian Rupiah (IDR) via your nominated bank account (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, or Bank Danamon) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja).
4. Service delivery: To provide access to sports betting markets, live casino games, slot games, togel (Indonesia's traditional numbers lottery), and all other platform features.
5. Customer support: To respond to your queries, process complaints, and maintain a record of all communications for quality assurance and dispute resolution purposes.
6. Security and fraud prevention: To detect, investigate, and prevent fraudulent transactions, money laundering, multi-accounting, bonus abuse, and other prohibited conduct.
7. Legal and regulatory compliance: To fulfill obligations under applicable anti-money laundering (AML) regulations, international licensing conditions, and any lawful request from a competent authority.
8. Responsible gaming monitoring: To identify behavioral patterns that may indicate problem gambling and, where appropriate, to apply protective measures in the player's interest.
9. Platform improvement: To analyze aggregated, anonymized usage data for the purpose of improving the platform's user experience, game selection, and performance.
10. Marketing communications: To send you promotional offers, bonus notifications, and seasonal campaigns — only where you have given explicit consent or where we have a legitimate interest in contacting existing players about directly relevant offers.

koko77 will not process your personal data for any purpose that is incompatible with those listed above without first obtaining your explicit consent.

6. Legal Basis for Processing

koko77 relies on the following legal bases for processing personal data:

• Contractual necessity: Processing required to perform the player agreement — including account management, payment processing, and service delivery — is carried out on the basis that it is necessary to fulfill our contract with you.
• Legal obligation: Processing carried out to comply with applicable law — such as KYC verification, AML record-keeping, and responding to lawful authority requests — is performed on the basis of our legal obligations.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics is carried out where koko77 has a legitimate interest that is not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications and non-essential cookies is conducted solely on the basis of your freely given, informed consent. You may withdraw consent at any time without affecting the lawfulness of processing conducted before withdrawal.

7. Data Sharing & Disclosure

7.1 Third Parties We May Share Data With

koko77 does not sell or rent your personal data. We may share it only with the following categories of recipients, and only to the extent necessary for the defined purpose:

• Payment processors and banks: Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, and others) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum financial data required to process your transactions.
• Identity verification providers: Third-party KYC and AML screening services that process identity documents and cross-reference them against international watchlists on our behalf.
• Game studios and content providers: Licensed game providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive session and wagering data necessary to deliver their games and calculate outcomes.
• IT infrastructure and cloud providers: Hosting, database, and security service providers who store and process platform data under binding data processing agreements with koko77.
• Legal and regulatory authorities: Where required by law, regulation, court order, or formal request from a competent authority, koko77 will disclose personal data to the relevant body. We will notify affected players where legally permitted to do so.
• Professional advisors: Legal counsel, auditors, and compliance consultants who are bound by professional secrecy obligations and who process data solely for the purpose of providing their services to koko77.

7.2 No Sale of Data

koko77 will never sell, license, or trade your personal data to third-party advertisers, data brokers, or any commercial entity for their independent marketing purposes. Any sharing of data with third parties is governed by a contractual agreement that restricts the third party from using the data for purposes other than those specified by koko77.

8. International Data Transfers

As an internationally operated platform, koko77 may process and store your personal data on servers located outside of Indonesia. Where personal data is transferred to a country that may not provide a level of data protection equivalent to Indonesian or international standards, koko77 ensures that appropriate safeguards are in place. These safeguards include contractual clauses with data processors that require them to protect your data to a standard consistent with this Policy, and the use of encrypted transmission channels for all cross-border data flows.

By registering with koko77 and accepting this Privacy Policy, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Indonesia as part of the ordinary operation of our platform.

9. Data Retention

koko77 retains personal data for the following periods, after which data is securely deleted or irreversibly anonymized:

Where a legal obligation requires retention beyond the periods above, data will be retained for the minimum duration required to fulfill that obligation. We will not retain data for longer than is necessary for the stated purpose.

10. Security Measures

koko77 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, and disclosure. These measures include:

• 256-bit SSL/TLS encryption applied to all data in transit between your browser and koko77 servers.
• Encryption at rest for all personally identifiable information and financial data stored in our databases.
• Access controls that restrict internal access to personal data on a strict need-to-know basis, enforced through role-based authentication and audit logging.
• Two-factor authentication (2FA) options available to players for additional account security.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Intrusion detection systems and real-time monitoring of platform infrastructure for anomalous activity.
• Staff training on data protection principles, phishing awareness, and incident response procedures.
• Incident response plan with defined escalation procedures, breach containment protocols, and player notification processes.

While koko77 takes every reasonable precaution, no internet-based system can be guaranteed to be 100% secure. You are encouraged to choose a strong, unique password for your koko77 account and to enable 2FA where available.

11. Cookies & Tracking Technologies

11.1 What Are Cookies

Cookies are small text files that our platform places on your device when you visit koko77. They help the platform recognize your device, remember your preferences, maintain your session, and collect analytics data that allows us to improve the platform experience.

11.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for basic platform functionality — including session authentication, security tokens, and your shopping cart equivalent (bet slip state). These cannot be disabled without impairing your ability to use the platform.
• Functional Cookies: Remember your preferences such as display language, preferred currency display (IDR), and notification settings. Disabling these will not prevent platform access but may reduce personalization.
• Analytics Cookies: Collect anonymized and aggregated data about how players navigate the platform — which pages are visited most, where sessions begin and end, and which features are most used. This data is used solely for platform improvement.
• Marketing Cookies: Used only where you have given explicit consent, to deliver promotional content relevant to your interests. These cookies may track your visits across multiple sessions.

11.3 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Most modern browsers allow you to block third-party cookies, clear existing cookies, and set preferences for specific websites. Please note that disabling certain cookies may affect the functionality of the koko77 platform. Detailed instructions for managing cookies can be found in the help section of your browser (Chrome, Firefox, Safari, or Edge).

12. Your Data Rights

As a player on koko77, you have the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request" and a description of the specific right you wish to exercise. We will respond within 30 days of receiving a valid request.

koko77 will not charge a fee for exercising any of the rights listed above unless a request is manifestly unfounded, repetitive, or excessive. In such cases, we reserve the right to charge a reasonable administrative fee or decline the request, with written explanation.

13. Minors & Age Gating

koko77's services are strictly intended for adults aged 21 years and over. We do not knowingly collect, store, or process personal data from individuals under the age of 21. Age verification is a mandatory step during KYC review, and accounts found to belong to persons under 21 are closed immediately.

If you are a parent or guardian and believe that a minor under your care has registered on koko77 without your knowledge, please contact us immediately at [email protected]. We will investigate and, where confirmed, close the account and return any deposited real-money funds (net of any regulatory holds) to the originating payment source.

14. Third-Party Services

The koko77 platform integrates with a range of third-party services — including game providers, payment processors, and analytics tools — each of which operates under its own privacy policy. koko77 is not responsible for the privacy practices of these third parties beyond the scope of the data processing agreements we hold with them.

Players should be aware that when interacting with third-party game interfaces embedded within the koko77 platform (such as a live casino table powered by Evolution Gaming), those game providers may independently collect certain session data as part of game delivery. This data collection is governed by each provider's own privacy policy and is limited to what is necessary for game operation.

koko77 does not maintain any links to external third-party websites from this Privacy Policy page. If you navigate away from koko77 via any external link you may encounter elsewhere, the privacy practices of the destination website are entirely that website's own responsibility.

15. Policy Amendments

koko77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When material changes are made, we will notify registered players by email and/or by displaying a prominent notice on the platform at least 7 days before the changes take effect.

The date at the top of this page ("Last Updated") indicates when the most recent revision was published. We encourage you to review this Policy periodically. Your continued use of koko77 after the effective date of any amended Policy constitutes your acknowledgment of the updated terms. If you object to any change, you must cease using the platform and request account closure before the effective date.

16. Contact & Complaints

If you have questions about this Privacy Policy, wish to exercise a data right, or want to raise a concern about how koko77 handles your personal data, please contact our Data Protection team using the details below:

If you are not satisfied with koko77's response to a privacy complaint, you may escalate the matter to an independent data protection authority or arbitration body, as referenced in our Terms & Conditions under the dispute resolution clause. koko77 is committed to resolving all privacy complaints in good faith and in a timely manner.