koko 138 Privacy Policy

This page describes what we collect when you use koko 138 and how we keep that data protected. Account opening starts with email verification, identity documents, and a deposit method—whether that is DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or a bank virtual account through mobile banking, local payment, online payment, or e-wallet. We at koko 138 process this information under a strict protocol to safeguard your privacy while meeting regulatory obligations.

Our commitment is to be transparent about what we collect, how we use it, and who may access it. We do not sell your data to third parties, nor do we share it beyond what is necessary for payment processing, account verification, and legal compliance. This policy applies to all users accessing koko 138 from supported jurisdictions where local law permits our service.

What we collect on koko 138

We collect personal data in several categories. First, we gather identity information: your full name, date of birth, national ID number or passport details, and residential address. This data is mandatory for account creation and KYC (Know Your Customer) verification. Second, we collect contact details: your email address and mobile phone number, which we use for account recovery, security alerts, and service notifications. Third, we collect payment information: the bank account or e-wallet identifier you link to koko 138, along with transaction records showing deposits and withdrawals.

We also collect behavioural data: your login history, session duration, games or markets you access, and betting patterns. This data helps us detect fraud, understand user preferences, and improve our platform. We do not collect biometric data, nor do we use cookies to track you across third-party websites. Our cookies are session-based and serve only to keep you logged in while you use koko 138.

How we use your data on koko 138

We use your identity and contact information to verify your account, process deposits and withdrawals, and comply with anti-money-laundering (AML) regulations. When you deposit via DANA, e-wallet, mobile banking, local payment, online payment, or e-wallet, we match your transaction against your registered identity to confirm the source of funds. When you request a withdrawal to a mobile banking, local payment, online payment, or e-wallet account, we verify that the destination account holder matches your registered name before releasing the funds.

We use behavioural data to detect suspicious activity—for example, if a user from Jakarta suddenly attempts to withdraw to an account in a different city, our system flags this for manual review. We also use this data to improve our platform: understanding which games (such as Aviator, Sweet Bonanza, or Gates of Olympus) are popular, which payment methods users prefer, and how to optimize our live-dealer studios and sportsbook markets covering Liga 1, Piala Indonesia, and international tournaments.

Third-party processors and data location

Our payment infrastructure relies on third-party processors. When you deposit via mobile banking, local payment, online payment, e-wallet, mobile banking, or local payment, your transaction is routed through the e-wallet provider's servers. When you use a online payment, e-wallet, mobile banking, or local payment virtual account, your data passes through the bank's clearing system. We do not control these third parties, but we require them to maintain the same confidentiality and security standards we uphold.

Our servers may sit outside your jurisdiction. We maintain backup systems in multiple regions to ensure service continuity, which means your data may be replicated across data centres in different countries. We encrypt all data in transit and at rest using industry-standard protocols. However, we cannot guarantee absolute security; if you have concerns about data location or processing, please contact our support team before opening an account.

Your rights on koko 138

You have the right to request access to all personal data we hold about you. You may also request correction of inaccurate information or deletion of your account and associated data, subject to legal retention requirements. Some data—such as transaction records for AML compliance—must be retained for a minimum period even after account closure. We will respond to data-access requests within 30 days of receipt.

If you believe we have misused your data, you may lodge a complaint with your local data-protection authority. We at koko 138 are committed to resolving disputes promptly. Users from cities such as Surabaya, Bandung, and Semarang may contact our support team with privacy concerns, and we will escalate your request to our compliance officer.

Cookies and tracking on koko 138

We use session cookies to maintain your login state while you navigate koko 138. These cookies expire when you close your browser. We do not use persistent cookies or third-party tracking pixels. If you disable cookies in your browser, you may not be able to access certain features of koko 138, such as live-dealer tables or sportsbook markets.

Data retention and account closure

We retain your account data for as long as your account is active. If you close your account, we retain transaction records and identity documents for a minimum of five years to comply with AML and tax regulations. Personal contact information (email, phone) may be retained for up to two years after closure to prevent duplicate accounts. You may request earlier deletion, but we will inform you of any legal or regulatory barriers to doing so.

Policy updates and contact

We may update this privacy policy from time to time to reflect changes in our practices or regulatory requirements. We will notify you of material changes by email or by posting a notice on koko 138. Continued use of our platform after such notice constitutes your acceptance of the updated policy.

If you have questions about this privacy policy, how we use your data, or your rights, please contact our support team. We at koko 138 undertake to respond to all privacy inquiries within a reasonable timeframe. Your data security and privacy are central to our commitment to users across all supported jurisdictions.

• We collect identity, contact, and payment data for account verification and regulatory compliance.
• We use behavioural data to detect fraud and improve our platform.
• We do not sell your data to third parties, but we may share it with payment processors and banking partners.
• You have the right to access, correct, or request deletion of your personal data.
• We retain transaction records for a minimum of five years for regulatory purposes.