Privacy Policy

Introduction

kokojp ("we", "us", "our") is an online betting and gaming platform that operates at https://kokojp.cam. We provide sports betting, live casino, slots, and other wagering products to adult residents of Indonesia aged 21 years and over.

This Privacy Policy describes how we collect, use, store, and protect your personal data in compliance with international data protection standards and applicable Indonesian privacy laws. We take our obligations under data protection law seriously and are committed to transparency in our data processing practices.

This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern your use of the kokojp Platform. Where this Privacy Policy refers to "Terms & Conditions", it means that document as updated from time to time.

Data Controller

For the purposes of applicable data protection law, the data controller responsible for your personal data is kokojp. We determine the purposes and means of processing your personal data and are responsible for ensuring that processing is lawful, fair, and transparent.

If you have any questions about how we process your personal data, or if you wish to exercise any of your data protection rights, please contact our Data Protection team at the address provided in Section 14 of this Privacy Policy.

Data We Collect

We collect and process the following categories of personal data about you:

3.1 Registration and Account Data

When you register an account on the kokojp Platform, we collect the following information:

• Full legal name as it appears on your Indonesian national identity card (KTP) or passport
• Date of birth
• Email address
• Mobile phone number (Indonesian +62 prefix)
• Residential address (city, province)
• Username and password (password is stored in encrypted form and is not visible to kokojp staff)
• Preferred language and currency (IDR/Rp)

3.2 Identity Verification (KYC) Data

To comply with Know Your Customer (KYC) and anti-money laundering regulations, we may request and collect:

• Copy of your KTP (Indonesian national identity card) or passport
• Proof of address document (utility bill, bank statement, or government-issued document showing your current residential address)
• Selfie photograph holding your ID document (for verification purposes)
• Bank account details or e-wallet account name for withdrawal verification

3.3 Financial Transaction Data

When you deposit or withdraw funds, we collect:

• Bank account number and bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, or other Indonesian banks)
• E-wallet account details (OVO, DANA, GoPay, ShopeePay, LinkAja)
• Transaction amounts, dates, and times
• Transaction reference numbers and payment processor identifiers
• Account balance and betting history

3.4 Betting and Gaming Activity Data

We automatically collect data about your use of the Platform, including:

• Bets placed (event, market, stake, odds, outcome, settlement status)
• Casino games played (game title, provider, session duration, rounds played, win/loss records)
• Togel (Indonesia's traditional numbers lottery) wagers and results
• Bonus claims and wagering requirement completion status
• Responsible gaming tool usage (deposit limits, session time limits, self-exclusion requests)

3.5 Technical and Usage Data

When you access the Platform, we automatically collect technical information including:

• IP address and approximate geolocation (city level, WIB time zone)
• Device information (device type, operating system, browser type and version)
• Session data (login times, session duration, pages visited, clickstream data)
• Cookies and similar tracking technologies (see Section 9 for details)
• Referral source (how you found our Platform)

3.6 Communications Data

When you contact us via live chat, email, or other support channels, we collect:

• Correspondence content (your messages and our responses)
• Support ticket history and resolution status
• Feedback and survey responses
• Marketing communication preferences

How We Use Your Data

We use your personal data for the following purposes:

4.1 Account Management and Service Provision

• To create and maintain your kokojp account
• To verify your identity and age (21+ requirement)
• To process deposits, withdrawals, and other financial transactions
• To provide access to betting markets, casino games, and other wagering products
• To manage your account balance and bonus funds
• To apply responsible gaming limits and self-exclusion periods when requested

4.2 Compliance and Security

• To comply with Know Your Customer (KYC) and anti-money laundering (AML) legal obligations
• To detect, prevent, and investigate fraud, collusion, bonus abuse, and other prohibited conduct
• To enforce our Terms & Conditions and protect the integrity of the Platform
• To respond to legal requests from law enforcement or regulatory authorities
• To maintain audit logs for regulatory compliance and dispute resolution

4.3 Customer Support and Communications

• To respond to your inquiries via live chat, email, or phone
• To send account notifications (deposit confirmations, withdrawal updates, bonus credits, responsible gaming reminders)
• To notify you of changes to our Terms & Conditions or Privacy Policy
• To resolve disputes and investigate complaints

4.4 Marketing and Promotional Activities (with consent)

• To send promotional offers, bonuses, and exclusive deals via email or SMS
• To personalize marketing content based on your betting preferences and activity
• To invite you to participate in tournaments, competitions, or special events

4.5 Platform Improvement and Analytics

• To analyze user behavior and betting patterns to improve the Platform
• To test new features, game titles, and user interface enhancements
• To optimize website performance, loading times, and mobile responsiveness
• To generate aggregated, anonymized statistical reports for internal business purposes

Legal Basis for Processing

We process your personal data on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our contract with you under the Terms & Conditions (account creation, transaction processing, bet settlement, customer support).
• Legal Obligation: Processing is required to comply with KYC, AML, tax reporting, and other regulatory obligations applicable to online gambling operators.
• Legitimate Interests: Processing is necessary for our legitimate business interests in fraud prevention, platform security, product improvement, and responsible gaming enforcement, provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we send marketing communications or use optional cookies, we rely on your explicit consent, which you may withdraw at any time.

Data Sharing and Third-Party Disclosures

We do not sell, rent, or trade your personal data to third parties for their marketing purposes. We may share your personal data with the following categories of recipients for the purposes described in this Privacy Policy:

6.1 Payment Processors

We share necessary transaction data (bank account details, e-wallet information, transaction amounts) with payment processors and financial institutions to facilitate deposits and withdrawals via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, OVO, DANA, GoPay, ShopeePay, and LinkAja.

6.2 Game and Sports Data Providers

We share session data and betting activity with third-party game suppliers (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Pocket Games Soft) and sports data providers to deliver live casino, slot, and sports betting products.

6.3 KYC and Fraud Prevention Services

We share identity verification data with specialist KYC service providers and fraud prevention agencies to verify your identity, age, and payment method ownership, and to screen for fraudulent activity.

6.4 Technology and Infrastructure Providers

We share technical data with hosting providers, content delivery networks (CDNs), cloud storage services, and IT security firms that help us operate and secure the Platform.

6.5 Legal and Regulatory Authorities

We may disclose personal data to law enforcement, tax authorities, regulatory bodies, or courts when required by law, court order, or regulatory directive, or when necessary to protect our legal rights or the safety of our users.

6.6 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections set out in this Privacy Policy.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes.

• Active Accounts: Personal data is retained for the duration of your active account relationship with kokojp.
• Closed Accounts: After account closure, we retain transactional records, KYC documents, and audit logs for a minimum of 7 years to comply with anti-money laundering regulations and tax reporting requirements.
• Marketing Data: If you opt out of marketing communications, we retain your email address on a suppression list to honor your opt-out preference.
• Inactive Accounts: Accounts with no activity for 24 consecutive months are subject to closure, after which retention periods for closed accounts apply.

Data Security

We implement industry-standard technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Our security measures include:

• SSL/TLS encryption for all data transmitted between your device and our servers
• Encrypted storage of passwords using bcrypt or equivalent one-way hashing algorithms
• Regular security audits, penetration testing, and vulnerability assessments
• Access controls and authentication mechanisms to limit data access to authorized personnel only
• Firewall protection, intrusion detection systems, and DDoS mitigation services
• Secure backup procedures and disaster recovery protocols
• Staff training on data protection obligations and confidentiality requirements

While we take all reasonable steps to protect your data, no method of transmission over the internet or electronic storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials and must notify us immediately at [email protected] if you suspect unauthorized access to your account.

Cookies and Tracking Technologies

kokojp uses cookies and similar tracking technologies to enhance your experience on the Platform. Cookies are small text files stored on your device that help us recognize you on return visits, remember your preferences, and analyze how you use the Platform.

Types of Cookies We Use:

• Essential Cookies: Required for the Platform to function (session management, security, login authentication). These cannot be disabled.
• Functional Cookies: Remember your preferences (language, currency, display settings) to provide a personalized experience.
• Performance Cookies: Collect anonymized data about how you use the Platform (pages visited, time spent, navigation patterns) to help us improve performance.
• Marketing Cookies: Track your activity across websites to deliver targeted advertising. These require your consent and can be disabled via your browser settings.

Managing Cookies:

You can control cookie preferences through your browser settings. Most browsers allow you to block or delete cookies, though doing so may affect Platform functionality. To learn how to manage cookies in your browser, visit your browser's help documentation.

Your Data Protection Rights

Under applicable data protection laws, you have the following rights regarding your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data.
• Right to Erasure ("Right to be Forgotten"): You have the right to request deletion of your personal data, subject to our legal obligations to retain certain records for regulatory compliance.
• Right to Restriction of Processing: You have the right to request that we limit the processing of your personal data in certain circumstances.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
• Right to Object: You have the right to object to processing based on legitimate interests or direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw consent at any time.

To exercise any of these rights, please contact our Data Protection team at [email protected] with "Data Protection Request" in the subject line. We will respond to your request within 30 days. We may request additional information to verify your identity before processing your request.

International Data Transfers

Your personal data may be transferred to, stored, and processed in countries outside Indonesia where our service providers, payment processors, or game suppliers operate. These transfers are necessary to provide the services described in this Privacy Policy.

Where we transfer data to countries that do not provide an equivalent level of data protection to Indonesia, we implement appropriate safeguards such as standard contractual clauses, binding corporate rules, or other legally recognized transfer mechanisms to ensure your data remains protected.

Children's Privacy

The kokojp Platform is strictly intended for adults aged 21 years and over. We do not knowingly collect or process personal data from individuals under the age of 21. If we become aware that we have inadvertently collected data from a minor, we will delete that data immediately and close the associated account.

If you believe that a minor has registered an account or provided personal data to kokojp, please contact us immediately at [email protected] so that we can take appropriate action.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or business operations. When we make material changes, we will notify you by email to the address registered on your account and by updating the "Last Updated" date at the top of this page.

Your continued use of the Platform after such changes constitutes acceptance of the revised Privacy Policy. If you do not agree to the changes, you must cease using the Platform and close your account.

Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or how we process your personal data, please contact us:

Data Protection Inquiries:
Email: [email protected]
Subject Line: Data Protection Request

Live Chat: Available 24/7 via the Platform interface
Response Time: We aim to respond to all data protection inquiries within 30 days