At coco88, protecting your personal data is a fundamental commitment — not a legal formality. This policy explains exactly what we collect, why we collect it, and how we keep it safe.
Last Updated: 1 January 2026coco88 ("we", "us", "our") operates the online gaming platform accessible at https://coco88.cam. As a platform serving Indonesian players, we handle personal data belonging to residents of Indonesia and are committed to processing that data responsibly, transparently, and in accordance with internationally recognized data protection principles.
This Privacy Policy ("Policy") describes the categories of personal data we collect from you when you register, verify your identity, make deposits or withdrawals, place wagers, or contact our support team. It also explains the legal bases on which we process that data, the third parties with whom we may share it, the security measures we employ to protect it, and the rights you hold in relation to it.
This Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which form part of the overall agreement governing your use of the coco88 platform. Defined terms used but not defined in this Policy carry the meanings assigned to them in the Terms & Conditions.
We do not sell, rent, or trade your personal data to third-party marketers. This is an unconditional commitment, not a qualified one.
The following terms carry the meanings assigned below wherever they appear throughout this Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person — including name, email address, phone number, IP address, and financial account details. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction. |
| "Controller" | coco88, as the entity that determines the purposes and means of processing your personal data. |
| "Processor" | A third-party service provider that processes personal data on behalf of coco88 under a binding data processing agreement. |
| "Data Subject" | The natural person to whom personal data relates — i.e., you, the Member. |
| "KYC Data" | Identity verification documents and associated data submitted as part of the Know Your Customer process. |
| "Sensitive Data" | Special categories of personal data requiring heightened protection, including financial account information, identity document numbers, and biometric identifiers. |
We collect personal data across several categories depending on how you interact with the coco88 platform:
When you create an Account, we collect:
Before processing withdrawals, we collect identity verification documents including:
To process deposits and withdrawals via local Indonesian payment channels, we collect:
We do not store full card numbers or CVV codes. Payment card data, where used, is tokenized and handled exclusively by our PCI-DSS compliant payment processor.
Our systems automatically log technical information to maintain platform security and functionality:
When you contact our support team, we collect and retain:
We collect personal data through the following means:
Most personal data is provided voluntarily when you complete the registration form, upload KYC documents, add a payment method, or communicate with customer support.
Technical and device data is collected automatically through cookies, server logs, and analytics tools whenever you visit or interact with the platform, regardless of whether you hold an Account.
In limited circumstances, we may receive personal data from:
We process your personal data for the following purposes and on the following legal bases:
| Purpose | Legal Basis | Data Used |
|---|---|---|
| Account registration and management | Contractual necessity | Registration data |
| Identity and age verification (21+) | Legal compliance | KYC documents |
| Processing deposits and withdrawals | Contractual necessity | Financial data |
| Anti-money laundering (AML) compliance | Legal compliance | Transaction history, KYC data |
| Fraud detection and prevention | Legitimate interest | Device data, IP address, betting patterns |
| Customer support and dispute resolution | Contractual necessity | Communications data, transactional history |
| Responsible gaming interventions | Legal compliance & legitimate interest | Gaming behavior, deposit patterns |
| Platform improvement and analytics | Legitimate interest | Aggregated technical data |
| Promotional communications (opt-in) | Consent | Email, phone number |
We share your personal data only with the following categories of recipients and only to the extent necessary for the purposes described in this Policy:
All processors are bound by strict data processing agreements that limit their use of your data exclusively to the services they provide on our behalf.
When you play games from third-party studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft), minimal session data (username, bet amount, balance) is shared to enable gameplay. These providers are themselves subject to licensing obligations and data protection standards.
We may disclose personal data to law enforcement, regulatory bodies, or courts where required by applicable law or in response to a valid legal request. This includes disclosures for anti-money laundering investigations, suspected match-fixing, or court-ordered data production.
In the event of a merger, acquisition, or sale of all or part of our business, your personal data may be transferred to the acquiring entity. You will be notified via email of any such change in data controllership, and the new entity will honor the commitments made in this Policy.
We do not sell, rent, or share your personal data with third-party marketers or advertisers. Any promotional emails you receive originate directly from coco88 and may be unsubscribed from at any time.
We retain your personal data for as long as necessary to fulfill the purposes outlined in this Policy and to comply with applicable legal and regulatory obligations:
After the applicable retention period expires, personal data is securely deleted or anonymized such that it can no longer identify you.
coco88 employs industry-standard technical and organizational measures to protect your personal data against unauthorized access, accidental loss, or malicious destruction:
Platform security also depends on your actions. You must keep your login credentials confidential, use a strong unique password, enable two-factor authentication where available, and log out after each session when using shared or public devices. coco88 is not liable for unauthorized access resulting from your failure to maintain credential confidentiality.
coco88 uses cookies and similar tracking technologies to enhance platform functionality, analyze usage patterns, and personalize your experience. Cookies are small text files stored on your device that allow us to recognize you across sessions.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential | Enable core platform functionality including login sessions and security features | Session / 30 days |
| Performance | Measure page load times, identify technical errors, optimize infrastructure | 90 days |
| Functional | Remember your preferences (language, currency display, favorite games) | 1 year |
| Analytics | Understand how users navigate the platform and which features are most popular | 2 years |
You may disable cookies through your browser settings at any time. However, disabling essential cookies will prevent you from logging in and using core platform features. Most browsers allow you to block third-party cookies while still accepting first-party cookies, which is a reasonable compromise between privacy and functionality.
Our platform does not currently respond to Do Not Track (DNT) browser signals, as there is no universally accepted technical standard for how to interpret and honor such signals. We continue to monitor industry developments in this area.
As a data subject, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our Data Protection Officer using the details in Section 14.
Request a copy of all personal data we hold about you, delivered in a structured, commonly used format.
Correct inaccurate or incomplete personal data. You can update most information directly in Account settings.
Request deletion of your data, subject to our legal retention obligations (e.g., 7-year AML record keeping).
Request that we stop processing your data temporarily while we verify its accuracy or assess your objection.
Receive your data in a machine-readable format to transfer to another service provider.
Object to processing based on legitimate interest or for direct marketing purposes. We will cease unless we have compelling overriding grounds.
All data subject requests are handled within 30 days of receipt. Where a request is complex or we receive multiple requests from you, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reasons for it.
The coco88 platform is strictly intended for adults aged 21 years or older. We do not knowingly collect personal data from individuals under the age of 21.
If we discover that we have inadvertently collected data from a person under 21, we will delete that data immediately and close the associated Account. If you are a parent or guardian and believe your child has provided personal data to coco88, please contact us immediately at [email protected] so we can take corrective action.
Age verification is a core component of our KYC process, and we employ automated and manual checks to prevent underage registration. Any attempt to provide false age information during registration constitutes fraud and will result in permanent account closure and potential referral to authorities.
The coco88 platform is operated from servers and data centers located outside Indonesia. This means that your personal data may be transferred to, stored in, or processed in jurisdictions that have different data protection laws than those in effect in Indonesia.
Where we transfer data to third countries, we implement appropriate safeguards to ensure your data receives an equivalent level of protection, including:
By using the coco88 platform, you acknowledge and consent to the international transfer of your personal data as described in this Policy.
coco88 reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform features. The "Last Updated" date at the top of this page reflects the date of the most recent revision.
Where amendments materially affect your rights or our processing activities, we will provide reasonable advance notice via email to the address registered on your Account. Continued use of the platform following the effective date of any amendment constitutes acceptance of the revised Policy.
We recommend reviewing this Policy periodically. Archived versions of prior policies are available upon request by contacting our Data Protection Officer.
If you have any questions, concerns, or complaints regarding this Privacy Policy or how coco88 processes your personal data, you may contact our Data Protection Officer through the following channels:
We commit to responding to all data protection inquiries within 5 business days and to resolving complaints within 30 days. Where resolution requires longer, we will keep you informed of progress.
These are not aspirations — they are binding commitments embedded in every data processing operation at coco88
Your personal data will never be sold, rented, or traded to third-party marketers, data brokers, or advertisers. This is an unconditional, permanent commitment.
Every byte of data transmitted between your device and our servers is encrypted using TLS 1.3. KYC documents and financial records are encrypted at rest using AES-256.
Request a full copy of your personal data at any time. We respond to access requests within 30 days with a complete, human-readable export in CSV or PDF format.
After meeting legal retention requirements, your data can be permanently deleted upon request. We confirm erasure in writing and provide a certificate of deletion.
In the unlikely event of a data breach, affected Members will be notified within 72 hours via email with full details of the breach scope and recommended protective measures.
Your data is stored in ISO 27001 certified data centers with 24/7 physical security, redundant power, DDoS protection, and geographically distributed backups.
Our Data Protection Officer and support team are available around the clock to answer your privacy questions and handle data subject requests promptly.