Privacy Policy

1. Introduction

Welcome to the cor33 Privacy Policy. This document outlines our commitment to protecting your personal data and explains in detail how we handle information collected through our website, mobile applications, and related services. cor33 operates as an online gaming platform serving Indonesian residents, and we take our data protection responsibilities seriously.

By creating an account with cor33 or using any of our services, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy. If you do not agree with any aspect of this policy, you should not use our services.

cor33 acts as the data controller for all personal information collected through our platform. We process your data in accordance with international data protection standards and our gaming license requirements. This policy should be read in conjunction with our Terms & Conditions and Responsible Gaming policies.

2. Information We Collect

cor33 collects several categories of personal information to provide our services, comply with legal obligations, and enhance your gaming experience. The information we collect includes:

2.1 Information You Provide Directly

When you register for a cor33 account, you provide us with personal information including:

• Identity Information: Full legal name as it appears on your Indonesian identity card (KTP), date of birth, gender, and nationality
• Contact Information: Email address, mobile phone number, residential address (street, city, province, postal code)
• Account Credentials: Username, password, and security questions/answers for account recovery
• Financial Information: Bank account details for deposits and withdrawals (bank name, account number, account holder name), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay phone numbers)
• Verification Documents: Scanned or photographed copies of your Indonesian KTP for Know Your Customer (KYC) verification, proof of address documents (utility bills, bank statements), and proof of payment method ownership

2.2 Information Collected Automatically

When you access cor33 services, we automatically collect technical and usage information including:

• Device Information: IP address, device type and model, operating system, browser type and version, screen resolution, device identifiers
• Usage Data: Pages visited, games played, betting history, deposit and withdrawal transactions, login timestamps, session duration, clickstream data
• Location Data: General geographic location derived from IP address to verify you are accessing our services from Indonesia
• Communication Records: Live chat transcripts, email correspondence, customer support tickets, and phone call recordings (with your consent) for quality assurance and dispute resolution

2.3 Information from Third Parties

We may receive limited information about you from third-party sources including:

• Payment Processors: Transaction confirmations and fraud indicators from Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers
• Game Providers: Game session data, win/loss records, and RNG results from our licensed casino game suppliers (Pragmatic Play, Evolution Gaming, NetEnt, etc.)
• Verification Services: Identity verification results from third-party KYC providers used to validate your Indonesian identity documents
• Fraud Prevention Agencies: Information indicating potential fraudulent activity, account sharing, or violation of our terms

3. How We Use Your Information

cor33 uses the personal information we collect for the following purposes, all of which are necessary to provide our gaming services or fulfill our legal obligations:

3.1 Account Management and Service Provision

• Creating and maintaining your cor33 gaming account
• Processing your deposits, withdrawals, and internal account transfers
• Enabling you to place bets on casino games, sports events, and other gaming products
• Calculating and crediting winnings, applying bonuses, and managing loyalty rewards
• Providing customer support and responding to your inquiries
• Communicating with you about your account, transactions, and service updates

3.2 Compliance and Security

• Verifying your identity and age to ensure you are at least 21 years old and an Indonesian resident
• Complying with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
• Detecting and preventing fraud, money laundering, collusion, and other prohibited activities
• Monitoring for problem gambling behaviors and implementing responsible gaming measures
• Enforcing our Terms & Conditions and investigating potential violations
• Responding to legal requests from Indonesian authorities or our licensing jurisdiction

3.3 Service Improvement and Personalization

• Analyzing usage patterns to improve our website, mobile apps, and gaming products
• Personalizing your gaming experience with relevant game recommendations
• Conducting market research and gathering feedback to enhance our services
• Testing new features, games, and payment methods before general release

3.4 Marketing and Promotions

• Sending you promotional offers, bonus notifications, and exclusive deals (only with your consent)
• Communicating about VIP programs, loyalty rewards, and special events
• Displaying personalized promotions based on your gaming preferences and history

You can opt out of marketing communications at any time by adjusting your account preferences or clicking the unsubscribe link in our emails. Opting out of marketing does not affect essential service communications such as transaction confirmations or security alerts.

4. Data Sharing and Disclosure

cor33 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your data with the following categories of recipients when necessary:

4.1 Service Providers and Business Partners

• Payment Processors: Indonesian banks and e-wallet providers that process your deposits and withdrawals
• Game Suppliers: Licensed casino game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) who deliver gaming content on our platform
• Identity Verification Services: Third-party KYC providers that help us verify your Indonesian identity documents
• Customer Support Tools: Live chat software, email service providers, and CRM systems used to deliver customer support
• Cloud Hosting Providers: Secure data centers where our servers and databases are hosted
• Analytics Services: Tools that help us understand website usage and improve user experience

All service providers are contractually required to protect your data and use it only for the purposes we specify.

4.2 Legal and Regulatory Authorities

We may disclose your information to regulatory bodies, law enforcement agencies, courts, or other governmental authorities when:

• Required by law, legal process, or court order
• Necessary to comply with our gaming license obligations and reporting requirements
• Needed to enforce our Terms & Conditions or protect our rights and property
• Essential to investigate suspected fraud, money laundering, or other illegal activities
• Required to protect the safety and rights of our players and staff

4.3 Business Transfers

If cor33 undergoes a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the successor entity. You will be notified via email and a prominent notice on our website before your data is transferred and becomes subject to a different privacy policy.

5. Data Security Measures

cor33 implements industry-leading security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. Our security framework includes:

5.1 Technical Safeguards

• 256-bit SSL Encryption: All data transmitted between your device and our servers is encrypted using the same technology used by major Indonesian banks
• Secure Data Centers: Your information is stored in certified data centers with 24/7 monitoring, physical security, and redundant backup systems
• Firewalls and Intrusion Detection: Multi-layered network security to prevent unauthorized access attempts
• Data Encryption at Rest: Sensitive data including passwords and financial information is encrypted in our databases
• Regular Security Audits: Independent security assessments and penetration testing conducted by certified cybersecurity firms

5.2 Organizational Safeguards

• Access Controls: Personal data access is restricted to authorized employees who need it to perform their job functions
• Employee Training: All staff receive mandatory data protection and security awareness training
• Confidentiality Agreements: Employees sign strict confidentiality agreements and face disciplinary action for unauthorized data access
• Incident Response Plan: Established procedures for detecting, responding to, and reporting data breaches

5.3 Account Security Best Practices

While we implement robust security measures, you also play a crucial role in protecting your account:

• Use a strong, unique password that combines uppercase and lowercase letters, numbers, and special characters
• Never share your password or account credentials with anyone, including people claiming to be cor33 staff
• Enable two-factor authentication (2FA) when available for an additional security layer
• Log out of your account when using shared or public computers
• Regularly review your account activity and report any suspicious transactions immediately
• Keep your email account secure, as it is used for account recovery and important notifications

6. Data Retention Policy

cor33 retains your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with our legal obligations, and resolve disputes.

6.1 Active Account Data

While your account remains active, we retain all personal information, transaction history, and gaming records to provide continuous service and comply with our regulatory obligations.

6.2 Closed Account Data

After you close your cor33 account, we will retain certain information for the following periods:

• Identity and Contact Information: Retained for 7 years to comply with AML regulations and licensing requirements
• Transaction Records: Retained for 7 years for financial reporting and tax purposes
• Gaming History: Retained for 7 years to resolve potential disputes and comply with gaming authority requirements
• Communication Records: Retained for 3 years for customer service quality assurance and dispute resolution
• Marketing Preferences: Retained indefinitely to ensure we do not contact you after you opt out

6.3 Data Deletion

After the applicable retention period expires, we will securely delete or anonymize your personal information so that it can no longer be associated with you. Some aggregated, anonymized data may be retained indefinitely for statistical and analytical purposes.

7. Cookies and Tracking Technologies

cor33 uses cookies and similar tracking technologies to enhance your browsing experience, analyze website usage, and deliver personalized content.

7.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They allow us to recognize your device and remember your preferences across sessions.

7.2 Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential Cookies	Required for website functionality, account login, and security. Cannot be disabled.	Session/Persistent
Performance Cookies	Collect anonymous data about how visitors use our site to improve performance.	Up to 2 years
Functional Cookies	Remember your preferences such as language, currency, and favorite games.	Up to 1 year
Analytics Cookies	Help us understand user behavior and measure the effectiveness of our content.	Up to 2 years

7.3 Managing Cookies

You can control cookie settings through your browser preferences. Most browsers allow you to block or delete cookies, but doing so may impact your ability to use certain features of our website. Disabling essential cookies will prevent you from logging into your account and accessing our services.

8. Your Privacy Rights

As a cor33 user, you have the following rights regarding your personal information:

8.1 Right to Access

You have the right to request a copy of all personal information we hold about you. We will provide this information in a commonly used electronic format within 30 days of your request.

8.2 Right to Rectification

You can update or correct inaccurate personal information through your account settings at any time. For information you cannot update yourself, contact our customer support team.

8.3 Right to Erasure

You have the right to request deletion of your personal information under certain circumstances. However, we may be legally required to retain certain data for compliance purposes even after you close your account.

8.4 Right to Data Portability

You can request that we provide your personal information in a structured, machine-readable format that can be transferred to another service provider.

8.5 Right to Object

You can object to our processing of your personal information for marketing purposes at any time. Essential processing required to provide our services cannot be objected to while you maintain an active account.

8.6 Right to Restrict Processing

You can request that we temporarily limit how we use your data in certain circumstances, such as when you contest the accuracy of your data or object to our processing.

8.7 Exercising Your Rights

To exercise any of these rights, contact our Data Protection Officer at [email protected] with "Privacy Rights Request" in the subject line. We will respond to your request within 30 days and may require identity verification before proceeding.

9. Third-Party Services

cor33's website and services may contain links to third-party websites, applications, and services including game providers, payment processors, and social media platforms. This Privacy Policy applies only to cor33. We are not responsible for the privacy practices of third parties, and we encourage you to review their privacy policies before providing them with any personal information.

10. International Data Transfers

While cor33 primarily serves Indonesian residents and stores data within secure facilities, some of our service providers (particularly game suppliers and cloud hosting providers) may be located outside Indonesia. When we transfer your data internationally, we ensure appropriate safeguards are in place through:

• Standard contractual clauses approved by international data protection authorities
• Data processing agreements requiring equivalent levels of data protection
• Certification under recognized international data protection frameworks

Your personal information will never be transferred to countries with inadequate data protection standards without your explicit consent and appropriate safeguards.

11. Children's Privacy

cor33 services are strictly intended for adults aged 21 and older. We do not knowingly collect personal information from anyone under 21 years of age. If we become aware that we have inadvertently collected information from a minor, we will immediately delete it and permanently close the associated account. If you believe a minor has created a cor33 account, please contact us immediately at [email protected].

12. Changes to This Policy

cor33 may update this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or service offerings. When we make significant changes, we will notify you via email and display a prominent notice on our website for at least 30 days before the changes take effect. The "Last Updated" date at the top of this policy indicates when it was most recently revised.

Your continued use of cor33 services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you should close your account before they take effect.

13. Contact Us About Privacy

If you have questions, concerns, or complaints about this Privacy Policy or how cor33 handles your personal information, please contact our Data Protection Officer:

• Email: [email protected] (Subject: Privacy Inquiry)
• Response Time: We aim to respond to all privacy inquiries within 5 business days
• Escalation: If you are not satisfied with our response, you may escalate your concern to our licensing authority or relevant Indonesian data protection supervisory authority