At cor333, protecting the personal data of every player is a core operational responsibility, not an afterthought. This Privacy Policy explains precisely what information we collect, why we collect it, how we use and protect it, and what rights you hold over your own data.
Summary: cor333 collects only the data necessary to operate a safe, compliant gaming platform. We do not sell your personal data to advertisers or unaffiliated third parties. Your data is encrypted in transit and at rest. You may request access to, correction of, or deletion of your personal data at any time by contacting us at [email protected].
The following terms carry the meanings set out below throughout this Privacy Policy:
cor333 acts as the data controller in respect of all Personal Data collected through the Platform. As data controller, cor333 determines the purposes and means by which your Personal Data is processed. Our designated data protection contact is reachable via the support email address set out in Clause 15 of this Policy.
The Platform is primarily operated for and marketed to players residing in Indonesia. Indonesian players are subject to the data protection practices described in this Policy. Where additional or differing legal obligations arise from applicable Indonesian law, those obligations take precedence over any conflicting provision of this Policy.
The Platform's default time zone for all data-processing records, consent timestamps, and audit logs is Western Indonesia Time (WIB, UTC+7). Players in WITA (UTC+8) and WIT (UTC+9) zones should be aware that all logged activity timestamps are recorded in WIB.
cor333 collects Personal Data across three broad categories: data you provide directly, data generated by your use of the Platform, and data received from third-party sources such as payment processors and KYC verification services.
Personal Data is collected through the following mechanisms:
| Collection Method | Data Types Captured | Trigger |
|---|---|---|
| Account registration form | Name, DOB, email, phone | On sign-up |
| KYC upload portal | Identity documents, selfie | Before first withdrawal |
| Payment gateway | Bank/e-wallet details, transaction data | On deposit or withdrawal |
| Platform cookies & local storage | Session token, preferences, analytics | On site visit |
| Server logs | IP a ddress, device info, timestamps | Automatic on every request |
| Customer support tickets | Query text, attachments, contact history | On support interaction |
| In-game activity tracking | Betting patterns, game choices, win/loss | During active gameplay |
cor333 processes your Personal Data only for specified, explicit, and legitimate purposes. The table below sets out the purposes for which we process Personal Data, and the legal basis on which each processing activity rests.
| Purpose | Legal Basis | Data Categories Used |
|---|---|---|
| Account registration and login | Contract performance | Name, DOB, email, password |
| KYC and age verification | Legal obligation | Identity documents, address proof |
| Processing deposits and withdrawals | Contract performance | Bank/e-wallet details, transaction records |
| Fraud detection and prevention | Legitimate interest | IP address, device fingerprint, betting patterns |
| Customer support delivery | Contract performance | Contact details, query text, account history |
| Responsible gaming enforcement | Legal obligation & consent | Deposit/loss limits, self-exclusion status |
| Platform analytics and optimization | Legitimate interest | Session data, click patterns, game preferences |
| Marketing communications (optional) | Consent | Email, phone, communication preferences |
You may withdraw consent for marketing communications at any time via the unsubscribe link in emails or by updating your preferences in Account Settings. Withdrawal of consent does not affect the lawfulness of processing based on consent before withdrawal.
cor333 does not sell your Personal Data to unaffiliated third parties for marketing purposes. We do, however, share Personal Data with carefully selected partners under strict data-processing agreements in the following circumstances:
Bank transfer and e-wallet providers (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, OVO, DANA, GoPay, ShopeePay, LinkAja) receive only the transaction data necessary to complete deposits and withdrawals. They do not receive your full betting history or game preferences.
Third-party identity verification services receive copies of your KTP or passport for the sole purpose of confirming your identity and age. Results are returned to cor333 in the form of a verification pass/fail status. Documents are not retained by the KYC provider beyond the verification process unless required by anti-money laundering regulations in their jurisdiction.
Software suppliers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive anonymised or pseudonymised session data to operate their game engines. They do not have access to your full name, email address, or banking details.
Live chat and ticketing platforms used by our 24/7 Indonesian-speaking support team process customer communication data under data-processing agreements that prohibit use of data for purposes other than support delivery.
cor333 may disclose Personal Data to law enforcement, regulatory bodies, or courts where required by applicable law, court order, or subpoena. Such disclosures are made only to the extent necessary to comply with the legal obligation.
In the event of a merger, acquisition, or asset sale involving cor333, your Personal Data may be transferred to the acquiring entity. You will be notified via email and prominent site notice before any such transfer occurs, and the acquiring entity will be bound by the same privacy commitments set out in this Policy.
The cor333 Platform uses cookies and similar tracking technologies to maintain session continuity, remember user preferences, and collect aggregate analytics data. Cookies do not grant cor333 access to files or data stored on your device unrelated to the Platform.
You may disable non-essential cookies via your browser settings. Consult your browser's help documentation for instructions. Disabling essential cookies will prevent you from logging in and using the Platform. You may also clear stored cookies at any time; be aware that this action will reset your saved preferences and require you to log in again.
cor333 retains Personal Data only for as long as necessary to fulfill the purposes for which it was collected or as required by applicable legal or regulatory obligations. The retention periods for different data categories are as follows:
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised such that you are no longer identifiable from the data.
cor333 implements industry-standard technical and organisational measures to protect Personal Data against unauthorised access, accidental loss, destruction, or damage. Key security measures include:
Your Responsibility: You are responsible for keeping your Account login credentials secure. Do not share your password or one-time passcodes (OTP) with anyone, including individuals claiming to represent cor333 support. cor333 will never ask you to disclose your full password in any communication.
The cor333 Platform operates on servers located in multiple jurisdictions to ensure optimal performance and redundancy. Some of our service providers (including game studios, payment processors, and cloud infrastructure providers) are based outside Indonesia. Where Personal Data is transferred to a jurisdiction that does not offer an equivalent level of data protection to Indonesia, cor333 implements appropriate safeguards including:
By using the Platform, you acknowledge and consent to such international transfers subject to the safeguards described above.
You hold the following rights in respect of your Personal Data. To exercise any of these rights, contact us at [email protected] with your full name and registered email address. We will respond within fourteen (14) calendar days.
Please note that some rights are not absolute and may be limited by overriding legal obligations (e.g., we cannot delete transaction records that must be retained for tax purposes). Where we refuse a request, we will explain the reason for refusal.
cor333 enforces a strict 21+ only policy. Individuals under the age of twenty-one (21) are prohibited from registering an Account, accessing the Platform, or placing any wager. We do not knowingly collect or process Personal Data from minors.
If we become aware that a Player is under 21 years of age — whether through KYC verification failure, parental report, or any other means — we will immediately suspend the Account, void all wagers placed, and refund any verified deposit balance to the registered payment method. Bonus funds and associated winnings will be forfeited in full.
Parents and guardians are encouraged to use device-level parental controls, browser filtering software, or network-level content filters to prevent minors from accessing online gambling platforms. cor333 supports the use of such tools and provides guidance on responsible digital parenting at our Responsible Gaming page.
If you are a parent or guardian and believe your child has accessed cor333 and provided Personal Data, contact us immediately at [email protected] with subject line "URGENT — MINOR ACCOUNT" so we can take corrective action.
The Platform may contain links to or integrations with third-party services including payment gateways, game studios, and social media platforms. cor333 is not responsible for the privacy practices of these third parties. When you leave the cor333 Platform — including by clicking a link to an external site or opening a third-party game in a new window — you are subject to the privacy policy of that third party, not this Privacy Policy.
We recommend reviewing the privacy policies of any third-party service you interact with. cor333 does not endorse or assume liability for the content, products, services, or privacy practices of any third party.
cor333 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or operational requirements. When material changes are made, we will notify all registered Players via email to the address on file and display a prominent notice on the Platform homepage for a minimum of thirty (30) calendar days prior to the updated Policy taking effect.
The "Last Updated" date at the top of this page indicates when the most recent revision was published. Your continued use of the Platform after the effective date of any amendments constitutes your acceptance of the revised Policy. If you do not agree with any amendment, you must cease using the Platform and may close your Account in accordance with the Terms & Conditions.
It is your responsibility to review this Policy periodically to remain informed of how we protect your Personal Data.
If you have any questions, concerns, or complaints regarding this Privacy Policy or cor333's data protection practices, please contact our Data Protection Officer via:
Data Protection Inquiries:
(Plain text only — not a clickable link per site security policy. Please copy this address manually into your email client.)
Subject Line for Data Protection Requests: Please use "DATA PROTECTION REQUEST" to ensure your inquiry is routed to the appropriate team.
Response Time: We aim to respond to all data protection inquiries within fourteen (14) calendar days. Complex requests may take up to thirty (30) days; we will inform you if additional time is needed.
If you believe cor333 has processed your Personal Data in violation of applicable data protection law and you are not satisfied with our response to your complaint, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.
Data protection is not a compliance checkbox for cor333 — it's a core operational principle. Here are six ways we safeguard your personal information every day.
Every piece of data transmitted to or from cor333 is protected by 256-bit SSL/TLS encryption — the same standard used by major Indonesian banks like BCA, BRI, BNI, and Mandiri for online banking.
We collect only what we need to operate a compliant gaming platform and deliver excellent service. No unnecessary tracking, no invasive profiling, no sale of data to advertisers.
Your personal data is accessible only to cor333 staff who genuinely need it for customer support, compliance, or fraud prevention. All access is logged and regularly audited.
We don't keep your data forever. Clear retention periods apply to every data category, and data is securely deleted once the legal or operational need expires.
Your right to access, correct, and delete your data is not a formality at cor333 — it's a binding commitment enforced through documented procedures and staff training.
Independent cybersecurity firms test our defenses annually through penetration testing and vulnerability assessments. Results drive continuous security improvement.
Our FAQ covers common data protection questions, or contact our dedicated Data Protection Officer directly for personalised guidance on exercising your rights under this Policy.