Privacy Policy

1 Overview

coc4d operates as a trusted international online betting platform serving English-preference players across Indonesia. As the data controller for all personal information processed through this platform, coc4d takes its obligations under applicable data protection principles seriously. We collect only the data necessary to deliver our services, secure player accounts, comply with anti-money-laundering (AML) obligations, and — where you have given your consent — to send you relevant promotional communications.

This policy is written in plain, professional English. If any section is unclear, you are encouraged to contact our support team at [email protected] before providing your personal data. Your continued use of the coc4d platform constitutes acceptance of this Privacy Policy in its current form. Where we make material changes, we will notify you in advance as described in Section 14.

2 Definitions

The following definitions apply throughout this Privacy Policy:

3 Data We Collect

coc4d collects personal data across several categories, depending on how you interact with the Platform:

3.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identification document (Indonesian KTP, passport, or SIM).
• Date of birth — collected at registration and verified during KYC to confirm you are at least 21 years of age.
• Residential address, including city (e.g., Jakarta, Surabaya, Bandung, Medan, Bali) and postal code.
• Email address and mobile phone number used to contact you for account-related and (if opted in) promotional communications.

3.2 Financial Data

• Bank account details — specifically the account name, account number, and bank name (e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) — used to process deposits and withdrawals.
• E-wallet account identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja, where used as a payment method.
• Transaction history: deposit amounts, withdrawal amounts, dates, and reference numbers — retained for AML compliance and dispute resolution.
• Source of funds declarations where required by AML policy for high-value accounts.

3.3 Account & Usage Data

• Registered username and encrypted password hash.
• Betting and gaming activity — including game types, stake amounts, outcomes, and session durations. This data is used to detect problem-gambling indicators and to personalize responsible gaming interventions.
• Bonus claims, wagering history, and promotional participation records.
• Customer support interactions — including the content of live chat transcripts and email correspondence.

3.4 Technical & Device Data

• IP address and approximate geolocation at the time of login and transaction.
• Device type, operating system, browser type, and version.
• Session timestamps, login and logout times, and session duration.
• Referral source and internal navigation path within the Platform.

4 How We Collect Data

coc4d collects personal data through the following means:

• Direct submission: Data you provide when completing the registration form, submitting KYC documents, making a deposit, requesting a withdrawal, or contacting customer support.
• Automated collection: Technical and device data collected automatically when you visit or interact with the Platform, including via cookies and server logs.
• Third-party providers: Identity verification data returned by KYC verification partners; fraud-score signals from payment processors; geolocation data from IP-resolution services.
• Publicly available sources: Where required for AML due diligence, coc4d may cross-reference publicly available information to verify the legitimacy of a player's identity or source of funds.

5 Purpose & Legal Basis for Processing

coc4d processes personal data only where there is a valid legal basis to do so. The table below sets out the primary purposes for which personal data is processed and the corresponding legal basis:

6 Data Sharing

coc4d does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following circumstances, and only to the minimum extent necessary:

• Payment processors and banking partners: Your financial data is shared with the relevant payment gateway, bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata), or e-wallet provider (OVO, DANA, GoPay, ShopeePay, LinkAja) to process your transactions. These entities act as independent data controllers for the data they receive.
• KYC verification providers: Identity documents and biometric data submitted for KYC are processed by specialist third-party verification partners under strict data-processing agreements with coc4d.
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and Pocket Games Soft may receive a session token and limited technical data necessary to authenticate your game session. They do not receive your full identity data.
• Cloud infrastructure and security providers: coc4d's platform is hosted on enterprise-grade cloud infrastructure. Our hosting and CDN providers process technical data in the course of delivering the platform.
• Legal and regulatory authorities: coc4d will disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by applicable law, court order, or regulatory direction — and only to the extent legally required.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of coc4d's assets, player personal data may be transferred to the successor entity. Affected players will be notified in advance.

7 International Data Transfers

coc4d's primary market is Indonesia, and our servers are located in jurisdictions that maintain appropriate data protection standards. Some of our third-party service providers — including cloud infrastructure partners and KYC verification providers — may process data in jurisdictions outside Indonesia. Where such transfers occur, coc4d ensures that appropriate safeguards are in place, including:

• Contractual clauses that require the recipient to maintain data protection standards equivalent to those applied by coc4d.
• Transfers only to jurisdictions or entities that have been assessed as providing an adequate level of data protection.
• Technical and organizational measures — including encryption in transit and at rest — to protect data during and after transfer.

8 Data Retention

coc4d retains personal data for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Active account data: Retained for the lifetime of your account and for a minimum of five (5) years following account closure, to comply with AML record-keeping requirements.
• KYC documents: Retained for a minimum of five (5) years from the date of submission or account closure, whichever is later.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer support records: Retained for three (3) years from the date of the last interaction, unless the matter relates to an unresolved dispute.
• Marketing consent records: Retained for three (3) years from the date of consent, or until consent is withdrawn — whichever occurs first.
• Technical and device logs: Retained for up to twelve (12) months on a rolling basis, unless retained longer for fraud investigation or legal proceedings.

When data reaches the end of its retention period, it is securely deleted or anonymized so that it can no longer be associated with an identifiable individual.

9 Security Measures

coc4d implements a layered approach to information security, combining technical controls, organizational processes, and staff training to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. Key measures include:

• TLS/SSL encryption: All data transmitted between your browser and the coc4d platform is encrypted using industry-standard TLS (Transport Layer Security) protocols.
• Password hashing: Account passwords are never stored in plaintext. coc4d uses bcrypt or equivalent one-way hashing with per-account salts.
• Two-factor authentication (2FA): Players are encouraged to enable 2FA on their accounts. coc4d may require 2FA for high-value withdrawal requests.
• Access controls: Internal access to player personal data is restricted on a need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and regular security training.
• Penetration testing and vulnerability scanning: coc4d conducts regular security assessments of its platform infrastructure.
• Incident response: coc4d maintains a documented data breach response procedure. In the event of a breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay.

10 Cookies & Tracking Technologies

coc4d uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit the Platform. We use the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function. They enable core features such as session management, login persistence, and security controls. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Remember your preferences such as language settings, display options, and recently viewed games to provide a more personalized experience.
• Analytics cookies: Collect aggregated, anonymized information about how players navigate the Platform — such as most-visited pages and session duration — to help coc4d improve the user experience.
• Security cookies: Used to detect and prevent fraudulent behavior, including unusual login patterns and automated bot activity.

coc4d does not use third-party advertising or behavioral tracking cookies. Most modern browsers allow you to control cookie settings through the browser's privacy or settings menu. Disabling strictly necessary cookies may prevent you from using certain features of the Platform.

11 Your Data Rights

As a player on coc4d, you hold a set of rights with respect to your personal data. These rights are summarized below. To exercise any of these rights, submit a written request to [email protected] with sufficient information to verify your identity. coc4d will respond within 30 days of receiving a valid, complete request.

Please note that certain rights — particularly erasure — may be limited where coc4d has a legal obligation to retain your data (e.g., AML record-keeping requirements). coc4d will explain the specific reason for any limitation in its response to your request.

12 Minors

coc4d's services are strictly for adults aged 21 and over. coc4d does not knowingly collect or process personal data from individuals under the age of 21. If coc4d discovers or is notified that a registered account belongs to a person under 21, that account will be immediately closed, all data associated with it will be securely deleted (except for records required by law), and any funds held will be handled in accordance with coc4d's minors-access policy.

Parents and guardians who believe a minor may have accessed or registered on the coc4d Platform are asked to contact [email protected] immediately so that prompt action can be taken.

13 Third-Party Links

The coc4d Platform may contain references to third-party services — such as payment processors or game studios — in the course of describing available features. coc4d does not control the data practices of third-party websites or services and is not responsible for their privacy policies. This Privacy Policy applies solely to data processed by coc4d through the Platform at https://coc4d.cam.

14 Policy Amendments

coc4d reserves the right to update this Privacy Policy at any time to reflect changes in law, regulatory guidance, or our data processing practices. When we make material changes, we will notify registered players by email to the address on file and by a prominent notice on the Platform, with a minimum of fourteen (14) days' notice before the revised policy takes effect.

The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this policy periodically. Your continued use of the Platform after the effective date of a revision constitutes your acceptance of the updated policy.

15 Contact & Complaints

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how coc4d has handled your personal data, please contact our Data Protection team:

• Email: [email protected] — please use the subject line "Privacy Request" or "Data Complaint" to ensure prompt routing.
• Response time: We aim to acknowledge all privacy-related requests within 5 business days (WIB) and to provide a full response within 30 calendar days of receiving a complete, valid request.