At cor33, protecting your personal information is a fundamental obligation — not an afterthought. This Privacy Policy explains in plain terms exactly what data we collect, why we collect it, how it is used, and the rights you hold as a Member registered on our platform.
cor33 (referred to in this Privacy Policy as "cor33", "we", "our", or "us") operates the online betting and casino platform accessible at https://cor33.bio and all associated sub-domains, mobile-optimised interfaces, and in-app environments. cor33 is the data controller responsible for the personal information collected through the Platform.
This Privacy Policy applies to all current and former Members, to visitors who browse the Platform without registering, and to any individual who contacts cor33's customer support team. It governs personal data collected through every channel associated with the cor33 brand, including the website, live chat, email correspondence, and any WhatsApp support channel provided to verified Members.
This Privacy Policy should be read together with cor33's Terms & Conditions and Responsible Gaming Policy. If you do not agree with the practices described in this Privacy Policy, please do not register an account or continue using the Platform.
cor33 collects personal data across several categories depending on the nature of your interaction with the Platform. The following table summarises the categories of data we collect, typical examples within each category, and the primary source of that data.
| Category | Examples | Primary Source |
|---|---|---|
| Identity Data | Full name, date of birth, gender, nationality, government-issued ID number (KTP or passport) | Provided by you during registration and KYC |
| Contact Data | Email address, WhatsApp number, residential address in Indonesia | Provided by you during registration or support contact |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP), e-wallet handles (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit and withdrawal history, wallet balance in IDR | Provided by you at cashier; generated by Platform transactions |
| KYC Documentation | Scanned or photographed copies of national identity card (KTP), passport, proof of address (utility bills, bank statements), selfie with ID | Submitted by you during identity verification |
| Transactional Data | Bet history, game session records, win/loss records, bonus claim history, promotion participation records | Generated automatically by Platform activity |
| Technical Data | IP address, browser type and version, device type, operating system, screen resolution, time zone (WIB/WITA/WIT), session duration, pages visited, referring URL | Collected automatically via server logs and cookies |
| Communications Data | Live chat transcripts, support email content, WhatsApp message records, survey responses, feedback submissions | Generated during support interactions initiated by you |
| Responsible Gaming Data | Self-exclusion requests, deposit limit settings, cooling-off period elections, session time limit configurations | Provided by you via Account dashboard or support request |
cor33 collects personal data through the following means:
cor33 processes your personal data only where a lawful basis exists. The table below sets out the primary purposes for which we process personal data and the corresponding legal basis under applicable international data-protection standards.
| Purpose | Data Categories Used | Legal Basis |
|---|---|---|
| Account registration and authentication | Identity, Contact | Contract performance |
| KYC and age verification (21+) | Identity, KYC Documentation | Legal obligation; contract performance |
| Processing deposits and withdrawals | Financial, Identity | Contract performance |
| Fraud prevention and AML compliance | Identity, Financial, Technical, Transactional | Legal obligation; legitimate interest |
| Platform security and abuse prevention | Technical, Transactional | Legitimate interest |
| Responsible gaming monitoring | Transactional, Responsible Gaming | Legal obligation; legitimate interest |
| Customer support delivery | Identity, Contact, Communications | Contract performance |
| Bonus and promotion administration | Identity, Transactional, Financial | Contract performance; legitimate interest |
| Marketing communications (opt-in only) | Contact, Transactional | Consent |
| Platform analytics and performance improvement | Technical, Transactional | Legitimate interest |
Where cor33 relies on legitimate interest as the legal basis, we have assessed that our interest is not overridden by your rights and freedoms. You may object to processing based on legitimate interest at any time — see Clause 10 (Your Rights) for how to do so.
Where cor33 relies on your consent (e.g., for marketing emails or promotional SMS), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. Withdrawal of marketing consent does not affect your ability to use the Platform or access your Account.
cor33 does not sell, rent, or trade your personal data to unaffiliated third parties for their own marketing or commercial purposes under any circumstances. Personal data is shared only in the following limited scenarios:
cor33 operates an internationally licensed platform, and some of our technology partners and game studio providers are based outside Indonesia. As a result, your personal data may be transferred to and processed in countries other than Indonesia. These countries may have data-protection laws that differ from those in force in Indonesia.
Where personal data is transferred internationally, cor33 implements appropriate safeguards to ensure that your data receives a level of protection equivalent to that provided under applicable international data-protection standards. These safeguards include:
cor33 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law, whichever is longer. The following retention periods apply as a general guideline:
| Data Category | Retention Period | Basis |
|---|---|---|
| Identity and KYC Data | 5 years after Account closure | AML and legal obligation |
| Financial and Transactional Data | 5 years after the transaction date | Financial records obligation |
| Technical and Log Data | 12 months from collection | Legitimate interest (fraud prevention) |
| Communications Data | 3 years from last contact | Legitimate interest (dispute resolution) |
| Responsible Gaming Data | 5 years after self-exclusion or Account closure | Legal obligation; player protection |
| Marketing Preferences | Until withdrawal of consent or Account closure | Consent |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to any identifiable individual. Anonymised aggregated data may be retained indefinitely for statistical and business analysis purposes.
cor33 implements a multi-layered security architecture designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our technical and organisational security measures include:
cor33 uses cookies and similar tracking technologies to operate essential platform functions, improve user experience, and analyse aggregate usage patterns. A cookie is a small text file placed on your device by the Platform when you visit. Cookies do not contain executable code and cannot access other data on your device.
cor33 uses the following categories of cookies:
cor33 does not deploy third-party advertising cookies or retargeting pixels. You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent the Platform from operating correctly and you will not be able to access your Account.
As a Member of cor33, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our Data Protection team at [email protected] with the subject line "Data Rights Request — [Your Account Username]". cor33 will respond within 30 days of receiving a verified request.
cor33 operates a strict 21+ minimum age policy. The Platform is not directed at, and does not knowingly collect personal data from, any person under the age of 21. Age verification is a mandatory component of the KYC process, and any Account found to have been opened by a person under 21 years of age will be immediately suspended and the matter referred to cor33's compliance team.
If you are a parent or guardian and believe that your child (under 21) has registered an Account on the cor33 Platform without your knowledge, please contact us immediately at [email protected]. cor33 will investigate promptly and, where confirmed, will delete all personal data associated with the underage Account.
cor33 supports the use of parental control software for households where minors may have access to devices used to browse the internet. Independent filtering services such as NetNanny and similar tools can restrict access to gambling-category websites at the device or network level.
The cor33 Platform may contain links to or embed content from third-party services — including live game interfaces served by Evolution Gaming, Pragmatic Play, Spribe, and other licensed studio providers. These third parties operate their own privacy policies, and cor33 is not responsible for the data practices of any third-party service. We encourage you to review the privacy policy of any third-party service you interact with through the Platform.
cor33 does not control and is not responsible for the content, data practices, or privacy policies of any external website that may be accessed through a link originating outside the cor33 Platform. Navigation to any external site from the cor33 Platform is at your own risk.
cor33 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, a change in the categories of data collected, a new purpose for processing, or a new category of third-party sharing — cor33 will provide at least 14 days' prior notice by posting a prominent notice on the Platform and, where practicable, sending an email notification to all active Members at their registered address.
The "Last updated" date displayed at the top of this page will be revised on every amendment. Your continued use of the Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with a material change, you may close your Account before the effective date by contacting [email protected].
If you have any questions, concerns, or complaints regarding this Privacy Policy or cor33's data-handling practices, or if you wish to exercise any of the data rights described in Clause 10, please contact our Data Protection team through any of the following channels:
cor33's Data Protection team will acknowledge all privacy-related enquiries within 5 business days and will provide a substantive response within 30 calendar days. For complex requests — such as Subject Access Requests involving large volumes of data — the response period may be extended by a further 60 days, in which case you will be notified of the extension and the reason for it within the initial 30-day period.
Your Data, Our Responsibility
These are the six core commitments that shape how cor33 handles every byte of personal data entrusted to us by our Members.
Every session on cor33 is protected by TLS encryption. Your login credentials, financial data, and KYC documents are transmitted over a fully encrypted channel — visible only to you and cor33's authorised systems.
cor33 never sells, rents, or shares your personal data with advertisers or unaffiliated marketers. Your information is used solely to deliver and improve the cor33 platform experience and to meet our legal obligations.
KYC verification at cor33 is a one-time process designed to take under 15 minutes. Documents are handled by accredited identity verification partners and are never repurposed for marketing or profiling activities.
You hold the right to access, correct, export, restrict, or delete your personal data at any time. Submit a request to [email protected] and our Data Protection team will respond within 30 days.
cor33 retains your data only as long as legally required or operationally necessary. KYC and financial records are held for 5 years after Account closure in line with AML obligations, then securely deleted.
In the event of a confirmed data breach, cor33 commits to notifying affected Members and the relevant authority within 72 hours of discovery — well ahead of the minimum response window required by international best practice.
Ready to Play Securely?
With cor33's data protection commitments in place, you can focus on what matters: exploring our sportsbook markets, live casino tables, and premium slot titles with complete peace of mind.