Privacy Policy
koko303

1Introduction

koko303 ("we", "us", "our", "the Platform") operates the online casino and sports-betting services accessible at koko303.casa. We are committed to protecting the privacy and personal data of every individual who visits or registers on our platform ("you", "your", "the Member").

This Privacy Policy is issued in accordance with internationally recognised data protection principles and sets out the basis on which personal data we collect from you, or that you provide to us, will be processed by koko303. It applies to all koko303 Members including registered players, prospective users who browse the platform without completing registration, and individuals who contact our support team.

This Privacy Policy forms part of our overall legal framework alongside the Terms & Conditions and the Responsible Gambling Policy. In the event of any inconsistency, the Terms & Conditions shall take precedence except on matters expressly governed by this Privacy Policy.

2Definitions

The following terms have the meanings assigned below throughout this Privacy Policy:

3Data Controller

koko303, operating through the domain koko303.casa, acts as the Data Controller in respect of all Personal Data collected through this platform. koko303 operates under international online gaming licensing frameworks. Contact details for data-related enquiries are set out in Section 15 of this Privacy Policy.

Where koko303 engages third-party service providers — including payment processors, identity verification services, platform software suppliers, and analytics providers — those parties act as Data Processors on our behalf and are contractually bound to process Personal Data only as instructed by koko303 and to maintain appropriate security standards.

4Data We Collect

koko303 collects Personal Data in the following categories, depending on how you interact with the platform:

koko303 does not knowingly collect Sensitive Personal Data (such as racial or ethnic origin, religious beliefs, or health information) unless required to do so under applicable law or responsible gambling obligations (for example, information provided voluntarily in connection with a self-exclusion or problem gambling support request).

5Legal Basis for Processing

koko303 processes Personal Data under one or more of the following legal bases:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions, including account management, payment processing, and dispute resolution.
• Legal Obligation: Processing required to comply with applicable legal requirements including anti-money laundering (AML), counter-terrorist financing (CTF), and KYC obligations.
• Legitimate Interests: Processing necessary for purposes such as fraud prevention, platform security, analytics, and service improvement, where those interests are not overridden by your rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit, informed consent. You may withdraw consent at any time by contacting support.

6How We Use Your Data

koko303 uses the Personal Data it collects for the following purposes:

• Creating, verifying, maintaining, and securing your koko303 account.
• Processing deposits and withdrawals via Malaysian payment channels including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, RHB, Hong Leong Bank, and cryptocurrency methods.
• Conducting KYC and age verification to confirm Members are at least 21 years of age and to comply with AML obligations.
• Providing and improving the casino games, live dealer tables, and sports-betting products available on koko303.
• Detecting, investigating, and preventing fraud, prohibited conduct, and security incidents.
• Providing customer support through live chat and email, and resolving disputes or complaints.
• Applying bonus offers, VIP tier benefits, and loyalty programme rewards to eligible accounts.
• Sending transactional communications (account verification, security alerts, payment confirmations) and, where consent has been given, marketing communications.
• Conducting responsible gambling monitoring, including identification of at-risk betting patterns that may warrant proactive outreach.
• Complying with applicable legal, regulatory, and licensing requirements.

7Data Sharing & Disclosure

koko303 may share your Personal Data with the following categories of recipients:

• Payment Processors: Banks, e-wallet operators (including Touch 'n Go eWallet, Boost, GrabPay), DuitNow and FPX network providers, and cryptocurrency gateway operators, to the extent necessary to complete your financial transactions.
• Identity Verification Partners: Third-party KYC and AML compliance service providers engaged to verify identity documents and screen accounts.
• Platform Technology Suppliers: Game software providers, live dealer stream operators, and sports data providers who supply the technical infrastructure underpinning koko303's products.
• Analytics and Security Providers: Service providers engaged for platform analytics, fraud detection, and cybersecurity monitoring.
• Legal and Regulatory Authorities: Competent courts, law enforcement agencies, licensing regulators, or other public authorities where disclosure is required by applicable law, court order, or regulatory request.
• Professional Advisors: Legal counsel, auditors, and consultants operating under obligations of professional confidentiality.

All third-party Data Processors are required to maintain confidentiality, implement appropriate technical and organisational security measures, and process Personal Data solely in accordance with koko303's documented instructions.

8Data Retention

koko303 retains Personal Data for as long as necessary to fulfil the purposes for which it was collected, subject to applicable legal minimum retention periods. The following general principles apply:

• Active Account Data: Retained for the duration of your active koko303 membership and for a period thereafter as required by our legal obligations.
• Financial and Transaction Records: Retained for a minimum of five (5) to seven (7) years following the relevant transaction, in compliance with AML record-keeping requirements.
• KYC Documentation: Retained for a minimum of five (5) years from the date of the relevant transaction or account closure, whichever is later.
• Support Communications: Retained for three (3) years from the date of the relevant interaction or complaint resolution.
• Self-Exclusion Records: Retained for the duration of the self-exclusion period and for a reasonable period thereafter to prevent re-registration in breach of the exclusion.

Upon expiry of the applicable retention period, koko303 will securely delete or anonymise Personal Data so that it can no longer be attributed to an identified individual.

9Cookies & Tracking Technologies

koko303 uses cookies and similar tracking technologies to operate and improve the platform. The categories of cookies deployed are as follows:

• Strictly Necessary Cookies: Essential for core platform functions including account login session management, security token validation, and navigation. These cannot be disabled without affecting platform functionality.
• Performance and Analytics Cookies: Used to collect aggregated, anonymised data about how Members navigate koko303, enabling us to identify and resolve usability issues and improve the overall experience.
• Functional Cookies: Store preferences such as language settings, last-visited game category, and interface customisations to improve your session continuity.
• Marketing Cookies: Used, where you have consented, to deliver relevant promotional communications and measure the effectiveness of marketing campaigns. Non-essential marketing cookies are only activated following explicit opt-in.

You may manage cookie preferences through your browser settings. Disabling certain categories of cookies may impair some platform features. For detailed browser-specific instructions on managing cookies, refer to your browser's help documentation.

10Security Measures

koko303 implements a range of technical and organisational security measures to protect Personal Data against unauthorised access, disclosure, alteration, and destruction. These include, but are not limited to:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and koko303 servers.
• Encrypted storage of sensitive Personal Data and financial records at rest.
• Role-based access controls restricting employee access to Personal Data to those with a legitimate operational need.
• Two-factor authentication (2FA) options for Member accounts.
• Regular internal security assessments and third-party penetration testing.
• Security incident detection and response procedures with defined escalation pathways.

11International Data Transfers

koko303's operations involve the use of servers, systems, and service providers that may be located outside Malaysia. Where Personal Data is transferred to countries that do not provide an equivalent level of data protection, koko303 implements appropriate contractual safeguards — such as standard contractual clauses — to ensure that your Personal Data continues to be protected to a standard consistent with this Privacy Policy.

By using koko303, you acknowledge and consent to the processing of your Personal Data in jurisdictions outside Malaysia as described above.

12Your Rights

Subject to applicable law and certain limitations, you have the following rights in respect of your Personal Data held by koko303:

• Right of Access: You may request a copy of the Personal Data koko303 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete Personal Data. For straightforward updates, you may do this directly through your account settings or by contacting support.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer required for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restriction: You may request that koko303 restricts processing of your Personal Data in certain circumstances, for example while a rectification request is being resolved.
• Right to Data Portability: Where processing is based on your consent or contractual necessity, you may request that we provide your Personal Data in a structured, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of koko303's legitimate interests, and to direct marketing communications at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact the koko303 support team as described in Section 15. We will acknowledge your request within 5 business days and provide a full response within 30 calendar days, subject to identity verification.

13Minors & Age Policy

koko303 is strictly for individuals aged 21 years and above. We do not knowingly collect Personal Data from persons under the age of 21. If koko303 becomes aware that a registered account belongs to or has been accessed by a person under 21, we will immediately suspend that account, forfeit any balance in accordance with our Terms & Conditions, and delete any associated Personal Data to the extent not required for legal record-keeping purposes.

If you believe that a minor may have accessed koko303 using your device or account details, please contact our support team immediately.

14Amendments to This Policy

koko303 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. The revised version will be published on this page with an updated effective date.

For material changes that significantly affect your rights or our use of your Personal Data, koko303 will provide notice via the platform or by email to your registered address. Continued use of koko303 after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms.

15Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by koko303, please contact our support team through the following channels:

• Support Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the chat widget accessible on all koko303 pages. Average response time under 3 minutes.

For formal data subject requests (access, erasure, portability, etc.), please email with the subject line "Data Subject Request — [Your koko303 Username]" and include a description of your request. koko303 may require identity verification before processing certain types of data subject requests.