Privacy Policy

1. Introduction

This Privacy Policy describes how gococo ("we," "us," "our") collects, uses, stores, and protects personal information from users ("you," "your") of our online gaming platform located at https://gococo.cam. We recognize that privacy is important to our Indonesian players, and we are committed to transparent data handling practices that comply with applicable privacy laws and regulations.

By creating a gococo account, accessing our platform, or using any of our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, processing, and use of your personal information as described herein. If you do not agree with any provision of this Privacy Policy, you should not use the gococo platform.

This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern your overall use of the gococo platform. Together, these documents form the complete agreement between you and gococo regarding your use of our services.

2. Information We Collect

gococo collects several categories of personal information to provide, maintain, and improve our gaming services, ensure platform security, comply with legal obligations, and deliver a personalized user experience. The types of information we collect include:

2.1 Information You Provide Directly

When you register for a gococo account or use our services, you voluntarily provide the following information:

• Registration Information: Full legal name, date of birth, email address, mobile phone number, residential address in Indonesia, nationality, preferred currency (Indonesian Rupiah / IDR), username, and password.
• Identity Verification (KYC) Documents: Copies of government-issued identification (Indonesian KTP / National Identity Card or passport), proof of address documents (utility bills, bank statements, or government correspondence dated within the last three months), selfie photographs holding your identification document, and bank account verification documents showing account holder name.
• Financial Information: Bank account details for deposits and withdrawals (bank name, account number, account holder name), e-wallet information (OVO, DANA, GoPay, ShopeePay, LinkAja account details), transaction history, deposit amounts, withdrawal requests, and payment method preferences.
• Communication Data: Content of messages you send to customer support via live chat, email, or WhatsApp, including any attachments, screenshots, or supporting documentation you provide when seeking assistance or resolving disputes.
• Survey and Feedback Responses: If you participate in optional surveys, promotions, or provide feedback about our services, we collect your responses and any additional information you choose to share.

2.2 Information Collected Automatically

When you access and use the gococo platform, we automatically collect certain technical and usage information:

• Device Information: IP address, device type (mobile, tablet, desktop), operating system (Windows, macOS, iOS, Android), browser type and version, screen resolution, device identifiers, and mobile carrier information.
• Usage Data: Pages visited, games played, betting history, deposit and withdrawal patterns, session duration, click patterns, navigation paths through the platform, timestamps of activities, and feature utilization statistics.
• Location Data: Approximate geographic location based on IP address to ensure compliance with geographic restrictions and provide localized services appropriate for Indonesian players.
• Cookies and Similar Technologies: Data collected through cookies, web beacons, pixel tags, and similar tracking technologies that help us recognize your device, maintain login sessions, remember preferences, and analyze platform usage patterns. See Section 8 for detailed information about cookies.

2.3 Information from Third Parties

In certain circumstances, we may receive information about you from third-party sources:

• Payment Processors: Confirmation of successful deposits or withdrawals, transaction verification data, and fraud detection alerts from Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet providers.
• Identity Verification Services: Third-party KYC verification providers may share identity validation results, document authenticity checks, and fraud risk assessments to help us verify player identities and prevent fraudulent account creation.
• Game Providers: Gaming software providers supply gameplay data, bet outcomes, win/loss records, and game session statistics that are linked to your account for record-keeping and dispute resolution purposes.

3. How We Use Your Information

gococo uses the personal information we collect for the following legitimate business purposes:

3.1 Platform Operations and Service Delivery

• Creating and managing your gaming account
• Processing deposits and withdrawals to/from Indonesian banks and e-wallets
• Enabling gameplay on slots, sports betting, live casino, and lottery games including togel
• Recording betting history, calculating winnings, and settling wagers
• Providing customer support and responding to inquiries in English and Indonesian languages
• Maintaining platform functionality, performance optimization, and technical troubleshooting

3.2 Legal Compliance and Security

• Verifying your age (21+ requirement) and identity through KYC procedures
• Complying with anti-money laundering (AML) regulations and reporting obligations
• Detecting and preventing fraud, money laundering, account abuse, and cheating
• Enforcing our Terms & Conditions and resolving disputes
• Protecting the security and integrity of the gococo platform
• Responding to legal processes, court orders, and regulatory inquiries

3.3 Personalization and Marketing

• Delivering personalized game recommendations based on your playing history
• Administering bonuses, promotions, cashback offers, and loyalty rewards (Bronze/Silver/Gold tier program)
• Sending promotional emails about new games, special offers, and platform updates (you may opt out at any time)
• Customizing the user interface based on your preferences and device capabilities
• Recognizing Indonesian holidays (Independence Day, Idul Fitri, Chinese New Year) with relevant promotions

3.4 Analytics and Improvement

• Analyzing platform usage patterns to identify popular games and features
• Conducting A/B testing to improve user experience and interface design
• Generating aggregated, anonymized statistics for business intelligence
• Improving payment processing efficiency for Indonesian banks and e-wallets
• Developing new games, features, and services tailored to Indonesian player preferences

4. Legal Basis for Processing

Under applicable data protection laws, gococo relies on the following legal bases for processing your personal information:

• Contractual Necessity: Processing is necessary to perform our contract with you (the Terms & Conditions) and deliver the gaming services you requested, including account management, payment processing, and game provision.
• Legal Obligation: Processing is required to comply with legal and regulatory obligations, including age verification, KYC requirements, AML regulations, and government reporting mandates applicable to licensed gaming operators.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, platform security, customer support, service improvement, and direct marketing (where not overridden by your privacy rights).
• Consent: For certain processing activities such as optional marketing communications, cookies (where required), and data collection beyond what is strictly necessary for service delivery, we obtain your explicit consent, which you may withdraw at any time.

5. Data Sharing and Disclosure

gococo does not sell or rent your personal information to third parties. We may share your information only in the following limited circumstances:

5.1 Service Providers

We share data with trusted third-party service providers who assist us in operating the gococo platform:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive necessary information to process deposits and withdrawals.
• Gaming Software Providers: Licensed game providers receive gameplay data to deliver slot games, live dealer experiences, and sports betting functionality.
• Identity Verification Services: KYC verification providers receive identification documents to confirm your identity and detect fraudulent applications.
• Cloud Hosting Providers: Secure data centers host our platform infrastructure and store encrypted player data with strict access controls.
• Customer Support Tools: Live chat, email, and ticketing systems process communication data to deliver responsive customer service.

All service providers are bound by strict confidentiality agreements and may only process your data according to our instructions for the specific purposes described.

5.2 Legal and Regulatory Authorities

We may disclose your information to law enforcement agencies, regulators, courts, or government authorities when:

• Required by applicable Indonesian or international law
• Responding to valid legal processes (subpoenas, court orders, warrants)
• Complying with regulatory reporting obligations or investigations
• Protecting the rights, property, or safety of gococo, our users, or the public
• Detecting, preventing, or addressing fraud, security issues, or technical problems

5.3 Business Transfers

In the event of a merger, acquisition, sale of assets, bankruptcy, or other corporate restructuring involving gococo, your personal information may be transferred to the successor entity, subject to the same privacy protections outlined in this policy.

6. Data Security Measures

gococo implements comprehensive technical and organizational security measures to protect your personal information from unauthorized access, use, disclosure, alteration, or destruction:

• Encryption: All data transmitted between your device and gococo servers is encrypted using SSL/TLS 256-bit encryption. Sensitive data at rest (passwords, financial information, identification documents) is encrypted using industry-standard algorithms.
• Access Controls: Personal information is accessible only to authorized gococo employees and contractors who require access to perform their job functions. All personnel sign confidentiality agreements and receive privacy training.
• Network Security: Firewalls, intrusion detection systems, and regular security audits protect our infrastructure from external threats and unauthorized access attempts.
• Secure Authentication: Password complexity requirements, optional two-factor authentication (2FA), and automatic session timeouts protect account access.
• Data Backup and Recovery: Regular encrypted backups ensure data availability and integrity in case of system failures or disasters.
• Third-Party Security Assessments: Independent security firms conduct periodic penetration testing and vulnerability assessments to identify and remediate potential weaknesses.

Despite these measures, no internet transmission or electronic storage system is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and must notify us immediately if you suspect unauthorized access.

7. Data Retention and Deletion

gococo retains personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

Data Category	Retention Period	Reason for Retention
Account Information	Duration of account + 7 years after closure	Legal compliance, dispute resolution, AML obligations
KYC Documents	7 years after account closure	Regulatory requirements, fraud prevention
Transaction History	7 years	Financial regulations, tax compliance, audits
Betting Records	7 years	Dispute resolution, game integrity investigations
Customer Support Communications	3 years	Service improvement, dispute resolution
Marketing Consent	Until withdrawal of consent	Respecting user preferences
Technical Logs	12 months	Security monitoring, technical troubleshooting

Upon expiration of the applicable retention period, personal information is securely deleted or anonymized such that it can no longer identify you. You may request earlier deletion of your data (see Section 9), subject to our legal obligations to retain certain records.

8. Cookies and Tracking Technologies

gococo uses cookies, web beacons, and similar tracking technologies to enhance user experience, maintain login sessions, analyze platform usage, and deliver personalized content. A cookie is a small text file stored on your device that allows us to recognize you when you return to the platform.

Types of Cookies We Use:

• Essential Cookies: Required for basic platform functionality, including login authentication, session management, security features, and payment processing. These cannot be disabled without impairing platform operation.
• Performance Cookies: Collect anonymous information about how players use gococo, which pages are most popular, and where errors occur, helping us improve platform performance.
• Functional Cookies: Remember your preferences such as language settings, preferred payment methods, and game favorites to provide a personalized experience.
• Marketing Cookies: Track your activity across the platform to deliver relevant promotional offers and measure the effectiveness of marketing campaigns. You may opt out of marketing cookies through your browser settings.

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer. However, disabling cookies may prevent you from accessing certain features or may require you to re-enter information more frequently. For more information about managing cookies, visit your browser's help documentation.

9. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal information:

• Right to Access: Request a copy of the personal information we hold about you, including account details, transaction history, and KYC documents.
• Right to Rectification: Correct inaccurate or incomplete personal information in your account profile.
• Right to Erasure: Request deletion of your personal information, subject to legal retention obligations. Note that account closure and data deletion are permanent and irreversible.
• Right to Restriction: Request that we temporarily restrict processing of your information while disputes are resolved or accuracy is verified.
• Right to Data Portability: Receive a copy of your personal information in a structured, machine-readable format that you can transfer to another service provider.
• Right to Object: Object to processing of your information for direct marketing purposes (we will immediately cease such processing) or based on legitimate interests.
• Right to Withdraw Consent: Withdraw consent for processing activities that require your consent, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact gococo customer support at [email protected] with "PRIVACY REQUEST" in the subject line. We will respond within 30 days and may require identity verification to protect your information from unauthorized access. You also have the right to lodge a complaint with the relevant data protection authority if you believe we have violated your privacy rights.

10. International Data Transfers

gococo primarily serves Indonesian players and stores data in secure servers located in Indonesia and neighboring jurisdictions with adequate data protection standards. In some cases, we may transfer personal information to service providers located outside Indonesia (such as cloud hosting providers or gaming software developers) who assist in platform operations.

All international data transfers are protected by appropriate safeguards, including standard contractual clauses, adequacy decisions recognizing equivalent data protection standards, or explicit consent where required. We ensure that all recipients provide an adequate level of protection for your personal information consistent with this Privacy Policy.

11. Children's Privacy

gococo is strictly an adults-only platform. You must be at least 21 years of age to create an account or use our services. We do not knowingly collect personal information from individuals under 21 years of age. Our KYC verification process is designed to prevent underage account creation.

If we discover that we have inadvertently collected information from someone under 21, we will immediately delete that information and permanently close the account. If you believe a minor has provided information to gococo, please contact us immediately at [email protected] so we can take appropriate action.

Parents and guardians are encouraged to monitor their children's internet activity and use parental control software to prevent access to gambling websites. gococo supports responsible gaming and takes underage gambling prevention seriously.

12. Changes to This Privacy Policy

gococo reserves the right to modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform functionality. When we make material changes, we will notify you by:

• Sending an email to your registered email address
• Displaying a prominent notice on the gococo platform homepage
• Updating the "Last Updated" date at the top of this document

We encourage you to periodically review this Privacy Policy to stay informed about how we protect your personal information. Continued use of the gococo platform after changes take effect constitutes acceptance of the revised Privacy Policy.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or how gococo handles your personal information, please contact us:

• Email: [email protected] (mark "PRIVACY INQUIRY" in subject line)
• Live Chat: Available 24/7 through the gococo platform
• Response Time: We aim to respond to all privacy inquiries within 7 business days

For data protection-related requests (access, deletion, portability), please include your registered account email address and sufficient information to verify your identity. Customer support is available in both English and Indonesian languages.