Data Protection

Privacy Policy

koki46 is committed to protecting your personal data with the highest standards of security and transparency. This Privacy Policy explains exactly what we collect, why we collect it, how we use it, and the rights you hold as a Member of our platform.

Last Updated: January 1, 2026
Our Privacy Commitments

How koki46 Protects Your Data

These six commitments summarize the principles that underpin koki46's approach to data privacy. The full legal text follows in the clauses below.

Minimal Data Collection

koki46 collects only the personal data that is strictly necessary for account registration, KYC verification, payment processing, and regulatory compliance. We do not collect data speculatively or for purposes unrelated to delivering our platform services.

256-Bit SSL Encryption

All personal data transmitted between your device and the koki46 platform is protected by industry-standard 256-bit SSL encryption. Stored data is encrypted at rest using AES-256. Your information is never transmitted or stored in plaintext form.

No Sale of Personal Data

koki46 does not sell, rent, or trade your personal data to unaffiliated third parties for marketing or commercial purposes. Data sharing with third parties is limited strictly to service providers necessary to operate the platform — and all such providers are contractually bound to equivalent data protection standards.

Your Rights Are Respected

As a koki46 Member, you have the right to access, correct, port, and request deletion of your personal data. Requests are processed within 30 calendar days of receipt. Some data may be retained for legally mandated periods under AML and gaming regulations even after an account closure.

Indonesia-Aware Data Practices

koki46 serves primarily Indonesian Members and handles data in a manner sensitive to the Indonesian regulatory context. Payment data linked to BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja is processed in compliance with applicable international data protection frameworks.

Breach Notification

In the unlikely event of a data breach that poses a risk to your personal information, koki46 will notify affected Members within 72 hours of becoming aware of the breach, and will take immediate remedial action to contain the incident and prevent recurrence.

Scope of This Policy: This Privacy Policy applies to all personal data collected by koki46 through the website https://koki46.cam, its associated mobile-optimized pages, and any communications between you and koki46's support team. By registering as a Member or using any part of the platform, you acknowledge that you have read and understood this Policy.

1 Definitions

The following definitions apply throughout this Privacy Policy:

Term Meaning
"Personal Data" Any information that relates to an identified or identifiable natural person — including name, email address, date of birth, national ID number, phone number, IP address, and payment details.
"Processing" Any operation performed on personal data, including collection, storage, use, disclosure, transmission, erasure, or any combination of these activities.
"Data Controller" The entity that determines the purposes and means of processing personal data — in this case, koki46 (operating the platform at https://koki46.cam).
"Data Processor" A third party that processes personal data on behalf of and under the instructions of the Data Controller — for example, payment processors and KYC verification services.
"Member" / "You" Any individual who has registered an account on the koki46 platform or who browses the platform without registration.
"Cookies" Small text files placed on your device by the koki46 platform or authorized third-party services for the purposes described in Section 8 of this Policy.

2 Data Controller

2.1 The Data Controller for all personal data collected through the koki46 platform is koki46, the internationally licensed online gaming brand operating the website at https://koki46.cam.

2.2 koki46 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and applicable data protection regulations. The DPO may be contacted via the email address listed in Section 15 of this Policy.

2.3 While koki46 primarily serves Members based in Indonesia — including in cities such as Jakarta, Surabaya, Bandung, Medan, Yogyakarta, Bali, Semarang, Palembang, and Makassar — the platform is operated under an international licensing framework. Accordingly, this Policy is designed to meet internationally recognized data protection standards.

3 Data We Collect

3.1 koki46 collects personal data across the following categories:

A — Registration & Identity Data

  • Full legal name (as it appears on your Indonesian KTP or passport)
  • Date of birth (used to verify the 21+ age requirement)
  • Indonesian National ID number (KTP number) or passport number
  • Residential address in Indonesia
  • Email address
  • Mobile phone number registered in Indonesia
  • Chosen username and hashed password (passwords are never stored in plaintext)

B — Financial & Payment Data

  • Bank account details linked to your registered payment method — applicable banks include BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, and Bank Permata
  • E-wallet identifiers associated with OVO, DANA, GoPay, ShopeePay, and LinkAja accounts registered in your name
  • Transaction history — deposit amounts, withdrawal amounts, dates, and payment references

C — KYC Verification Documents

  • Scanned or photographed copies of your identity document (KTP or passport)
  • Proof of address documents (utility bills, bank statements dated within 90 days)
  • Selfie photographs submitted for biometric identity matching where required

D — Technical & Usage Data

  • IP address and approximate geolocation derived from IP lookup
  • Device type, operating system, and browser version
  • Session timestamps, pages visited, and features used within the platform
  • Betting and gaming activity — wagers placed, games played, outcomes, and wagering patterns
  • Customer support interaction history — chat logs and email correspondence

E — Communications Data

  • Records of email communications between you and koki46's support team
  • Live chat transcripts
  • Your stated communication preferences (email marketing opt-in / opt-out status)
Note on Sensitive Data: koki46 does not intentionally collect special-category personal data (such as racial or ethnic origin, religious beliefs, or health information) except where such information is incidentally disclosed within KYC documents. Any such data is treated with the highest degree of care and is not used for any profiling or analytical purpose.

4 How We Collect Data

4.1 koki46 collects personal data through the following channels:

  • Directly from you: When you complete the registration form, submit KYC documents, initiate a deposit or withdrawal, contact support, or update your account profile settings.
  • Automatically: When you access and interact with the platform, our servers automatically log technical and usage data including your IP address, device identifiers, session duration, pages accessed, and game activity — see also Section 8 (Cookies & Tracking).
  • From payment providers: When a deposit or withdrawal is processed, koki46 receives transaction confirmation data from the relevant payment provider (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, or others). This data is limited to transaction references, amounts, and account identifiers and does not include full banking credentials.
  • From KYC verification partners: Where koki46 uses a third-party identity verification service to assist with document authentication, that service may return a verification result and associated metadata to koki46's systems.
  • From fraud prevention services: koki46 may receive risk-scoring or flagging data from third-party fraud detection partners as part of its AML compliance obligations.

5 How We Use Your Data

5.1 koki46 uses the personal data it collects for the following purposes:

Purpose Data Categories Used
Account registration and management Registration & Identity Data, Communications Data
Age and identity verification (KYC) Registration & Identity Data, KYC Verification Documents
Processing deposits and withdrawals Financial & Payment Data, Registration & Identity Data
Delivering gaming and sportsbook services Technical & Usage Data, Registration & Identity Data
Anti-money-laundering (AML) compliance Financial & Payment Data, Registration & Identity Data, Technical & Usage Data
Fraud detection and platform security Technical & Usage Data, Financial & Payment Data
Customer support and dispute resolution Communications Data, Registration & Identity Data, Financial & Payment Data
Responsible gaming monitoring Technical & Usage Data (betting patterns, session length)
Promotional communications (opted-in Members only) Communications Data, Registration & Identity Data
Platform analytics and service improvement Technical & Usage Data (aggregated and anonymized where possible)

5.2 koki46 does not use your personal data to make solely automated decisions that produce significant legal effects on you without providing a mechanism for human review. If automated profiling is used for fraud or AML screening, you have the right to request human review of any decision that negatively affects your account.

6 Legal Basis for Processing

6.1 koki46 processes personal data on the following legal bases:

  • Performance of a contract: Processing that is necessary to register your account, verify your identity, process transactions, and deliver the gaming and sportsbook services you have requested — including all wagers on football (BRI Liga 1, EPL, La Liga, Champions League), casino games, togel (Indonesia's traditional numbers lottery), and other platform offerings.
  • Legal obligation: Processing required to comply with applicable anti-money-laundering regulations, gaming licensing conditions, KYC obligations, and data retention requirements mandated by law.
  • Legitimate interests: Processing carried out for koki46's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided those interests are not overridden by your fundamental rights and freedoms.
  • Consent: Processing for which you have given specific, informed, and freely given consent — primarily the sending of promotional and marketing communications. You may withdraw this consent at any time by updating your communication preferences in your Account dashboard or by contacting support.

7 Data Sharing & Disclosure

7.1 koki46 does not sell, rent, or otherwise transfer your personal data to unaffiliated third parties for their own commercial purposes. Data is shared only in the following circumstances:

Service Providers (Data Processors)

koki46 engages third-party data processors who act strictly under our instructions to provide specific services. These include:

  • Payment processors: To facilitate deposits and withdrawals via local Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja). These processors receive only the data necessary to execute the specific transaction.
  • KYC and identity verification providers: To authenticate identity documents submitted during account verification. Document data is transmitted via encrypted channels and is not retained by the KYC provider beyond the verification session unless required by their own legal obligations.
  • Fraud prevention and AML screening providers: To assess transaction risk and identify patterns consistent with money laundering, underage gambling, or account abuse.
  • Game content providers: Including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. These studios may receive anonymized session identifiers to deliver game content and record game outcomes, but do not receive your full personal profile.
  • Cloud infrastructure and hosting providers: Responsible for storing platform data in secure, access-controlled data center environments.

Legal and Regulatory Disclosure

koki46 may disclose personal data to competent regulatory authorities, law enforcement bodies, or courts of law where required to do so by a valid legal obligation, court order, or regulatory instruction. In such cases, koki46 will disclose only the minimum data necessary to satisfy the legal requirement and, where legally permitted, will notify the affected Member of the disclosure.

Business Transfers

In the event of a merger, acquisition, or sale of all or part of koki46's business assets, personal data may be transferred to the acquiring entity as part of that transaction. Affected Members will be notified of any such transfer and will be informed of any material changes to the privacy practices that govern their data.

International Transfers: Some of koki46's third-party service providers may process data in jurisdictions outside Indonesia. Where data is transferred internationally, koki46 ensures that equivalent data protection safeguards are in place through contractual data processing agreements incorporating internationally recognized standard clauses.

8 Cookies & Tracking Technologies

8.1 koki46 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device when you visit the koki46 website. They do not execute code or deliver viruses.

8.2 The types of cookies used by koki46 are:

  • Strictly Necessary Cookies: Required for the platform to function correctly. These include session cookies that keep you logged in during a browsing session and security cookies that protect against cross-site request forgery. You cannot opt out of strictly necessary cookies without ceasing to use the platform.
  • Performance & Analytics Cookies: Used to collect aggregated, anonymized data about how Members navigate and use the platform. This information helps koki46 identify usability issues, measure page load performance, and prioritize feature improvements.
  • Functionality Cookies: Allow the platform to remember your preferences — such as your preferred language setting and display options — so that they persist across sessions without requiring you to re-enter them each time you log in.
  • Marketing & Retargeting Cookies: Only deployed for Members who have given explicit consent to receive promotional communications. These cookies help koki46 deliver relevant offers within the platform. No retargeting cookies are placed for visitors who have not opted in to marketing communications.

8.3 You may manage your cookie preferences through your browser's settings. Note that blocking certain categories of cookies may affect the functionality of the koki46 platform. Most modern browsers — including those commonly used on Android and iOS devices in Indonesia — provide options to view, block, or delete cookies in their privacy or settings menu.

9 Data Retention

9.1 koki46 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following indicative retention periods apply:

Data Category Retention Period
Registration & Identity Data Duration of active account plus 5 years after account closure (AML obligation)
KYC Verification Documents Duration of active account plus 5 years after account closure
Financial & Transaction Data Duration of active account plus 5 years after last transaction
Betting & Gaming Activity Duration of active account plus 3 years after account closure
Customer Support Communications 3 years from the date of each interaction
Technical & Usage Data (logs) 13 months on a rolling basis
Marketing Preferences Until consent is withdrawn, then deleted within 30 days of opt-out

9.2 Where data is retained solely to satisfy a legal obligation and is no longer required for the original operational purpose, access to that data is restricted to authorized compliance personnel only. It is not used for any active processing beyond what the legal obligation requires.

9.3 Upon the expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be associated with any individual.

10 Data Security

10.1 koki46 implements a layered security architecture to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Key security measures include:

  • Transport Layer Security (TLS 1.3): All data transmitted between your browser and the koki46 platform is encrypted in transit using TLS 1.3, the current industry-leading encryption protocol.
  • Data Encryption at Rest: Sensitive stored data — including identity documents, payment references, and hashed passwords — is encrypted at rest using AES-256 encryption.
  • Access Controls: Access to personal data within koki46's internal systems is restricted on a strict need-to-know basis. All staff with access to personal data undergo background screening and regular data protection training.
  • Multi-Factor Authentication (MFA): Administrative access to systems containing personal data requires multi-factor authentication. Members are also encouraged to enable MFA on their koki46 accounts for enhanced protection.
  • Regular Security Audits: koki46's platform infrastructure and data handling practices are subject to regular independent security audits and penetration testing.
  • Incident Response Plan: koki46 maintains a documented data breach response plan with defined roles, escalation paths, and communication procedures to ensure rapid and effective containment of any security incident.
Your Responsibility: The security of your account also depends on you. Never share your koki46 password with anyone. koki46 support staff will never ask for your password. If you suspect unauthorized access to your account, contact our support team immediately via live chat or email so that we can suspend the account and initiate an investigation.

11 Your Data Rights

11.1 As a data subject, you hold the following rights in relation to your personal data held by koki46. To exercise any of these rights, submit a written request to the support address listed in Section 15. Requests will be acknowledged within 5 business days and fulfilled within 30 calendar days unless the request is complex or voluminous, in which case the timeframe may be extended by a further 30 days with prior notification to you.

Right of Access

You have the right to request a copy of the personal data koki46 holds about you, along with information about how it is being processed. We will provide this in a clear, structured format.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Corrections to identity-critical data (name, date of birth, national ID number) may require supporting documentation.

Right to Erasure

You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. Note that data subject to legal retention obligations cannot be deleted until those obligations are fulfilled.

Right to Restriction of Processing

You may request that koki46 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or where you have objected to processing and we are assessing the merits of that objection.

Right to Data Portability

Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) and to transmit it to another controller.

Right to Object

You have the right to object to processing based on legitimate interests — particularly where it relates to direct marketing or profiling. If you object to marketing communications, your preferences will be updated within 5 business days of your request.

Right Not to Be Subject to Solely Automated Decisions

Where koki46 uses automated profiling that produces decisions with significant effects on you (such as account risk scoring), you have the right to request human review of that decision and to contest the outcome.

12 Children & Minors

12.1 The koki46 platform is strictly restricted to individuals aged 21 years or older. koki46 does not knowingly collect personal data from any person under the age of 21. Registration requires confirmation of age, and KYC verification serves as a secondary check to enforce this restriction.

12.2 If koki46 becomes aware that personal data has been collected from an individual under the age of 21 — whether through a misrepresentation during registration or any other means — the following steps will be taken immediately:

  • The account will be suspended and all betting activity halted;
  • Any real-money balance will be returned to the source payment account after identity verification;
  • All personal data associated with the account will be permanently deleted from koki46's systems, except where retention is required for regulatory or legal compliance purposes;
  • The matter will be reviewed by koki46's compliance team and reported to the relevant authorities where required.

12.3 If you are a parent or guardian and believe that a person under your care has registered on the koki46 platform, please contact our support team immediately at so that we can take prompt remedial action.

13 Third-Party Links

13.1 The koki46 platform does not contain links to external third-party websites. All navigation within the platform directs to koki46-owned pages. Game content is embedded via licensed provider integrations but is delivered within the koki46 platform environment.

13.2 In the event that any third-party content or tool embedded in the koki46 platform operates under its own privacy terms — for example, analytics SDKs integrated within game content provided by studios such as Pragmatic Play or Evolution Gaming — koki46 will ensure that any such processing is disclosed in this Policy and that appropriate data processing agreements are in place with those providers.

13.3 koki46 accepts no responsibility for the privacy practices of third-party entities whose services underpin the platform's infrastructure but who operate outside koki46's direct control. In all cases, koki46 selects service providers who maintain privacy and security standards consistent with those described in this Policy.

14 Policy Amendments

14.1 koki46 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, platform features, or applicable legal requirements. When material changes are made, we will:

  • Update the "Last Updated" date displayed at the top of this page;
  • Notify active Members via email at least 7 calendar days before the amended Policy takes effect, except where changes are required on shorter notice by a legal or regulatory obligation;
  • Display a prominent notice on the platform for at least 14 days following the publication of any material amendment.

14.2 Your continued use of the koki46 platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree to the amended Policy, you may request voluntary account closure in accordance with the procedure described in our Terms & Conditions.

14.3 Previous versions of this Privacy Policy are available on request from the support team. The version currently published on this page is the operative version governing all current processing of your personal data.

15 Contact & Complaints

15.1 For any questions, concerns, or requests relating to this Privacy Policy or to your personal data held by koki46, please contact our Data Protection Officer through the following channels:

  • Email: — use the subject line "Privacy Request" or "Data Subject Request" to ensure your message is routed directly to the DPO team. Responses are provided within 5 business days for standard inquiries and within 30 calendar days for formal data subject requests.
  • Live Chat: Available 24/7 via the chat widget within your koki46 account dashboard. For privacy-specific matters, request escalation to the Data Protection team at the outset of the chat session.

15.2 If you are not satisfied with koki46's response to a privacy complaint or data subject request, you have the right to escalate the matter to the data protection supervisory authority in the jurisdiction relevant to your complaint. koki46 will cooperate fully with any investigation initiated by a competent supervisory authority.

Response Commitment: koki46 is committed to handling all privacy-related communications promptly and respectfully. We acknowledge every formal data subject request within 5 business days and aim to resolve all requests within 30 calendar days. Complex requests requiring additional verification or involving large volumes of data may take up to 60 calendar days, with prior notification to the requestor.
Continue Reading

Explore More About koki46

Have questions about how your data is used? Visit our FAQ for plain-language answers, review our full Terms & Conditions, or return to the homepage to explore everything koki46 has to offer.

For responsible gaming tools and self-exclusion options, visit our Responsible Gaming page. Platform email: . 21+ only.