Privacy Policy

01 Introduction

This Privacy Policy ("Policy") is issued by Cocol88 ("we", "us", "our") and applies to all personal data collected from individuals ("you", "User", "Player") who access or use the Cocol88 platform at cocol88.lat, including all gaming services, sports betting markets, promotional programmes, customer support channels, and associated digital properties.

We take privacy seriously. Cocol88 operates in a regulated environment that requires the collection and processing of certain personal data — including for identity verification (KYC), payment processing, fraud prevention, and responsible gambling compliance. This Policy explains each of these processing activities transparently and in plain language.

02 Definitions

For the purpose of this Privacy Policy, the following terms carry the meanings assigned below:

• "Personal Data" means any information that identifies or can reasonably identify a living individual, directly or in combination with other data.
• "Processing" means any operation performed on personal data, including collection, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means Cocol88, the entity that determines the purposes and means of processing personal data.
• "Data Processor" means any third party that processes personal data on behalf of Cocol88 under contractual instruction.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your wishes, expressed by a clear affirmative action.
• "KYC" means Know Your Customer — the identity verification process required for account maintenance and withdrawal processing.
• "Cookie" means a small text file placed on your device by a website to store information about your browsing activity and preferences.

03 Personal Data We Collect

3.1 Data Provided Directly by You

When you register an account or interact with Cocol88, you may provide the following categories of personal data:

• Identity data: Full legal name, date of birth, gender, nationality;
• Contact data: Email address, mobile phone number, residential address (including city and postcode);
• Identity verification documents: Malaysian Identity Card (MyKad), passport, or equivalent government-issued document;
• Financial data: Bank account details, e-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay, DuitNow), cryptocurrency wallet addresses;
• Account credentials: Username and encrypted password hash (we do not store your plain-text password);
• Support communications: Correspondence submitted via live chat, email, or other support channels.

3.2 Data Collected Automatically

When you access the Cocol88 platform, we automatically collect certain technical and behavioural data, including:

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser version;
• Session timestamps, pages visited, and navigation paths;
• Game session data, wager amounts, and betting history;
• Cookie and tracking pixel data (see Section 7).

04 How We Use Your Personal Data

The table below summarises the primary purposes for which Cocol88 uses your personal data:

05 Legal Basis for Data Processing

Cocol88 processes personal data only where a valid legal basis exists under applicable data protection law. Depending on the processing activity, we rely on one or more of the following legal grounds:

• Contract Performance: Processing is necessary to fulfil our obligations under the account agreement with you — including account creation, payment processing, and service delivery.
• Legal Obligation: Processing is required to comply with laws applicable to Cocol88, including anti-money laundering (AML) regulations, KYC requirements, and responsible gambling legislation.
• Legitimate Interest: Processing is necessary for our legitimate business interests — including fraud prevention, network security, and platform analytics — provided those interests are not overridden by your fundamental rights.
• Consent: Where we rely on your consent (for example, marketing communications), you have the right to withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

06 Data Sharing & Third Parties

6.1 Categories of Recipients

Cocol88 may share your personal data with the following categories of third parties, strictly for the purposes described in this Policy:

• Payment service providers: Banks, e-wallet operators (including Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, RHB), and cryptocurrency processing services — for deposit and withdrawal processing;
• Identity verification providers: Third-party KYC and AML screening services that assist us in verifying player identities and screening against sanctions lists;
• Gaming technology providers: Software suppliers and game studios whose platforms power the games and betting markets on Cocol88;
• Customer support platforms: Live chat and help desk software providers that facilitate our 24/7 support operation;
• Analytics and security providers: Services that help us monitor platform performance, detect fraud, and maintain system security;
• Regulatory and law enforcement authorities: Where required by law, court order, or regulatory instruction.

6.2 Data Processing Agreements

All third-party data processors engaged by Cocol88 are subject to contractual data processing agreements that impose obligations consistent with applicable data protection standards, including requirements for data security, purpose limitation, and prohibition on sub-processing without our prior written consent.

07 Cookies & Tracking Technologies

Cocol88 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small data files stored on your device when you visit our website. We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for platform functionality, including session management, login state, and security features. These cannot be disabled without affecting core platform operation.
• Performance & Analytics Cookies: Collect anonymised data on how players use the platform — pages visited, session durations, error logs — to help us improve performance and user experience.
• Functional Cookies: Remember your preferences, such as language selection and display settings, to personalise your experience across sessions.
• Marketing Cookies: Used to deliver relevant promotional content based on your browsing activity. These are only activated where you have provided consent.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use core platform functions, including account login and payment processing.

08 Data Retention

Cocol88 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable laws and regulatory obligations. Our general retention guidelines are as follows:

• Active account data: Retained for the duration of the account and for a minimum of 5 years following account closure, in accordance with AML and financial record-keeping requirements;
• KYC and identity documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later;
• Transaction records: Retained for a minimum of 5 years from the date of each transaction;
• Support communications: Retained for up to 3 years from the date of the communication;
• Marketing consent records: Retained for the duration of the marketing relationship and for 2 years following opt-out;
• Technical and log data: Retained for up to 12 months on a rolling basis.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

09 Data Security Measures

Cocol88 implements a comprehensive suite of technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. Our security framework includes:

• 256-bit SSL/TLS encryption for all data in transit;
• AES-256 encryption for sensitive data at rest;
• Two-factor authentication (2FA) available for all player accounts;
• Regular penetration testing and vulnerability assessments conducted by independent security professionals;
• Role-based access controls limiting internal access to personal data to authorised personnel only;
• Incident response procedures with defined escalation paths and notification timelines in the event of a data breach.

10 International Data Transfers

As an internationally operated platform, Cocol88 may transfer your personal data to service providers located in jurisdictions outside Malaysia. Where such transfers occur, we ensure that appropriate safeguards are in place to protect your data, including contractual data transfer agreements with receiving parties that impose data protection standards equivalent to those applicable in the jurisdiction of collection.

By using the Cocol88 platform and providing your personal data, you acknowledge and consent to the international transfer of your data as described in this section.

11 Your Data Rights

Subject to applicable law and any overriding regulatory obligations, you hold the following rights in relation to your personal data held by Cocol88:

• Right of Access: You may request a copy of the personal data we hold about you, together with information about how it is used.
• Right of Rectification: You may request correction of inaccurate or incomplete personal data held on your account.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations.
• Right to Restriction of Processing: You may request that we restrict the processing of your data in certain circumstances, for example while a rectification request is being assessed.
• Right to Data Portability: You may request that we provide your personal data to you in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing activities based on legitimate interest, including direct marketing communications.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

To exercise any of these rights, please submit a written request to our Data Protection contact as detailed in Section 15 below. We will acknowledge your request within 5 business days and respond substantively within 30 days. Complex requests may require an extension of up to a further 60 days, of which we will notify you in advance.

12 Minors and Children's Privacy

The Cocol88 platform is strictly intended for persons aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under this age threshold, we will take immediate steps to delete that data and close the associated account.

If you believe a person under 21 years of age has registered an account on the Cocol88 platform, please notify us immediately at [email protected] (plain text only — not a clickable link).

13 Third-Party Links & External Services

The Cocol88 platform may contain references to third-party services — including payment providers such as Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, and Public Bank. When you interact with these external services, their own privacy policies and terms apply. Cocol88 is not responsible for the privacy practices or content of any third-party service.

We encourage you to review the privacy policies of any third-party services you use in connection with your Cocol88 account, particularly your chosen payment providers and e-wallet operators.

14 Amendments to This Privacy Policy

Cocol88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, regulatory guidance, or operational requirements. Material changes will be communicated to registered players via the email address on file or through a prominent notice on the platform.

The effective date of the current version of this Policy is stated at the top of this page. Continued use of the Cocol88 platform following publication of a revised Policy constitutes your acceptance of the updated terms. We encourage you to review this Policy periodically.

15 Contact Us — Data Protection Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our Data Protection team using the details below:

• Email: [email protected] — Please include "Privacy Request" in your subject line for data rights enquiries. (Plain text address — not a clickable link.)
• Live Chat: Available 24/7 directly on the platform — select "Privacy & Data" as your enquiry category
• Languages: English, Bahasa Melayu, 中文
• Response commitment: Acknowledgement within 5 business days; substantive response within 30 days

For concerns about responsible gambling data handling specifically, please also review our Responsible Gambling page, which contains dedicated information on how we use data in the context of player protection programmes.