At cor43, we take your privacy seriously. This Privacy Policy explains what personal data we collect from you when you use our platform, how we use and protect it, with whom we may share it, and what rights you hold over your own information. By creating a cor43 account or continuing to use this platform, you acknowledge that you have read and understood this policy.
These cards highlight our core privacy commitments. They are a summary only — the full policy text below is the authoritative document and should be read in its entirety.
Every page of the cor43 platform is served over TLS 1.3 with 256-bit SSL encryption. All data you transmit — including login credentials, personal details, and payment information — is encrypted in transit and at rest.
cor43 collects only the personal data genuinely necessary to operate your account, process transactions, verify your identity (KYC), and comply with anti-money laundering obligations. We do not collect data we do not need.
cor43 does not sell, rent, or trade your personal information to third-party advertisers or data brokers. Your data is used solely to deliver, improve, and protect our services and to meet legal obligations.
Personal data is stored on access-controlled servers with industry-standard physical and logical security measures. Payment card data is handled exclusively by PCI-DSS compliant payment processors — cor43 never stores raw card numbers.
We use only necessary and analytical cookies to operate the platform and understand how Members use it. No third-party advertising cookies are placed on your device. Our cookie practices are described in full in Section 7 of this policy.
You have the right to access, correct, port, or request deletion of your personal data at any time. Requests are processed within 30 days. Contact our Data Protection team at [email protected] to exercise any of your data rights.
Important Notice: This Privacy Policy applies to all users of the cor43 platform at https://cor43.net, including residents of Indonesia and other permitted jurisdictions. If you do not agree with any part of this policy, you must discontinue use of the platform immediately. For questions, contact our Data Protection Officer at [email protected].
1.1 Identity. The data controller responsible for the personal information collected through the cor43 platform at https://cor43.net is the internationally licensed entity that owns and operates the cor43 brand (referred to throughout this policy as "cor43", "we", "us", or "our"). Our Data Protection Officer (DPO) can be contacted directly at [email protected].
1.2 Scope. This Privacy Policy governs all personal data processing activities carried out by cor43 in connection with your access to and use of the cor43 website, mobile-optimized interface, account management portal, sportsbook, live casino, Dragon Tiger tables, slot games, and togel (Indonesia's traditional numbers lottery) services.
1.3 Third-Party Processors. Where cor43 engages third-party data processors — including payment service providers, KYC verification partners, game studios, fraud-detection providers, and cloud infrastructure operators — we do so under binding data processing agreements that impose equivalent data protection obligations on those processors. cor43 remains accountable for how those processors handle your data on our behalf.
Indonesian Residents: While Indonesia's primary personal data protection law (Undang-Undang Perlindungan Data Pribadi) establishes a domestic framework, cor43 applies internationally recognized data protection standards as described in this policy. Your rights as an Indonesian resident with respect to your personal data are set out in full in Section 10.
2.1 Overview. cor43 collects personal data in several categories depending on how you interact with the platform. The table below summarizes the categories of data we collect, with specific examples:
| Category | Examples | Required? |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, Indonesian National Identity Card (KTP) number, passport number, driver's licence number | Mandatory for KYC |
| Contact Data | Email address, mobile phone number, residential address (including city, province, and postal code in Indonesia) | Mandatory for account |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, and others); e-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja); deposit and withdrawal transaction records denominated in IDR | Mandatory for transactions |
| Identity Verification Documents | Scanned or photographed copies of government-issued ID, proof of address, and selfie/liveness-check images submitted during KYC | Mandatory for withdrawals |
| Usage & Behavioural Data | Login timestamps, session duration, pages visited, bet history, game play history, bonus usage, search queries, in-platform navigation patterns | Collected automatically |
| Technical Data | IP address, device type, operating system, browser type and version, screen resolution, time zone (WIB / WITA / WIT), device fingerprint identifiers | Collected automatically |
| Communications Data | Records of your correspondence with our support team via Live Chat, email, or WhatsApp (+62 811 0000 4300), including chat transcripts and email threads | Collected when you contact us |
| Marketing Preferences | Your opt-in or opt-out status for promotional communications, preferred contact channel, language preference | Optional |
2.2 Sensitive Data. cor43 does not intentionally collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data for identification purposes (other than liveness checks required for KYC), health data, or data about sexual orientation. If you voluntarily disclose such information in a support communication, we will handle it with the highest level of care and will not process it for any purpose other than resolving your specific query.
cor43 collects personal data through the following channels:
AML / CFT Notice: cor43 is required by applicable anti-money laundering and counter-financing-of-terrorism obligations to collect, verify, and in some cases report personal data. Failure to provide information necessary for these checks may result in account suspension and the return of deposited funds.
4.1 cor43 processes your personal data on the following legal grounds depending on the specific processing activity:
| Legal Basis | Processing Activities Covered |
|---|---|
| Contract Performance | Account creation and management; processing deposits and withdrawals; settling bets and game results; providing customer support; delivering bonus offers you have accepted. |
| Legal Obligation | KYC identity and age verification; AML and CFT transaction monitoring; sanctions screening; retaining financial records as required by applicable law. |
| Legitimate Interests | Fraud prevention and platform security; improving and personalizing platform features; responsible gambling monitoring; analyzing aggregate usage patterns to enhance user experience. |
| Consent | Sending you marketing communications about bonuses, promotions, new games, and seasonal campaigns (e.g., BRI Liga 1 promotions, Idul Fitri offers, Ramadhan campaigns). You may withdraw this consent at any time. |
5.1 Core Service Delivery. The primary purpose for which cor43 processes your personal data is to operate your account and deliver the services you have requested, including:
5.2 Security and Fraud Prevention. cor43 uses technical and behavioural data to protect the platform and our members against fraud, account takeover, money laundering, collusion, and other forms of abuse. This includes automated risk-scoring of transactions and login events, device fingerprinting, and pattern-based anomaly detection.
5.3 Responsible Gaming. Where our responsible gaming monitoring systems detect patterns that may indicate problem gambling behaviour — such as rapid escalation of deposit frequency, large losses within short timeframes, or after-hours play patterns — cor43 may use your data to trigger internal responsible gaming interventions, including proactive support outreach. This processing is carried out in your genuine interest and constitutes a legitimate interest under applicable data protection law.
5.4 Marketing Communications. Where you have provided explicit consent, cor43 may contact you with promotional offers, new game announcements, seasonal campaigns, and personalized bonus offers. You may opt out of marketing communications at any time by clicking "Unsubscribe" in any promotional email, by contacting [email protected], or by adjusting your account notification preferences. Opting out of marketing does not affect service-related communications (e.g., transaction receipts, account security alerts, KYC requests).
5.5 Platform Improvement. Aggregated and anonymized usage data is used internally to analyze platform performance, identify popular features, optimize the user interface, and develop new product offerings. This aggregated data cannot be used to identify any individual member.
6.1 Who We Share Data With. cor43 does not sell your personal data to any third party. We share personal data only in the limited circumstances described below:
No Advertising Data Sales: cor43 does not participate in behavioural advertising networks, real-time bidding platforms, or data broker ecosystems. Your cor43 account activity is never shared with social media platforms or third-party advertisers for targeting purposes.
7.1 What Are Cookies. Cookies are small text files placed on your device by the cor43 platform when you browse our website. They allow the platform to recognize your device on return visits, maintain your session state, and collect usage analytics.
7.2 Types of Cookies We Use.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Session management, authentication tokens, security (CSRF protection), load balancing. These cannot be disabled without breaking core platform functionality. | Session / up to 24 hours |
| Functional | Remembering your preferred language, time zone (WIB), odds format, and responsible gaming limit settings between sessions. | Up to 12 months |
| Analytical / Performance | Aggregate page-view statistics, feature usage metrics, and error tracking used to improve platform performance. Data is anonymized before analysis. | Up to 24 months |
7.3 Advertising Cookies. cor43 does not use third-party advertising or retargeting cookies. No cookies from Facebook, Google Ads, TikTok Ads, or similar advertising networks are placed on your device through the cor43 platform.
7.4 Managing Cookies. You may control cookies through your browser settings. Disabling strictly necessary cookies will prevent you from logging in and using core platform features. Disabling analytical cookies will not affect your ability to use the platform but may reduce our ability to identify and fix issues affecting your experience.
8.1 Active Accounts. Personal data associated with an active cor43 account is retained for the duration of the account relationship and for a minimum period of five (5) years following account closure, to comply with anti-money laundering record-keeping obligations and to resolve any disputes that may arise after closure.
8.2 KYC Documents. Identity verification documents (KTP, passport scans, proof of address, selfie images) are retained for a minimum of five (5) years following the completion of the KYC process, in accordance with AML/CFT regulatory requirements.
8.3 Transaction Records. Financial transaction records (deposit and withdrawal history denominated in IDR, payment method details) are retained for a minimum of seven (7) years to meet financial record-keeping requirements.
8.4 Support Communications. Records of your support interactions via Live Chat, email, or WhatsApp are retained for two (2) years following the closure of each support ticket, or for the duration of your account relationship if longer.
8.5 Marketing Data. If you withdraw consent to marketing communications, your contact details are moved to a suppression list rather than deleted, to ensure we do not accidentally contact you again following a future re-subscription request. Suppression list entries are reviewed annually.
8.6 Anonymization. Where cor43 retains data beyond the periods above for statistical or research purposes, the data is fully anonymized so that it can no longer be attributed to any identifiable individual.
9.1 Technical Measures. cor43 implements the following technical security measures to protect your personal data:
9.2 Organisational Measures. Access to personal data within cor43 is restricted on a strict need-to-know basis. Staff who handle personal data receive regular training on data protection obligations and are bound by confidentiality agreements. Access permissions are reviewed quarterly and revoked immediately upon staff departure.
9.3 Breach Notification. In the event of a personal data breach that poses a high risk to your rights and freedoms, cor43 will notify affected Members without undue delay and will take all reasonable steps to mitigate the impact of the breach. We maintain a documented incident response plan for this purpose.
Your Role in Security: While cor43 maintains robust technical security, the security of your account also depends on you keeping your login credentials private. Never share your cor43 password with anyone — including individuals claiming to be cor43 support staff. Our support team will never ask for your password.
10.1 Overview. As a cor43 Member, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our Data Protection Officer at [email protected] with the subject line "Data Rights Request — [your right]". We will respond within 30 days of receipt of a valid, verifiable request.
Request a copy of all personal data cor43 holds about you, together with information about how it is processed and with whom it has been shared.
Request correction of inaccurate or incomplete personal data held about you. You may also update many account details directly through your account settings.
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations under AML law.
Request that we restrict processing of your data in specific circumstances — for example, while a rectification request is being verified, or where you have objected to processing based on legitimate interests.
Receive a structured, machine-readable copy of the personal data you have provided to cor43, suitable for transfer to another service provider, where technically feasible.
Object to processing of your personal data based on legitimate interests or for direct marketing purposes. Direct marketing objections are always honored immediately without requiring justification.
10.2 Identity Verification for Rights Requests. To protect your personal data from unauthorized disclosure, cor43 will verify your identity before processing any data rights request. You will be asked to confirm your registered email address, date of birth, and — for access or portability requests — to complete a brief KYC check if not already fully verified.
10.3 Complaints. If you are not satisfied with cor43's response to a data rights request, or if you have a concern about how we handle your personal data, you may raise a complaint with our Data Protection Officer at [email protected]. You also have the right to lodge a complaint with the competent data protection supervisory authority in your jurisdiction.
11.1 As an internationally operated platform serving Indonesian members, cor43 may transfer personal data across international borders — for example, to cloud infrastructure providers, KYC partners, or game studio operators whose systems are located outside Indonesia.
11.2 Whenever personal data is transferred outside Indonesia, cor43 ensures that appropriate safeguards are in place to protect the data to a standard equivalent to that required under applicable Indonesian and international data protection law. These safeguards include binding contractual clauses, data processing agreements, and — where applicable — adequacy assessments of the recipient jurisdiction's data protection framework.
11.3 For further information about the specific safeguards applied to any international transfer of your personal data, please contact our Data Protection Officer at [email protected].
12.1 The cor43 platform is strictly intended for adults aged 21 and above. cor43 does not knowingly collect personal data from individuals under 21 years of age. Our registration process includes mandatory date-of-birth verification, and KYC procedures require documentary proof of age before withdrawal requests are approved.
12.2 If cor43 becomes aware that personal data has been collected from an individual under the age of 21 — whether through a misrepresentation of age or any other means — we will immediately close the associated account, void all associated bets and bonuses, return any deposited real-money funds to the payment method from which they originated, and securely delete all personal data associated with that account as promptly as legally permissible.
12.3 If you are a parent or guardian and believe your child (under 21) has registered a cor43 account, please contact us immediately at [email protected] with the subject line "Underage Account Report" and we will act on the report within one (1) business day.
21+ Only: cor43 is committed to preventing underage gambling. Visit our Responsible Gaming page for further information on our age verification processes and parental control guidance.
13.1 The cor43 platform integrates third-party services that may process personal data independently of cor43, including game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft), payment processors, and customer support tools. Where these services process data as independent data controllers rather than as processors acting on cor43's behalf, their own privacy policies govern that processing.
13.2 cor43 has no control over, and accepts no responsibility for, the privacy practices of independently operated third-party services. We recommend reviewing the privacy policies of any third-party service with which you interact directly.
13.3 WhatsApp Communications. Where you choose to contact cor43's support team via WhatsApp (+62 811 0000 4300), your messages are processed through WhatsApp's platform (operated by Meta Platforms, Inc.). WhatsApp's own Privacy Policy governs the processing of your data within that application. cor43 stores the content of WhatsApp support conversations on its own systems in accordance with the retention periods described in Section 8.
14.1 cor43 may update this Privacy Policy from time to time to reflect changes in our data processing practices, new platform features, evolving legal requirements, or feedback from our Members. The "Last Updated" date at the top of this page reflects the most recent revision.
14.2 Where we make material changes to this Privacy Policy — for example, changes that affect the categories of data we collect, the purposes for which we use it, or the rights available to you — we will provide prominent notice via a platform notification or by email to your registered address at least 14 days before the changes take effect.
14.3 Non-material changes (such as clarifications, formatting improvements, or corrections of typographical errors) take effect immediately upon publication. Your continued use of the cor43 platform following any update constitutes your acknowledgment of the revised policy.
14.4 We recommend bookmarking this page and reviewing it periodically. If you have questions about any change, please contact our Data Protection Officer at [email protected] before continuing to use the platform.
If you have any questions, concerns, or requests regarding this Privacy Policy or the way cor43 handles your personal data, please contact us through the following channels:
Our Data Protection Officer will acknowledge your enquiry within 48 hours and provide a substantive response within 30 days. Where a request is particularly complex or voluminous, we may extend this period by a further 30 days and will notify you accordingly.
Support in Indonesian: Our support team includes native Indonesian-speaking agents available around the clock via Live Chat and during extended WhatsApp hours. If you prefer to discuss a privacy matter in Indonesian, our agents are ready to assist — though this Privacy Policy and all formal written responses will be issued in English as the authoritative language of this platform.
We take your privacy seriously so you can focus on what matters: enjoying world-class sports betting, live casino tables, Dragon Tiger, slots, and more — all on a trusted, SSL-secured platform built for Indonesian players.