At cor118, we treat your personal data with the same seriousness we apply to platform security and fair gaming. This Privacy Policy explains precisely what data we collect, why we collect it, how we use and protect it, and what rights you hold as a cor118 user.
Summary for Users: cor118 collects personal data solely to operate your account, process payments, verify identity, prevent fraud, and deliver our gaming services. We do not sell your personal data to any third party. You have the right to access, correct, and request deletion of your data at any time by contacting [email protected]. Full details are set out in the clauses below.
This Privacy Policy ("Policy") is issued by cor118 ("we", "us", "our", "the Company") and applies to all personal data collected from individuals ("you", "the User") who register an account on or otherwise interact with the cor118 Platform at https://cor118.cam and any associated mobile-optimised interfaces.
cor118 is committed to responsible data stewardship. We recognise that users of online gaming platforms — particularly those in Indonesia — entrust us with sensitive personal and financial information. That trust is not taken lightly. This Policy is designed to be transparent, comprehensive, and written in plain language so that every cor118 user understands exactly how their data is handled.
By registering an account or using any service on the cor118 Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree with any part of this Policy, you must not use the cor118 Platform.
This Policy should be read alongside our Terms & Conditions and our Responsible Gaming commitment, both of which form part of the overall agreement between you and cor118.
The following definitions apply throughout this Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, date of birth, contact details, financial information, and device identifiers. |
| "Processing" | Any operation performed on personal data, including collection, storage, use, disclosure, transfer, or deletion. |
| "Data Controller" | cor118, the entity that determines the purposes and means of processing personal data collected through the Platform. |
| "Data Processor" | A third party that processes personal data on behalf of cor118 under a binding data processing agreement (e.g., payment gateway providers, KYC verification services). |
| "Platform" | The cor118 website at https://cor118.cam and all associated services, interfaces, and content accessible therethrough. |
| "KYC" | Know Your Customer — the identity verification process required for full account access, including withdrawal privileges. |
| "Cookies" | Small data files placed on your device by the Platform to enable functionality, remember preferences, and support analytics. |
cor118 collects the following categories of personal data from users:
Identity data is collected during account registration and KYC verification. This information allows us to confirm that you are who you claim to be, that you meet our minimum age requirement of 21 years, and that you are a resident of Indonesia or a jurisdiction in which use of the Platform is legally permitted.
Contact data is used to communicate account updates, transaction notifications, security alerts, promotional communications (where opted in), and responses to customer support queries. We serve users across the Indonesian archipelago — from Jakarta, Surabaya, and Bandung to Bali, Makassar, and Medan — and contact data helps us tailor service delivery appropriately.
Financial data is collected to process deposits and withdrawals in Indonesian Rupiah (Rp / IDR), conduct anti-money-laundering checks, and comply with our financial compliance obligations. cor118 does not store full bank account credentials on its servers; payment data is processed through cert ified payment processors under binding data security agreements.
Technical data is collected automatically when you access the Platform. It is used to maintain platform security, detect suspicious access patterns, enforce our single-account policy, and optimise the Platform's performance across devices and network conditions common in Indonesia.
Behavioural data is generated through your use of the Platform and is used to fulfil our responsible gaming obligations, detect problem gambling indicators, personalise promotional offers (where consent has been given), and resolve disputes regarding game or bet outcomes.
Records of all communications between you and the cor118 customer support team — including live chat transcripts, email correspondence, and any attachments submitted — are retained for audit, quality assurance, and dispute resolution purposes.
cor118 collects personal data through the following means:
cor118 processes your personal data for the following purposes:
| Purpose | Data Categories Used |
|---|---|
| Account Registration & Management | Identity, Contact |
| KYC Identity Verification | Identity, Contact, Financial |
| Payment Processing (Deposits & Withdrawals) | Identity, Financial, Technical |
| Fraud Prevention & AML Compliance | Identity, Financial, Technical, Behavioural |
| Platform Security & Integrity | Technical, Behavioural |
| Responsible Gaming Monitoring | Behavioural, Communications |
| Customer Support & Dispute Resolution | Identity, Communications, Behavioural |
| Promotional Communications (opt-in only) | Contact, Behavioural |
| Platform Analytics & Improvement | Technical, Behavioural |
| Legal & Regulatory Compliance | All categories where required |
cor118 does not process personal data for any purpose beyond those listed above without first obtaining your explicit consent or being required to do so by applicable law.
cor118 processes personal data on the following legal bases:
cor118 does not sell, rent, or trade your personal data. We may share personal data with the following categories of recipients only to the extent necessary for the stated purposes:
Reminder: cor118 will never contact you to request your account password, full bank account number, or e-wallet PIN. If you receive any such request purportedly from cor118, treat it as fraudulent and report it immediately to [email protected].
As an internationally operated platform serving Indonesian users, cor118 may transfer certain personal data to servers or service providers located outside of Indonesia. Where such transfers occur, cor118 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that required by the data protection principles applicable in Indonesia.
Safeguards applied to international transfers include contractual data protection clauses incorporated into all agreements with third-party data processors, encryption of data in transit and at rest, and restriction of access to transferred data on a strict need-to-know basis.
If you wish to obtain details of the specific safeguards applied to any particular international transfer of your data, please contact our data team at [email protected].
The cor118 Platform uses cookies and similar tracking technologies to ensure functionality, enhance user experience, and support security and analytics. The cookies we use fall into the following categories:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential | Required for core Platform functionality — session management, login state, security tokens. Cannot be disabled without impairing Platform access. | Session / up to 24 hours |
| Functional | Remember your preferences such as language display, odds format, and notification settings. | Up to 12 months |
| Analytics | Aggregate, anonymised data on how users navigate the Platform — used to identify usability issues and improve page performance. | Up to 12 months |
| Security | Fraud detection, bot mitigation, and multi-account detection signals tied to device and session fingerprinting. | Session / up to 30 days |
You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will prevent you from accessing your cor118 account. Disabling analytics or functional cookies will not affect your ability to use the Platform but may reduce the quality of your experience.
cor118 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to any individual.
As a cor118 user, you hold the following rights in relation to your personal data. To exercise any of these rights, please submit a written request to [email protected]. We will respond within 30 days of receiving a valid request.
Request a copy of all personal data we hold about you, including the purposes for which it is processed and the categories of recipients with whom it has been shared.
Request correction of any inaccurate or incomplete personal data held in your account. Some corrections may require supporting documentation.
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected and no legal retention obligation applies.
Request that we limit the processing of your data while a dispute regarding its accuracy or our legal basis for processing is under review.
Request that we provide your personal data in a structured, machine-readable format so that you can transfer it to another service provider.
Object to processing carried out on the basis of our legitimate interests, including profiling for personalised promotions. We will cease such processing unless we can demonstrate compelling legitimate grounds.
Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
If you believe cor118 has processed your data unlawfully, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.
Please note: Certain data rights may be limited where their exercise conflicts with our legal obligations — for example, we cannot delete transaction records that we are required by law to retain for AML compliance purposes. We will always inform you of any such limitation when responding to your request.
The cor118 Platform is strictly intended for adults aged 21 years and older. We do not knowingly collect personal data from individuals under the age of 21. During account registration and KYC verification, we actively verify each user's date of birth and require submission of government-issued identification confirming age eligibility.
If cor118 becomes aware that personal data has been collected from a person under 21 years of age — whether through our own detection, a parental report, or any other means — we will immediately suspend the relevant account, permanently delete all associated personal data, and return any deposited funds to the originating payment method. Any winnings or bonus credits associated with such an account will be forfeited.
Parents and guardians who believe that a minor may have created an account on the cor118 Platform are encouraged to contact us immediately at [email protected] so that we can take prompt action.
cor118 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
While cor118 employs all reasonable and industry-appropriate security measures, no digital platform can guarantee absolute security. You are encouraged to protect your own account by using a strong, unique password and enabling two-factor authentication.
The cor118 Platform integrates with third-party services — including licensed game studios, payment gateways, and analytics tools — that are necessary to deliver our services. When you interact with these embedded third-party services, those providers may independently collect certain technical or behavioural data in accordance with their own privacy policies.
cor118 is not responsible for the privacy practices of third-party service providers acting as independent data controllers. We recommend that you review the privacy policies of any third-party service you interact with through the Platform, particularly your bank or e-wallet provider (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) and any game studio whose content you access.
cor118 selects all third-party service providers with due care and requires that all processors with whom we share personal data maintain security and privacy standards consistent with our own obligations under this Policy.
cor118 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — we will notify registered users by email and via a prominent notice on the Platform at least 7 days before the updated Policy takes effect.
For minor or administrative changes, we will update the effective date at the top of this page without individual notification. Your continued use of the cor118 Platform following the effective date of any amendment constitutes your acknowledgment of the updated Privacy Policy. We encourage you to review this page periodically.
The current version of this Policy is always accessible at https://cor118.cam/privacy-policy.
If you have any questions, concerns, or complaints about how cor118 handles your personal data, or if you wish to exercise any of your data rights as described in Clause 11, please contact us through the foll owing channels:
When submitting a data rights request, please include your registered email address and account username (if applicable) to help us locate your record efficiently. For security reasons, we may ask you to verify your identity before processing requests for access, rectification, or deletion.
If you are dissatisfied with how cor118 has handled a data complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction. We will provide full cooperation with any such investigation.
All data transmitted to and from the cor118 Platform is protected by TLS encryption. Sensitive data stored on our servers is encrypted at rest using AES-256 standards, ensuring your personal and financial information remains secure at all times.
Internal access to personal data is restricted to authorised personnel only, on a strict need-to-know basis. All staff handling personal data undergo regular privacy training and are bound by confidentiality agreements.
Our KYC process ensures that all cor118 accounts belong to real, verified Indonesian adults aged 21+. This protects you from fraud and ensures the platform remains secure for legitimate users.
We clearly state what data we collect, why we collect it, and who we share it with. There are no hidden purposes. You can request a copy of your data at any time and see exactly what information cor118 holds about you.
cor118 does not sell, rent, or trade your personal data to any third party for marketing purposes. We share data only when necessary to deliver our services or when required by law.
You have the right to access, correct, delete, and port your data. You can object to profiling, withdraw consent at any time, and lodge a complaint with regulators if you feel your rights have been breached.
Our support team is available 24/7 to answer any questions about your data rights, how we use your information, or how to update your privacy preferences. You can also review our full Terms & Conditions and Responsible Gaming policies.