Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal data collected by moka37 through our website at https://moka37.cam, mobile-optimized interfaces, and any related services. By creating an account and using moka37 services, you consent to the data practices described in this policy.

moka37 operates as an online gaming platform serving Indonesian players with casino games, sports betting, and lottery entertainment. We process personal data in accordance with international data protection standards and gaming industry best practices. This policy explains what information we collect, why we collect it, how we use it, how we protect it, and your rights regarding your personal data.

2. Information We Collect

2.1 Information You Provide Directly

When you register for a moka37 account, we collect the following personal information:

• Identity Information: Full legal name, date of birth, gender, nationality, and government-issued identification number (KTP / Indonesian National ID).
• Contact Information: Email address, phone number, residential address, and postal code.
• Account Credentials: Username, password (stored in encrypted form), and security questions for account recovery.
• Financial Information: Bank account details (BCA, BRI, BNI, Mandiri), e-wallet information (OVO, DANA, GoPay), transaction history, deposit and withdrawal records.
• Verification Documents: Copies of identification documents, proof of address, selfie photographs submitted during KYC (Know Your Customer) verification.
• Communication Records: Content of customer support conversations via live chat, email, WhatsApp, and in-app messaging.

2.2 Information Collected Automatically

When you use the moka37 platform, we automatically collect certain technical and usage information:

• Device Information: IP address, device type, operating system, browser type and version, screen resolution, time zone setting.
• Usage Data: Pages visited, features accessed, games played, bet history, time spent on platform, referral source, clickstream data.
• Location Data: Approximate geographic location derived from IP address to verify residency requirements and comply with regional gaming regulations.
• Cookies and Similar Technologies: Session cookies, persistent cookies, local storage, and similar tracking technologies to enhance user experience and platform functionality.

2.3 Information from Third Parties

We may receive information about you from third-party sources including:

• Payment processors confirming transaction details and fraud screening results.
• Identity verification services validating your KYC documentation.
• Gaming providers supplying game outcome data and RTP verification.
• Affiliate partners who referred you to moka37 (limited to referral tracking codes, not personal data).

3. How We Use Your Information

moka37 processes your personal data for the following legitimate purposes:

3.1 Service Provision and Account Management

• Creating and maintaining your player account.
• Processing deposits, withdrawals, and other financial transactions.
• Enabling you to play casino games, place sports bets, and participate in lottery draws (togel).
• Managing your VIP loyalty program tier and distributing cashback rewards.
• Providing customer support and responding to inquiries.
• Sending account-related notifications including transaction confirmations, security alerts, and policy updates.

3.2 Legal and Regulatory Compliance

• Verifying your identity and age to prevent underage gambling (21+ requirement).
• Conducting KYC and anti-money laundering (AML) checks as required by gaming regulations.
• Detecting and preventing fraud, cheating, collusion, and other prohibited activities.
• Maintaining records for audit purposes and regulatory reporting.
• Complying with legal obligations including court orders, subpoenas, and governmental requests.

3.3 Platform Improvement and Analytics

• Analyzing usage patterns to improve platform functionality and user experience.
• Conducting research and analytics to enhance game selection and betting markets.
• Testing new features, games, and promotional campaigns.
• Optimizing website performance, loading speeds, and mobile compatibility.

3.4 Marketing and Communications (With Your Consent)

• Sending promotional offers, bonus notifications, and tournament invitations via email or SMS (only if you've opted in).
• Personalizing marketing content based on your gaming preferences and activity history.
• Conducting customer satisfaction surveys and feedback requests.

You may opt out of marketing communications at any time by clicking the unsubscribe link in emails, replying STOP to SMS messages, or adjusting your communication preferences in your account settings.

3.5 Responsible Gaming

• Monitoring gaming behavior for signs of problem gambling.
• Enforcing deposit limits, loss limits, and self-exclusion requests.
• Providing access to responsible gaming tools and support resources.
• Identifying patterns that may indicate compulsive behavior and proactively offering assistance.

4. How We Share Your Information

moka37 does not sell, rent, or trade your personal information to third parties for their marketing purposes. We share your data only in the following limited circumstances:

4.1 Service Providers

We engage trusted third-party service providers to perform functions on our behalf, including:

• Payment Processors: To facilitate deposits and withdrawals via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and other payment methods.
• KYC Verification Services: To validate identity documents and conduct background checks.
• Gaming Providers: To deliver casino games, live dealer tables, and sports betting platforms (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, etc.).
• Cloud Hosting Providers: To store data securely on encrypted servers.
• Customer Support Tools: To manage live chat, email ticketing, and communication history.
• Analytics Services: To analyze platform usage and improve performance (data anonymized where possible).

All service providers are contractually obligated to handle your data securely and only for the purposes specified by moka37. They are prohibited from using your information for their own purposes.

4.2 Legal Requirements

We may disclose your personal information if required to do so by law or in response to valid requests from governmental authorities, including:

• Compliance with court orders, subpoenas, or legal processes.
• Cooperation with law enforcement investigations.
• Protection of moka37's legal rights, property, or safety.
• Prevention or investigation of fraud, security breaches, or illegal activity.

4.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or bankruptcy, your personal information may be transferred to the successor entity. We will notify you via email and prominent website notice before your data is transferred and becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information with third parties when you explicitly consent to such sharing, such as participating in joint promotions with affiliate partners or third-party bonus offers.

5. Data Security Measures

Protecting your personal information is a top priority for moka37. We employ industry-standard security measures including:

5.1 Technical Safeguards

• SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL (Secure Socket Layer) technology, the same encryption standard used by banks.
• Database Encryption: Personal data stored on our servers is encrypted at rest using AES-256 encryption.
• Secure Password Storage: Passwords are hashed using bcrypt with salt, making them unreadable even to moka37 staff.
• Firewall Protection: Multi-layer firewalls protect our servers from unauthorized access and cyber attacks.
• Regular Security Audits: Third-party security experts conduct penetration testing and vulnerability assessments annually.
• DDoS Protection: Distributed denial-of-service attack mitigation ensures platform availability and data integrity.

5.2 Organizational Safeguards

• Access Controls: Only authorized personnel with legitimate business needs can access personal data, under strict access control policies.
• Staff Training: All employees undergo regular data protection and security awareness training.
• Confidentiality Agreements: Staff members sign confidentiality agreements prohibiting unauthorized disclosure of customer information.
• Incident Response Plan: We maintain a documented procedure for responding to data breaches, including prompt notification to affected users.

5.3 Your Role in Security

While we implement robust security measures, you also play a critical role in protecting your account:

• Choose a strong, unique password and never share it with anyone.
• Enable two-factor authentication if available.
• Log out after each session, especially on shared or public devices.
• Keep your email account secure, as it's used for password resets and important notifications.
• Report any suspicious activity or unauthorized access immediately to [email protected].

6. Data Retention

moka37 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

6.1 Active Account Data

While your account remains active, we retain all account information, transaction history, gaming records, and communication logs to provide ongoing service and comply with gaming regulations.

6.2 Closed Account Data

If you request account closure, we will deactivate your account but retain certain data for:

• Legal and Regulatory Compliance: Gaming regulations typically require retention of player records for 5-7 years following account closure for audit and anti-money laundering purposes.
• Fraud Prevention: Records of closed accounts help prevent reopening of banned or fraudulent accounts.
• Dispute Resolution: Historical data enables resolution of disputes or inquiries that arise after account closure.

6.3 Deletion and Anonymization

After the required retention period expires, we will delete or anonymize your personal data such that it can no longer be associated with you. Anonymized data may be retained indefinitely for statistical analysis and business intelligence purposes.

7. Your Privacy Rights

Under international data protection standards, you have the following rights regarding your personal information:

7.1 Right of Access

You have the right to request a copy of all personal data we hold about you. You can view most information directly in your account dashboard, or request a comprehensive data export by contacting [email protected].

7.2 Right to Rectification

If any personal information we hold is inaccurate or incomplete, you have the right to request correction. You can update most details directly in your account settings or contact customer support for assistance.

7.3 Right to Erasure ("Right to Be Forgotten")

You may request deletion of your personal data, subject to legal and regulatory retention requirements. Please note that gaming regulations typically mandate retention of certain records for 5-7 years even after account closure.

7.4 Right to Restrict Processing

You can request that we limit how we use your personal data in certain circumstances, such as while we verify the accuracy of contested information.

7.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format (such as CSV or JSON) for transfer to another service provider.

7.6 Right to Object

You may object to processing of your personal data for direct marketing purposes at any time. You can opt out of marketing communications via your account settings or by contacting customer support.

7.7 Right to Withdraw Consent

Where processing is based on your consent (such as marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing conducted before withdrawal.

7.8 Exercising Your Rights

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with the subject line "Privacy Rights Request." We will respond to your request within 30 days.

8. Cookies and Tracking Technologies

moka37 uses cookies and similar technologies to enhance your experience, analyze platform usage, and deliver personalized content.

8.1 Types of Cookies We Use

• Essential Cookies: Required for platform functionality, including session management, login authentication, and security features. These cannot be disabled.
• Performance Cookies: Collect anonymous usage data to help us understand how visitors interact with our platform and identify areas for improvement.
• Functional Cookies: Remember your preferences such as language selection, time zone, and display settings.
• Marketing Cookies: Track your browsing across sessions to deliver personalized promotions and measure campaign effectiveness (only with your consent).

8.2 Managing Cookies

You can control cookie preferences through your browser settings. Most browsers allow you to refuse or delete cookies. However, disabling essential cookies may affect platform functionality and your ability to use certain features. Please note that opting out of marketing cookies will not prevent you from seeing advertisements; it will simply make them less relevant to your interests.

9. International Data Transfers

Your personal information may be transferred to and stored on servers located outside of Indonesia. moka37 partners with international gaming providers and service companies whose infrastructure spans multiple jurisdictions. When we transfer data internationally, we ensure adequate safeguards are in place through:

• Standard contractual clauses approved by data protection authorities.
• Selection of service providers certified under recognized data protection frameworks.
• Technical measures including encryption during transmission and at rest.

All international transfers comply with applicable data protection laws and gaming regulations.

10. Children's Privacy

moka37 services are strictly intended for individuals aged 21 years or older. We do not knowingly collect personal information from anyone under the age of 21. If we become aware that a user is underage, we will immediately suspend the account, void all transactions, and delete associated personal data. Parents or guardians who believe their child has provided personal information to moka37 should contact us immediately at [email protected].

11. Changes to This Privacy Policy

moka37 may update this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or platform features. Material changes will be communicated via:

• Email notification to your registered email address.
• Prominent notice on the moka37 homepage and during login.
• Update to the "Last Modified" date at the top of this policy.

We encourage you to review this Privacy Policy regularly to stay informed about how we protect your information. Continued use of moka37 services following notice of changes constitutes acceptance of updated terms.

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us through any of the following channels:

• Email: [email protected] (Data Protection Officer)
• Live Chat: Available 24/7 via the moka37 platform
• WhatsApp: +62 812 3456 7890 (Available 08:00-02:00 WIB)
• In-App Messaging: Access via your account dashboard

We are committed to resolving privacy concerns promptly and transparently. Our customer support team is available 24/7 to assist with any privacy-related inquiries.