kolo Platform Privacy Notice

This page describes what we collect when you use kolo and how we keep that data protected. We collect personal information — your name, email, date of birth, address, payment details and account activity — to verify your identity, process deposits and withdrawals, settle wagers, detect fraud and comply with local law. Our privacy practices apply whenever you access our sportsbook (Liga 1, Piala Indonesia, Piala AFF, Champions League coverage), live casino tables or slot games.

We store your data on encrypted servers and restrict access to authorised personnel only. We do not sell or share your information with marketing partners. We may share limited data with payment processors, regulatory bodies or law-enforcement agencies when legally required. You have the right to request access to your data, ask for corrections or request deletion subject to legal retention obligations.

Read this notice carefully. By creating a kolo account, you agree to our data practices as outlined below.

What data we collect on kolo

We collect several categories of information when you register and use kolo. Identity data includes your full legal name, email address, date of birth and residential address. We collect this during account registration and verify it as part of Know-Your-Customer (KYC) checks before you can withdraw funds.

Payment data includes your bank account name and number, or mobile wallet identifiers (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet), depending on which deposit method you choose. We store this data to process transfers and reconcile transactions. We do not store complete bank card numbers — our payment processor handles card data according to Payment Card Industry standards.

Account activity data includes every wager you place on kolo — football markets (Liga 1, Piala Indonesia, Piala AFF, Champions League), live casino tables, slot spins — plus deposits, withdrawals, account logins and support interactions. We log this activity for settlement, fraud detection and dispute resolution. We retain account activity for a minimum of seven years to comply with financial-crimes regulations.

We use KYC data to verify your identity

During Know-Your-Customer verification, you upload a photo ID, a selfie and a utility bill. We scan these documents for authenticity and cross-reference your details against fraud databases. This process is mandatory before withdrawal and required by Indonesian anti-money-laundering law.

Device and usage data includes your IP address, browser type, operating system and pages you visit on kolo. We collect this to detect fraud, troubleshoot technical issues and understand how our platform is used. We may also collect cookie identifiers and session tokens to keep you logged in and improve your experience.

How we use your data on kolo

We use identity and payment data to process your deposits and withdrawals. When you request a cash-out via mobile banking or bank transfer, we verify your identity against KYC documents and then initiate the transfer. Payment processors (our bank partners) receive your account details to execute the transfer; they do not store your full data with us — they process it on their own systems under their own privacy policies.

We use account activity data to settle wagers accurately. When you place a bet on a Liga 1 fixture or spin a slot game on kolo, our systems record the wager, outcome and settlement. If a dispute arises — for example, you believe a wager was settled incorrectly — we review the activity logs to investigate and respond.

We use identity and account activity data to comply with anti-money-laundering (AML) and counter-terrorism-financing (CTF) regulations. Indonesian law requires us to collect customer information, monitor transaction patterns and report suspicious activity. We analyse your account for signs of money laundering — unusual deposit sizes, rapid deposits and withdrawals, betting patterns inconsistent with casual play. If we detect suspicious patterns, we may freeze your account, request additional documentation or report to relevant authorities.

We at kolo process your data to deliver our service, prevent fraud and comply with law — not for marketing or resale.

kolo operator

Data shared with third parties

We share your data with third-party service providers who assist kolo. Payment processors (banks, wallet providers) receive your payment details to process deposits and withdrawals. They handle this data under their own privacy policies. Fraud-detection vendors receive your account activity to help identify suspicious patterns. Email providers deliver our support communications and account notifications. These vendors operate under data-protection agreements with kolo and are not permitted to use your data for their own purposes.

We may share your data with regulatory bodies, law-enforcement agencies or courts if legally required. If Indonesian authorities request customer information to investigate a suspected crime, we will comply. We do not volunteer data to authorities; we respond only to valid legal requests.

How long we keep your data

We retain identity and payment data for the lifetime of your kolo account plus seven years after closure. This retention period is required by Indonesian financial regulations. Account activity records are kept for seven years minimum to support dispute resolution and regulatory compliance. If you request account deletion, we anonymise personal identifiers (name, email, address) but retain transaction records under a reference number to fulfil legal obligations.

Your rights regarding data on kolo

You have the right to request access to all personal data we hold about you. Submit a data-access request via your kolo account settings or by emailing our support team — we will respond within a standard timeframe with a copy of your data in a readable format.

You may request correction of inaccurate data. If your address or name has changed, update it in your account settings or contact support; we will verify the change via email confirmation.

You may request deletion of your personal data, subject to legal retention obligations. If you have no active disputes, open withdrawals or regulatory holds, we can delete identity information while retaining anonymised transaction records. Deletion requests are processed within a standard timeframe after identity verification.

What we protect
  • Encrypted data storage with access controls
  • SSL encryption for all login and payment data
  • Fraud detection monitoring
  • Limited third-party access under agreements
We do not do
  • Sell personal data to marketing firms
  • Share data without your consent except legally required
  • Store unencrypted passwords or card numbers

Cookies and tracking on kolo

We use cookies to keep you logged into kolo, remember your language preference and track your behaviour on our platform to improve user experience. Essential cookies are required for login and account security — these cannot be disabled. Analytical cookies help us understand how you navigate kolo — which sports markets you view, how long you spend on the platform, which games you play — so we can optimise our interface and offerings. You may disable analytical cookies in your browser settings without losing access to kolo.

We do not use cookies for advertising or to track you across other websites. Any tracking is limited to kolo.best and serves only to improve your experience with our sportsbook, live casino and slots.

Cross-border data transfers

Our servers may be located outside Indonesia. Your data may be processed, stored or backed up on servers in other countries. These transfers occur only to provide reliable service — for backup redundancy, fraud detection that uses third-party vendors, or payment processing. We ensure all transfers comply with Indonesian data-protection standards through contractual safeguards with vendors and encryption in transit. You consent to cross-border transfers by using kolo.

Contact us about privacy

If you have questions about our privacy practices, data requests or privacy concerns, contact our support team via in-app messaging or email. We respond in English and Indonesian during business hours. For formal data-protection complaints or if you believe kolo has violated your privacy rights, you may also contact the relevant data-protection authority in your jurisdiction.

Changes to this privacy notice

We may update this notice from time to time. Significant changes will be announced via email to your kolo account, and we will provide a timeframe before changes take effect. Continued use of kolo after changes go into effect constitutes acceptance of the updated notice.

Related documents