Coco92 Privacy Policy – How We Handle Your Personal Data

Coco92 operates the online casino and sports betting platform at coco92.app. When this Privacy Policy refers to "Coco92", "we", "us" or "our", it refers to the operators of this platform. This policy governs all personal data we collect and process in connection with your use of the website, Android mobile app, iOS Progressive Web App and any other access methods we make available.

This platform provides entertainment services including sports betting on Cricket, PSL, T20 internationals, Football and Esports, as well as online slots, live casino, fish games and bingo — all denominated in Pakistani Rupees (PKR).

We collect different categories of personal information depending on how you interact with the Coco92 platform. Below is a summary of the main categories:

We do not intentionally collect sensitive categories of personal data such as health information, religious beliefs or political opinions. If such information is shared voluntarily in support communications, it is handled with additional care.

The personal data we collect is used for the following purposes:

• Account management: Creating and maintaining your Coco92 account, processing login authentication and managing account settings and preferences.
• Transaction processing: Handling PKR deposits and withdrawals through JazzCash, Easypaisa, Raast, Bank Transfer and other supported payment methods.
• Identity verification: Confirming that account holders meet the minimum age requirement of 18 and that account information is accurate.
• Customer support: Responding to queries, complaints and account issues submitted through support channels.
• Fraud prevention and security: Detecting and preventing unauthorised account access, fraudulent transactions and other security threats.
• Responsible gaming: Monitoring for signs of problem gambling behaviour and applying account restrictions or self-exclusion when requested or when required by our responsible gaming obligations.
• Platform improvement: Using anonymised and aggregated usage data to understand how the platform is used and where improvements can be made.
• Communications: Sending transactional notifications about your account, deposits, withdrawals and security events. Sending promotional communications where you have not opted out.

Where data protection law requires us to identify a legal basis for processing personal data, we rely on the following:

• Contract performance: Processing your data is necessary to provide the Coco92 service you have registered for — including operating your account, processing bets and handling deposits and withdrawals.
• Legitimate interests: We process certain data — such as technical and usage data — on the basis of our legitimate interests in operating a secure and well-functioning platform, preventing fraud, and improving our service.
• Legal obligation: Some processing is necessary to comply with legal requirements, including identity verification and financial record-keeping.
• Consent: Where we send marketing communications, we do so on the basis of your consent, which you may withdraw at any time.

All financial transactions on Coco92 are conducted in PKR. We support payments through JazzCash, Easypaisa, Raast, Bank Transfer, bank cards and mobile wallets. The specific handling of payment data depends on the method used:

• Payments processed through JazzCash and Easypaisa are handled by those respective platforms. Coco92 receives confirmation of successful transactions but does not store your JazzCash or Easypaisa account credentials or PINs.
• For bank transfers and card payments, transaction reference numbers and amounts are recorded for accounting and reconciliation purposes. Full card numbers are never stored on Coco92 servers.
• Your transaction history — dates, amounts, methods and outcomes — is retained in your account records for the purposes of account management, dispute resolution and compliance with financial record-keeping requirements.

Coco92 does not sell your personal data. We may share your information with third parties only in the following circumstances:

• Payment processors: Your payment details are shared with the relevant payment service providers — such as JazzCash, Easypaisa, or banking institutions — solely for the purpose of processing your deposit or withdrawal.
• Identity verification providers: When account verification is required, identity documents may be shared with third-party KYC (Know Your Customer) verification services. These providers are contractually bound to handle your data securely and only for the verification purpose.
• Technology and infrastructure providers: We use third-party service providers for hosting, security, analytics and platform operations. These providers access only the data necessary for their specific function and are subject to data processing agreements.
• Legal requirements: We may disclose your personal data if required to do so by a court order, legal process, or other legitimate legal authority. We will notify you of such disclosure where we are permitted to do so.
• Fraud prevention: In cases of suspected fraud or security breach, relevant data may be shared with fraud prevention services or law enforcement agencies.

In all cases of data sharing, we take reasonable steps to ensure the recipient handles your data in a manner consistent with this Privacy Policy.

The Coco92 website and app use cookies and similar technologies to operate correctly and to understand how the platform is used. The main categories of cookies we use are:

• Essential cookies: Necessary for the platform to function. These include session management, login state and security tokens. The platform cannot operate correctly without these.
• Performance cookies: Collect anonymised data about how pages and features are used, helping us understand where the platform performs well and where improvements are needed. No personally identifiable information is included.
• Preference cookies: Remember your settings and preferences — such as language and display preferences — so you do not need to reconfigure them each visit.

You can control non-essential cookies through your browser settings. Disabling certain cookies may affect the functionality of some parts of the platform. The Coco92 mobile app may use equivalent local storage and session management mechanisms in place of traditional browser cookies.

We take the security of your personal data seriously and implement a range of technical and organisational measures to protect it against unauthorised access, loss or disclosure:

• Data transmitted between your device and Coco92 servers is encrypted using HTTPS/TLS protocols.
• Passwords are hashed using strong cryptographic algorithms before storage. Plain-text passwords are never stored.
• Access to personal data within our organisation is restricted to personnel who need it to perform their role, and all staff with data access are trained on data protection responsibilities.
• Security monitoring is in place to detect and respond to unusual access patterns, potential intrusion attempts and other security events.
• Regular security reviews and updates are conducted on the platform infrastructure.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in significant risk to users, we will take steps to notify affected individuals as promptly as practicable.

We retain your personal data for as long as your Coco92 account is active and for a period after account closure as required by our legal and operational obligations. The specific retention periods vary by data type:

• Account and identity data is retained for the duration of your account and for a defined period after closure to comply with financial record-keeping requirements.
• Transaction records are retained for a minimum period required by applicable financial compliance obligations.
• Support communications are retained for a period sufficient to allow for follow-up on ongoing issues and dispute resolution.
• Technical and usage logs may be retained in anonymised or aggregated form for analytical purposes after the standard retention period has elapsed.

When your data is no longer required, it is securely deleted or anonymised so that it can no longer be linked to you.

As a Coco92 user, you have the following rights regarding your personal data:

To exercise any of these rights, contact Coco92 support using the details in Section 13. We will respond to all data rights requests within a reasonable timeframe. We may need to verify your identity before actioning a request.

Coco92 is strictly an adults-only platform. You must be 18 years of age or older to register an account or use any services. We do not knowingly collect personal data from anyone under the age of 18.

If we become aware that an account has been registered by or is being used by a person under 18, that account will be immediately closed and any funds returned after verification that they were not derived from fraudulent activity. If you believe a minor has accessed this platform using your account or has registered independently, please contact us immediately.

We may update this Privacy Policy from time to time to reflect changes in our data practices, technology, legal requirements or how the platform operates. When material changes are made, we will update the "last updated" date at the top of this page and notify registered users through an in-platform notice or email where appropriate.

We encourage you to review this policy periodically. Continued use of the Coco92 platform after changes have been posted constitutes your acceptance of the updated policy. If you do not agree with any changes, you should stop using the platform and contact support to close your account.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how your personal information has been handled, please contact the Coco92 support team. Our support operates in Pakistan Standard Time (PKT).

When contacting us about a data privacy matter, please include your registered account username or email address to help us locate your records and respond accurately.