corla Platform Privacy Notice

This page describes what we collect when you use corla and how we keep that data protected. We at corla take privacy seriously — your personal information is encrypted, stored securely, and shared only with processors who help us run the platform (payment providers, customer support systems, compliance partners). We do not sell your data to third parties, and we comply with data-protection laws applicable to your jurisdiction.

When you create an account on corla, fund deposits, play games, request withdrawals, or contact our support team, we collect information about you. This includes your name, email, phone number, address, payment details, gaming activity, and device information. We use this data to verify your identity, process payments, detect fraud, improve our service, and comply with regulatory obligations in jurisdictions where we operate.

Our privacy practices apply to all corla users in supported jurisdictions. If you have questions about how we handle your data, what rights you have, or how to contact us about privacy concerns, this notice explains everything. Your data is your own — we give you control over it through account settings, export options, and deletion requests.

What data we collect on corla

We collect personal data in three categories: information you provide, information generated by your use of corla, and information from third-party sources.

Information you provide directly: When you register an account on corla, we collect your full name, email address, phone number, date of birth, and residential address. During account verification (Know Your Customer, or KYC), we ask for a government-issued ID (Kartu Tanda Penduduk, passport, or driving licence) and proof of address (utility bill, bank statement, or rental agreement). We store these documents in encrypted form for compliance purposes.

When you deposit funds via DANA, e-wallet, mobile banking, or a bank virtual account (local payment, online payment, e-wallet, mobile banking), we collect payment information — the method, amount, timestamp, and transaction ID. We do not store your full payment card or e-wallet password; payment processors handle that directly.

Information generated by your activity: Every time you play on corla — whether it is Aviator, Sweet Bonanza, live-dealer tables, or Liga 1 sportsbook markets — we log your session. This includes the games you play, stakes you place, outcomes, winnings or losses, session duration, and your balance at each step. We use this data to calculate your account balance, detect fraudulent patterns, and improve game recommendations.

We also track your device information: the type of device (mobile, tablet, laptop), operating system, browser type, IP address, and internet service provider. This helps us detect account abuse (e.g., multiple accounts from the same location) and optimize performance for different devices.

Information from third parties: Our payment processors (local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet) provide us with confirmation that a transaction succeeded or failed. We do not receive your payment password or full card number from them — only the transaction status and amount. Fraud-detection services we use may flag transactions as high-risk; we store these flags in your account for compliance.

We do not sell your data

corla does not sell personal information to advertisers, data brokers, or third-party marketers. We share data only with service providers (payment processors, hosting providers, support platforms) under strict confidentiality agreements.

How we use your data on corla

Our use of your data falls into these categories:

Account verification and compliance: We verify your identity using your ID and address proof. This is required by regulators in jurisdictions where we operate — it prevents fraud, money laundering, and underage access. During account verification, we may share your documents with third-party compliance services.
Payment processing: We use your payment details to process deposits and withdrawals. Payment processors (mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment) see the minimum information needed to complete your transaction.
Fraud detection: We analyse your gaming patterns, login locations, device changes, and transaction history to detect fraudulent activity. If we suspect unusual behaviour — for example, multiple login attempts from different countries, or unusually large withdrawals — we may place a temporary hold on your account and request verification.
Customer support: When you contact our support team via live chat, email, or in-app help, we store your conversation, including any personal details you share. Our support staff use this to resolve your issue. These conversations are logged and encrypted.
Service improvement: We analyse aggregated, non-identifying data (e.g., which games are popular, which payment methods fail most often, which times see peak traffic) to improve corla. We do not share individual player data with external analytics firms for this purpose — all analysis happens in-house.
Legal and regulatory obligations: We may share your data with law enforcement, tax authorities, or regulators if required by law. For example, if a government agency requests information about your account during a fraud investigation, we comply with valid legal orders.

Third-party processors and data location

We use third-party service providers to run corla. These include:

Payment processors: e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, and other Indonesian banks handle your deposits and withdrawals. They see your transaction details but do not see your gaming history or account balance.
Cloud hosting providers: Our servers may sit outside Indonesia — we use cloud infrastructure in Southeast Asia or globally. Your data is encrypted in transit and at rest, regardless of server location.
Customer support platforms: We use third-party chat and ticketing systems to manage support conversations. These platforms are encrypted and comply with data-protection standards.
Fraud-detection services: We use external services to flag high-risk transactions or suspicious login patterns. These services see minimal data (transaction amount, IP address, device fingerprint) and do not see your full identity or gaming history.

All third-party processors are bound by confidentiality agreements. We audit their security practices regularly to ensure your data is protected.

Your privacy rights on corla

Right to access: You can download your account data (play history, balance history, KYC documents) from your corla account settings
Right to correct: You can update your name, email, or address in your account at any time
Right to deletion: You can request account deletion, which removes your personal data after a standard retention period
Right to withdraw consent: If you consented to marketing emails, you can unsubscribe from your account settings

Cookies and tracking on corla

We use cookies and similar tracking technologies on corla to remember you between sessions, maintain your login state, and track which pages you visit. Essential cookies (those required for login and account security) are always active. Non-essential cookies (those used for analytics or advertising) are activated only with your consent — when you first visit corla, we ask whether you accept these cookies.

You can control cookies in your browser settings. Disabling cookies may affect corla's functionality — for example, you may be logged out between sessions, or game preferences may not be saved. Analytics cookies do not identify you personally; they track aggregated behaviour (e.g., how many users click the "Withdraw" button) to help us improve the platform.

We do not use cookies to track you across other websites. Any cross-site tracking would be disclosed in this notice and require your explicit consent.

Data retention and deletion on corla

We retain your data as long as your account is active. If you delete your account, we retain certain data for compliance purposes — for example, KYC documents and transaction records are kept for five years to comply with anti-money-laundering regulations. Personal data (name, email, phone) is deleted within 30 days of account deletion, unless legal obligation requires longer retention.

During Idul Fitri, Idul Adha, or Imlek holidays, processing times for data deletion requests may extend by a few days due to reduced staff. We will confirm the deletion timeline when you submit a request.

If you request withdrawal during the account deletion process, we complete that withdrawal first, then delete your account. Transaction records are retained for compliance, but all other personal data is removed.

Contact us about privacy on corla

If you have questions about how we handle your data, want to exercise a privacy right (access, correct, delete, or withdraw consent), or believe we have mishandled your information, contact our data protection team:

Email: [email protected]
In-app support: Open the corla app, tap "Help," and select "Privacy & Data"
Postal address: Available in your account settings under "Contact Us"

We aim to respond to privacy requests within 14 days. If your request is complex or involves multiple documents, we may request an extension. We will keep you informed of progress via email or in-app notification.

If you are unsatisfied with our response, you have the right to lodge a complaint with the data-protection authority in your jurisdiction. We cooperate fully with regulatory investigations and provide data protection authorities with any information they request.

corla legal and compliance team

Data protection and privacy

This privacy notice was last updated in May 2026. We review and update our privacy practices annually or when significant changes occur. Check back regularly for updates. For account-specific questions, see our FAQ or contact support.

Summary: Your privacy on corla

We at corla collect personal data — name, contact details, payment information, gaming activity, and device data — to verify your identity, process payments, detect fraud, and improve the platform. We do not sell your data to third parties. We share data only with service providers (payment processors, hosting providers, compliance services) under strict confidentiality agreements. Your data is encrypted, stored securely, and retained only as long as necessary for compliance or legal obligation.

You have the right to access, correct, delete, or export your data. If you believe we have mishandled your information, contact our privacy team at [email protected] or via in-app support. We respond to privacy requests within 14 days. Our services are available only where local law permits. We comply with data-protection laws applicable to your jurisdiction and cooperate with regulatory authorities when required.

This notice applies to all corla users. It may be updated periodically to reflect changes in our practices or applicable laws. We will notify you of significant changes via email or in-app notification. Your continued use of corla after such notification means you accept the updated notice.