kitanaPrivacy Policy

This page describes what we collect when you use kitana and how we keep that data protected. We at kitana take your privacy seriously. When you register an account, deposit funds, or place a bet on Liga 1, Piala Indonesia, or any other market on our platform, we collect certain information. We use that information only to operate our service, verify your identity, process your payments, and comply with applicable law.

We do not sell your personal data to third parties. We do not share your information with marketing firms or data brokers. We share data only with payment processors (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet), fraud-prevention services, and where required by law. This policy explains what we collect, how we use it, and what rights you have.

Our commitment is transparency. You should know exactly what data we hold, why we hold it, and how long we keep it. If you have questions about your data on kitana, contact us using the details at the end of this policy.

What Data We Collect on kitana

We collect data in three categories: account information, transaction data, and behavioural data.

Account information: When you register on kitana, we ask for your email address, password, full name, date of birth, and residential address. We also collect your national ID number or passport number during Know Your Customer (KYC) verification. This information is mandatory to open an account and comply with financial regulations.

Behavioural data: We log which games you play, how long you play, and when you access kitana. We use this data to detect unusual account activity, prevent fraud, and improve our platform. We do not use this data to profile you for marketing purposes.

Account information

Email, name, date of birth, address, ID number. Required for registration and verification.

Transaction data

Deposits, withdrawals, bets, settlements, payment methods. Kept for dispute resolution and compliance.

Behavioural data

Login times, games played, session duration. Used for fraud detection and platform improvement.

Device data

IP address, browser type, device type. Collected for security and fraud prevention.

How We Use Your Data on kitana

We use your data for five primary purposes: account management, payment processing, fraud prevention, legal compliance, and platform improvement.

Account management: We use your email and password to authenticate you when you log in. We use your name and address to confirm your identity during verification. We use your contact information to send you account notifications, password resets, and important policy updates.

Fraud prevention: We analyse your transaction patterns, login locations, and device information to detect fraudulent activity. If we detect unusual behaviour — for example, a withdrawal request from a new device in a different city — we may freeze the transaction and request additional verification.

Legal compliance: We retain your data to comply with financial regulations, anti-money-laundering laws, and tax requirements. We may disclose your information to government agencies if required by law.

Platform improvement: We use anonymised, aggregated data to understand how users interact with kitana. This helps us improve game performance, fix bugs, and design better features. We do not use individual user data for this purpose.

Data Retention and Deletion on kitana

We retain your account information for as long as your account is active. If you close your account, we retain your data for seven years to comply with financial regulations and resolve any disputes. After seven years, we delete your personal information unless we are required by law to retain it longer.

Transaction data is retained for the same period. This allows us to investigate chargebacks, verify withdrawals, and respond to regulatory inquiries. We do not delete transaction records early, even if you request it, because financial law requires us to maintain these records.

If you request deletion of your account, we will anonymise your data where possible. However, we cannot delete transaction records or KYC documents because financial regulations require us to retain them.

Third-Party Data Sharing on kitana

We share your data with third parties only when necessary to operate kitana or comply with law. We do not sell your data to advertisers or data brokers.

Fraud-prevention services: We share transaction data with third-party fraud-detection services to identify suspicious activity. These services use your data only to assess fraud risk and do not retain it longer than necessary.

Government agencies: We may disclose your information to law enforcement, tax authorities, or financial regulators if required by law. We will not voluntarily share your data with government agencies unless compelled by legal process.

Service providers: We use third-party vendors for data hosting, email delivery, and customer support. These vendors are contractually bound to protect your data and use it only to provide services to kitana.

Your Rights Regarding Your Data on kitana

You have the right to access, correct, and request deletion of your personal data on kitana. You also have the right to data portability — we can provide your data in a machine-readable format.

To exercise these rights, contact us using the details below. We will respond to your request within 30 days. If we cannot fulfil your request (for example, because financial law requires us to retain your data), we will explain why.

You also have the right to opt out of non-essential communications. If you no longer wish to receive account notifications or platform updates, you can adjust your preferences in your account settings or contact us to unsubscribe.

Cookies and Tracking on kitana

We use cookies to remember your login session, store your preferences, and track your activity on kitana. Cookies are small text files stored on your device. They allow us to recognise you when you return to our platform.

We use two types of cookies: essential cookies (required for login and security) and analytical cookies (used to understand how you use kitana). You can disable non-essential cookies in your browser settings, but disabling essential cookies will prevent you from logging in.

We do not use cookies to track you across other websites. Our cookies are used only on kitana.

Data Security on kitana

We protect your data using industry-standard security measures. All data transmitted between your device and our servers is encrypted using SSL (Secure Sockets Layer) technology. Your password is hashed and salted, meaning we do not store your actual password — only a cryptographic representation of it.

Our servers are protected by firewalls, intrusion-detection systems, and regular security audits. We limit access to your data to employees who need it to perform their job. All employees sign confidentiality agreements.

However, no security system is perfect. If we discover a data breach, we will notify you within 72 hours and explain what information was compromised and what steps we are taking to secure it.

International Data Transfers on kitana

Our servers may be located outside your jurisdiction. When you use kitana, your data may be transferred to and stored in countries outside Indonesia. These countries may have different data-protection laws than Indonesia.

By using kitana, you consent to the transfer of your data to countries outside Indonesia. We ensure that all data transfers comply with applicable law and are protected by contractual safeguards.

Contact Us About Your Data on kitana

If you have questions about this privacy policy or how we handle your data on kitana, contact us at the address below. We will respond to your inquiry within 30 days.

You can also contact us if you wish to exercise your rights regarding your data — for example, to request access, correction, or deletion. We are committed to transparency and will work with you to address your concerns.

Our services are available only where local law permits. Users are responsible for verifying that access and use comply with their own jurisdiction's law.