Privacy Policy

Definitions

For the purpose of this Privacy Policy, the following terms are defined as follows:

• "kiupkv" — the online betting and gaming platform accessible at https://kiupkv.cam, including all related subdomains, mobile interfaces, APIs, and associated digital services.
• "Platform" — the website, software, and services provided by kiupkv through which Players access betting, gaming, and account management functions.
• "Personal Data" — any information that identifies or could reasonably be used to identify a living natural person, including but not limited to name, date of birth, email address, phone number, payment details, and device identifiers.
• "Player" / "You" — any natural person who registers an Account on the Platform or otherwise interacts with kiupkv's services.
• "Processing" — any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, and deletion.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data. For Players accessing kiupkv from Indonesia, the Data Controller is kiupkv as operated at https://kiupkv.cam.
• "Third-Party Processor" — any external company or service engaged by kiupkv to process Personal Data on its behalf, such as payment processors, KYC verification providers, and analytics platforms.
• "KYC" — Know Your Customer; the identity and age verification process required under kiupkv's compliance framework before withdrawals and other account actions can be completed.
• "Cookie" — a small data file stored on a Player's device by their web browser, used to retain session state, preferences, and anonymised analytics data.

Data Controller

kiupkv, operating at https://kiupkv.cam, acts as the Data Controller for all Personal Data collected through the Platform. As the Data Controller, kiupkv is responsible for ensuring that your data is processed lawfully, fairly, and transparently, and that appropriate technical and organisational safeguards are maintained at all times.

If you have any questions about how your Personal Data is handled, or wish to exercise any of the rights set out in Clause 11 of this Policy, you may contact our Data Protection team at [email protected]. All data-related enquiries receive a substantive response within 30 days of receipt.

kiupkv's primary operational time zone for data-related matters is Western Indonesia Time (WIB, UTC+7), which governs response windows, data retention timelines, and scheduled data-review cycles.

Data We Collect

kiupkv collects Personal Data across several categories depending on the nature of your interaction with the Platform:

3.1 Identity and Contact Data

• Full legal name (as it appears on your government-issued ID)
• Date of birth (used to verify the 21+ age requirement)
• Gender (optional, collected at registration)
• Residential address (city, province — e.g., Jakarta, Surabaya, Bandung, Bali)
• Email address
• Mobile phone number (Indonesian format)

3.2 Identity Verification (KYC) Data

• Scanned or photographed government-issued ID (KTP — Kartu Tanda Penduduk, passport, or driving licence)
• Proof of address (utility bill or bank statement from BCA, BRI, BNI, Mandiri, or similar, dated within 90 days)
• Selfie photograph (in some verification scenarios, required alongside the ID document)

3.3 Financial Data

• Bank account details used for deposits and withdrawals (bank name, account number, account holder name) — covering Indonesian banks such as BCA, BRI, BNI, Mandiri, CIMB Niaga, and OCBC NISP
• E-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja) where used as deposit or withdrawal methods
• Transaction history (deposit amounts, withdrawal amounts, timestamps)

3.4 Gaming and Behavioural Data

• Betting history across all product categories (sportsbook, live casino, togel — numbers lottery, slots)
• Session timestamps, session duration, and session frequency
• Game preferences, bonus usage, and promotional interaction history
• Responsible gaming tool activity (deposit limits set, self-exclusion requests, reality-check usage)

3.5 Technical and Device Data

• IP address and approximate geolocation (used for security verification and fraud prevention)
• Browser type and version, operating system, and device type
• Referral source (the URL or search term that brought you to the Platform)
• Pages visited, click paths, and features interacted with on the Platform

3.6 Communications Data

• Content of live chat conversations with kiupkv's support team
• Email correspondence sent to or received from kiupkv
• Feedback, complaints, and survey responses

How We Collect Data

kiupkv collects Personal Data through the following channels:

• Direct submission: When you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact our support team, or respond to a survey, you provide data directly to us.
• Automated collection: Our Platform automatically collects technical and behavioural data as you navigate the site, using server logs, session tracking technologies, and first-party cookies.
• Third-party sources: In limited circumstances, kiupkv may receive supplementary identity or fraud-risk information from KYC verification partners or fraud-prevention data providers, solely to fulfil our compliance obligations.
• Payment processors: When you initiate a deposit or withdrawal via a local bank transfer or e-wallet service, the payment processor returns a transaction reference and status to kiupkv. We do not receive or store full payment card numbers.

Purpose & Legal Basis for Processing

The table below summarises the principal purposes for which kiupkv processes your Personal Data and the legal basis applied to each activity:

Data Sharing

kiupkv does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. Data is shared with external parties only in the following circumstances and only to the extent strictly necessary:

• Payment processors: Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum data required to process your financial transactions securely.
• KYC and identity verification providers: Specialist third-party verification services receive your identity documents and personal details solely to perform the verification required under our compliance obligations. These providers are contractually bound to process data only for this purpose.
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft may receive a pseudonymous Player ID and session token to deliver their games. These providers do not receive your full name, bank details, or contact information.
• Fraud and security services: Anti-fraud and cybersecurity platforms may receive technical and behavioural data to identify suspicious activity patterns. This data is transmitted in aggregated or pseudonymised form wherever possible.
• Legal and regulatory authorities: kiupkv will disclose Personal Data to competent authorities, courts, or regulators when required to do so by applicable law, court order, or regulatory instruction. Where legally permissible, kiupkv will notify you of such a disclosure.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of kiupkv's business, Personal Data may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections.

All Third-Party Processors engaged by kiupkv are subject to written data processing agreements that require them to implement security standards equivalent to those applied by kiupkv, and to process data solely for the purposes specified.

International Data Transfers

kiupkv's primary player base is located in Indonesia, and we endeavour to process the majority of Personal Data within the region wherever operationally practical. However, some Third-Party Processors — including certain KYC verification providers, cloud infrastructure partners, and game content studios — operate servers located outside Indonesia.

Where Personal Data is transferred outside Indonesia, kiupkv ensures that appropriate safeguards are in place, which may include:

• Contractual clauses that impose data protection obligations on the receiving party equivalent to those applicable under internationally recognised privacy frameworks.
• Transfers to countries or organisations that have been assessed as providing an adequate level of data protection.
• Encryption of data in transit using TLS 1.2 or higher, ensuring that data cannot be intercepted during transfer.

You may request further information about specific international transfer safeguards by contacting our Data Protection team at [email protected].

Data Retention

kiupkv retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your active Account, plus a minimum of 5 years following account closure, to comply with anti-money-laundering record-keeping obligations.
• KYC documents: Retained for a minimum of 5 years from the date of submission, or from the date of account closure, whichever is later.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction, in accordance with financial record-keeping requirements.
• Gaming and behavioural data: Retained for the duration of your active Account and for 2 years following account closure, unless a longer period is required for dispute resolution or compliance purposes.
• Support communications: Retained for 3 years from the date of the interaction, to allow reference in the event of subsequent disputes or complaints.
• Technical and device data (server logs): Retained for 12 months from the date of capture, after which they are deleted or irreversibly anonymised.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be linked to any individual. If you request deletion of your data before the end of the applicable retention period, kiupkv will delete all data that is not subject to a legal retention obligation and will inform you of any data that must be retained and the reason for doing so.

Data Security

kiupkv implements a comprehensive, layered security programme to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• Encryption in transit: All data transmitted between your browser and our servers is protected using TLS 1.2 or higher (HTTPS). This ensures that your login credentials, KYC documents, and financial data cannot be intercepted in transit.
• Encryption at rest: Sensitive Personal Data — including KYC documents, bank account details, and passwords — is stored using AES-256 encryption on access-controlled servers.
• Access controls: Access to Personal Data within kiupkv's systems is granted on a strict need-to-know basis. Staff are assigned role-based access permissions and are required to use multi-factor authentication (MFA) to access systems containing Player data.
• Password security: Player passwords are hashed using industry-standard algorithms before storage. kiupkv never stores plain-text passwords and will never ask for your password via any communication channel.
• Penetration testing and vulnerability scanning: The Platform undergoes regular independent security assessments to identify and remediate potential vulnerabilities before they can be exploited.
• Incident response: kiupkv maintains a documented data breach response procedure. In the event of a breach affecting your Personal Data, kiupkv will notify you without undue delay where legally required, and will take immediate steps to contain and remediate the incident.

Cookies & Tracking Technologies

kiupkv uses cookies and similar client-side tracking technologies to deliver a functional, personalised, and secure Platform experience. The following categories of cookies are used:

• Strictly necessary cookies: These cookies are essential for the Platform to function correctly. They maintain your login session, store your language and currency preferences, and protect against cross-site request forgery (CSRF) attacks. These cookies cannot be disabled without breaking core Platform functionality.
• Performance and analytics cookies: These cookies collect anonymised data about how Players navigate the Platform — including pages visited, time on site, and click paths — to help us understand usage patterns and improve the user experience. The data collected is aggregated and does not identify individual users.
• Functional cookies: These cookies remember choices you have made (such as your preferred deposit method or last-visited game category) to personalise your return visits and reduce repetitive data entry.
• Security cookies: These cookies support our fraud detection systems by identifying unusual patterns in session behaviour, device fingerprints, and login geography. They help us detect account takeover attempts and multi-account activity.

kiupkv does not use third-party advertising cookies or tracking pixels that enable cross-site profiling for advertising purposes. Our analytics tools are configured to anonymise IP addresses and to respect browser Do Not Track signals where technically feasible.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling cookies may impair certain Platform features, including persistent login sessions and personalised game recommendations.

Your Rights

As a Player whose Personal Data is processed by kiupkv, you hold the following rights with respect to your information. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request — [your username]".

• Right of access: You may request a copy of the Personal Data kiupkv holds about you, along with information about how it is processed. kiupkv will respond within 30 days of a verified request.
• Right to rectification: If any Personal Data held about you is inaccurate or incomplete, you may request that it be corrected. Account profile updates (such as changes to email address or phone number) can also be made directly from your Account settings panel, subject to re-verification.
• Right to erasure ("right to be forgotten"): You may request deletion of your Personal Data. kiupkv will comply unless retention is required by a legal obligation (see Clause 8). Note that erasure of all data will require closure of your Account.
• Right to restriction of processing: You may request that kiupkv restricts processing of your Personal Data in specific circumstances — for example, while you contest the accuracy of data held about you.
• Right to data portability: You may request a machine-readable copy of the Personal Data you have provided to kiupkv, in a structured, commonly used format (JSON or CSV), so that it can be transferred to another service provider.
• Right to object: You may object to processing based on legitimate interests, including profiling for personalised gaming recommendations. Where processing is for direct marketing purposes, your objection will be actioned immediately and unconditionally.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

Children's Privacy

kiupkv's Platform is strictly for adults aged 21 and over. kiupkv does not knowingly collect, process, or store Personal Data from individuals under the age of 21. The Platform implements age-verification controls at registration and during KYC to enforce this restriction.

If kiupkv discovers that it has inadvertently collected Personal Data from a person under 21, all such data will be deleted immediately and the associated Account will be closed. If you believe a minor has registered an Account on the Platform, please notify us immediately at [email protected] so that we can take prompt action.

Parents and guardians who are concerned about a minor's access to online gaming platforms are encouraged to use parental control software and to review our Responsible Gaming page for additional guidance.

Third-Party Services

The Platform may contain references to or integrations with third-party services, including game studio software (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Pocket Games Soft), payment infrastructure, and analytics tools. Each of these services operates under its own privacy policy, and kiupkv is not responsible for the data practices of third-party providers beyond the contractual obligations imposed in our data processing agreements.

kiupkv selects Third-Party Processors through a due-diligence process that evaluates their data security standards, compliance certifications, and track record. All processors are required to sign data processing agreements that prohibit the use of Player data for any purpose beyond the specific service they are engaged to perform.

kiupkv does not embed social media plugins, third-party advertising networks, or external tracking pixels on the Platform that would allow third parties to build profiles of your browsing behaviour across unrelated websites.

Policy Amendments

kiupkv reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform functionality. When material changes are made, kiupkv will notify registered Players via email and/or a prominent notice on the Platform at least 7 days before the changes take effect.

The "Last Updated" date at the top of this document reflects the most recent revision. We encourage you to review this Policy periodically. Your continued use of the Platform following the effective date of any amendment constitutes your acknowledgement of the updated Policy.

If a proposed amendment to this Policy requires your active consent (for example, where a new processing purpose is introduced that relies on consent as its legal basis), kiupkv will present a clear consent request before the new processing commences. You may decline to provide consent, though this may limit certain Platform features.

Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact kiupkv's Data Protection team through the following channel:

• Email: [email protected]
• Subject line format: "Privacy Enquiry — [your username]" or "Data Rights Request — [your username]"
• Response time: All privacy-related enquiries receive an acknowledgement within 48 hours and a substantive response within 30 days of receipt.
• Live Chat: Available 24/7 via the Platform interface for general privacy queries. Complex data rights requests should be submitted via email to create a written record.
• Language: Privacy enquiries may be submitted in English or Indonesian (Bahasa Indonesia). Responses will be provided in the language of the enquiry.