1. Introduction and Scope
At kiwora, we are committed to protecting your privacy and safeguarding your personal information. This Privacy Policy explains how we collect, use, disclose, store, and protect the personal data you provide when you access or use the kiwora website at https://kiwora.cam (the "Site") and our online gaming services (the "Services").
This Privacy Policy applies to all users of kiwora, including visitors who browse the Site without registering an account and registered players who actively use our casino games, sports betting markets, and other Services. By accessing or using the Site and Services, you acknowledge that you have read, understood, and agree to the collection and use of your personal information as described in this Privacy Policy.
If you do not agree with the terms of this Privacy Policy, you must immediately cease using the Site and Services. We reserve the right to modify this Privacy Policy at any time without prior notice. Changes will become effective immediately upon posting to the Site. Your continued use of the Services after any such changes constitutes your acceptance of the revised Privacy Policy.
2. Information We Collect
kiwora collects several categories of personal information to provide, maintain, improve, and secure our Services. The types of information we collect include:
2.1 Information You Provide Directly
When you register an account with kiwora, we collect the following personal information:
- Identity Information: Full legal name, date of birth, nationality, gender
- Contact Information: Email address, phone number, residential address
- Account Credentials: Username, password, security questions and answers
- Financial Information: Bank account numbers, e-wallet account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay), payment card information, transaction history
- Identification Documents: Government-issued ID (KTP / Indonesian National Identity Card, passport, driver's license), proof of address, selfie photographs for KYC verification
- Communication Records: Customer support chat transcripts, email correspondence, feedback and complaints
2.2 Information We Collect Automatically
When you access or use the kiwora Site and Services, we automatically collect certain technical and usage information:
- Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IP address, MAC address)
- Usage Data: Pages visited, time spent on pages, clickstream data, referring/exit pages, search queries, games played, bets placed, deposit and withdrawal transactions
- Location Information: IP-based geolocation data to verify jurisdiction compliance
- Cookies and Similar Technologies: Session cookies, persistent cookies, web beacons, pixel tags (see Section 8 for details)
- Gaming Activity: Game selections, bet amounts, win/loss records, gaming session duration, bonus claims and wagering progress
2.3 Information from Third Parties
We may receive information about you from third-party sources including:
- Payment Processors: Transaction verification data from BCA, BRI, BNI, Mandiri, and e-wallet providers
- Game Providers: Game outcome data, RTP statistics, and fraud detection alerts from Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and other software providers
- Identity Verification Services: Age verification and identity authentication results from third-party KYC providers
- Fraud Prevention Services: Risk scores, fraud indicators, and suspicious activity alerts
3. How We Use Your Information
kiwora uses the personal information we collect for the following purposes:
3.1 Account Management and Service Delivery
- Creating, maintaining, and managing your player account
- Processing deposits, withdrawals, and other financial transactions
- Providing access to casino games, sports betting markets, live dealer tables, and other gaming services
- Processing bonus claims and tracking wagering requirements
- Calculating and paying out winnings
- Maintaining accurate gaming records and transaction histories
3.2 Legal Compliance and Security
- Verifying your identity, age (21+ requirement), and eligibility to use our Services
- Complying with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
- Preventing fraud, cheating, bonus abuse, and other prohibited activities
- Detecting and preventing unauthorized access to accounts
- Responding to legal requests, court orders, and regulatory inquiries
- Enforcing our Terms and Conditions and other policies
3.3 Customer Support and Communication
- Responding to your inquiries, complaints, and support requests via live chat, email, and WhatsApp
- Sending transactional emails (account notifications, deposit confirmations, withdrawal updates, password resets)
- Providing account statements and gaming history reports upon request
- Notifying you of important account or service changes
3.4 Marketing and Promotions (With Consent)
- Sending promotional emails about bonuses, special offers, tournaments, and new games (only if you've opted in)
- Displaying personalized game recommendations based on your playing preferences
- Informing you about loyalty program benefits and VIP rewards
- Conducting surveys and requesting feedback to improve our Services
You can opt out of marketing communications at any time by clicking the "unsubscribe" link in any promotional email or by contacting customer support. Opting out will not affect transactional or service-related communications.
3.5 Platform Improvement and Analytics
- Analyzing usage patterns to improve website performance and user experience
- Testing new features, games, and services
- Conducting market research and competitive analysis
- Generating aggregated, anonymized statistics for internal business purposes
4. How We Share Your Information
kiwora does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information in the following circumstances:
4.1 Service Providers and Business Partners
We share your information with trusted third-party service providers who assist us in operating the Site and delivering the Services, including:
- Payment Processors: BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, and other payment gateway providers who process your deposits and withdrawals
- Game Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and other software providers who deliver casino games and sports betting content
- Identity Verification Providers: Third-party KYC services that verify your identity documents and age
- Cloud Hosting Providers: Secure server and database hosting companies that store our platform data
- Customer Support Tools: Live chat software providers, email service providers, and CRM platforms
- Fraud Prevention Services: Anti-fraud and risk management companies that help detect suspicious activity
All service providers are bound by strict confidentiality agreements and are only authorized to use your information as necessary to perform services on our behalf. They are prohibited from using your information for their own purposes.
4.2 Legal Obligations and Law Enforcement
We may disclose your personal information if required by law or if we believe in good faith that such disclosure is necessary to:
- Comply with legal obligations, court orders, subpoenas, or government requests
- Cooperate with law enforcement investigations
- Enforce our Terms and Conditions and other policies
- Protect the rights, property, or safety of kiwora, our users, or the public
- Detect, prevent, or address fraud, security issues, or technical problems
4.3 Business Transfers
In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your personal information may be transferred to the acquiring entity as part of the business transaction. We will notify you via email and/or a prominent notice on the Site of any such change in ownership or control of your personal information.
4.4 With Your Consent
We may share your information with other third parties if you have provided explicit consent for us to do so.
5. Data Security and Protection
kiwora takes the security of your personal information very seriously. We employ industry-standard technical, administrative, and physical security measures to protect your data from unauthorized access, disclosure, alteration, or destruction.
5.1 Technical Security Measures
- SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using 256-bit Secure Sockets Layer (SSL) or Transport Layer Security (TLS) protocols—the same technology used by major banks
- Encrypted Data Storage: Sensitive information such as passwords, financial data, and identification documents are encrypted at rest using AES-256 encryption
- Secure Payment Processing: We never store complete payment card numbers on our servers. All card transactions are processed through PCI-DSS compliant payment gateways
- Firewalls and Intrusion Detection: Our servers are protected by enterprise-grade firewalls and intrusion detection/prevention systems
- Regular Security Audits: We conduct regular penetration testing and security audits by independent third-party cybersecurity firms
5.2 Administrative Security Measures
- Access Controls: Only authorized kiwora employees with a legitimate business need can access personal information, and all access is logged and monitored
- Employee Training: All staff members undergo regular data protection and security awareness training
- Confidentiality Agreements: All employees and contractors are bound by strict confidentiality agreements
- Incident Response Plan: We maintain a comprehensive data breach response plan to quickly address any security incidents
5.3 Your Security Responsibilities
While we implement robust security measures, you also play a crucial role in protecting your account:
- Choose a strong, unique password that you don't use on other websites
- Never share your login credentials with anyone
- Log out of your account after each session, especially on shared or public devices
- Enable two-factor authentication (2FA) if available
- Keep your registered email address and phone number secure
- Immediately notify customer support if you suspect unauthorized access to your account
Despite our best efforts, no security system is completely impenetrable. kiwora cannot guarantee absolute security, but we are committed to promptly addressing any vulnerabilities and notifying affected users in the event of a data breach as required by applicable law.
6. Data Retention
kiwora retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.
- Active Accounts: Personal information for active accounts is retained as long as your account remains open and in good standing
- Closed Accounts: After account closure, we retain certain information (identity verification records, transaction history, gaming records) for a minimum of 7 years to comply with Indonesian financial record-keeping regulations and for fraud prevention purposes
- Marketing Communications: If you opt out of marketing emails, we retain your email address on a suppression list to ensure we don't contact you again
- Anonymized Data: We may retain aggregated, anonymized data indefinitely for statistical and analytical purposes
7. Your Privacy Rights
Depending on your jurisdiction, you may have certain rights regarding your personal information:
- Right to Access: You can request a copy of the personal information we hold about you
- Right to Correction: You can request that we correct inaccurate or incomplete information
- Right to Deletion: You can request deletion of your personal information, subject to legal and regulatory retention requirements
- Right to Data Portability: You can request a copy of your information in a structured, machine-readable format
- Right to Withdraw Consent: If we process your information based on consent, you can withdraw that consent at any time
- Right to Object: You can object to certain types of data processing, such as marketing communications
To exercise any of these rights, please contact our customer support team via live chat or email (displayed as plain text: [email protected]). We will respond to your request within 30 days.
8. Cookies and Tracking Technologies
kiwora uses cookies and similar tracking technologies to enhance your browsing experience, analyze site usage, and deliver personalized content.
8.1 Types of Cookies We Use
- Essential Cookies: Required for basic site functionality, including login authentication, session management, and security features. These cannot be disabled.
- Performance Cookies: Collect anonymous data about how users interact with our site (page views, bounce rates, navigation paths) to help us improve performance
- Functional Cookies: Remember your preferences (language, currency, game filters) to enhance your user experience
- Marketing Cookies: Track your activity across websites to display relevant promotional content (used only with your consent)
You can manage cookie preferences through your browser settings. However, disabling certain cookies may limit functionality of the Site and Services.
9. International Data Transfers
kiwora operates internationally and may transfer your personal information to servers located outside Indonesia. When we transfer data internationally, we ensure adequate protection through:
- Standard contractual clauses approved by regulatory authorities
- Data processing agreements with all international service providers
- Compliance with international data protection standards
10. Children's Privacy
kiwora's Services are strictly intended for individuals who are at least 21 years of age. We do not knowingly collect personal information from anyone under 21. If we become aware that a user is underage, we will immediately close the account, void all transactions, and delete the associated personal information.
If you believe we have inadvertently collected information from an underage individual, please contact us immediately so we can take appropriate action.
11. Changes to This Privacy Policy
kiwora reserves the right to modify this Privacy Policy at any time. We will notify users of material changes by posting the updated Privacy Policy on the Site with a new "Last Updated" date. For significant changes that materially affect how we use your personal information, we will also send an email notification to your registered email address.
Your continued use of the Services after any changes to this Privacy Policy constitutes your acceptance of the revised policy.
12. Contact Us
If you have any questions, concerns, or complaints about this Privacy Policy or how kiwora handles your personal information, please contact our Data Protection team:
- Email: [email protected] (displayed as plain text only)
- Live Chat: Available 24/7 on the kiwora website
- WhatsApp: Available through your account dashboard
We will respond to all privacy-related inquiries within 30 days and work diligently to resolve any concerns you may have about how your personal information is handled.