kirbyPrivacy Policy

This page describes what we collect when you use kirby and how we keep that data protected. We take your privacy seriously and are transparent about the information we gather, how we use it, and who has access to it. Our privacy practices comply with applicable data-protection standards and reflect our commitment to treating your personal information with care.

When you register an account on kirby, deposit funds, or interact with our slot tournaments, live-dealer tables, and sportsbook markets, you provide us with information. We use this information to verify your identity, process your transactions, prevent fraud, and improve our service. We do not sell your data to third parties for marketing purposes, and we do not share your information beyond what is necessary to operate our platform and comply with law.

Our privacy policy applies to all players accessing kirby, regardless of location. If you have questions about how we handle your data, contact our support team via live chat or email.

What We Collect When You Use kirby

We collect information in several categories. First, we collect account registration data: your email address, password (encrypted), phone number, and full name. Second, we collect identity verification documents during KYC: a government-issued ID (passport, national ID card, driver's licence, or military ID) and proof of address (utility bill, bank statement, or government letter). Third, we collect transaction data: deposit amounts, withdrawal requests, payment method used (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet), and timestamps. Fourth, we collect gameplay data: which games you play, tournament participation, session duration, and game outcomes. Fifth, we collect device and network information: your IP address, browser type, operating system, and device identifier.

We collect this information for specific purposes. Account data enables us to authenticate you and manage your account. Identity documents allow us to verify your age and prevent fraud. Transaction data helps us process deposits and withdrawals accurately and comply with anti-money-laundering regulations. Gameplay data helps us understand which games are popular and identify potential technical issues. Device information helps us detect suspicious activity and prevent unauthorised access.

Data minimisation: We collect only the information necessary to operate kirby and comply with regulations. We do not collect unnecessary personal details.

How We Use Your Data on kirby

We use your data for the following purposes. We verify your identity to prevent underage access and fraud. We process your deposits and withdrawals through payment providers. We monitor account activity to detect suspicious patterns and prevent money laundering. We respond to your support requests and resolve disputes. We improve our platform by analysing gameplay patterns and identifying technical issues. We comply with legal obligations, including anti-money-laundering regulations and tax reporting requirements.

We do not use your data for marketing purposes without your explicit consent. We do not sell your information to third parties. We do not share your gameplay data with external analytics companies. We do not use your identity documents for any purpose beyond verification and account recovery.

Third-Party Processors and Data Sharing

We work with third-party service providers who process your data on our behalf. Payment processors (mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment) receive transaction data necessary to process your deposits and withdrawals. These providers have their own privacy policies, and we encourage you to review them. Our hosting provider stores our servers and databases; our servers may be located outside Indonesia, which means your data may be transferred internationally. We ensure that all third-party processors sign data-protection agreements that require them to protect your information to the same standard we do.

We may disclose your information if required by law—for example, if a court orders us to provide data or if we detect activity that violates our terms. We will notify you of such disclosures unless legally prohibited from doing so. We do not disclose your information to government agencies except when legally required.

International transfers: Our servers may be located outside your jurisdiction. By using kirby, you consent to your data being transferred internationally for processing and storage.

Your Rights Regarding Your Data

You have the right to access your personal data. You can request a copy of all information we hold about you by contacting our support team. We will provide this information within a reasonable timeframe, typically within 10 business days. You have the right to correct inaccurate information. If your name, address, or other details are incorrect in our system, contact us and we will update them. You have the right to request deletion of your account and associated data, subject to legal retention requirements. We may retain some data for compliance purposes (anti-money-laundering records, tax reporting) even after account deletion.

You have the right to object to certain data processing. For example, if we use your data for fraud detection and you believe we are doing so incorrectly, you can object and request manual review. You have the right to data portability—we can provide your data in a structured, machine-readable format so you can transfer it to another service if you choose.

Cookies and Tracking Technologies

We use cookies to enhance your experience on kirby. Cookies are small files stored on your device that help us remember your preferences, keep you logged in, and track your session. We use session cookies (which expire when you close your browser) and persistent cookies (which remain on your device until you delete them). We do not use cookies to track you across other websites. We do not sell cookie data to advertisers.

You can control cookies through your browser settings. Most browsers allow you to refuse cookies or alert you when a cookie is being set. If you disable cookies, some features of kirby may not function properly. We do not use third-party tracking pixels or analytics services that track you across the internet.

How Long We Keep Your Data

We retain your account data for as long as your account is active. If you close your account, we retain certain data for legal compliance purposes. Identity verification documents are retained for at least five years to comply with anti-money-laundering regulations. Transaction records are retained for at least seven years for tax and regulatory purposes. Gameplay data is retained for one year after account closure, then deleted. Device and network logs are retained for 90 days, then deleted.

If you request account deletion, we will delete your personal data except where legal requirements mandate retention. We will notify you of any data we retain after account closure and the reason for retention.

Security Measures on kirby

We implement industry-standard security measures to protect your data. We use encryption (SSL/TLS) for all data transmitted between your device and our servers. We encrypt sensitive data at rest, including passwords and identity documents. We restrict access to your data to authorised personnel only. We maintain firewalls and intrusion-detection systems to prevent unauthorised access. We conduct regular security audits and penetration testing to identify vulnerabilities.

However, no security system is completely immune to breaches. If we detect a security incident that compromises your data, we will notify you promptly and provide guidance on steps you can take to protect yourself. We maintain incident-response procedures to minimise harm and restore service quickly.

Jurisdiction and Compliance

Our privacy practices comply with applicable data-protection laws in jurisdictions where we operate. We do not operate in jurisdictions where we cannot comply with local privacy requirements. Players in Jakarta, Surabaya, Bandung, Medan, and Semarang are subject to the same privacy standards. If local law requires us to handle your data differently, we will comply with those requirements and notify you of any changes.

We maintain this privacy policy in English. If there is a conflict between this English version and a translated version, the English version takes precedence.

Data
Encrypted storage
Access
Authorised only
Rights
Access & delete
Support
English available

Contact Us About Your Privacy

If you have questions about our privacy practices, want to exercise your rights, or believe we have mishandled your data, contact our support team. You can reach us via live chat (available from any page on kirby), email, or our FAQ sectionWe aim to respond to privacy inquiries within five business days. For formal data-access requests or deletion requests, we may require you to verify your identity before processing your request.

If you are not satisfied with our response to a privacy concern, you may have the right to lodge a complaint with your local data-protection authority. We encourage you to contact us first so we can attempt to resolve your concern directly.

Updates to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes via email at least 30 days before they take effect. Your continued use of kirby after the notification period constitutes acceptance of the updated policy. If you do not agree with changes, you may close your account and request a withdrawal of your balance before the changes take effect.

We encourage you to review this privacy policy periodically, particularly around major events (Liga 1 season, Piala AFF tournament, Piala Indonesia finals, Idul Fitri and Idul Adha holidays) when we may introduce new features or services that affect how we handle your data. Our commitment to protecting your privacy remains constant, even as our practices evolve.