1.1 Information You Provide Directly
When you register for a kuda12 account, use our services, or communicate with us, we collect the following personal information:
- Account Registration Data: Full legal name, date of birth, gender, email address, mobile phone number, residential address, and nationality.
- Identity Verification Documents (KYC): Government-issued identification (Indonesian KTP or passport), selfie photographs for biometric verification, and proof of address documents (utility bills, bank statements) required for regulatory compliance and fraud prevention.
- Financial Information: Bank account details (bank name, account number, account holder name) for deposits and withdrawals, cryptocurrency wallet addresses for crypto transactions, and payment transaction history.
- Communication Data: Content of your communications with our customer support team via live chat, email, or WhatsApp, including support tickets, complaints, and feedback.
- Optional Profile Information: Profile preferences, language settings, notification preferences, and marketing communication opt-in/opt-out choices.
1.2 Information Collected Automatically
When you access and use the kuda12 platform, we automatically collect certain technical and behavioral data:
- Device Information: Device type (smartphone, tablet, computer), operating system, browser type and version, screen resolution, and unique device identifiers.
- Usage Data: Pages visited, features used, games played, time spent on the platform, navigation paths, clickstream data, and interaction patterns with our services.
- Gaming Activity: Complete history of bets placed, games played, wagering amounts, winnings, losses, bonus claims, deposit and withdrawal transactions, and account balance changes.
- Location Data: IP address, geographic location (country, city), and timezone information to verify that you are accessing our services from permitted jurisdictions and comply with geo-restriction requirements.
- Cookies and Similar Technologies: Data collected through cookies, web beacons, and similar tracking technologies to enhance functionality, remember your preferences, and analyze platform usage (see Section 8 for detailed cookie information).
1.3 Information from Third Parties
In certain circumstances, we may receive information about you from third-party sources:
- Payment Processors: Transaction confirmation data, payment status, and fraud risk assessments from banks and payment service providers.
- Identity Verification Services: Verification results from third-party identity verification and KYC compliance providers we engage to authenticate your documents.
- Fraud Prevention Services: Information from fraud detection databases and credit reference agencies to prevent financial crime and protect platform security.
- Affiliates and Marketing Partners: Referral source information if you were directed to kuda12 through affiliate marketing programs or partner websites.
2. How We Use Your Information
kuda12 processes your personal information for the following purposes:
2.1 Account Management & Service Delivery
- Creating and maintaining your user account.
- Authenticating your identity when you log in.
- Processing deposits, withdrawals, and payment transactions.
- Providing access to gaming products, sports betting markets, and platform features.
- Tracking your betting activity, account balance, transaction history, and wagering requirements.
- Administering bonuses, promotions, and VIP rewards programs.
- Sending transactional communications (deposit confirmations, withdrawal notifications, account alerts).
2.2 Legal & Regulatory Compliance
- Verifying your age (21+ requirement) and identity to prevent underage gambling.
- Complying with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations.
- Detecting and preventing fraud, money laundering, collusion, bonus abuse, and other prohibited activities.
- Maintaining records required by gaming regulations and licensing authorities.
- Responding to lawful requests from law enforcement and regulatory agencies.
- Enforcing our Terms & Conditions and investigating policy violations.
2.3 Customer Support & Communication
- Responding to your inquiries, questions, complaints, and support requests.
- Providing technical assistance and troubleshooting account issues.
- Communicating important service updates, policy changes, and security alerts.
- Conducting customer satisfaction surveys and collecting feedback to improve our services.
2.4 Security & Fraud Prevention
- Monitoring for suspicious activity, unusual betting patterns, and potential security threats.
- Protecting against unauthorized access, hacking attempts, and account takeovers.
- Detecting and preventing fraud, collusion, match-fixing, and other forms of gaming abuse.
- Implementing responsible gaming measures including self-exclusion, deposit limits, and problem gambling detection.
2.5 Platform Improvement & Analytics
- Analyzing user behavior and platform usage patterns to improve functionality and user experience.
- Conducting A/B testing and performance optimization.
- Developing new features, games, and services based on player preferences.
- Generating anonymized and aggregated statistics about platform performance and user demographics.
2.6 Marketing & Promotional Communications (With Your Consent)
- Sending promotional offers, bonus notifications, and personalized marketing communications (only if you have opted in).
- Displaying targeted advertisements and personalized content based on your gaming preferences and behavior.
- Informing you about new games, features, tournaments, and special events.
You can opt out of marketing communications at any time by adjusting your account preferences or contacting customer support.
3. Legal Basis for Processing
Under applicable data protection laws, we process your personal information based on the following legal grounds:
- Contractual Necessity: Processing is necessary to fulfill our contract with you (our Terms & Conditions), including providing gaming services, processing transactions, and managing your account.
- Legal Obligation: Processing is required to comply with legal and regulatory obligations, including age verification, KYC/AML compliance, tax reporting, and cooperation with law enforcement.
- Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, security monitoring, platform improvement, and analytics, provided these interests do not override your fundamental rights and freedoms.
- Consent: For marketing communications, cookies, and other processing activities where required by law, we obtain your explicit consent, which you can withdraw at any time.
4. Data Sharing & Disclosure
kuda12 does not sell your personal information to third parties. However, we may share your information with the following categories of recipients for legitimate business purposes:
4.1 Service Providers & Business Partners
- Payment Processors: Banks, cryptocurrency exchanges, and payment gateway providers that facilitate deposits and withdrawals.
- Identity Verification Services: Third-party KYC and identity verification providers that authenticate your documents.
- Cloud Hosting Providers: Secure cloud infrastructure services that store and manage platform data.
- Customer Support Tools: Live chat software, ticketing systems, and communication platforms used by our support team.
- Analytics Providers: Services that help us understand user behavior and improve platform performance (data is typically anonymized).
All service providers are contractually obligated to maintain confidentiality and security of your data and may only use it for the specific purposes we authorize.
4.2 Legal & Regulatory Authorities
We may disclose your information to law enforcement agencies, courts, regulatory bodies, or government authorities when:
- Required by law, court order, subpoena, or other legal process.
- Necessary to investigate suspected illegal activity, fraud, or violations of our Terms & Conditions.
- Required to comply with gaming licensing requirements, AML regulations, or tax reporting obligations.
- Necessary to protect the rights, property, or safety of kuda12, our users, or the public.
4.3 Business Transfers
In the event of a merger, acquisition, corporate restructuring, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity or successor organization. We will notify you of any such change and ensure your data continues to be protected under this Privacy Policy or an equivalent policy.
4.4 With Your Consent
We may share your information with other third parties when you provide explicit consent for specific purposes.
5. Data Security Measures
kuda12 employs industry-standard technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:
5.1 Technical Security
- Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocols. Sensitive data at rest is encrypted in our databases.
- Secure Infrastructure: Our platform is hosted on secure cloud infrastructure with redundant systems, firewalls, intrusion detection, and DDoS protection.
- Access Controls: Personal data is accessible only to authorized employees and service providers who require it for legitimate business purposes. Access is granted on a need-to-know basis with strict authentication requirements.
- Two-Factor Authentication (2FA): We offer optional 2FA for user accounts and require it for administrative access to sensitive systems.
- Security Monitoring: Continuous monitoring of systems for suspicious activity, unauthorized access attempts, and potential security vulnerabilities.
5.2 Organizational Security
- Employee Training: All employees with access to personal data receive training on data protection principles, security best practices, and confidentiality obligations.
- Confidentiality Agreements: Employees and contractors are bound by strict confidentiality and non-disclosure agreements.
- Vendor Management: Third-party service providers undergo security assessments and are contractually required to maintain equivalent security standards.
- Incident Response: We maintain a data breach response plan to detect, contain, and remediate security incidents promptly and notify affected individuals as required by law.
5.3 Your Responsibility
While we implement robust security measures, you also play a critical role in protecting your account:
- Use a strong, unique password and never share it with anyone.
- Enable two-factor authentication (2FA) for enhanced security.
- Keep your email address and phone number secure, as they are used for account recovery.
- Log out after each session, especially on shared or public devices.
- Report any suspicious activity or unauthorized access immediately to customer support.
6. Data Retention & Storage
kuda12 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.
6.1 Retention Periods
- Active Accounts: Personal and financial data is retained for the duration your account remains active.
- Closed Accounts: After voluntary account closure, we retain essential data for a minimum of 5 years to comply with financial record-keeping requirements, AML regulations, and to resolve potential disputes or chargebacks. Transaction records and KYC documents may be retained for up to 10 years as required by law.
- Marketing Data: If you opt out of marketing communications, your contact information is retained on a suppression list to ensure we do not contact you again, but other marketing data may be deleted.
- Anonymized Data: After personal identifiers are removed, anonymized and aggregated data may be retained indefinitely for statistical analysis and business intelligence purposes.
6.2 Data Deletion
When data is no longer required, we securely delete or anonymize it using industry-standard methods to prevent recovery or reconstruction. You may request deletion of your personal data in certain circumstances (see Section 7 - Your Privacy Rights).
7. Your Privacy Rights
Depending on your jurisdiction, you may have the following rights regarding your personal information:
7.1 Right of Access
You have the right to request a copy of the personal information we hold about you. You can access most of your data directly through your account dashboard, or contact us for a comprehensive data export.
7.2 Right to Rectification
If any personal information we hold is inaccurate or incomplete, you have the right to request correction. You can update most information directly in your account settings, or contact customer support for assistance.
7.3 Right to Erasure ("Right to be Forgotten")
You may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes collected or you withdraw consent. However, we may be required to retain certain information for legal compliance, fraud prevention, or to resolve disputes.
7.4 Right to Restrict Processing
You may request that we limit the processing of your personal data in specific situations, such as when you contest the accuracy of data or object to processing.
7.5 Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, machine-readable format and transmit it to another service provider where technically feasible.
7.6 Right to Object
You may object to processing of your personal data based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.
7.7 Right to Withdraw Consent
Where processing is based on consent (e.g., marketing communications, optional cookies), you may withdraw consent at any time. This does not affect the lawfulness of processing conducted before withdrawal.
7.8 Exercising Your Rights
To exercise any of these rights, contact our Data Protection team at [email protected] (displayed as plain text) or through your account dashboard. We will respond to verified requests within 30 days. We may require additional information to verify your identity before processing requests.
8. Cookies & Tracking Technologies
kuda12 uses cookies and similar tracking technologies to enhance your experience, analyze platform usage, and deliver personalized content.
8.1 What Are Cookies?
Cookies are small text files stored on your device by your web browser. They enable websites to remember your preferences, authenticate your session, and collect usage data.
8.2 Types of Cookies We Use
- Essential Cookies: Necessary for platform functionality, including session management, authentication, security, and load balancing. These cookies cannot be disabled without affecting core services.
- Performance Cookies: Collect anonymized data about how you use our platform (pages visited, time spent, errors encountered) to help us improve performance and user experience.
- Functional Cookies: Remember your preferences (language, currency, layout settings) to provide a personalized experience.
- Analytics Cookies: Help us understand user behavior and platform traffic patterns using third-party analytics services. Data is typically anonymized.
- Marketing Cookies: Track your activity across websites to deliver targeted advertisements and measure campaign effectiveness. These cookies require your consent.
8.3 Managing Cookies
You can control cookie settings through your browser preferences. Most browsers allow you to refuse cookies or delete existing cookies. However, disabling essential cookies may impair platform functionality. Third-party marketing cookies can be opted out through your account privacy settings or browser extensions.
9. International Data Transfers
kuda12 operates internationally and may transfer your personal data to servers or service providers located outside Indonesia. When we transfer data across borders, we ensure appropriate safeguards are in place:
- Standard Contractual Clauses: We use legally approved contract templates that provide data protection guarantees.
- Adequacy Decisions: We transfer data to countries recognized as providing adequate data protection.
- Service Provider Agreements: All international service providers are contractually bound to protect your data in accordance with this Privacy Policy and applicable laws.
10. Children's Privacy
kuda12 strictly prohibits use of our services by individuals under 21 years of age. We do not knowingly collect personal information from minors. If we discover that we have inadvertently collected data from someone under 21, we will immediately delete it and close the associated account. Parents or guardians who believe their child has provided information to kuda12 should contact us immediately.
11. Changes to This Privacy Policy
kuda12 reserves the right to update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or platform features. Material changes will be communicated via email and prominently displayed on our website at least 30 days before taking effect. Continued use of our services after changes become effective constitutes acceptance of the updated policy. We encourage you to review this Privacy Policy regularly to stay informed about how we protect your information.
If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us:
- Data Protection Email: [email protected] (displayed as plain text)
- Customer Support: Available 24/7 via live chat, WhatsApp, and email
- Response Time: We aim to respond to privacy inquiries within 5 business days and fulfill data subject requests within 30 days as required by law.
By using the kuda12 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal information as described herein.