kyota98 Platform Privacy Notice

What Data We Collect on kyota98

We collect data in two main categories: account data and transactional data. When you register on kyota98, we collect your email address, password (hashed and not stored in plaintext), and a username. During account verification, we request identity documents (national ID or passport) and address proof (utility bill, bank statement, or rental agreement). We also collect your phone number for two-factor authentication and account recovery.

Transactional data includes deposit records, withdrawal requests, game session logs, and bet history. When you deposit via DANA, e-wallet, mobile banking, or bank transfer, we record the payment method, amount, timestamp, and confirmation status. We also log your IP address and device type (Android, iOS, desktop) each time you log in, along with session duration and games played.

We collect this data automatically through our platform's standard operations — no manual entry beyond initial registration and KYC documents. If you contact our support team, we also retain your message history and notes from our staff responses.

How We Use Your Data on kyota98

We use your account data and transactional records for the following purposes:

• Account operation: We process your login, verify your identity, manage your account balance, and respond to your requests (password reset, deposit, withdrawal).
• Payment processing: We confirm your deposits via local payment, online payment, e-wallet, mobile banking, local payment, online payment, or bank transfer. We also process your withdrawal requests and verify your account status before releasing funds.
• Fraud prevention: We analyze your account activity for unusual patterns — for example, a withdrawal request from a new device or country. We may suspend or delay withdrawal processing if we detect anomalies.
• Regulatory compliance: We retain transaction records for a minimum of five years to comply with Indonesian financial regulations and anti-money-laundering (AML) standards.
• Customer support: When you contact us, we use your account data to assist you — verifying your identity, checking your account history, and resolving disputes.

We do not use your data to send you promotional emails or SMS unless you have explicitly opted in through your kyota98 account settings. You can disable marketing communications at any time by visiting your notification preferences.

Third-Party Processors and Data Sharing

We use third-party processors for specific functions — we do not share your raw account data with them. Payment processors for e-wallet, mobile banking, local payment, online payment, e-wallet, and mobile banking receive only your transaction amount, timestamp, and merchant ID to confirm deposits and withdrawals. They do not receive your password, full identity document, or bet history.

Our hosting provider (AWS or similar cloud infrastructure) stores our servers; your data may sit outside Indonesia or your home jurisdiction. Our provider has access to encrypted data only — they cannot read your password, identity documents, or withdrawal requests without our encryption keys.

If local authorities or regulators request your data, we comply with legal orders. We will not disclose your information to third parties for marketing, data brokers, or commercial purposes without your explicit consent.

Data Security and Encryption on kyota98

We encrypt all data in transit using TLS 1.2 or higher. When you log in to kyota98 on mobile or desktop, your password and session token are transmitted over a secure HTTPS connection — your internet service provider or network administrator cannot intercept them.

At rest, sensitive data (passwords, identity documents, bank account numbers) is encrypted using AES-256. Your password is hashed with bcrypt, meaning even our technical staff cannot recover your plaintext password. If you forget your password, you reset it via a secure link we send to your email — we never display or transmit your original password.

Our servers are protected by firewalls and intrusion-detection systems. We perform regular security audits and penetration testing. However, no system is non-specific info secure — if you believe your kyota98 account has been compromised, contact our support team immediately.

Cookies and Tracking on kyota98

We use cookies to maintain your login session on kyota98. When you log in, we set a session cookie that identifies you to our servers. This cookie expires after a period of inactivity (typically a few hours) — you must log in again afterward. We also use a preference cookie to remember your notification settings, language choice, and theme preference (light or dark mode).

We do not use third-party advertising or tracking cookies on kyota98. We do not allow Google Analytics, Facebook Pixel, or similar tracking services to monitor your activity on our platform. We log page views and feature usage internally for platform improvements, but we do not sell that data to advertisers.

Your mobile app on Android or iOS may use platform-specific identifiers (e.g., Android Advertising ID, IDFA) if you enable push notifications. You control these settings in your device's notification preferences.

Your Rights Regarding Your Data on kyota98

You have the right to access, correct, or delete your data on kyota98. You can view your account information (email, phone, identity documents) in your account settings. If you notice an error in your KYC documents or contact details, contact our support team to request a correction.

To request deletion of your account and associated data, submit a form through our support menu. We will close your account and anonymize your personal information. However, we retain transaction records for the regulatory period (five years) — these are kept separate from your identity to protect your privacy. Game session logs and bet history are also retained for record-keeping but are not linked to your name after account closure.

We do not sell or trade your data. If you believe kyota98 has misused your information, you have the right to file a complaint with your local data protection authority or privacy regulator.

Contact Us About Privacy on kyota98

If you have questions about this privacy notice or how we handle your data, use our in-app support menu or email our privacy team. We aim to respond to privacy inquiries within five business days. For urgent issues (suspected data breach, unauthorized access), contact our support team immediately — they can lock your account and begin a security review.

Our support team is available in English and operates during standard business hours. Users in Jakarta, Surabaya, Bandung, and Medan may have access to local support liaisons through our partner network.

kyota98 services are available only where local law permits. If you reside in a jurisdiction where our platform cannot legally operate, we ask that you not register an account. If you have already created an account from a restricted jurisdiction, contact our support team — we will close your account and process any remaining balance as a withdrawal (subject to standard verification).