kyoto Casino & Sportsbook Data Care
This page describes what we collect when you use kyoto and how we keep that data protected. We at kyoto take your privacy seriously. When you create an account, verify your identity, deposit funds, or place wagers on Liga 1, live blackjack, slots, or any other game type, we collect personal and transactional data. This policy explains what we collect, why we collect it, how we use it, and your rights regarding your data.
Our core principle is transparency. We do not sell your data to third parties for marketing purposes. We do not use your data to profile you in ways unrelated to operating kyoto. We collect only what is necessary to verify your identity, process your deposits and withdrawals, detect fraud, and comply with applicable regulations. Your data is encrypted and stored securely. Access is restricted to kyoto staff who need it to do their jobs.
If you have questions about how we handle your data, contact our privacy team. We are happy to explain our practices and help you understand your rights.
What Data We Collect on kyoto
We collect data at several stages of your kyoto experience. During account creation, we collect your name, date of birth, email address, phone number, and residential address. During identity verification (KYC), we collect a copy of your government-issued ID and proof of address (utility bill, bank statement, etc.). When you deposit funds via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet, we collect your payment method details and transaction records. When you place wagers, we log your bets, stakes, outcomes, and payouts. When you contact support, we record your messages and any data you share with us.
We also collect technical data: your IP address, device type, browser version, and account login history. This technical data helps us detect fraud, identify suspicious activity, and prevent unauthorized access. We do not collect your credit card number in full; payment processors handle card data directly and securely. We do not track your browsing outside kyoto or sell your email address to marketers.
How We Use Your Data on kyoto
We use your personal data for specific, legitimate purposes. First, we verify your identity to comply with anti-money-laundering (AML) and Know Your Customer (KYC) regulations. Second, we process your deposits and withdrawals—without your payment details, we cannot credit your account or pay out your winnings. Third, we detect and prevent fraud. Fourth, we investigate disputes and support your account inquiries. Fifth, we comply with legal obligations (tax reporting, law enforcement requests, regulatory audits).
We use your technical data to improve kyoto's security and performance. We analyze login patterns to spot suspicious activity. We track which games you access to understand platform usage and optimize our service. We do not use your data to target you with unsolicited marketing. If you opt in to kyoto communications (newsletters, promotions), we use your email only for those communications, and you can opt out anytime.
Third-Party Data Processors
We use third-party service providers to operate kyoto. Payment processors handle your deposit and withdrawal transactions. Identity verification vendors verify your ID and address. Cloud infrastructure providers host our servers. Email service providers send you account notifications and communications. Support tools allow our team to assist you. These third parties are bound by contracts requiring them to protect your data and use it only for the purposes we specify.
Our servers may sit outside your jurisdiction (e.g., hosted in multiple regions for redundancy and performance). This means your data may be transferred internationally. By using kyoto, you consent to this data transfer. We ensure all transfers comply with applicable data protection regulations. If you are uncomfortable with international data transfer, you should not use kyoto.
Your Rights Regarding Data on kyoto
You have the right to access your data. Contact our privacy team, and we will provide you with a copy of all personal data we hold about you. You have the right to correct inaccurate data. If your phone number, address, or other details change, update them in your kyoto account settings, or ask us to correct them. You have the right to delete your data, subject to legal and regulatory requirements. If you close your account, we will delete your data after retention periods required by law (typically 5–7 years for financial records).
You have the right to restrict how we use your data. For example, you can opt out of marketing communications. You can request that we limit data sharing with third parties (though this may affect our ability to process your deposits and withdrawals). You have the right to data portability—we will provide your data in a portable format if you request it. If you believe we have violated your privacy rights, you can lodge a complaint with the relevant data protection authority in your jurisdiction.
"At kyoto, your data is yours. We collect what we need, protect it fiercely, and respect your rights to access, correct, and control it."
Cookies and Tracking Technologies
kyoto uses cookies to improve your experience. Session cookies keep you logged in during your session; they expire when you close your browser. Persistent cookies remember your preferences (language, theme) across sessions. Analytical cookies help us understand how you use kyoto so we can optimize features and fix bugs. We do not use tracking cookies to follow you across other websites. Third-party analytics providers (e.g., Google Analytics) may place cookies on your device; their use is governed by their privacy policies.
You can control cookies through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are placed. If you disable cookies, some kyoto features may not work correctly. kyoto does not respond to "Do Not Track" signals because we do not track you across websites anyway. Our data use is limited to operating kyoto and improving our service.
Data Retention on kyoto
We retain your personal data for as long as necessary to fulfill the purposes we collected it for. Your kyoto account data (name, email, address) is retained as long as your account is active. If you close your account, we retain your data for 7 years to comply with financial and gaming regulations (anti-money-laundering requirements, tax reporting). Payment records are retained for 7 years. Dispute records are retained for the duration of any dispute plus 2 years. Technical logs (IP addresses, login history) are retained for 12 months.
You may request deletion of your data subject to legal retention requirements. If a legal hold is in place (e.g., pending investigation or court order), we will retain your data until the hold is lifted. Retention periods vary by jurisdiction; if you are in a jurisdiction with specific data retention rules, we comply with those rules.
How We Protect Your Data
We employ industry-standard security measures to protect your data. All data transmitted between your device and kyoto's servers is encrypted using SSL/TLS protocols. Your kyoto account is protected by a password; we store your password as a hash (one-way encryption), so even our staff cannot see it. We use multi-factor authentication for sensitive account actions (large withdrawals, address changes). Our servers are protected by firewalls, intrusion detection systems, and regular security audits.
Despite our best efforts, no security is perfect. If kyoto experiences a data breach, we will notify you and relevant authorities as required by law. We maintain cyber liability insurance and incident response protocols. If you suspect your kyoto account has been compromised, contact us immediately so we can secure it.
Children's Privacy
kyoto is not intended for users below the legal age of majority in their jurisdiction. We do not knowingly collect data from children. If we discover that a user is below the legal age, we will close their account and delete their data. Parents or guardians who believe a child has created a kyoto account should contact us immediately.
Contact Our Privacy Team
Questions about this privacy policy or how kyoto handles your data? Reach us via the Help section in your account, by email, or through our support channels. You can also request to exercise your privacy rights (access, correction, deletion, portability) through the same channels. Our privacy team responds in English and Indonesian during standard business windows. For urgent privacy concerns, mark your message as urgent and we will prioritize it.
kyoto's privacy policy may be updated from time to time. We will notify you of material changes by email or via a prominent notice on our platform. Continued use of kyoto after policy updates constitutes acceptance of the new terms. This privacy policy applies to all kyoto users across all regions—Jakarta, Surabaya, Bandung, Medan, Semarang, and anywhere else we operate where local law permits.
Service availability
We at kyoto offer our services only in jurisdictions where online gaming and sportsbook wagering are permitted by applicable law. Our platform, data practices, and account services are available only where local law permits. We do not operate in jurisdictions where such services are prohibited. Our service availability is determined by local regulatory frameworks, and we comply with all applicable regulations in the regions where we operate. Users accessing kyoto from any location are responsible for verifying that such access is legal under their own jurisdiction's law. We do not make representations about the legality of our services in any specific jurisdiction. If you are uncertain whether kyoto is available in your location, we recommend contacting our support team before creating an account. Our platform is designed to serve users in supported jurisdictions only. We reserve the right to restrict or terminate access from any jurisdiction where our services are not permitted. This restriction is not a judgment on the user but a compliance measure to ensure we operate within legal boundaries. Users who access kyoto from unsupported jurisdictions do so at their own risk and without our endorsement or support. We maintain updated information about service availability and will notify users of any changes to regional access.
Account eligibility
To create and maintain a kyoto account, you must meet the eligibility requirements set by applicable law in your jurisdiction. We do not specify a fixed age requirement; instead, we defer to the legal age of majority in your jurisdiction. When you create an account, you represent that you meet all eligibility requirements under your local law. During account verification, we collect your date of birth and other identifying information to confirm your eligibility. If we determine that you do not meet eligibility requirements, we will close your account and return any funds to your original payment method. kyoto does not offer account controls or deposit-limit features as part of our standard account settings. If you wish to restrict your own access or set personal limits, contact our support team to discuss options. We respect user autonomy and will work with you to find appropriate solutions. All account holders are responsible for their own account management and activity. kyoto provides the platform; you control how you use it. We may request additional verification (re-verification of your identity) at any time to ensure continued compliance with eligibility requirements.
Local-law responsibility
Users are solely responsible for verifying that their access to and use of kyoto comply with the laws of their own jurisdiction. kyoto does not provide legal advice, and we do not represent that our services are legal in any specific location. Before creating an account or depositing funds, you should research the applicable laws in your jurisdiction regarding online gaming, sportsbook wagering, and related activities. If online gaming or sportsbook services are prohibited in your jurisdiction, you should not access kyoto. kyoto is not liable for any legal consequences arising from your use of our platform in violation of local law. We operate in good faith within the jurisdictions where we are permitted to do so. Users who access kyoto from prohibited jurisdictions do so entirely at their own risk. We may terminate accounts or restrict access if we determine that a user is accessing kyoto from a jurisdiction where our services are not permitted. This action is taken to protect both kyoto and the user from potential legal exposure. Your responsibility is to know your local law and make an informed decision about whether to use kyoto. We encourage users to consult local legal authorities or qualified legal professionals if they are unsure about the legality of accessing kyoto in their jurisdiction.
Data and privacy scope
kyoto collects personal data for account creation, verification, and regulatory compliance. This includes your name, date of birth, email, phone number, and payment information. During account verification, we request a valid ID and proof of address. This data is collected under our Know Your Customer (KYC) policy and is used to verify your identity, prevent fraud, and comply with applicable regulations. We do not sell your data to third parties. Your data is stored securely using industry-standard encryption and access controls. We retain your data for as long as your account is active and for a period after account closure as required by law. Our full privacy policy is available on our website and details exactly what data we collect, how we use it, how long we retain it, and your rights regarding your data. If you have questions about your data or wish to exercise your privacy rights, contact our support team. We are committed to protecting your privacy and complying with applicable data-protection regulations. We use third-party service providers (payment processors, identity verification vendors, cloud hosting) to operate kyoto, and they are bound by contracts requiring them to protect your data. Your data may be transferred internationally as part of our service delivery.
Contact for legal inquiries
If you have legal questions, privacy inquiries, or concerns about kyoto's data practices, you can contact our legal and compliance team via the Help section in your kyoto account or by email. We aim to respond to legal and privacy inquiries within standard business windows, typically within 5–10 business days. For urgent matters, clearly mark your inquiry as urgent, and we will prioritize it. kyoto maintains records of all legal inquiries and responses for compliance purposes. If you are a regulatory authority or legal representative seeking information about kyoto, please contact us through official channels. We cooperate with regulatory inquiries and provide information as required by law. Our commitment is to operate transparently and comply with all applicable regulations in the jurisdictions where we operate. If you believe kyoto has violated applicable law or your privacy rights, you can lodge a complaint with the relevant data protection authority in your jurisdiction. kyoto respects the legal process and will respond appropriately to any legal action, regulatory inquiry, or data protection complaint.