kurnia Platform Privacy Notice
This page describes what we collect when you use kurnia and how we keep that data protected. We operate a gaming and sportsbook platform spanning live-dealer tables, slot games, esports markets, and football coverage. To deliver these services across Jakarta, Surabaya, Bandung, Medan, and Semarang, we collect account information, payment details, gameplay history, and device data.
We at kurnia are committed to transparency. This notice outlines what information we collect, who we share it with, how long we retain it, and what rights you have. Our approach follows industry-standard encryption, access controls, and audit logs. We do not sell your personal data to third parties without explicit consent.
Read on to understand our kurnia data practices, your rights as a user, and how to contact our privacy team if you have questions or concerns.
What data we collect on kurnia
We collect data in several categories when you register and use our kurnia platform. First, we collect account information: your email, phone number, date of birth, and full name. We use these to verify your identity, enable account recovery, and meet regulatory requirements in your jurisdiction.
Second, we collect payment and financial data: your payment method details (e-wallet provider, bank account number, virtual-account reference), transaction history, deposit amounts, and withdrawal requests. We use this data to process your deposits via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, and bank transfers (mobile banking, local payment, online payment, e-wallet). Payment data is encrypted end-to-end and never stored in plain text.
Third, we collect gameplay and account activity data: your game selections, bet history, session timestamps, outcomes, and account balance. We use this to calculate your account state, display your history, and detect fraud or unusual patterns.
Fourth, we collect device and session data: your IP address, device type, operating system, browser type, and session cookies. We use this to verify login authenticity, detect unauthorized access, and optimize our kurnia app for different device types.
- Personal data
- Email, phone, name, date of birth — used for identity verification and account recovery.
- Payment data
- Payment method, transaction history, deposit and withdrawal records — encrypted and processed securely.
- Gaming data
- Bets, outcomes, session history, balance — stored server-side for audit and fraud detection.
- Technical data
- IP address, device type, browser, session cookies — used for security and performance optimization.
How we use and share your data
We use your data primarily to operate our kurnia platform. We authenticate your login, process your deposits and withdrawals, deliver live-dealer streams, resolve gameplay outcomes, and support your account. We also use your data to comply with legal requirements — we collect and retain documentation for Know Your Customer (KYC) checks as mandated by gaming regulators.
We share your data with third-party processors in limited cases. Payment processors (e.g. the providers behind mobile banking, local payment, online payment, e-wallet, and our bank transfer partners) receive encrypted payment information to complete transactions. Live-dealer studios that stream blackjack, roulette, baccarat, and Dragon Tiger tables may receive session identifiers and bet amounts to synchronize gameplay. These third parties operate under strict data-processing agreements and cannot use your data for their own purposes.
We do not sell your personal data. We do not share your gaming history, payment details, or identity with advertisers, data brokers, or unrelated businesses. If we are required by law to disclose your data (e.g. a court order or regulatory investigation), we will notify you unless legally prohibited from doing so.
Data retention and security
We retain your account information for as long as your kurnia account is active, plus five years after closure (to comply with financial audit requirements). We retain your gameplay history for five years. We retain payment records indefinitely (as required by anti-money-laundering regulations). We delete device session data (cookies, IP logs) within ninety days unless you remain an active user.
We secure your data through encryption, access controls, and audit logs. All communication between your device and our kurnia servers uses TLS 1.2 or higher. Payment data is encrypted at rest using AES-256. Database access is restricted to authorized personnel and logged. We conduct annual security audits and penetration tests.
Our servers may sit outside your jurisdiction — we operate infrastructure across multiple regions for redundancy. We ensure all data-processing agreements comply with applicable data-protection laws. If you are in a region with specific data-residency requirements, you must verify that our kurnia platform's infrastructure meets your jurisdiction's standards before opening an account.
Your rights on kurnia
You have the right to access your personal data. Log into your kurnia account and download your account information, gameplay history, and payment records from your dashboard. You can request a copy of all data we hold about you by contacting our privacy team.
You have the right to correct inaccurate data. If your name, email, phone, or payment method is incorrect in our kurnia system, update it through your account settings. If you cannot correct something yourself, contact our support team and we will make the change.
You have the right to delete your account. If you request account closure, we will deactivate your kurnia account, disable login, and mark your personal data for deletion after the retention period expires (five years for most data, indefinitely for payment records as mandated by law).
You have the right to object to processing. If you receive marketing communications from our kurnia team, you can opt out by clicking the unsubscribe link in the email or adjusting your notification preferences in your account settings.
Your kurnia privacy rights
- Access: download your account data and full history from your kurnia dashboard.
- Correct: update your personal details through account settings or contact support.
- Delete: request account closure and data deletion after the retention period.
- Opt out: unsubscribe from marketing emails through your notification preferences.
- Contact: reach our privacy team if you have concerns or questions about your data.
Cookies and tracking on our kurnia app
Our kurnia platform uses cookies and similar tracking technologies to maintain your login session, remember your preferences, and optimize performance. Session cookies are deleted when you close your browser. Persistent cookies remain for up to one year to remember your login state and settings.
We do not use third-party tracking pixels or behavioral analytics that follow you across unrelated websites. Our analytics are limited to our kurnia platform — we track gameplay patterns, app performance, and feature usage to improve our service, not to build a profile of you for external use.
You can disable cookies in your browser settings, but doing so will limit your kurnia experience — you may need to re-authenticate frequently or lose saved preferences.
Jurisdiction and contact
Our services are available only where local law permits. Before opening a kurnia account, verify that online gaming, sportsbook wagering, and live-dealer access comply with your jurisdiction's regulations. We do not intentionally serve users in jurisdictions where these services are prohibited.
Our kurnia infrastructure and data-processing operations are subject to the laws of the jurisdictions in which our servers operate. By using our platform, you acknowledge that your data may be processed and stored outside your home country.
If you have privacy questions or concerns about our kurnia data practices, contact our privacy team:
- Email: [email protected]
- In-app support: Open the Help menu in your kurnia account and select Privacy Inquiry
- Mailing address: kurnia Privacy Team, Legal Department
We will respond to privacy requests within thirty days. If you are unsatisfied with our response, you may file a complaint with your local data-protection authority.