kedirititoPrivacy Policy

What Data We Collect on kediritito

We collect data in several categories when you create and use your kediritito account. Account creation requires your email, username, and password — these are encrypted and used only for login and account recovery. Identity verification (KYC) requires your government ID (KTP, SIM, or passport) and proof of address (utility bill or bank statement). We store these documents securely to comply with Indonesian gaming regulations and to verify that withdrawals go to your legitimate account holder.

Payment data is collected when you deposit or withdraw. We capture your payment method choice (DANA, e-wallet, etc.), the amount, and the timestamp. We do not store your wallet credentials, card numbers, or PIN — payment partners handle authentication directly. Our kediritito servers receive only a confirmation that your transaction succeeded. Gaming data includes your bets, game selections, and outcomes — this is necessary to calculate your balance, settle markets, and detect fraud.

We also collect device and browsing data: your mobile device type (Android or iPhone), app version, IP address, browser type, and pages you visit. This helps us diagnose technical issues, optimize performance, and detect suspicious activity (e.g., login from a new country, rapid account changes). We use cookies on our web version to remember your login state and preferences; you can disable cookies in your browser settings, though this may limit functionality.

How We Use Your Data

Our kediritito platform uses your data for specific, lawful purposes. Account data (email, ID, address) is used to verify your identity, comply with Indonesian anti-money-laundering (AML) regulations, and process withdrawals. Payment data is used to facilitate deposits and withdrawals, detect fraud, and provide you with transaction history. Gaming data is used to calculate your balance, settle bets, and prevent cheating (e.g., detecting if one account is being used by multiple people or if a player is exploiting a game glitch).

Device and browsing data is used to improve our kediritito app and website performance, detect security threats (unauthorized login attempts, bot activity), and personalize your experience (remembering your preferred language, last viewed games, etc.). We may use aggregated, anonymized data (not tied to your name) to analyze gaming trends, understand which games are most popular in Jakarta, Surabaya, Bandung, or Medan, and make product decisions. This aggregate data cannot identify you.

We may send you promotional emails about new games, bonuses, or special events (like Liga 1 or Piala Indonesia tournaments). You can opt out of marketing emails anytime by clicking "Unsubscribe" in our email footer or updating your notification preferences in Account Settings. We will never send marketing messages to your phone unless you explicitly opt in to SMS notifications.

Data Retention and Deletion

We retain your account data (email, ID, address) for as long as your kediritito account is active, plus 5 years after account closure. This retention period is required by Indonesian financial regulations. Gaming history (bets, outcomes, balance) is kept for 7 years to support dispute resolution and tax reporting. Payment records are retained for 7 years as required by payment partners and Indonesian law. Device logs and browsing data are kept for 90 days; after that, they are anonymized or deleted.

If you request account deletion, we delete your personal information (email, name, ID, address) except where we are legally required to retain it for AML or financial reporting. Gaming history tied to your account is pseudonymized (your name removed, replaced with an account ID) so we can defend against disputes while protecting your privacy. You can request deletion by contacting our support team; we process requests within 30 days.

Third-Party Processors and Data Sharing

We share your data with third parties only where necessary. Payment processors (mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment) receive your payment method and transaction amount to complete deposits and withdrawals. Each processor has its own privacy policy, and we recommend reviewing it. We also share minimal data with our hosting provider (servers that run kediritito) — they have access only to anonymized system logs, not your personal or gaming data.

Our kediritito servers may be located outside Indonesia (for example, in Singapore or another region). This means your data may be transferred outside Indonesian borders. We ensure all transfers are encrypted and the receiving servers are bound by the same security standards as we maintain. If Indonesian law requires data to stay within Indonesia, we maintain a local backup. Legal authorities (police, courts) may request your data with a court order; we comply with valid legal requests.

Your Rights and Contact

You have the right to access your personal data. Contact our support team and request a copy of your account data — we provide it within 14 days. You have the right to correct inaccurate data (e.g., if your address is misspelled in your KYC documents, we can update it). You have the right to request deletion of your data (subject to legal retention requirements). You have the right to opt out of marketing communications.

If you believe our kediritito privacy practices violate your rights or Indonesian data protection law, you can file a complaint with us first. Contact our privacy team via our support channels. If we don't resolve your complaint within 30 days, you may escalate to the relevant Indonesian data protection authority.

Your privacy on kediritito is not negotiable. We encrypt your data, limit access, and don't sell it. That's our commitment.

Security and Updates to This Policy

Our kediritito platform uses industry-standard encryption (SSL/TLS) to protect data in transit between your phone and our servers. Account passwords are hashed (never stored in plain text). Two-factor authentication (2FA) is available if you want extra login security. We undergo regular security audits and penetration testing to identify and fix vulnerabilities. If we detect a data breach, we notify affected account holders within the timeframe required by Indonesian law and provide guidance on next steps.

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. Material changes (e.g., new data collection or sharing with third parties) will be announced via email and on this page. Your continued use of kediritito after a policy change constitutes your acceptance of the new terms. The "Last Updated" date at the end of this page shows when we last revised the policy.

If you have any questions about our privacy practices or this policy, contact us via live chat in the kediritito app, email our support address, or phone during business hours. We're here to clarify and help.