Reference

How kilatwin protects your account and payments

When you open an account with us, we collect only what we need to verify your identity, process your DANA, OVO, GoPay and QRIS deposits, and keep your…

Data encrypted on transferAccount withdrawal verificationNo third-party data sales
kilatwin How kilatwin protects your account and payments
REACH OUR PRIVACY TEAM

How to contact us about your data

Email Support Send data requests, privacy concerns or deletion requests to [email protected].
In-App Help Center Open the Help section in your account settings to submit a privacy inquiry directly.
Account Settings Manage privacy preferences, view your stored data summary, and request a full data export…
SECURITY & YOUR RIGHTS

Data security, cookies and account access

Encryption in Transit

All data sent between your device and our servers uses industry-standard TLS encryption. When you deposit via DANA, OVO, GoPay or QRIS, the payment handoff is encrypted end-to-end and never stored unencrypted on our systems.

Cookie and Tracking Choices

We use session cookies to keep you logged in and functional cookies to detect fraud. Analytical cookies help us understand how the site performs — you can disable these in your privacy settings without losing access to your account.

Account Verification

When you request a withdrawal, we verify your identity before sending funds to your registered DANA, OVO, GoPay wallet or bank account. This step protects you from unauthorised payout attempts and fulfils local compliance rules.

Data Retention Schedule

We retain login and deposit records for the duration of your account plus two years (where local law permits). Session logs and device data are purged after 90 days unless a dispute or investigation is ongoing.

Third-Party Data Sharing

We share data only with payment processors (to clear DANA, OVO, GoPay and QRIS transactions) and legal authorities where required by law. We never share your data with marketing firms, affiliates or data brokers.

Your Right to Know and Delete

You can request a complete export of your personal data or ask us to delete your account at any time. Submit requests via email or your account settings; we process them within five business days and confirm completion in writing.

Privacy questions we hear often

When you close your account, we anonymise your gameplay history and erase your personal information within five business days, unless you request a data export first. Transaction records tied to DANA, OVO, GoPay or QRIS deposits are kept for seven years to comply with payment and tax regulations, but are not linked to your account.

No. We never sell, rent or lease your personal data to third parties. We only share data with payment processors to clear DANA, OVO, GoPay and QRIS transactions, and with authorities where required by local law. Your contact information is not shared for marketing purposes.

Payments via DANA, OVO, GoPay and QRIS are processed through encrypted channels and verified instantly. We do not store your full payment details on our servers — only transaction IDs and confirmation hashes. Your wallet and bank details remain secure with the payment provider.

Yes. Go to your account settings, select Privacy, and choose Export Data. We'll compile a file with your profile, login history, device records and transaction summaries within three business days. You can also email [email protected] with your request.

We retain your account data for up to two years after your last login, where local law permits. During this time, your account remains closed and your data encrypted. After two years, we securely delete all personal information except transaction records required by law.

We use essential cookies for login and account security, functional cookies to detect suspicious account access, and analytical cookies to measure site performance. You can disable analytical and functional cookies in your privacy settings without affecting your access to the lobby or withdrawals.

Email [email protected] with details of your concern. If you suspect your account was accessed without permission, contact our support team immediately via the in-app help centre or message us within 24 hours. We investigate all reports and respond within one business day.