At kaki36, your privacy is a core operational principle, not a compliance afterthought. This Privacy Policy explains in clear terms exactly what personal data we collect, why we collect it, how we store and protect it, who we share it with, and what rights you hold over your own information.
Before reading the full legal text, these six principles summarize how kaki36 approaches player data. The full policy below governs in all cases.
kaki36 collects only the personal data that is strictly necessary to operate the platform, verify player identity, process payments, and meet licensing and compliance obligations. We do not harvest data beyond what our services require.
Data collected for one specific purpose — such as KYC identity verification — is not repurposed for unrelated activities such as advertising profiling or sale to third-party data brokers. We use your data for what we said we would use it for, and nothing else.
Player data is protected by AES-256 encryption at rest, TLS 1.3 encryption in transit, and access controls that limit data visibility to authorized personnel on a strict need-to-know basis. Our infrastructure undergoes regular third-party penetration testing.
kaki36 does not sell, rent, or trade your personal information to third parties for commercial purposes. We share data with service providers only as necessary to deliver platform services — and those providers are contractually bound to use your data only for the specified purpose.
You have the right to access, correct, export, and request deletion of your personal data. Requests are handled within 30 days of receipt. Some data may be retained beyond a deletion request where required by law or by our licensing obligations — we will always explain the reason when that applies.
This Privacy Policy is written in plain professional English — not in impenetrable legal boilerplate designed to obscure what we actually do. If you read this document in full, you will understand exactly how kaki36 handles your data. We update this policy when practices change and notify registered players of material updates.
Scope of This Policy: This Privacy Policy applies to all personal data processed by kaki36 in connection with the operation of the Platform at https://kaki36.cam. It applies to all registered Players, prospective Players who have initiated but not completed registration, and visitors who access the Platform without registering. By using the Platform, you acknowledge that you have read and understood this policy.
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
kaki36 is the Data Controller for all Personal Data collected through the Platform. As Data Controller, kaki36 determines what data is collected, for what purposes it is processed, and how long it is retained. kaki36 is responsible for ensuring that all Processing activities comply with applicable data protection legislation and the Company's internal data governance policies.
For data protection queries, access requests, or complaints, Players may contact the kaki36 Data Protection team via the contact channels listed in Section 17 of this policy. When contacting us on a data protection matter, please identify yourself with your registered Account username and the nature of your request to allow efficient processing.
Indonesian Context: kaki36 serves players primarily based in Indonesia. While Indonesia's Personal Data Protection Law (UU PDP, enacted 2022) is the primary domestic legislative reference for our Indonesian players, kaki36 also aligns its data practices with internationally recognized frameworks including GDPR-equivalent standards, which in several respects exceed the minimum requirements of current Indonesian law. Where Indonesian law imposes stricter standards, those standards take precedence.
kaki36 collects Personal Data across several categories, as detailed in the table below. The legal basis for each category of processing is addressed in Section 5.
| Data Category | Specific Data Points | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, KTP number, nationality, gender | Account registration, KYC verification, age verification (21+) |
| Contact Data | Email address, phone number, city/province of residence | Account communication, support, notifications |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, etc.), e-wallet account details (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit and withdrawal history | Payment processing, fraud prevention, AML compliance |
| KYC Document Data | KTP photograph, selfie with KTP, supporting documents as requested | Identity verification, age verification, AML compliance |
| Transactional Data | Betting history, game session logs, win/loss records, bonus claims, wagering activity | Account management, dispute resolution, responsible gaming monitoring |
| Technical Data | IP address, device type, operating system, browser type, session timestamps, login history | Security, fraud detection, platform optimization |
| Usage Data | Pages visited, features used, click patterns, session duration | Platform improvement, analytics, responsible gaming detection |
| Communication Data | Support chat transcripts, email correspondence, complaint records | Customer support, dispute resolution, quality assurance |
| Marketing Preferences | Promotional opt-in/opt-out status, preferred communication channel | Sending relevant promotional offers (where consent given) |
kaki36 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or health data, except where health-related information is voluntarily disclosed by a Player in the context of a responsible gaming self-exclusion or support request. In that case, the data is used solely for the purpose of administering the responsible gaming measure and is held with heightened confidentiality controls.
kaki36 collects Personal Data through the following channels and mechanisms:
You provide data directly to kaki36 when you register an Account, complete the KYC verification process, make a deposit or withdrawal, contact our support team, participate in a promotion, or respond to a survey. The accuracy of directly provided data is your responsibility; providing false information is a breach of our Terms & Conditions.
When you access the kaki36 Platform, our servers automatically record Technical Data including your IP address, device identifiers, browser type, operating system version, referring URL, and the pages you visit. This data is collected via server logs, session management cookies, and analytics tools. See Section 11 for full details of our Cookies policy.
kaki36 may receive data about you from the following third-party sources in limited circumstances:
kaki36 processes Personal Data on one or more of the following legal bases, depending on the specific processing activity:
kaki36 uses the Personal Data it collects for the following specific purposes:
kaki36 does not sell, rent, or trade your Personal Data to any third party. We share your data only in the circumstances described below, and only to the minimum extent necessary for the stated purpose:
kaki36 engages carefully selected third-party service providers who process Personal Data on our behalf under binding data processing agreements. These providers are permitted to use your data only for the specific purpose for which they were engaged and are prohibited from using it for their own commercial purposes. Categories of service provider include:
kaki36 may disclose Personal Data to government bodies, regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory direction. We will notify the affected Player of such a disclosure where legally permitted to do so and where doing so would not prejudice the investigation or proceeding in question.
In the event that kaki36 undergoes a merger, acquisition, sale of assets, or corporate restructuring, Player Personal Data may be transferred to the successor entity as part of that transaction. Players will be notified of any such transfer and of any resulting change to this Privacy Policy via the email address registered to their Account before the transfer takes effect.
kaki36 may share aggregated, anonymized data — from which no individual Player can be identified — with third parties for industry research, analytics, or marketing purposes. Such data does not constitute Personal Data and is not subject to this Privacy Policy.
Important: kaki36 will never share your Personal Data with other gambling operators, advertising networks, or data brokers for the purpose of targeting you with third-party gambling advertisements. Our data sharing is limited strictly to the operational purposes described above.
As an internationally operating platform, kaki36 may transfer your Personal Data to servers and service providers located outside of Indonesia. This includes cloud infrastructure hosted in data centers across Asia-Pacific regions and the locations of our game provider partners.
Where Personal Data is transferred outside Indonesia, kaki36 ensures that appropriate safeguards are in place to protect that data to a standard equivalent to or exceeding the protections afforded under Indonesian data protection law. These safeguards include:
If you would like further information about the specific safeguards applicable to a particular cross-border data transfer, please contact us using the details in Section 17.
kaki36 retains Personal Data for as long as is necessary to fulfill the purposes for which it was collected, subject to applicable legal and regulatory retention obligations. The following retention periods apply as standard:
| Data Category | Standard Retention Period | Basis |
|---|---|---|
| Account and Identity Data | Duration of Account + 5 years after closure | AML regulatory obligation, licensing requirement |
| KYC Documents | Duration of Account + 5 years after closure | AML regulatory obligation |
| Financial Transaction Records | Duration of Account + 5 years after closure | AML regulatory obligation, tax compliance |
| Betting and Game History | Duration of Account + 3 years after closure | Dispute resolution, licensing requirement |
| Support Communications | 3 years from last interaction | Dispute resolution, quality assurance |
| Technical and Usage Logs | 12 months from collection | Security monitoring, platform improvement |
| Marketing Preference Records | Duration of Account + 3 years | Consent record-keeping obligation |
Where a Player submits a data deletion request under Section 12, kaki36 will delete or anonymize all Personal Data that is not subject to a mandatory retention obligation, and will retain only the minimum data required to satisfy those obligations, clearly documented with the legal basis for continued retention.
kaki36 implements a comprehensive information security framework to protect Player Personal Data against unauthorized access, disclosure, alteration, and destruction. Our technical and organizational security measures include:
Player Responsibility: While kaki36 takes extensive measures to secure your data on our side, account security also depends on you maintaining a strong, unique password for your kaki36 Account and keeping your login credentials confidential. Enable two-factor authentication (2FA) via your Account settings for an additional layer of protection. Report any suspected unauthorized account access to our support team immediately.
kaki36 uses cookies and similar tracking technologies on the Platform for session management, security, analytics, and functional purposes. The categories of cookies we use are as follows:
These cookies are essential for the Platform to function and cannot be disabled. They include session authentication tokens that keep you logged in during your visit, CSRF protection tokens that prevent cross-site request forgery attacks, and load-balancing cookies that ensure consistent platform performance. No consent is required for strictly necessary cookies as they are essential to providing the service you have requested.
Functional cookies remember your preferences — such as your preferred language setting, display preferences, and last-used payment method — to improve your experience on return visits. These cookies are set only with your consent, which you provide by continuing to use the Platform after being informed of their use.
kaki36 uses privacy-respecting analytics tools to collect anonymized and aggregated usage data — such as which pages are most visited, average session duration, and device type breakdown. This data helps us improve the Platform. Analytics cookies do not track individual users across external websites and do not store personally identifiable information in the cookie itself. Analytics cookies are set with your consent.
You can manage or disable non-essential cookies at any time through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform — for example, disabling functional cookies may mean your preferences are not saved between sessions. Instructions for managing cookies in major browsers are available on the respective browser's support pages. kaki36 does not use third-party advertising or retargeting cookies.
As a Player whose Personal Data is processed by kaki36, you hold the following rights with respect to your data. To exercise any of these rights, please contact us using the details in Section 17, clearly stating which right you wish to exercise and providing your Account username for identification.
Response Timeframe: kaki36 aims to respond to all data rights requests within 30 calendar days of receipt of a valid, verified request. For complex or high-volume requests, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it within the initial 30-day period.
kaki36's services are strictly intended for adults aged 21 years and over. The Platform is not directed at minors, and kaki36 does not knowingly collect Personal Data from individuals under 21 years of age. Age verification via KTP document submission is a mandatory step in the account verification process, and kaki36 will not process withdrawals for unverified accounts.
If kaki36 discovers or has reasonable grounds to believe that a registered Account belongs to an individual under the age of 21, the Account will be immediately suspended pending investigation. If the suspicion is confirmed, the Account will be permanently closed, all funds will be returned to the originating payment source, and kaki36 will take appropriate steps as required by its licensing obligations.
If you are a parent or guardian and believe that your child may have registered on the kaki36 Platform, please contact our support team immediately using the contact details in Section 17. We will investigate promptly and take appropriate action.
The kaki36 Platform integrates with third-party services in order to deliver its full range of features — including live casino streaming, slot game software, payment processing, and customer support tools. While kaki36 carefully selects and contracts with these providers, each third-party service operates under its own privacy policy and data practices.
kaki36 is not responsible for the privacy practices of third-party game providers or payment processors beyond the data processing obligations we impose on them contractually. Players are encouraged to review the privacy policies of game providers (such as Evolution Gaming, Pragmatic Play, and Spribe) if they have specific concerns about data processed within those game environments.
The kaki36 Platform does not contain links to external websites or platforms. All content accessible through https://kaki36.cam is operated directly by kaki36 or its contracted service providers under kaki36's data governance framework.
kaki36 may send you promotional communications — including bonus offers, seasonal promotions (such as Idul Fitri or Indonesian Independence Day specials), new game announcements, and tournament invitations — via email, SMS, or WhatsApp, but only where you have provided explicit consent to receive such communications.
You may opt in to marketing communications during the registration process or at any time via the Notification Preferences section of your Account dashboard. Consent is specific to the communication channel — opting in to email marketing does not automatically opt you in to SMS or WhatsApp notifications.
You may withdraw your consent to marketing communications at any time by:
Opt-out requests are processed within 5 business days. Please note that withdrawing consent to marketing does not affect transactional communications — kaki36 will continue to send you essential account notifications (such as deposit confirmations, withdrawal processing updates, security alerts, and KYC status updates) regardless of your marketing preference settings, as these are necessary for the operation of your Account.
kaki36 does not share your contact details with third-party advertisers or marketing partners for the purpose of sending you their marketing communications. Any promotional message you receive purportedly from kaki36 that originates from an unfamiliar sender or domain should be reported to our support team as a potential phishing attempt.
kaki36 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or operational requirements. The "Last Updated" date at the top of this page will be revised to reflect the date of the most recent amendment.
For material changes — defined as changes that significantly affect how we use your Personal Data or that reduce your rights under this policy — kaki36 will notify registered Players via email to their registered address and via an in-platform notification at least 14 calendar days before the amended policy takes effect. Non-material corrections and clarifications may be published without advance notice.
Your continued use of the Platform after the effective date of an amended Privacy Policy constitutes your acknowledgment of the changes. If you disagree with the amended policy, you should cease using the Platform and may request Account closure under Section 13.2 of the Terms & Conditions.
The current version of this Privacy Policy is always accessible at kaki36.cam/privacy-policy. We recommend that you review this page periodically to stay informed of any updates.
For any questions, concerns, or requests relating to this Privacy Policy or to the processing of your Personal Data by kaki36, please contact our Data Protection team through the following channels:
If you believe that kaki36 has handled your Personal Data in a manner that is inconsistent with this Privacy Policy or with applicable data protection law, you are entitled to raise a formal complaint. Please submit your complaint in writing to the email address above, clearly describing the nature of your concern, the data involved, and the outcome you are seeking. Our Data Protection team will acknowledge your complaint within 5 business days and provide a substantive response within 30 calendar days.
If you are not satisfied with kaki36's response to your complaint, you may escala te the matter to the relevant data protection authority or regulatory body in your jurisdiction. For Indonesian players, the supervisory authority for personal data protection matters is the Ministry of Communication and Information Technology (Kementerian Komunikasi dan Informatika — Kominfo), which oversees enforcement of Indonesia's Personal Data Protection Law (UU PDP).
Registered Address: kaki36's full registered address and licensing details are available upon request to verified Players via the support channels listed above. Please include your Account username and the subject line "Registered Address Request" when making this request.
Our support team is available 24/7 to handle data access requests, deletion requests, and any privacy-related concerns. You can also review our full Terms & Conditions or visit our FAQ for quick answers to common questions about how kaki36 protects your account and personal information.