kena Platform Privacy Notice

This page describes what we collect when you use kena and how we keep that data protected. We collect personal information—email, phone number, identity documents for KYC verification, payment details—only to operate your account, process withdrawals, and comply with financial regulations. We do not sell your data to third parties, and we do not use your information for marketing without your consent.

Our privacy practice on kena centres on transparency and security. We encrypt all data transmitted between your device and our servers using SSL/TLS protocols. We store sensitive information (passwords, payment credentials, identity documents) securely and restrict access to authorised personnel only. We retain data only as long as necessary to provide our service and comply with legal obligations.

We process tournament results, account transactions, and withdrawal history on servers that may be located outside your jurisdiction. By using kena, you acknowledge that your data may be transferred to and processed in jurisdictions with different privacy laws than your home country. We maintain the same security standards globally regardless of server location.

What data we collect on kena

When you create a kena account, we collect:

Email address and phone numberWe use these for account login, password reset, and support communication. We may send you tournament notifications or account security alerts.
Account passwordWe hash your password using industry-standard algorithms and never store it in plain text. We cannot retrieve or view your password; only you can reset it through our password-reset flow.
KYC identity documentsBefore your first withdrawal, we request a photo ID (passport, national ID, or driver's licence) and proof of address (utility bill, bank statement, or rental agreement). We verify these documents to prevent fraud and comply with financial regulations. We store images securely and delete them after verification is complete, unless legal obligations require longer retention.
Payment method detailsWhen you link DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank account information, we encrypt and store only the minimum details needed to process transactions. We do not store unencrypted card numbers or banking credentials.
Tournament activity and session logsWe record your tournament entries, game sessions, leaderboard positions, and payout amounts. This data forms the audit trail for all account activity and helps us troubleshoot disputes or technical issues.
Device and browser informationWe collect device type, operating system, browser version, and IP address for security purposes (detecting fraudulent logins from unusual locations) and platform optimisation (ensuring kena works across devices and browsers).

We do not collect location data beyond IP-based geolocation used to confirm your jurisdiction for access control. We do not request access to your device's contacts, photos, calendar, or microphone.

Note: We collect data only when you provide it directly (registration form, account settings) or when you interact with kena (tournament play, withdrawal requests). We do not use tracking pixels or hidden data collection beyond standard server logs.

How we use your data on kena

We use collected data for these purposes:

Account operationEmail and password enable login. Phone number allows us to contact you about account issues or security alerts.
Payment processingWe share your payment method details with payment processors (mobile banking, local payment, online payment, e-wallet, mobile banking, local payment gateways, and bank networks) only to complete deposits and withdrawals. These processors have their own privacy policies; we recommend reviewing them.
KYC verification and fraud preventionWe verify your identity documents to confirm you are who you claim to be and to comply with financial regulations in jurisdictions where kena operates. We use device fingerprinting and transaction analysis to detect suspicious activity.
Tournament managementWe store your tournament results to calculate leaderboard positions, determine payout eligibility, and settle payouts fairly.
Support and dispute resolutionWhen you contact our support team, we use your account history and session logs to troubleshoot issues, verify tournament results, or investigate complaints.
Legal complianceWe may disclose data to law enforcement, tax authorities, or financial regulators if legally required. We do not voluntarily share data with government agencies.

We do not use your data to build marketing profiles, sell targeted advertising, or share with third-party marketers. We may send you account security notifications or tournament reminders, but we do not send promotional emails without your explicit consent. You can opt out of these communications through your account settings.

We treat your data as a responsibility, not an asset. Every piece of information we hold about you serves a specific purpose—account security, payment processing, or legal compliance.

kena privacy team

Third-party processors and data sharing

We may share your data with:

Payment processorsonline payment, e-wallet, mobile banking, local payment, online payment, e-wallet networks, and banks (mobile banking, local payment, online payment, e-wallet) receive only the information needed to complete your transaction. They operate under their own privacy policies.
KYC/identity verification providersWe may use third-party services to verify your identity documents. These services receive your document images and personal details but only for verification purposes.
Cloud hosting providersWe may store data on secure cloud infrastructure. These providers have data-processing agreements with us requiring them to follow strict security and confidentiality standards.
Legal authoritiesWe disclose data if required by court order, subpoena, or legal process. We will attempt to notify you of such requests unless legally prohibited from doing so.

We do not sell your data to third parties for any reason. We do not share email addresses or phone numbers with marketing firms, data brokers, or advertising networks. Third parties that process data on our behalf sign data-processing agreements requiring them to maintain the same confidentiality and security standards we maintain.

Data security and retention on kena

We use SSL/TLS encryption for all data in transit between your device and our servers. We store passwords using bcrypt or similar strong hashing algorithms—not reversible encryption. We store payment credentials in encrypted form and never transmit them unencrypted across networks. We restrict database access to authorised personnel and maintain detailed audit logs of who accesses sensitive data and when.

We retain your data only as long as necessary. Account information is retained as long as your account is active. Tournament history and transaction logs are retained for at least 7 years to comply with financial record-keeping requirements. KYC documents are typically deleted after verification is confirmed, unless regulatory obligations require longer retention.

If you close your kena account, we delete your password and most personal information within 30 days. We retain anonymised transaction records for legal and financial compliance. If you request data deletion before that period, we accommodate requests subject to legal obligations (e.g. if regulatory investigations are pending).

Note: We cannot guarantee absolute security. While we use industry-standard protections, no system is completely immune to breach. We monitor for unauthorised access and notify affected users if we detect a security incident involving personal data.

Your rights on kena

You have the right to:

Access your dataYou can request a copy of all personal information we hold about you. Contact our support team with your request.
Correct inaccurate dataIf you believe your account information is incorrect, you can update it through your account settings or contact support.
Request deletionYou can request that we delete your data, subject to legal retention obligations and account closure timelines.
Object to processingYou can opt out of non-essential communications (tournament reminders, account notifications). You cannot opt out of security alerts or legal disclosures.

To exercise these rights, contact our support team through in-app help or email. We respond to requests within 30 days where legally required. If we cannot fulfill a request (e.g. due to legal holds), we will explain the reason.

Cookies and tracking on kena

We use cookies to maintain your login session and remember your preferences (language, display settings). Session cookies expire when you log out. Preference cookies persist longer to improve your experience on return visits. We do not use cookies for behavioural tracking or targeted advertising.

You can disable cookies in your browser settings, but this may prevent login functionality on kena. We do not use third-party tracking pixels, analytics cookies that link to advertising networks, or social-media trackers.

Jurisdiction and data transfers

We operate kena in multiple jurisdictions including Jakarta, Surabaya, Bandung, Medan, and Semarang. Our servers may be located outside your jurisdiction. By using kena, you consent to your data being transferred to and processed in countries with different privacy laws than your home country. We maintain equivalent security and confidentiality standards regardless of server location.

If you are located in a jurisdiction with specific data-protection laws (e.g. EU General Data Protection Regulation), we comply with those laws to the extent applicable to our operations. If there is a conflict between kena's terms and your local law, your local law takes precedence.

Contact us about privacy

If you have questions about our privacy practice, you can contact our team through in-app help or email. Our support team is available during business hours (7 AM–11 PM UTC+7, Monday through Friday) and limited hours on weekends. We aim to respond to privacy queries within one to two business days.

Our services are available only where local law permits. Users are responsible for verifying that their use of kena complies with their own jurisdiction's privacy and data-protection laws. This privacy notice may be updated periodically as our service evolves or legal requirements change. We will notify you of material changes through email or in-app notification.