What data does Ktkarena collect about me?

The 4 categories of data collected

Category 1 - Identity (required for KYC)

• Last name, first name, date of birth.
• ID document number.
• Photos of your ID + selfie.
• Nationality, place of birth.

This data is mandatory to bet with real money. It's the law (gambling regulation). Without it, you can only use prediction mode.

Category 2 - Betting and financial activity

• All your bets: events, sides, amounts, tiers, dates.
• Your transactions: deposits, withdrawals, methods used.
• Your balance and your win/loss history.
• Your interactions with events (views, favorites, shares).

This data lets you look back at your history, and lets us manage matching, escrow, and resolution.

Category 3 - Technical data

• Your IP address (at each login).
• Your device model (iPhone 13, Samsung A52, etc.).
• Your operating system (iOS 16, Android 13).
• The app version you're using.
• Your language and timezone settings.
• Anonymized analytics data (how much time you spend on which screen, for example).

This data helps us detect fraud (a login from an unusual country), improve the app, and optimize performance.

Category 4 - Content you generate

• Your handle, bio, profile photo.
• The messages you send in the arena chat or private leagues.
• Your reports and your disputes.
• Your interactions with other users (follow, block, etc.).

This is the content you create yourself while using the app.

What we NEVER collect

For your privacy, here is what we don't collect:

• Your continuous GPS location. We only see your IP (which gives a rough idea of country/region). We don't track your precise movements.
• Your phone contacts. The app doesn't even ask for permission to access them.
• Your SMS, WhatsApp, or other messages. No access.
• Your photos and files other than those you explicitly upload (KYC, profile photo).
• Your activity outside Ktkarena. No cross-site ad tracking. We don't know what you do on other apps.
• Your microphone, your camera. Except when you explicitly take a selfie for KYC.
• Your non-payment banking information. Card numbers are stored only by our payment provider (Stripe), not by us.

How we protect your data

1. Encryption.

All your sensitive data (KYC identity, financial transactions, passwords) is encrypted at rest with AES-256 (the standard used by banks). Your passwords are never stored in plain text - only their bcrypt hash.

Communications between your app and our servers are encrypted with TLS 1.3 (the modern web standard).

2. Restricted internal access.

Only admins from the relevant team can access your data, and only when necessary:

• The KYC team sees your identity for validation.
• The Support team sees your account if you open a ticket.
• The Anti-fraud team sees your activity if you are reported.

Every access is logged in our systems. We can trace who saw what and when.

3. Secure hosting.

Our servers are hosted by certified providers (AWS and OVH) in datacenters in Europe and Africa (Cape Town). The datacenters hold physical and logical security certifications (ISO 27001, SOC 2).

4. Backups and resilience.

Your data is backed up several times a day. If a datacenter goes down, another takes over automatically. You can check the status of our services at any time on the Status page.

Who we share it with (and who we don't)

We share your data with:

• Our technical providers (under strict confidentiality contracts):
  • Onfido for KYC verification.
  • Stripe for card payments.
  • Twilio for SMS.
  • AWS and OVH for hosting.
• Legal authorities, only upon legal requisition:
  • The CNJHC (gambling regulator in Cameroon) upon substantiated request.
  • Judicial authorities if they compel us by court order.
• Yourself - on request, you can retrieve a full copy. Request a copy of my data.

We NEVER share your data with:

• Advertisers. We don't do targeted advertising and we don't sell your info.
• Other gambling platforms. Each runs its own KYC.
• Data brokers. Our business model isn't reselling data.
• Your family or your contacts. No automatic social sharing.

That's our commitment: your money and your betting activity stay strictly between you and us (and the legal regulator if required).