What data does Ktkarena collect about me?

The 4 categories of data collected

Category 1 - Identity (required for KYC)

• Last name, first name, date of birth.
• ID document number.
• Photos of your ID + selfie.
• Nationality, place of birth.

This data is mandatory to stake real money. It's the law (gambling regulation). Without it, you can only use prediction mode.

Category 2 - Challenges and financial activity

• All your challenges: events, outcomes, amounts, tiers, dates.
• Your transactions: deposits, withdrawals, methods used.
• Your balance and your win/loss history.
• Your interactions with events (views, favorites, shares).

This data lets you look back at your history, and lets us manage matching, escrow, and resolution.

Category 3 - Technical data

• Your IP address (at each login).
• Your device model (Samsung A52, for example).
• Your operating system (Android 13, for example).
• The app version you're using.
• Your language and timezone settings.
• Anonymized analytics data (how much time you spend on which screen, for example).

This data helps us detect fraud (a login from an unusual country), improve the app, and optimize performance.

Category 4 - Content you generate

• Your handle, bio, profile photo.
• The messages you send in the arena chat or private leagues.
• Your reports and your disputes.
• Your interactions with other users (follow, block, etc.).

This is the content you create yourself while using the app.

What we NEVER collect

For your privacy, here is what we don't collect:

• Your continuous GPS location. We only see your IP (which gives a rough idea of country/region). We don't track your precise movements.
• Your phone contacts. The app doesn't even ask for permission to access them.
• Your SMS, WhatsApp, or other messages. No access.
• Your photos and files other than those you explicitly upload (KYC, profile photo).
• Your activity outside Ktkarena. No cross-site ad tracking. We don't know what you do on other apps.
• Your microphone, your camera. Except when you explicitly take a selfie for KYC.
• Your non-payment banking information. Card numbers are stored only by our payment provider (Stripe), not by us.

How we protect your data

1. Encryption.

All your sensitive data (KYC identity, financial transactions, passwords) is encrypted at rest with AES-256 (the standard used by banks). Your passwords are never stored in plain text - only their bcrypt hash.

Communications between your app and our servers are encrypted with TLS 1.3 (the modern web standard).

2. Restricted internal access.

Only Ktkarena's administrators can view your data, when it's necessary: to handle your request when you write to support (a single address, support@ktkarena.com), to examine a report or a dispute, to check suspicious activity.

Every access is logged in our systems. We can trace who saw what and when.

3. Secure hosting.

Our servers are hosted by specialized providers, the ones listed in our Privacy Policy (Article 4.2): Railway for the API, Vercel for the website and the admin console.

4. Backups and resilience.

Your data is backed up at least once a day. You can check the status of our services at any time on the Status page.

Who we share it with (and who we don't)

We share your data with:

• Our technical providers (under strict confidentiality contracts):
  • Stripe for card payments.
  • Railway and Vercel for hosting, Sentry for error monitoring, Infisical for secrets management, Expo for push notifications.
• Legal authorities, only upon legal requisition:
  • Judicial authorities if they compel us by court order.
• Yourself - on request, you can retrieve a full copy. Request a copy of my data.

We NEVER share your data with:

• Advertisers. We don't do targeted advertising and we don't sell your info.
• Other gambling platforms. Each runs its own KYC.
• Data brokers. Our business model isn't reselling data.
• Your family or your contacts. No automatic social sharing.

That's our commitment: your money and your challenge activity stay strictly between you and us (and the judicial authorities, by court order).