01Scope
This policy describes data processing on kef-up.online by KEF-UP administration: collection, recording, storage, use, disclosure, correction and deletion. It does not replace separate consent where required. Relevant law determines which legal bases and individual rights apply.
Personal data may include not only names and email addresses but also a person’s nickname, account ID, wallet and transaction history. Hashing and pseudonymisation alone do not make data anonymous.
02Data processed
Users provide email, first name, surname, date of birth, country, nickname, avatar, invitation code, messages and payment request information, including a withdrawal wallet. Registration does not request a passport scan or bank card details.
The platform creates account identifiers, bet and payout history, balances, bonus progress, referral links, partner accruals and audit records. Login uses verification data for codes and sessions; two-factor authentication uses an encrypted authenticator secret and recovery-code verification data.
Network requests involve IP addresses, request and browser details, cookies and protective rate limits. First-party statistics associate a visit with a date, source and invitation code through a pseudonymous identifier; geographical information is used only where a trusted source is available.
03Purposes
Purposes include registration and age checks; account access and security; playing selected games and settling transactions; bonuses and referrals; handling deposits and withdrawals; support; preventing abuse; partner accounting and reviewing disputed transactions.
Depending on applicable law, a basis may be steps requested by the user to enter into or perform a lawful contract, a specific legal duty, a permissible legitimate interest or separate consent. Listing these bases does not mean each applies to every item of data. Browsing is not universal consent. A login email does not subscribe the recipient to advertising.
04Access to information
Staff access is limited by permissions. Personal profile fields—first name, surname, date of birth and country—are accessible to the user and the authorised manager within KEF-UP administration. Ordinary administrators, financial staff and other players do not receive those fields through game interfaces.
Nicknames, avatars and results provided for in public sections may appear in rankings and the wins feed. A superplayer sees statistics for direct referrals, including nickname/ID, deposit figures and the available partner calculation base, but not personal profile fields. Full internal gaming reports are accessible to the authorised manager.
05Providers and hosting
The KEF-UP server is located in Amsterdam, Netherlands.
Providers may process information in other countries. Public blockchain transfers contain addresses and amounts; KEF-UP administration cannot erase blockchain records. Information is disclosed to competent authorities where a lawful basis exists. This policy does not assert unverified licences, registrations or contractual international-transfer safeguards.
07Retention and deletion
An email code is valid for 10 minutes. Expired email-check records are removed on subsequent requests after an additional period of approximately one day. Session expiry does not immediately delete all related records.
Profiles, game and financial history, support messages, statistics and logs support account operation, transaction checks, applicable duties and dispute resolution. The current version has no single automatic deletion schedule for these categories. Any continued retention must be tied to a specific purpose and applicable basis; account closure or archiving does not erase all history.
Web server logs rotate by size and time: up to 10 archives and a 30-day period. Application backup cleanup removes copies older than 45 days while preserving at least the 30 newest, so 45 days is not an unconditional maximum. Infrastructure-provider backups follow that provider’s terms.
08Rights and requests
Where provided by applicable law, individuals may request processing information, access, correction, erasure, restriction or portability, object to processing, withdraw consent for processing based on it and complain to the competent supervisory authority.
Personal fields can be corrected in the profile. Other requests go to KEF-UP administration through help and support; this interface requires sign-in. Account-ownership checks should be proportionate. Do not send login or recovery codes. Withdrawal of consent does not undo earlier lawful processing or independent lawful grounds for retaining particular records.
09Security and automated calculations
Measures include HTTPS, access controls, login protection, staff two-factor authentication, logging and backups. Absolute security is not guaranteed. Users must also protect their email and devices.
Rounds, balances, bonuses and technical limits are calculated programmatically; payment requests are reviewed by an authorised person. Internal monitoring of game statistics does not itself alter winning probabilities or payouts. Disputed results can be submitted for review through support.
Material changes appear in a new dated edition. Updating the policy does not replace mandatory notice or separate consent where required for a new purpose.