kilat7 is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and safeguard your data in compliance with international data protection standards and Indonesian privacy regulations.
All data transmitted between your device and kilat7 servers is encrypted using bank-grade 256-bit SSL/TLS protocols. This ensures that your personal information, payment details, and account activity remain secure during transmission and cannot be intercepted by third parties.
Your personal data is stored on secure, access-controlled servers located in jurisdictions with robust data protection laws. kilat7 employs multi-layered security architecture including firewalls, intrusion detection systems, and regular security audits conducted by independent third-party cybersecurity firms.
kilat7's data handling procedures align with the General Data Protection Regulation (GDPR) principles of lawfulness, fairness, and transparency. You retain the right to access, correct, or request deletion of your personal data subject to our legal and regulatory retention obligations.
kilat7 will never sell, rent, or trade your personal information to marketing companies, data brokers, or other third parties for their commercial purposes. Your data is used exclusively to deliver, improve, and secure our betting services and to comply with legal obligations.
This Privacy Policy provides a complete, plain-language explanation of what data we collect, why we collect it, how we use it, and how long we retain it. If any clause is unclear, our support team is available 24/7 to provide further explanation in English or Indonesian.
kilat7 undergoes quarterly internal privacy audits and annual external audits to verify compliance with this Privacy Policy and applicable data protection regulations. Audit findings are reviewed by senior management and any identified gaps are remediated within 30 days.
This Privacy Policy describes how kilat7 ("we", "us", "our") collects, uses, discloses, and protects personal information obtained from users ("you", "your") of the kilat7 platform located at kilat7.cam (the "Platform"). By registering an account or using the Platform, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.
kilat7 operates as an internationally licensed online betting platform serving English-preference players across Indonesia. We process personal data in accordance with the principles of data protection law including lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and confidentiality.
This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern your use of the Platform. Where any conflict arises between this Privacy Policy and the Terms & Conditions, the Terms & Conditions shall prevail to the extent of the inconsistency.
Indonesian Market Context: kilat7 respects the privacy expectations of Indonesian users and aligns its data practices with international standards including GDPR principles. While Indonesia's Personal Data Protection Law (UU PDP) came into force in October 2024, kilat7's practices meet or exceed the requirements set out in that legislation.
The data controller responsible for your personal information is the legal entity operating kilat7, an internationally licensed offshore betting operator. For the purposes of data protection law, kilat7 determines the purposes and means of processing your personal data.
kilat7 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and applicable data protection regulations. If you have any questions about how your personal data is handled, or if you wish to exercise any of your data protection rights, you may contact our DPO at:
Email: [email protected] (mark your message "Attention: Data Protection Officer")
Our DPO will respond to all privacy-related enquiries within 72 hours of receipt and will provide a substantive response within 30 calendar days as required by GDPR Article 12.
kilat7 collects the following categories of personal data to operate the Platform, process transactions, prevent fraud, and comply with legal obligations:
Sensitive Data: kilat7 does not collect sensitive personal data as defined by GDPR Article 9 (racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data for identification purposes, health data, or data concerning sexual orientation) except where such data is voluntarily disclosed by you in correspondence with support staff.
kilat7 collects personal data through the following methods:
You provide data directly to kilat7 when you:
Technical and usage data is collected automatically when you access or use the Platform through:
kilat7 may receive limited data from trusted third parties including:
kilat7 processes your personal data for the following purposes, each corresponding to a lawful basis under data protection law (see Clause 6):
You may opt out of marketing communications at any time by clicking the "Unsubscribe" link in any promotional email, adjusting preferences in your account dashboard, or contacting support.
Under GDPR and equivalent data protection laws, personal data may only be processed where at least one of six lawful bases applies. kilat7 relies on the following legal bases for different processing activities:
| Processing Purpose | Legal Basis | Explanation |
|---|---|---|
| Account creation, deposits, withdrawals, bet settlement | Contractual Necessity (GDPR Art. 6(1)(b)) | Processing is necessary to perform the contract (Terms & Conditions) between you and kilat7. |
| KYC verification, age checks, AML screening | Legal Obligation (GDPR Art. 6(1)(c)) | Processing is required by gambling regulations, financial crime laws, and our operating license conditions. |
| Fraud detection, multi-account prevention, security monitoring | Legitimate Interests (GDPR Art. 6(1)(f)) | kilat7 has a legitimate interest in protecting the Platform, preventing abuse, and safeguarding all users. This does not override your fundamental rights. |
| Responsible gaming interventions, problem gambling monitoring | Legitimate Interests (GDPR Art. 6(1)(f)) | kilat7 has a legitimate interest in promoting safer gambling and fulfilling our social responsibility commitments. |
| Analytics, service improvement, product development | Legitimate Interests (GDPR Art. 6(1)(f)) | kilat7 has a legitimate interest in improving the Platform and understanding user preferences, processed with anonymization where feasible. |
| Marketing emails, promotional offers, personalized recommendations | Consent (GDPR Art. 6(1)(a)) | Marketing communications are sent only where you have given explicit opt-in consent. You may withdraw consent at any time. |
Where we process data based on legitimate interests, we have conducted a balancing test to ensure our interests do not override your fundamental rights and freedoms. You have the right to object to processing based on legitimate interests — see Clause 10 for details.
kilat7 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we share data with carefully selected service providers and partners under strict contractual controls:
To process deposits and withdrawals, kilat7 shares your name, bank account number, and transaction amount with Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja). These providers are subject to Indonesian banking regulations and their own privacy policies.
When you play games, limited data (username, stake amount, game outcome) is shared with licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. This is necessary to deliver the games and verify results. Studios do not receive your identity documents or payment details.
To offer sports betting markets and settle bets, kilat7 receives official results from authorized sports data suppliers. We do not share your personal data with these suppliers — only aggregated wagering data for compliance reporting.
kilat7 uses third-party fraud detection platforms that analyze device fingerprints, IP addresses, and behavioral patterns to identify suspicious activity. These services operate under strict data processing agreements (DPAs) and are prohibited from using your data for any purpose other than fraud prevention on behalf of kilat7.
kilat7 uses Google Analytics with IP anonymization to understand aggregate user behavior. Google processes data as a data processor under GDPR. You can opt out of Google Analytics tracking using the Google Analytics Opt-out Browser Add-on.
kilat7 may disclose personal data where required by law or where we believe in good faith that disclosure is necessary to:
In the event kilat7 is acquired by or merges with another company, your personal data may be transferred to the successor entity as part of the transaction. You will be notified by email and/or a prominent notice on the Platform at least 30 days before such a transfer, and you will have the option to request account closure and data deletion prior to the transfer.
Data Processing Agreements: All third-party service providers with access to your personal data are bound by written Data Processing Agreements (DPAs) that require them to process data only on kilat7's instructions, implement appropriate security measures, and notify kilat7 of any data breaches within 24 hours.
kilat7's servers and some third-party service providers are located outside Indonesia. This means your personal data may be transferred to, stored, or processed in jurisdictions with different data protection standards than Indonesia.
Where data is transferred to countries not recognized by the European Commission as providing an adequate level of data protection, kilat7 implements appropriate safeguards including:
You have the right to request details of the specific safeguards in place for international transfers affecting your data. Contact our Data Protection Officer at [email protected] (mark "Attention: DPO — International Transfers").
kilat7 retains personal data only for as long as necessary to fulfill the purposes for which it was collected and to comply with legal, regulatory, and operational requirements. Retention periods vary by data category:
| Data Category | Retention Period | Rationale |
|---|---|---|
| Account registration data (name, email, phone, address) | 7 years after account closure | Required by anti-money laundering (AML) regulations and gambling license conditions. |
| KYC documents (ID scans, proof of address, selfies) | 7 years after account closure | Required by AML regulations and for dispute resolution. |
| Transaction records (deposits, withdrawals, bets) | 7 years after transaction date | Required by financial regulations and tax authorities. |
| Support correspondence (chat logs, emails) | 3 years after account closure | Retained for quality assurance and dispute resolution. |
| Marketing consent records | 3 years after consent withdrawn | Required to demonstrate compliance with consent requirements. |
| Server logs and access records | 90 days | Retained for security monitoring and troubleshooting; then automatically deleted. |
| Session cookies | 24 hours or end of session | Required for authentication; automatically expire. |
| Analytics data (aggregated, anonymized) | Indefinite | Anonymized data cannot be linked back to individuals and is not subject to retention limits. |
At the end of the applicable retention period, personal data is either securely deleted (irreversible overwrite of storage media) or anonymized (removal of all identifiers such that re-identification is no longer possible).
If you request deletion of your data under the "right to erasure" (Clause 10), kilat7 will delete all data not subject to legal retention requirements within 30 days. Data subject to retention requirements will be archived in a restricted-access system and flagged for deletion at the end of the statutory period.
Under data protection law, you have the following rights regarding your personal data. To exercise any of these rights, contact our Data Protection Officer at [email protected]. kilat7 will respond within 30 calendar days.
You have the right to obtain confirmation of whether kilat7 processes your personal data and, if so, to receive a copy of that data along with supplementary information including the purposes of processing, categories of data, recipients, retention periods, and your other rights.
How to exercise: Log in to your account dashboard and navigate to "Privacy & Data" → "Download My Data". kilat7 will generate a machine-readable export (JSON format) of your personal data within 48 hours.
You have the right to have inaccurate or incomplete personal data corrected without undue delay.
How to exercise: Update your email, phone, or address directly in account settings. For changes to your legal name or date of birth (which affect KYC records), contact support with supporting documentation.
You have the right to request deletion of your personal data where:
Exceptions: kilat7 may refuse deletion where retention is required by law (e.g., 7-year AML retention) or necessary for legal claims. In such cases, data will be archived and access restricted until the retention period expires.
You have the right to request that kilat7 restrict processing of your personal data (i.e., store but not actively use it) where:
You have the right to receive your personal data in a structured, commonly used, machine-readable format (JSON) and to transmit that data to another controller where technically feasible.
Scope: This right applies only to data you provided to kilat7 and where processing is based on consent or contract performance (not data derived from your activity or processing based on legal obligations).
You have the right to object to processing of your personal data where:
Where processing is based on your consent (e.g., marketing emails), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
How to exercise: Click "Unsubscribe" in any marketing email, adjust preferences in account settings, or contact support.
If you believe kilat7 has processed your personal data in violation of data protection law, you have the right to lodge a complaint with the supervisory authority in the jurisdiction where you reside, where you work, or where the alleged infringement occurred. For Indonesian residents, this may be the relevant data protection authority once Indonesia's DPA enforcement framework is fully operational.
We encourage you to contact kilat7's Data Protection Officer first so we can address your concerns directly.
kilat7 uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain session state, and analyze usage patterns. A cookie is a small text file stored on your device by your web browser at the request of the website you are visiting.
| Cookie Type | Purpose | Duration | Legal Basis |
|---|---|---|---|
| Strictly Necessary | Authentication, session management, security (e.g., CSRF tokens). Without these, the Platform cannot function. | Session / 24 hours | Legitimate Interest — essential for service delivery |
| Functional | Remember your preferences (language, odds format, time zone display). | 30 days | Consent (opt-in via cookie banner) |
| Analytics | Google Analytics (IP-anonymized) to understand aggregate usage patterns, popular pages, and user journeys. | 2 years | Consent (opt-in via cookie banner) |
| Marketing | Track conversion from promotional campaigns (e.g., which bonus offer drove your registration). | 90 days | Consent (opt-in via cookie banner) |
You can control and delete cookies through your browser settings. Most browsers allow you to:
Refer to your browser's help documentation for instructions: Chrome, Firefox, Safari, Edge.
To opt out of Google Analytics specifically, install the Google Analytics Opt-out Browser Add-on.
Some browsers offer a "Do Not Track" (DNT) signal. kilat7 respects DNT signals for analytics cookies — when DNT is enabled, we disable Google Analytics tracking. However, strictly necessary cookies cannot be disabled as they are essential for Platform operation.
kilat7 implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or damage. Our security framework includes:
In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, kilat7 will:
Notifications will be sent to your registered email address. If your email is compromised in the breach, kilat7 will use alternative contact methods (phone, in-Platform notification) or post a public notice on the homepage.
kilat7 does not knowingly collect personal data from individuals under the age of 21. Our Terms & Conditions explicitly prohibit account registration by minors, and our KYC verification process is designed to detect and prevent underage access.
If kilat7 becomes aware that a person under 21 has registered an account, we will:
If you are a parent or guardian and believe your child has provided personal information to kilat7, contact our Data Protection Officer immediately at [email protected] (mark "Urgent: Underage Account").
kilat7 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. The "Last Updated" date at the top of this page indicates when the most recent revision was published.
Notification of Material Changes: If we make material changes that significantly affect how we collect, use, or share your personal data, we will:
Non-material changes (e.g., clarifications, formatting updates, contact detail changes) take effect immediately upon publication. Continued use of the Platform after such changes constitutes acceptance.
You may opt out of material changes by requesting account closure before the effective date. Contact support at [email protected] to initiate closure.
If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or need to report a privacy concern, please contact kilat7's Data Protection Officer:
When contacting us about data protection matters, please include:
For general customer support enquiries unrelated to data protection, use the standard support channels (live chat or [email protected] without the DPO marking) for faster routing.
Acknowledgment: By using the kilat7 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal data as described herein. If you do not agree with this Privacy Policy, you must not register an account or use the Platform.
Our Data Protection Officer is available 24/7 to answer questions about how we handle your personal information. You can also review our Terms & Conditions or browse the FAQ for additional guidance.
21+ only. Please gamble responsibly. kilat7 privacy policy applies.