Privacy Policy at Kirgo

Version: 1.1
Last updated: 4 November 2025

This Privacy Policy explains how Kirgo Casino collects, uses, stores, shares and protects personal information when you use its website and related services.

Kirgo is operated by Raining Games LLC, registration number 4069, with its registered office at Suite 35, Griffith Corporate Centre, Beachmont, Kingstown, St. Vincent and the Grenadines.

The platform operates under license number ALSI-202409050-F12, issued by the Government of the Autonomous Island of Anjouan, Union of Comoros.

1. Scope of This Privacy Policy

1.1 Where This Policy Applies

This Privacy Policy applies to Kirgo websites, apps and other related services.

1.2 Privacy Regulations

Kirgo processes personal information in accordance with applicable data protection laws.

Depending on the player’s jurisdiction, these may include:

the General Data Protection Regulation (GDPR);
the California Consumer Privacy Act and California Privacy Rights Act (CCPA/CPRA);
other applicable privacy and data protection regulations.

1.3 Accepting This Policy

By using Kirgo services, you acknowledge the practices described in this Privacy Policy.

If you do not agree with these terms, you should not use the website or related services.

2. Legal Bases for Processing Personal Data

Kirgo may process personal information under several legal bases, depending on why the data is required.

Performance of a Contract

Certain information is required to:

create and manage a Kirgo account;
provide access to casino services;
process account activity and transactions;
provide customer support.

Legitimate Interests

Kirgo may process information where it has a legitimate business interest, including:

protecting the website and player accounts;
preventing fraud and abuse;
maintaining platform security;
improving the website and its services.

Consent

Consent may be used as the legal basis where required, particularly for:

certain marketing communications;
marketing cookies;
optional tracking technologies.

Where processing relies on consent, you may withdraw that consent where applicable.

Legal Obligations

Kirgo may also process personal data when necessary to comply with legal or regulatory requirements, including:

Know Your Customer (KYC) checks;
Anti-Money Laundering (AML) procedures;
sanctions screening;
tax requirements;
regulatory reporting.

3. Personal Data Kirgo Collects

The type of information collected depends on how you use the platform and which services you access.

Account and Contact Information

Kirgo may collect:

email address;
username;
full name;
age or date of birth;
country of residence;
residential address;
telephone number.

KYC and AML Information

For identity verification and compliance purposes, Kirgo may process:

identity document details;
proof of address;
selfies or identity verification images where required;
sanctions screening results;
Politically Exposed Person (PEP) screening results;
adverse media screening results.

Device and Usage Data

Technical and usage information may include:

IP address;
device identifiers;
operating system;
browser type;
session information;
gameplay history;
website activity and interactions.

Financial and Transaction Information

As Kirgo uses cryptocurrency payments, transaction-related information may include:

crypto wallet addresses;
deposit records;
withdrawal records;
transaction history.

Location Information

Kirgo may process approximate geolocation data.

This information can be used to:

identify the jurisdiction from which the platform is being accessed;
enforce country restrictions;
apply responsible gambling controls;
support AML and security checks.

Security and Fraud Data

Kirgo may collect or generate information used to identify suspicious account activity, including:

risk scores;
transaction velocity indicators;
unusual activity flags;
fraud or security alerts.

Preferences

The platform may store information about your preferences, including:

marketing preferences;
communication settings;
language;
accessibility settings.

Sensitive Personal Data

Kirgo states that it does not intentionally collect sensitive personal information such as race, religion or sexual orientation unless this is legally required and appropriate consent has been obtained.

4. How Kirgo Uses Personal Information

Personal information may be used to operate, secure and improve the Kirgo platform.

This includes using data to:

create, operate and maintain player accounts;
verify identity and age;
perform KYC, AML and sanctions checks;
process cryptocurrency deposits and withdrawals;
investigate and prevent fraud or abuse;
detect violations of platform rules;
improve website performance and security;
improve the user experience;
provide customer support;
handle complaints and disputes;
meet regulatory and legal obligations;
maintain AML and transaction records;
send important service-related messages;
send marketing communications where permitted;
manage and respect marketing opt-out requests.

5. International Data Transfers

Personal information may be processed or stored outside the country in which you live.

Where data protection laws require additional safeguards for international transfers, Kirgo states that it may use measures such as:

Standard Contractual Clauses;
Data Processing Agreements;
other legally recognized transfer safeguards.

These measures are intended to protect personal information when it is transferred between countries.

6. How Long Kirgo Keeps Personal Data

Kirgo states that personal information is kept only for as long as necessary for the purpose for which it was collected, unless a longer period is required by law.

Once information is no longer required, it may be deleted or anonymized.

Account Information

Account information may be retained for the duration of the account and for a reasonable period after it has been closed.

This allows Kirgo to meet legal, security and recordkeeping requirements.

Transaction and AML Records

Transaction, KYC and AML-related records may be retained for up to 5–7 years, depending on applicable regulatory requirements.

Fraud and Security Information

Fraud prevention and security records may be stored for up to 5 years where necessary to protect Kirgo and its users.

Marketing Preferences

Marketing preferences may be kept until:

you withdraw your consent;
you opt out of marketing;
the information is no longer required.

7. Your Privacy Rights

The privacy rights available to you depend on the laws that apply in your jurisdiction.

Where applicable, you may have the right to:

access the personal information Kirgo holds about you;
request a copy of your personal data;
correct inaccurate or incomplete information;
request deletion of your personal data;
restrict certain types of processing;
object to certain processing activities;
object to direct marketing;
request data portability;
receive certain information in a structured, machine-readable format;
withdraw consent where processing is based on consent;
submit a complaint to the relevant data protection authority.

Exercising Your Rights

Kirgo may need to verify your identity before processing a privacy request.

The company aims to respond within one month.

This period may be extended where legally permitted if a request is particularly complex or requires additional processing.

8. Children and Underage Players

Kirgo is intended only for players aged 18 or over, or the higher minimum gambling age required in the player’s jurisdiction.

The platform does not knowingly collect personal information from minors.

If Kirgo discovers that a minor has created an account or provided personal information, it may:

delete the personal data;
close the account;
notify the relevant authorities where required by law.

9. When Kirgo Shares Personal Data

Kirgo states that it does not sell or rent players’ personal information.

However, personal information may be shared where necessary to operate the platform, meet legal requirements or protect users.

Service Providers

Information may be shared with third-party service providers that support:

KYC verification;
AML checks;
sanctions screening;
blockchain analytics;
fraud prevention;
website hosting;
customer support systems.

Cryptocurrency and Payment Infrastructure

Relevant information may be shared with payment or blockchain service providers where necessary to:

process transactions;
verify wallet activity;
carry out security checks.

Corporate Affiliates

Personal information may be shared with companies within the same corporate group where required for legitimate operational purposes.

Such transfers should be covered by appropriate data protection agreements.

Authorities and Regulators

Kirgo may disclose personal information to law enforcement agencies, regulators or other public authorities where required by law.

Information may also be disclosed where necessary to protect:

legal rights;
platform security;
player safety;
the integrity of the service.

Business Transfers

If Kirgo or its operator is involved in a merger, acquisition, restructuring or similar corporate transaction, relevant personal information may be transferred as part of that process.

Appropriate safeguards should apply to such transfers.

10. How Kirgo Protects Personal Data

Kirgo uses administrative, technical and physical security measures intended to protect personal information against unauthorized access, loss, misuse or disclosure.

These measures may include:

TLS/SSL encryption for data transmitted between users and the website;
encryption of stored information where appropriate;
access controls;
role-based permissions;
security logging and monitoring;
multi-factor authentication options;
security assessments of third-party providers;
Data Processing Agreements with relevant service providers;
periodic security reviews;
data breach response procedures.

Where legally required, Kirgo may notify affected users and relevant authorities if a personal data breach occurs.

However, no online platform or security system can guarantee complete protection against every possible threat.

Players are also responsible for protecting their own login details, devices and account access.

Providers