Privacy Policy

This privacy policy explains how Kirgo (“we”, “our”, “us”) collects, uses, stores, shares, and protects your personal information when you use our websites and services (“services”). Kirgo is operated by raining games llc , suite 35, griffith corporate centre, beachmont, kingstown, st. vincent and the grenadines, and is licensed by the government of the autonomous island of anjouan, union of comoros .

Scope & Who We Are

This policy applies to all kirgo websites, apps, and related services.
We process personal data in line with applicable privacy laws, including the gdpr, ccpa/cpra (where applicable), and other relevant regulations.
By using the services, you acknowledge this policy. If you do not agree, please do not use the services.

Lawful bases for processing

We process personal data under these bases:

Performance of a contract – create/manage your account, provide services.
Legitimate interests – secure our platform, prevent fraud/abuse, improve services.
Consent – where required (e.G., certain marketing cookies or communications).
Legal obligations – aml/kyc, sanctions screening, tax, regulatory reporting.

Data we collect

Categories of personal data we may collect and process include:

Account & contact: email, username, full name, age/dob, country, address, phone.
Compliance (kyc/aml): id details, proof of address, selfie (where required), sanctions/pep/adverse media results.
Device & usage: ip, device identifiers, os/browser, session data, gameplay history, site interactions.
Financial/transactions: wallet addresses, deposits/withdrawals, transaction history (crypto-only).
Location: approximate geolocation (to enforce jurisdiction and rg/aml controls).
Security/fraud: risk scores, velocity flags, suspicious activity indicators.
Preferences: communication/marketing preferences, language, accessibility settings.
We do not intentionally collect sensitive data (e.G., race, religion, sexual orientation) unless required by law and with explicit consent.

How we use your data

Provide, operate, and maintain the services.
Verify identity and age; perform kyc/aml/sanctions screening.
Process transactions and support withdrawals (crypto-only).
Detect, investigate, and prevent fraud, abuse, and policy violations.
Improve performance, security, and user experience.
Provide customer support and resolve disputes.
Comply with legal/regulatory obligations (e.G., aml recordkeeping).
Send service and (where permitted) marketing communications; honor opt-outs.

International transfers

We may transfer personal data outside your country. Where required, we implement appropriate safeguards (e.G., standard contractual clauses, dpas) to protect your data and rights.

Retention

We retain data only as long as necessary for the purposes below, then delete or anonymize unless law requires longer retention:

Account data: for the life of the account and a reasonable period after closure for legal/security purposes.
Transactions/aml records: up to 5-7 years (regulatory/aml requirements).
Fraud/security data: up to 5 years to protect the platform and users.
Marketing preferences: until you opt out or the data is no longer needed.

Your rights

Depending on your jurisdiction, you may have rights to:

Access your data and receive a copy.
Rectify inaccurate or incomplete data.
Erase data (“right to be forgotten”) where legally applicable.
Restrict or object to certain processing (including direct marketing).
Portability – receive certain data in a structured, machine-readable format.
Withdraw consent where processing is based on consent.
Lodge a complaint with your local data protection authority (eea/uk, or relevant authority).

To exercise rights, we may need to verify your identity. We aim to respond within one month, extendable where legally permitted for complex requests.

Children & underage use

Kirgo is for 18+ only (or higher if your local law requires). We do not knowingly collect data from minors. If we learn a minor has provided data, we will delete the data and close the account. We may notify relevant authorities where required by law.

Providers