Privacy Policy

This policy applies to visitors and registered users of Kirastack websites and customer mobile applications, and to information you provide when creating an account, topping up tokens, participating in products, claiming prizes, contacting support, or using optional features such as push notifications.

Merchant partners who register separately are covered by the Merchant Terms and Privacy Policy sections relevant to merchant accounts; coupon redemption at a shop may also involve the merchant’s own handling of your QR code or identity on site.

Account & profile: email, password (stored hashed), display name if provided, country/market selection, referral code usage, language preference, shipping addresses for physical prizes, and government-issued photo ID images when required for prize verification (stored securely and bound to your account).

Activity & transactions: token balance and ledger entries, orders and participation records, payment/top-up requests and receipt images you upload, prize fulfilment status, support tickets and messages, optional push notification tokens, device/app version for OTA updates, and technical logs (IP address, timestamps, browser or app identifiers) for security and fraud prevention.

We use personal information to create and manage accounts, process token purchases and participation, run transparent result settlements, deliver or arrange prizes, verify age and identity for winners, operate referral rewards, send in-app messages and (if enabled) push notifications, respond to support requests, improve reliability, detect abuse, and meet legal obligations.

We may send transactional emails (registration, password reset, selection notices). Marketing messages are sent only where permitted by law and your choices.

We share data with service providers who help us operate the platform (hosting, email delivery, payment review, customer support tools) under confidentiality obligations, with partner merchants to honour coupon redemptions, and with authorities when required by law or to protect rights and safety.

We use cookies and similar technologies on the website for session management, language/country preferences, and security. Mobile apps may store tokens locally for login convenience (including optional biometric unlock on your device).

We retain information while your account is active and as needed for prizes, disputes, accounting, and legal compliance, then delete or anonymise it when no longer required.

You may update profile and address details in the app, contact support to access or correct information, request account closure subject to outstanding obligations, and disable push notifications in device settings. ID documents already verified may be retained as required for repeat wins and audit.

Kirastack is not directed to anyone under 18. We do not knowingly collect data from minors; if we learn that we have, we will delete the account and associated data.

We apply reasonable technical and organisational measures to protect personal information. No system is perfectly secure; please use a strong password and keep login details confidential.

We operate across Cambodia, Thailand, Vietnam and related markets; data may be processed on servers in or outside your country. Continued use after policy updates means you accept the revised policy.