Your data stays out of the spotlight.

Last updated 23 September 2026. Kbach Arena is an independent Cambodian esports fan app.

What we store

• Fan accounts: handle, display name, password hash or Google account subject, sessions, predictions and league activity.
• Sponsorship enquiries: contact name, business email, organization, budget and proposal.
• Operational protection: short-lived rate-limit counters needed to prevent abuse.

How it is protected

Passwords use salted, memory-hard hashing and cannot be recovered from the database. Session tokens are stored as hashes. Sponsorship contact details are encrypted before database storage. Production traffic uses HTTPS. Google sign-in requests only OpenID identity; access tokens and Google email addresses are not retained.

Visibility and use

Your handle, display name and leaderboard score are public. Predictions and private-league membership are available only through your signed-in account and eligible league views. Enquiries are visible only to the administrator and are used to discuss the requested partnership. We do not sell account or enquiry data.

Retention and control

You can permanently delete a fan account from the signed-in Fan Arena. This removes the account, predictions, memberships, Google link and leagues the account created. Sponsorship enquiries are retained only while handling the business request and associated records. Database backups may persist temporarily until their normal rotation.

Cookies and external services

Essential HttpOnly cookies maintain signed-in sessions. Local browser storage remembers theme, language and favorites. Google processes sign-in when you choose that option; organizer and replay links open external sites under their own policies.

Contact

A public privacy contact will be added here before Google sign-in is enabled for the public.