Guest Play
Guest limits use an HttpOnly cookie and a salted hash derived from request metadata such as IP address and user agent. Raw IP addresses are not stored in the game database for the guest quota.
Usage Analytics
PlayKeno.io records first-party product analytics for both guest and account play, including sessions, bets, seed rotations, fairness views, risk tier, selected spot count, hit count, virtual-credit results, referrer, coarse Cloudflare location metadata, and hashed request identifiers. These records help us understand retention, abuse, game balance, and product quality.
Raw IP addresses and account passwords are not stored in the PlayKeno.io game database. Password handling is provided by Firebase Auth.
Accounts
Account login is handled by Firebase Auth. PlayKeno.io stores the Firebase user id, optional email/display name, virtual balance, fairness seeds, and game history needed to run the free-play service.
Security
Cookies are signed, API requests are validated, and Cloudflare Turnstile can be enabled to reduce automated abuse.