Privacy Policy — kk8x Data Rights

1Introduction

kk8x is Bangladesh's premier online casino and cricket betting platform, serving players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and every corner of the country. We are committed to safeguarding the privacy of every individual who interacts with our platform.

This Policy applies to all personal data collected through the kk8x website, mobile-optimised interface, and any related communications channels including email and live chat support. It should be read alongside our Terms & Conditions, which govern the overall use of the platform.

We take our data protection obligations seriously and have designed our data practices to reflect the principles of transparency, data minimisation, purpose limitation, accuracy, storage limitation, integrity, and confidentiality. If you have any questions about how your data is handled, you are always welcome to contact us at [email protected].

2Data Controller

For the purposes of this Policy, kk8x acts as the data controller in respect of personal data collected from players and visitors using the platform. As data controller, kk8x determines the purposes and means by which personal data is processed.

All enquiries relating to data protection, privacy rights, or this Policy should be directed to:

• Email: [email protected]
• Subject Line: "Data Privacy Enquiry"
• Response Time: Within 5 business days of receipt

3Data We Collect

3.1 Registration Data

When you create a kk8x account, we collect the following information:

• Full legal name
• Date of birth (to verify you are 21 years of age or older)
• Email address
• Mobile phone number
• Residential address (including division, district, and postal code within Bangladesh)
• Username and hashed password

3.2 Identity Verification (KYC) Data

As part of our Know Your Customer obligations, we may collect:

• National Identity Card (NID) number and image
• Passport details where provided in lieu of NID
• Proof of address documents (utility bill, bank statement, or government correspondence)
• Selfie or photographic evidence for biometric comparison where required

3.3 Payment Data

To process deposits and withdrawals, we collect:

• Mobile financial service account numbers (bKash, Nagad, Rocket, Upay) — stored in masked format
• Bank account details (account number, bank name, branch) for DBBL, BRAC Bank, City Bank, Islami Bank, Sonali Bank, and other supported institutions
• Transaction reference numbers and timestamps
• Deposit and withdrawal history associated with your account

kk8x does not store full card numbers for Visa or Mastercard transactions. Card processing is handled by our certified payment partners, who maintain their own PCI-DSS compliant data security standards.

3.4 Usage and Technical Data

When you use the platform, we automatically collect certain technical information, including:

• IP address and approximate geolocation (country and city level)
• Device type, operating system, and browser version
• Pages visited, games played, betting history, and session duration
• Login timestamps and access logs
• Referral source (how you arrived at kk8x)

3.5 Communication Data

When you contact our support team via live chat, email, or any other channel, we retain a record of that communication, including the content of your message, the date and time, and any attachments you submit. These records are used to resolve disputes, improve service quality, and maintain a history of your interactions with kk8x.

3.6 Responsible Gaming Data

Where you use our responsible gaming tools — such as deposit limits, time-out periods, or self-exclusion — we record your preferences and the dates on which they were applied. This data is retained for compliance and player protection purposes and cannot be deleted during an active restriction period.

4How We Use Your Data

kk8x uses personal data for the following purposes:

• Account Management: To create, maintain, and administer your kk8x account, process login requests, and manage your account settings and preferences.
• Age and Identity Verification: To confirm that you meet the minimum age requirement of 21 years and to verify your identity in accordance with our KYC obligations.
• Payment Processing: To process deposit and withdrawal requests via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks, and to reconcile transaction records.
• Legal and Regulatory Compliance: To meet our obligations under applicable anti-money-laundering regulations, to respond to lawful requests from competent authorities, and to maintain required records.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, account misuse, money laundering, and other prohibited conduct described in our Terms & Conditions.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance via our 24/7 support team.
• Platform Improvement: To analyse usage patterns, diagnose technical issues, and improve the quality, reliability, and performance of the kk8x platform.
• Responsible Gaming: To enforce deposit limits, time-out periods, self-exclusion requests, and other protective measures you have activated on your account.
• Promotions and Bonuses: To administer bonus offers, verify bonus eligibility, calculate wagering requirements, and communicate promotional updates to players who have opted in to receive them.

5Legal Basis for Processing

We process your personal data on the following legal grounds:

• Contractual Necessity: Processing is required to fulfil our obligations to you under the Terms & Conditions, including providing gaming services, processing payments, and managing your account.
• Legal Obligation: Certain processing activities — particularly identity verification, transaction record-keeping, and anti-money-laundering checks — are required by applicable law and regulation.
• Legitimate Interests: We process certain data where it is in our legitimate interests to do so, provided those interests are not overridden by your own privacy rights. This includes fraud detection, platform security, and service improvement analytics.
• Consent: Where we send you marketing communications or use non-essential cookies, we rely on your prior consent. You may withdraw consent at any time by contacting [email protected] or adjusting your account preferences.

6Sharing Your Data

kk8x does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We share personal data only in the following limited circumstances:

6.1 Payment Processors

Personal and payment data is shared with our authorised payment partners — including mobile financial service operators (bKash, Nagad, Rocket, Upay) and banking partners — to the extent necessary to process your transactions. These partners are bound by their own data protection obligations and are prohibited from using your data for any purpose other than completing the requested transaction.

6.2 Identity Verification Providers

Where we use third-party KYC service providers to assist with identity verification, the minimum data required for that process is shared under strict data processing agreements. These providers are not permitted to retain your data beyond the scope of the verification task.

6.3 Game Software Providers

Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised or pseudonymised session data necessary for game delivery and fairness monitoring. Full personal data is not shared with game studios.

6.4 Legal and Regulatory Authorities

We may disclose personal data to competent law enforcement or regulatory authorities where required to do so by applicable law, court order, or binding regulatory direction. In such cases, we disclose only what is strictly required and, where lawfully permitted, will notify you of any such disclosure.

6.5 Business Transfers

In the event of a merger, acquisition, or transfer of all or part of kk8x's business, your personal data may be transferred to the successor entity. You will be notified in advance of any such transfer and of any resulting changes to this Privacy Policy.

7Cookies & Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. kk8x uses cookies and similar technologies (such as local storage and session tokens) to operate the platform, remember your preferences, and analyse how the site is used.

7.2 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication tokens and security cookies. They cannot be disabled without breaking core functionality.
• Functional Cookies: Used to remember your preferences, such as language settings, preferred currency display (BDT / ৳), and display customisations. These persist between sessions.
• Analytics Cookies: Used to collect anonymised data about how players navigate and use the platform. This data informs performance improvements and helps us identify and fix technical issues.

7.3 Third-Party Advertising Cookies

kk8x does not use third-party advertising cookies or cross-site tracking pixels. We do not participate in behavioural advertising networks and do not allow advertising technology companies to place tracking cookies on your device via the kk8x platform.

7.4 Managing Cookies

You may control or disable cookies through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in and use core platform features. Functional and analytics cookies may be disabled without affecting your ability to play games or make transactions.

8Data Security

kk8x implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security practices include:

• Encryption in Transit: All data transmitted between your device and kk8x servers is encrypted using TLS 1.2 or higher (256-bit SSL). The padlock indicator in your browser confirms this encryption is active at all times.
• Encryption at Rest: Sensitive personal data, including identity documents and payment method references, is encrypted at rest using AES-256 encryption on our secure servers.
• Access Controls: Access to personal data is restricted to kk8x staff and authorised processors who require it to perform their designated functions. All staff with access to personal data are subject to confidentiality obligations.
• Password Security: Passwords are never stored in plain text. We use industry-standard one-way hashing with salt to protect account credentials. We also support two-factor authentication for additional account security.
• Security Monitoring: Our infrastructure is subject to continuous security monitoring, intrusion detection, and regular independent penetration testing to identify and remediate vulnerabilities.
• Incident Response: In the event of a data breach that poses a risk to your rights and freedoms, kk8x will notify affected players as promptly as practicable and take immediate steps to contain and investigate the incident.

While we employ rigorous security measures, no system is entirely immune to risk. You are responsible for maintaining the security of your own account credentials and must notify us immediately at [email protected] if you suspect unauthorised access to your account.

9Data Retention

kk8x retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by applicable law. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account's active status, plus five (5) years after account closure to satisfy anti-money-laundering and financial record-keeping requirements.
• KYC and Identity Documents: Retained for a minimum of five (5) years following account closure or the completion of the transaction to which they relate, in line with applicable regulatory requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction.
• Support Communication Records: Retained for three (3) years from the date of the communication, unless related to an open dispute or legal matter.
• Analytics and Usage Data: Anonymised and aggregated after thirteen (13) months; raw session data is deleted after this period.
• Responsible Gaming Records: Retained for the duration of any active restriction period plus five (5) years thereafter, to prevent circumvention of self-exclusion decisions.

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with our internal data destruction procedures.

10Your Rights

Subject to applicable law, you hold the following rights in relation to your personal data held by kk8x. To exercise any of these rights, please contact [email protected] with the subject line "Data Rights Request" and your registered account username.

Please note that certain rights are subject to legal limitations. For example, we cannot erase data that we are legally required to retain under anti-money-laundering regulations, and we cannot delete responsible gaming restriction records while a self-exclusion period remains active. We will always explain clearly if a legal limitation prevents us from fully satisfying a request.

11International Data Transfers

kk8x's primary data storage and processing infrastructure is located in secure data centres serving the Bangladesh and South Asia region. In some cases, personal data may be processed by our service providers in other countries — for example, where a game technology provider or payment processor operates data centres outside Bangladesh.

Where personal data is transferred internationally, kk8x ensures that adequate safeguards are in place to protect your data to a standard equivalent to that described in this Policy. These safeguards include standard contractual data processing clauses incorporated into our agreements with all third-party processors.

By using the kk8x platform, you acknowledge and agree that your data may be processed in the manner described above. If you have concerns about international transfers of your personal data, please contact us at [email protected].

12Children's Privacy

kk8x is strictly intended for use by adults aged 21 years and above. We do not knowingly collect, process, or retain personal data belonging to persons under the age of 21. If you are under 21 years of age, you must not use any part of the kk8x platform, create an account, or submit any personal information to us.

If we become aware that we have inadvertently collected personal data from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has accessed or registered on the kk8x platform, please contact us immediately at [email protected] so that we can investigate and act accordingly.

Parents and guardians who are concerned about online gambling access for minors are encouraged to use parental control software to restrict access to gambling websites. We also encourage open conversations about the risks of gambling with young people in your household.

13Updates to This Policy

kk8x reserves the right to update this Privacy Policy at any time. When material changes are made, we will publish the updated Policy on the kk8x platform with a revised "Last Updated" date at the top of the document. For significant changes that substantially affect how we use your data, we will make reasonable efforts to notify registered players by email or via an in-platform notification.

Your continued use of the kk8x platform following the publication of an updated Privacy Policy constitutes your acceptance of the changes. We encourage you to review this page periodically to stay informed about how we protect your data.

If you disagree with any changes to this Policy, you should discontinue using the platform and may request account closure by contacting [email protected].

14Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by kk8x, please contact our support team using the details below. All data-related enquiries will be handled by a member of staff with responsibility for data protection matters.

• Email: [email protected] (subject: "Privacy Policy Enquiry" or "Data Rights Request")
• Live Chat: Available 24 hours a day, 7 days a week via the kk8x platform
• Response Time: Within 2 minutes via live chat; within 5 business days via email for data rights requests
• Support Language: English (24/7)