kkb8 Privacy Policy

1. Who We Are

1.1 kkb8 is an online casino and sports betting platform accessible at kkb8.io. References to "kkb8", "we", "us" and "our" in this Privacy Policy refer to the kkb8 platform and its operating entities responsible for the collection and processing of personal data described in this document.

1.2 kkb8 is the data controller in respect of the personal data of players who register accounts on or otherwise interact with the kkb8 platform. As data controller, kkb8 determines the purposes and means of processing your personal data.

1.3 kkb8 is built for players across Bangladesh, including in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh and Cox's Bazar, and all data handling practices described in this policy reflect the needs and expectations of our Bangladeshi player base. Our support team operates in English and is available 24 hours a day, 7 days a week.

2. Scope of This Policy

2.1 This Privacy Policy applies to all personal data collected, stored, used and processed by kkb8 in connection with your use of the kkb8 website, mobile-optimised platform, any kkb8 promotional communications you receive, and any interaction you have with kkb8 customer support.

2.2 This policy applies to registered account holders, individuals who have begun but not completed the registration process, and visitors who browse the kkb8 website without registering.

2.3 This policy does not apply to the data practices of third-party game providers (such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt or Spribe) whose games are accessible through the kkb8 platform. Those providers operate their own privacy policies and are independently responsible for data processed within their game environments. kkb8 recommends that you review the privacy documentation of any third-party provider whose services you use.

2.4 This policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which are incorporated by reference.

3. Data We Collect

3.1 kkb8 collects the following categories of personal data:

Category	Examples	When Collected
Identity Data	Full legal name, date of birth, national ID or passport number, selfie photograph for facial verification	Registration; KYC verification
Contact Data	Email address, mobile phone number, residential address	Registration; account updates
Financial Data	bKash / Nagad / Rocket / Upay mobile wallet numbers, transaction reference numbers, deposit and withdrawal amounts in BDT (৳)	Deposit and withdrawal processing
Account Activity Data	Login timestamps, game session history, bet records, wagering amounts, bonus usage, win/loss records	Ongoing platform use
Technical Data	IP address, device type and operating system, browser type and version, screen resolution, time zone (BST UTC+6)	Each platform visit
Communications Data	Support chat transcripts, email correspondence, complaint records	Support interactions
Marketing Preferences	Opt-in/opt-out status for promotional emails, push notification preferences	Registration; account settings updates

3.2 kkb8 does not collect or store full payment card numbers (PAN), card security codes (CVV/CVC), or full bank account numbers. Payment data beyond mobile wallet identifiers is processed exclusively within the secure environments of our PCI-compliant payment partners.

3.3 kkb8 does not intentionally collect special category data (as defined under applicable data protection frameworks), such as health data, religious beliefs, political opinions, or biometric data used for identification purposes — except where a facial liveness check is required as part of a KYC verification flow mandated by our identity verification partner. Such biometric data is processed by the verification partner under their own policy and is not retained by kkb8 beyond the verification event.

4. How We Collect Data

4.1 Directly from you. The majority of personal data we hold is provided directly by you during registration, KYC verification, payment processing, customer support interactions and marketing opt-in flows. You are not obligated to provide personal data beyond what is required for registration and account management, but failure to provide required data may prevent us from offering full platform functionality.

4.2 Automatically during platform use. When you visit kkb8.io, our servers automatically record Technical Data including your IP address, browser details and device information. This data is collected through web server logs and, where applicable, cookies and similar technologies as described in Section 8.

4.3 From third-party service providers. kkb8 may receive personal data about you from identity verification services, fraud prevention databases, and payment processing partners where such data is necessary to complete a transaction, verify your identity, or assess risk. We use this data only for the purposes for which it was provided to us.

4.4 Inferred data. kkb8 may derive insights from your account activity data — for example, identifying responsible gaming risk indicators based on patterns in your session history or wagering behaviour. These inferences are used solely to support safer gambling interventions and are not shared with third parties for profiling or marketing purposes.

5. How We Use Your Data

5.1 kkb8 uses your personal data for the following purposes:

• Account management: Creating and maintaining your kkb8 account, authenticating your identity at login, and managing account settings and preferences.
• Service delivery: Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay and other approved payment methods; settling bets and casino game outcomes; crediting and managing bonus balances.
• Identity verification (KYC): Verifying that you meet the age requirement (21+), confirming that you are who you claim to be, and complying with applicable anti-money laundering obligations.
• Fraud prevention and security: Detecting and investigating suspicious activity, preventing unauthorised access to accounts, and identifying patterns consistent with bonus abuse, money laundering, or other prohibited conduct as defined in our Terms & Conditions.
• Customer support: Responding to your queries, complaints and account-related requests submitted via email or live chat.
• Responsible gaming: Monitoring account activity for indicators of problem gambling and facilitating responsible gaming interventions including deposit limits, time-out periods and self-exclusion requests as described in our Responsible Gaming policy.
• Marketing and promotions: Sending promotional communications — including information about new games, seasonal offers tied to events like Eid, Pohela Boishakh or BPL cricket season, and personalised bonus offers — where you have opted in to receive such communications.
• Platform improvement: Analysing aggregated, anonymised usage data to improve platform performance, game selection, and the overall player experience.
• Legal compliance: Retaining records required by applicable law, responding to lawful requests from regulatory or law enforcement authorities, and enforcing our Terms & Conditions.

5.2 kkb8 does not use automated decision-making (including profiling) that produces legal or similarly significant effects on you, except as part of our fraud detection and responsible gaming systems. Where automated systems flag your account, a human review is conducted before any material account action is taken.

6. Legal Basis for Processing

6.1 kkb8 processes your personal data on the following legal bases:

• Performance of a contract: Processing necessary to create and manage your account and to deliver the betting and gaming services you have requested — including payment processing, bet settlement and bonus management.
• Compliance with legal obligations: Processing necessary to comply with applicable law, including age verification (21+), identity verification, anti-money laundering record-keeping and responses to lawful authority requests.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and aggregated analytics for platform improvement, where those interests are not overridden by your data protection rights.
• Consent: Processing for marketing and promotional communications, where your prior opt-in consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

7. Data Sharing

7.1 kkb8 does not sell personal data to any third party. We share personal data only in the following circumstances and only to the minimum extent necessary:

• Payment processing partners: bKash, Nagad, Rocket, Upay and other payment service providers require transaction identifiers and account reference data to process deposits and withdrawals. These partners are bound by their own privacy and data security obligations.
• Identity verification (KYC) providers: Where KYC verification is required, we share identity documents and, where applicable, biometric liveness check data with accredited identity verification partners. These partners process data strictly for verification purposes.
• Fraud prevention services: kkb8 may share Technical Data and Account Activity Data with fraud prevention databases to identify and mitigate fraudulent activity. Information from these services may also be used to block accounts associated with known fraud patterns.
• Game providers: Third-party game providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe and Ezugi may receive a player session token and anonymised player identifier to enable game session continuity. These providers do not receive your full identity or contact data.
• Legal and regulatory authorities: kkb8 will disclose personal data to law enforcement or regulatory authorities in response to valid legal process. Where permitted by law, kkb8 will notify you of such disclosures.
• Business transfers: In the event of a merger, acquisition or sale of assets involving kkb8, personal data may be transferred as part of that transaction. You will be notified of any such transfer and any change in the identity of the data controller.

7.2 All third-party service providers engaged by kkb8 are required to process personal data only in accordance with kkb8's instructions and to maintain appropriate technical and organisational security measures.

8. Cookies & Tracking Technologies

8.1 kkb8 uses cookies and similar tracking technologies on the kkb8.io website. A cookie is a small text file placed on your device by our web server. Cookies allow the platform to recognise returning visitors, maintain session state across pages, and collect Technical Data for analytics and security purposes.

8.2 kkb8 uses the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function correctly. These include session authentication cookies that keep you logged in across pages during an active session. These cookies cannot be disabled without preventing platform use.
• Functional cookies: Remember your preferences such as language settings, agreed terms versions and responsible gaming tool configurations. Disabling these cookies may reduce platform convenience.
• Analytics cookies: Used to collect aggregated, anonymised data about how visitors interact with the kkb8 platform — which pages are visited most frequently, how long sessions last, and where users navigate after visiting specific pages. This data helps kkb8 improve the platform experience.
• Security cookies: Used to detect and prevent fraudulent account access, bot activity and other security threats. These cookies analyse technical patterns in your session and cross-reference them against known threat signatures.

8.3 kkb8 does not use third-party advertising cookies or cross-site tracking cookies that build a profile of your browsing activity outside of kkb8.io. Our cookie usage is limited to functional, analytical and security purposes directly related to platform operation.

8.4 Most web browsers allow you to refuse cookies or delete existing cookies through browser settings. Please note that refusing strictly necessary cookies will prevent you from logging into your kkb8 account. Instructions for managing cookies are available in your browser's help documentation.

9. Data Security

9.1 kkb8 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, destruction or alteration. These measures include:

• TLS/SSL encryption for all data in transit between your browser or device and kkb8 servers.
• One-way cryptographic hashing (bcrypt or equivalent) for all stored account passwords — kkb8 staff cannot retrieve your password in plain text.
• Role-based access controls limiting staff access to personal data on a need-to-know basis.
• Intrusion detection systems and continuous monitoring of server activity for anomalous access patterns.
• Regular security assessments of platform infrastructure and third-party integrations.
• Documented incident response procedures for data breaches, including notification obligations.

9.2 Notwithstanding the measures above, no method of electronic transmission or storage is completely secure. kkb8 cannot guarantee absolute security but commits to applying industry-standard practices and to responding promptly to any identified security incidents. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, kkb8 will notify affected players without undue delay.

9.3 You are responsible for maintaining the security of your own account credentials. kkb8 recommends using a strong, unique password for your account and not sharing login details with any other person. If you suspect your account has been accessed without your authorisation, contact our support team immediately at [email protected].

10. Data Retention

10.1 kkb8 retains personal data for the periods set out below, after which data is securely deleted or irreversibly anonymised:

• Account and identity data: Retained for a minimum of five (5) years following account closure, to satisfy applicable record-keeping and anti-money laundering obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• Betting and game history: Retained for a minimum of three (3) years from the date of the session or bet, for dispute resolution and responsible gaming audit purposes.
• Support communications: Retained for two (2) years from the date of the interaction, unless the communication relates to an ongoing dispute or legal matter in which case it is retained until that matter is resolved.
• Marketing preferences: Retained until you withdraw consent or close your account, whichever is earlier.
• Technical and analytics data: Aggregated analytics data may be retained indefinitely in anonymised form; raw Technical Data (e.g., raw server logs containing IP addresses) is retained for up to twelve (12) months.

10.2 Where legal proceedings or regulatory investigations are ongoing, kkb8 may retain relevant data beyond the standard periods described above until those proceedings are concluded.

11. Your Rights

11.1 As a user of the kkb8 platform, you have the following rights in respect of your personal data:

• Right of access: You may request a copy of the personal data kkb8 holds about you. We will provide this in a structured, commonly used format within thirty (30) days of a verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may update basic contact information directly within your account settings; other changes require a support request.
• Right to erasure: You may request that kkb8 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where no overriding legal basis for retention applies. Note that data retained to comply with legal obligations (e.g., transaction records) cannot be erased until the applicable retention period has elapsed.
• Right to restriction of processing: You may request that kkb8 restrict processing of your data in certain circumstances — for example, where you contest the accuracy of the data or where processing is unlawful but you prefer restriction over deletion.
• Right to data portability: Where processing is based on your consent or on contract performance and is carried out by automated means, you may request that kkb8 provide your personal data in a portable, machine-readable format so that it can be transferred to another provider.
• Right to object: You may object at any time to processing of your personal data carried out on the basis of legitimate interests, including profiling. kkb8 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

11.2 To exercise any of the rights described above, contact kkb8 support by email at [email protected]. We will respond to verified requests within thirty (30) days. We may ask you to confirm your identity before processing a data rights request to prevent unauthorised access to your data.

12. Children's Privacy

12.1 The kkb8 platform is strictly for adults aged 21 years and above. kkb8 does not knowingly collect, store or process personal data from individuals under the age of 21.

12.2 Where kkb8 identifies or is notified that an account has been registered by a person under 21, that account will be closed immediately, all associated balances will be forfeited, and all personal data associated with the account will be deleted as soon as practicable, subject to any mandatory legal retention obligations.

12.3 If you are a parent or guardian and believe that a person under 21 in your care may have registered an account on kkb8, please contact us immediately at [email protected]. We will investigate and take appropriate action without delay.

13. Third-Party Links

13.1 The kkb8 platform does not include links to external third-party websites. All navigation within the platform remains within the kkb8.io domain. However, game content delivered via third-party providers (Pragmatic Play, Evolution Gaming, etc.) may be served from external domains under those providers' own technical environments.

13.2 kkb8 is not responsible for the privacy practices or content of third-party game providers' technical environments. We encourage you to review the privacy documentation of any provider whose games you access through the kkb8 platform.

14. Policy Updates

14.1 kkb8 reserves the right to update this Privacy Policy at any time. Where changes are material — for example, where a new category of personal data is collected or a new processing purpose is introduced — kkb8 will notify registered account holders by email to their registered address and will post a prominent notice on the platform at least seven (7) days before the updated policy takes effect.

14.2 For minor changes that do not materially affect your rights or the ways in which we use your data, kkb8 may update the policy without advance notice other than updating the "Last Updated" date at the top of this page.

14.3 Your continued use of the kkb8 platform after an updated Privacy Policy becomes effective constitutes your acceptance of the revised policy. If you do not accept the updated policy, you should cease using the platform and request account closure.

14.4 Previous versions of this Privacy Policy are available upon request by contacting [email protected].

15. Contact Us

15.1 If you have any questions, concerns or complaints regarding this Privacy Policy or kkb8's data handling practices, please contact our support team:

15.2 kkb8 takes all privacy complaints seriously. If you submit a complaint and are not satisfied with our response, you may have the right to escalate the matter to the relevant data protection authority in your jurisdiction.

15.3 kkb8 serves players across Bangladesh — including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh and Cox's Bazar — and all privacy-related communications are handled in English by our dedicated support team.