Privacy Policy — How kkb8 Collects, Uses, and Protects Your Data

This Privacy Policy ("Policy") is issued by kkb8 ("kkb8", "we", "us", or "our") and applies to all personal data collected from players, visitors, and users ("you" or "your") who access the kkb8 website at kkb8.app or use any of the services offered through that website, including casino games, sports betting, crash games, slot machines, and live dealer games (collectively, the "Services"). This Policy should be read alongside the kkb8 Terms & Conditions and our Responsible Gaming guidelines, both of which form part of the overall agreement between you and kkb8.

By creating an account on kkb8 or by continuing to use the kkb8 platform, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must discontinue use of the kkb8 platform. This Policy is written in English and the English version is the authoritative version for all interpretation purposes.

Information We Collect

kkb8 collects personal data through multiple channels: directly from you when you register or interact with the platform, automatically when you browse or use the Services, and occasionally from third parties such as payment processors and identity verification providers. The categories of data we collect are described below.

1.1 Registration & Account Data

When you create a kkb8 account, we collect the information you provide in the registration form. This includes your full legal name, date of birth, residential address (including city and district within Bangladesh — for example, Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, or Rangpur), email address, mobile phone number, and your chosen username. We require this information to establish your account, verify your identity, and communicate with you about your account.

1.2 Identity Verification (KYC) Data

To comply with our Know Your Customer (KYC) and anti-money laundering (AML) obligations, we may request copies of identity documents including your national identity card (NID), passport, or driving licence. We may also request a proof-of-address document such as a recent utility bill or bank statement, and proof of payment method ownership. This data is collected at the time of your first withdrawal request or at any other point where our compliance procedures require it.

1.3 Financial & Transaction Data

We collect details of all financial transactions processed through your kkb8 account. This includes deposit amounts, withdrawal requests, payment method details (such as your bKash wallet number, Nagad number, Rocket number, Upay number, or bank card details), transaction timestamps, and transaction reference numbers. We do not store full payment card numbers on our servers — card processing is handled by our payment gateway partners, who are bound by their own security and data protection obligations.

1.4 Gameplay & Betting Activity Data

kkb8 records all game sessions, bets placed, sports markets accessed, odds selected, results, and bonus interactions associated with your account. This data is used for account management, dispute resolution, responsible gaming monitoring, and the detection of fraudulent or abusive behaviour. Gameplay records are also used to calculate wagering requirement progress and to determine bonus eligibility.

1.5 Device & Technical Data

When you access kkb8, our servers automatically collect certain technical information about your device and session. This includes your IP address, browser type and version, operating system, device type (desktop, mobile, or tablet), referring URL, pages visited within kkb8, session duration, and time zone setting. This data is collected for security purposes, to detect unauthorised access, and to optimise the kkb8 platform experience across devices commonly used by players in Bangladesh.

1.6 Communications Data

When you contact kkb8 support via email, live chat, or any other channel, we retain records of that correspondence, including the date and time of contact, the nature of the query or complaint, and the resolution provided. This data is retained to maintain service quality, to resolve future disputes, and to train and monitor our support team.

1.7 Data We Do Not Collect

kkb8 does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data (other than NID photos used strictly for identity verification), health data unrelated to responsible gaming, or data concerning a natural person's sex life or sexual orientation.

How We Use Your Data

kkb8 uses the personal data we collect for the following clearly defined purposes. We do not use your data for any purpose beyond those listed below without first obtaining your explicit consent or without a valid legal basis for doing so.

Marketing Communications

kkb8 will only send you promotional emails, SMS messages, or push notifications relating to bonuses, new games, cricket betting offers, and seasonal promotions (such as BPL season offers, Eid promotions, and Pohela Boishakh campaigns) if you have explicitly opted in to receive marketing communications at the time of registration or subsequently through your account settings. You may withdraw your consent to marketing at any time by emailing [email protected] or by adjusting your communication preferences in the account settings panel. Withdrawal of marketing consent does not affect the lawfulness of processing that occurred before your consent was withdrawn.

Legal Basis for Processing

kkb8 processes personal data only where it has a valid legal basis to do so. The four legal bases on which kkb8 relies are described below.

3.1 Contractual Necessity

The majority of data processing at kkb8 is necessary for the performance of the contract between you and kkb8 — specifically, the Terms & Conditions you accepted when creating your account. Without processing your registration data, financial data, and gameplay data, kkb8 cannot provide you with the Services you have contracted for. This legal basis covers account creation, payment processing, bonus administration, and customer support.

3.2 Legal Obligation

Certain processing activities are required by law. kkb8 is legally obligated to conduct KYC and AML checks on its players and to retain transaction records for a defined period. kkb8 may also be required by law to disclose data to competent authorities in response to a lawful order, court order, or regulatory directive. In such cases, kkb8 will notify you of the disclosure request to the extent permitted by law.

3.3 Legitimate Interests

kkb8 relies on legitimate interests as a legal basis for processing activities that are necessary to protect the security and integrity of the platform but that are not strictly required by contract or law. This includes fraud detection, IP address analysis, device fingerprinting for multi-account detection, and platform performance analytics. Where kkb8 relies on legitimate interests, we have carefully balanced our interests against your privacy rights and concluded that our interests do not override your fundamental rights and freedoms.

3.4 Consent

Where kkb8 relies on your consent as a legal basis — primarily for marketing communications — that consent is freely given, specific, informed, and unambiguous. You may withdraw your consent at any time without detriment to your account or to the Services you receive from kkb8.

Data Sharing & Disclosure

kkb8 does not sell your personal data to any third party. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

4.1 Payment Service Providers

To process deposits and withdrawals, kkb8 shares relevant financial data with payment service providers including bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank, and City Bank. The data shared is limited to what is required to authenticate and complete the specific transaction. Each payment partner is bound by their own data protection obligations and is not permitted to use your data for any purpose beyond completing the transaction in question.

4.2 Identity Verification Partners

kkb8 may use third-party identity verification services to assist with KYC document checks. When your identity documents are submitted through the kkb8 platform for verification, they may be processed by our verification partner on our behalf. These partners act as data processors under contract with kkb8 and are prohibited from using your data for their own purposes.

4.3 Game Technology Providers

Some of the games offered on kkb8 are developed and operated by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. To deliver these games, limited technical data (such as a session token or anonymised player identifier) may be passed to the game provider's servers. kkb8 does not share your full name, contact details, or payment information with game providers.

4.4 Legal and Regulatory Authorities

kkb8 may be required to disclose personal data to law enforcement agencies, regulatory bodies, or courts in response to a lawful request, court order, or legal process. kkb8 will comply with all such lawful requests and will disclose only the minimum data necessary to satisfy the legal requirement.

4.5 Business Transfers

In the event that kkb8 undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, player personal data held by kkb8 may form part of the transferred assets. In such an event, kkb8 will notify affected players in advance and will ensure that any successor entity is bound by privacy obligations no less protective than those set out in this Policy.

Cookies & Tracking Technologies

kkb8 uses cookies and similar technologies (such as local storage objects and session tokens) to operate the platform, keep you logged in securely, and understand how players navigate the site. The following table describes the categories of cookies kkb8 uses and their purposes.

kkb8 does not use third-party advertising cookies, cross-site tracking pixels, or behavioural profiling cookies from social media platforms. The cookies we use are either set by kkb8 directly (first-party cookies) or by our analytics and security tool providers operating on our behalf as data processors.

Managing Cookies

You can control or delete cookies through your browser settings at any time. Most modern browsers allow you to refuse all cookies, accept only certain categories of cookies, or delete existing cookies. Please note that disabling strictly necessary cookies will prevent you from logging in to your kkb8 account and will impair platform functionality. Disabling functional or analytics cookies will not prevent you from using the core Services but may affect your experience on the platform.

Data Retention

kkb8 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as required by applicable legal, regulatory, or contractual obligations. The retention periods applicable to the main categories of data are described below.

Upon expiry of the applicable retention period, kkb8 will securely delete or anonymise your personal data. Anonymised data (data from which all identifying information has been irreversibly removed) may be retained indefinitely for statistical and analytical purposes and does not constitute personal data for the purposes of this Policy.

Account Closure and Data Retention

Closing your kkb8 account does not result in the immediate deletion of all your personal data. kkb8 is required by its AML and financial compliance obligations to retain your account and transaction records for a minimum period after closure, as described in the table above. If you wish to understand exactly what data is retained after your account is closed and for how long, please contact [email protected].

Your Privacy Rights

As a kkb8 player, you hold a range of rights in respect of the personal data we process about you. kkb8 is committed to facilitating the exercise of these rights promptly and without unnecessary obstruction. A summary of your rights and how to exercise them is set out below.

• Right of access: You have the right to request a copy of the personal data kkb8 holds about you. We will provide this within a reasonable timeframe following receipt of a valid request submitted to [email protected]. The first copy is provided free of charge; subsequent requests within a 12-month period may attract a reasonable administrative fee.
• Right to rectification: If you believe that any personal data kkb8 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Basic account information (such as your phone number or email address) can be updated directly through your account settings panel. For changes to identity-verified fields (such as your legal name or date of birth), you will need to submit a correction request with supporting documentation.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the processing was unlawful. Please note that kkb8 may be unable to fulfil an erasure request in full where retention of certain data is required by legal or regulatory obligation (see Section 6). In such cases, we will delete or anonymise the maximum amount of data that is legally permissible and will explain clearly which data must be retained and why.
• Right to restriction of processing: In certain circumstances (for example, while a rectification request is being assessed) you may request that kkb8 suspend processing of your data rather than delete it.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format. This right applies primarily to data you have actively provided to kkb8, such as your registration information.
• Right to object: You have the right to object to processing of your personal data where that processing is based on legitimate interests. kkb8 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw marketing consent: Where we process your data for marketing purposes based on your consent, you may withdraw that consent at any time by contacting [email protected] or adjusting your account notification settings. Withdrawal does not affect any other processing we conduct under a different legal basis.

Data Security

kkb8 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, loss, alteration, disclosure, or destruction. These measures are reviewed and updated regularly to reflect the evolving threat landscape.

Technical Measures

• All data in transit between your browser and the kkb8 platform is encrypted using TLS 1.2 or higher (SSL encryption), preventing interception by third parties.
• Sensitive data at rest — including KYC documents and financial records — is stored in encrypted form using AES-256 or equivalent encryption standard.
• Access to personal data within kkb8's internal systems is governed by role-based access controls. Only employees and contractors with a legitimate need to access specific data categories are granted that access.
• Two-factor authentication (2FA) is available to players and is mandatory for all kkb8 internal staff who have access to player data systems.
• kkb8 maintains intrusion detection systems, web application firewalls, and regular vulnerability scanning to identify and address security weaknesses before they can be exploited.

Organisational Measures

• All kkb8 staff who handle personal data are trained in data protection best practices and are bound by contractual confidentiality obligations.
• Third-party service providers who process data on kkb8's behalf are subject to data processing agreements that require them to maintain security standards no less stringent than our own.
• kkb8 maintains an incident response plan. In the event of a data breach that is likely to result in risk to players' rights and freedoms, we will notify affected players promptly and take all reasonable steps to contain and remediate the breach.

Player Responsibilities

While kkb8 takes extensive steps to protect your data on our side, the security of your kkb8 account also depends on your own actions. You are responsible for choosing a strong, unique password, enabling 2FA on your account, logging out of shared devices, and reporting any suspected unauthorised access to [email protected] immediately. kkb8 cannot be held responsible for security breaches that result from a player's failure to maintain adequate account security.

Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by kkb8, please contact us using the details below. kkb 8 is committed to responding to all privacy-related enquiries promptly and transparently.

Policy Updates

kkb8 reserves the right to update or amend this Privacy Policy at any time. When we make material changes, we will notify registered players by email and/or by posting a prominent notice on the kkb8 platform for a minimum of 14 days before the revised Policy takes effect. The "Last updated" date at the top of this page will be revised accordingly. Your continued use of the kkb8 Services after the effective date of a revised Policy constitutes your acceptance of the updated terms. If you do not agree with the updated Policy, you must stop using the Services and may close your account by contacting [email protected].

Governing Language

This Privacy Policy is written and published in English. English is the operative language for all interpretation, dispute resolution, and legal proceedings relating to this Policy. No translation of this Policy into any other language creates legal obligations on kkb8 beyond those expressed in the English original.