kb66 Privacy Policy — How We Protect Your Personal Data

kb66 collects personal data through several channels: directly from you during registration and use of the platform, automatically through your interaction with the site, and in some cases from third-party service providers such as payment processors. The categories of personal data we collect are described in the table below:

Data We Do Not Collect. kb66 does not collect sensitive special-category data such as racial or ethnic origin, religious beliefs, health data, or biometric data, unless strictly required by applicable law or expressly provided by you in a support context (for example, if you self-disclose a health condition in relation to a responsible gaming request).

Aggregate and Anonymised Data. We may collect, use, and share aggregated statistical data about player activity on the kb66 platform (for example, total number of active players in a given period, or average session length). Aggregated data does not identify any individual and is not considered personal data for the purposes of this Policy.

kb66 uses the personal data it collects only for the purposes set out in this Policy. We do not sell, rent, or otherwise commercialise your personal data to third parties for their own independent marketing purposes. The primary purposes for which we process your data are as follows:

• Account Registration and Management: To create and maintain your kb66 player account, verify your identity, and administer your preferences and settings.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer, and to maintain an accurate record of all financial transactions on your account.
• Know Your Customer (KYC) Compliance: To verify your identity and age in accordance with our platform standards and to prevent fraudulent account activity, money laundering, and underage gambling.
• Platform Operation and Improvement: To deliver game content, sports betting markets, live casino services, and all other platform features, and to improve their performance and reliability based on usage data.
• Responsible Gaming: To monitor player activity for signs of problem gambling behaviour and to administer deposit limits, session time limits, cooling-off periods, and self-exclusion requests.
• Customer Support: To respond to your enquiries, resolve disputes, and address complaints submitted via our support channels.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, bonus abuse, account takeover attempts, and other prohibited activity.
• Promotional Communications: Where you have opted in to receive marketing communications, to send you information about kb66 promotions, bonus offers, new game launches, and seasonal events such as BPL, Eid, and Pohela Boishakh offers. You may opt out at any time.
• Legal and Regulatory Obligations: To comply with applicable legal obligations, including responding to lawful requests from authorities and retaining transaction records as required.

We will not use your personal data for any purpose that is incompatible with those listed above without first obtaining your explicit consent or being required to do so by law.

kb66 processes your personal data on the following legal bases, depending on the nature and purpose of the processing activity:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and kb66 — that is, to provide you with the platform services you have registered to use, including account management, payment processing, and game delivery.
• Legitimate Interests: kb66 has a legitimate interest in processing certain data to maintain the security of its platform, prevent fraud, improve platform functionality, and develop its service offering. We have assessed that this interest does not override your fundamental rights and freedoms.
• Legal Obligation: Certain processing activities are required to comply with applicable legal obligations, including identity verification, record-keeping of financial transactions, and responding to lawful requests from law enforcement or regulatory authorities.
• Consent: Where processing is not covered by one of the above bases, we will seek your explicit consent before proceeding. The clearest example is marketing communications: we will only send promotional emails or messages where you have actively opted in. You may withdraw your consent at any time by contacting [email protected] or using the unsubscribe mechanism in any marketing message.

Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of any processing carried out before the withdrawal.

We Do Not Sell Your Data. kb66 does not sell, lease, or trade your personal data to any third party for commercial purposes. Data is shared with third parties only where strictly necessary to operate the platform and deliver services to you, or where required by law.

Payment Service Providers. To process deposits and withdrawals, we share necessary financial data with our payment partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Sonali Bank, Islami Bank, Visa, and Mastercard. These partners are contractually obligated to handle your data securely and only for the purpose of processing your transactions.

Identity Verification Providers. To fulfil our KYC obligations, we may share identity documents and personal data with third-party verification service providers. These providers are bound by strict data processing agreements and may not use the data for any purpose other than identity verification on our behalf.

Game Content Providers. The kb66 platform hosts games developed by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play these games, certain technical and usage data (such as game session tokens and bet outcomes) may be processed by the relevant provider's systems to enable game functionality. These studios do not receive your identity or financial data.

Analytics and Technical Partners. We use analytics tools and infrastructure partners to monitor platform performance and improve user experience. These partners process technical and usage data only and are subject to data processing agreements prohibiting use of the data beyond the agreed service scope.

Legal Disclosure. kb66 may disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by applicable law, or where disclosure is necessary to protect the rights, property, or safety of kb66, its players, or the public.

What Are Cookies. Cookies are small text files placed on your device when you visit a website. They are widely used to make websites function correctly, to remember user preferences, and to provide analytical information to site operators. kb66 uses cookies and similar tracking technologies (such as web beacons and local storage objects) on its platform.

Types of Cookies We Use. The following categories of cookies are deployed on the kb66 platform:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They enable core features such as player authentication, session management, and security token validation. These cookies cannot be disabled without preventing you from using the platform.
• Functional Cookies: These cookies remember your preferences, such as your preferred language, your most recently played games, and any display or notification settings you have configured. Disabling functional cookies may affect your experience.
• Analytics Cookies: These cookies collect information about how players interact with the kb66 platform — which pages are visited most frequently, how long sessions last, and which features generate the most engagement. This data is used in aggregated, anonymised form to improve the platform.
• Marketing and Targeting Cookies: Where you have consented, these cookies track your browsing behaviour across the kb66 platform to enable us to deliver relevant promotional content. We do not use third-party advertising cookies to track you across other websites.

Managing Cookies. You may control and manage cookies through your browser settings. Most modern browsers allow you to refuse, delete, or selectively accept cookies. Please note that disabling strictly necessary cookies will prevent you from logging in or using core platform features. Instructions for managing cookies are available in your browser's help documentation.

Session Cookies vs. Persistent Cookies. Session cookies are temporary and are deleted when you close your browser. Persistent cookies remain on your device for a set duration or until manually deleted. kb66 uses both types, depending on the functional purpose of each cookie.

Technical Safeguards. kb66 employs industry-standard technical measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. All data transmitted between your device and the kb66 platform is protected using 256-bit SSL (Secure Sockets Layer) encryption. You can verify this by checking for the padlock icon in your browser's address bar when visiting https://kb66.io.

Infrastructure Security. The kb66 platform is hosted on secure, access-controlled infrastructure. Database servers are not directly accessible from the public internet. Access to production systems is restricted to authorised personnel only and is protected by multi-factor authentication. All access events are logged and regularly audited.

Password Storage. Account passwords are never stored in plain text. kb66 uses strong cryptographic hashing algorithms to store password data, meaning that even kb66 personnel cannot read your password. You are responsible for choosing a strong, unique password and for keeping it confidential.

Payment Data Security. kb66 does not store full payment card numbers on its servers. Payment transactions are processed by PCI-compliant payment service providers, and only tokenised references are retained by kb66 for transaction reconciliation purposes.

Security Incidents. In the event of a data security incident that is likely to result in a risk to the rights and freedoms of affected individuals, kb66 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the incident. kb66 maintains an incident response plan and conducts periodic security assessments.

Your Responsibility. You play an important role in keeping your data secure. You must protect your account credentials, use a strong and unique password for your kb66 account, and notify kb66 support immediately at [email protected] if you believe your account has been compromised.

Retention Principle. kb66 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Once data is no longer required, it is securely deleted or anonymised.

Account Data. Personal data associated with active kb66 accounts is retained for the duration of the account relationship and for a period of five years following permanent account closure. This retention period supports our ability to respond to any disputes or legal claims that may arise after account closure.

Transaction Records. Financial transaction records, including deposits, withdrawals, and bet histories, are retained for a minimum of seven years in accordance with standard financial record-keeping practices. These records are accessible to the kb66 compliance and payments teams for audit and dispute resolution purposes.

KYC Documents. Identity verification documents submitted as part of the KYC process are retained for the duration of the account relationship and for five years following account closure. After this period, documents are securely destroyed.

Support Communications. Records of support interactions, including live chat transcripts and email correspondence, are retained for three years from the date of the interaction. These records support quality assurance, dispute resolution, and regulatory compliance activities.

Anonymised Data. Aggregated and anonymised data derived from player activity may be retained indefinitely for platform analytics and business intelligence purposes. Such data does not identify any individual and is therefore not subject to the same retention limits as personal data.

As a kb66 player, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact the kb66 support team at [email protected] with a clear description of your request. kb66 will respond within 30 days of receiving a valid request.

• Right of Access: You have the right to request a copy of the personal data that kb66 holds about you, together with information about how and why it is processed. This is sometimes called a Subject Access Request (SAR).
• Right to Rectification: If you believe that personal data kb66 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Many data fields can be updated directly through your account settings page; others require a support request.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to overriding legal obligations — for example, kb66 is required to retain transaction records for regulatory purposes and cannot delete them on request.
• Right to Restriction: You may request that kb66 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being verified following a rectification request.
• Right to Data Portability: Where processing is based on your consent or on a contract, you have the right to receive a structured, machine-readable copy of the personal data you have provided to kb66, and to transmit that data to another service provider.
• Right to Object: You have the right to object to the processing of your personal data where processing is based on legitimate interests or for direct marketing purposes. If you object to direct marketing, kb66 will stop processing your data for that purpose immediately.
• Right to Withdraw Consent: Where kb66 processes your data on the basis of consent, you may withdraw that consent at any time without affecting the lawfulness of any processing that took place before withdrawal.

Minimum Age Requirement. The kb66 platform is strictly intended for adults aged 21 and above. kb66 does not knowingly collect personal data from individuals under the age of 21. All registration applications are subject to age verification checks, and accounts where the account holder is found to be under 21 will be immediately suspended and all data associated with the account will be deleted.

Parental and Guardian Controls. If you are the parent or legal guardian of a person under the age of 21 and you believe that your child has accessed the kb66 platform or provided personal data to kb66, please contact our support team at [email protected] immediately. We will promptly investigate and delete any data associated with a minor's account.

Responsible Gaming Tools. kb66 provides filtering and self-exclusion tools that parents and guardians can use to prevent access to online gambling platforms. We also encourage the use of third-party internet filtering software as an additional layer of protection. For more information, please visit our Responsible Gaming page.

External Websites. The kb66 platform does not contain links to external third-party websites for commercial or promotional purposes. Game content delivered by third-party studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) is rendered within the kb66 platform environment and is governed by separate data processing agreements between kb66 and the relevant studio.

No Liability for Third-Party Practices. To the extent that any third-party service provider operates its own data collection practices as part of delivering services to kb66 (for example, a payment provider's mobile application), kb66 is not responsible for those practices. We encourage you to review the privacy policies of any third-party services you use in connection with your kb66 account.

Cross-Border Processing. kb66 operates a platform that is served and maintained using infrastructure that may be located outside Bangladesh. In the course of delivering platform services, your personal data may be transferred to and processed in jurisdictions other than Bangladesh. This may occur, for example, when data is processed by our game content providers or identity verification partners.

Safeguards for International Transfers. Where personal data is transferred internationally, kb66 ensures that appropriate safeguards are in place to protect the data to a standard equivalent to that described in this Policy. These safeguards include contractual data processing agreements with all third-party processors, requiring them to process data only as directed by kb66 and to maintain appropriate security standards.

Your Consent. By registering an account and using the kb66 platform, you acknowledge and consent to the transfer and processing of your personal data as described in this section. If you do not consent to these transfers, you should not use the kb66 platform.

Right to Update. kb66 reserves the right to update or amend this Privacy Policy at any time. Amendments may be necessary in response to changes in applicable law, changes to our platform or service offering, or improvements to our data governance practices.

Notification of Material Changes. Where an amendment constitutes a material change to your rights or to the way in which we process your personal data, kb66 will notify registered players via a notice on the platform and, where possible, by email to the address registered on your account. The effective date at the top of this Policy will be updated to reflect the date the amended Policy comes into force.

Continued Use. Your continued use of the kb66 platform following the publication of any amended Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the amended Policy, you must cease using the platform and may close your account by contacting [email protected].

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a privacy-related concern, please contact the kb66 data team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Please use "Privacy Request" or "Data Rights Request" as your email subject for faster routing
• Response Time: kb66 will acknowledge receipt of your request within 2 business days and provide a substantive response within 30 days
• Support Hours: 24 hours a day, 7 days a week, 365 days a year

Complaints. If you are not satisfied with kb66's response to a privacy concern, you have the right to escalate your complaint. kb66 takes all privacy complaints seriously and operates a formal escalation procedure. Please set out the full details of your concern in writing to [email protected], marking your message clearly as a formal privacy complaint, and a senior member of the kb66 compliance team will review and respond within 10 business days.