kxk8 Privacy Policy — How We Protect Your Personal Data

Introduction

kxk8 is an online betting and gaming platform designed to serve players based in Bangladesh. We are committed to protecting the privacy and personal data of every individual who uses our platform. This Policy sets out in plain, transparent language how we collect data from you, what we do with that data, how long we keep it, who we may share it with, and what rights you have in relation to it.

Privacy is not an afterthought at kxk8 — it is integrated into every part of how we build and operate our platform. We process only the data that is necessary to deliver a safe, fair, and legally compliant betting experience. We do not engage in aggressive data commercialisation and we do not sell your personal information to marketing brokers or advertising networks.

This Policy applies to all personal data collected through the kxk8 website (kxk8.io), our customer support channels, and any communications between you and kxk8. It applies regardless of the device or method you use to access our platform. If you have any questions about this Policy that are not addressed here, please contact us at [email protected] at any time.

Data We Collect

2.1 Registration & Account Data

When you create a kxk8 account, we collect the personal information you provide directly, including your full legal name, date of birth, residential address (including city and district — for example, Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, or Rangpur), email address, and mobile phone number. This information is required to establish and maintain your account.

2.2 Identity Verification (KYC) Data

To comply with responsible gaming and age-verification obligations, we may collect copies of government-issued identity documents such as your National Identity Card (NID), passport, or driving licence. We may also collect supporting documents such as a recent utility bill or bank statement for address verification purposes.

2.3 Financial & Transaction Data

We collect data relating to every financial transaction carried out through your kxk8 account. This includes deposit amounts, withdrawal requests, payment method identifiers (such as your registered bKash, Nagad, Rocket, or Upay account number, or the last four digits of a Visa or Mastercard), transaction timestamps, and transaction reference numbers. We do not store full card numbers or mobile banking PINs.

2.4 Betting & Gaming Activity Data

We maintain a complete record of your betting and gaming activity on the kxk8 platform, including the games and markets you engage with, stake amounts, odds accepted, game results, session durations, and any responsible gaming tool interactions (such as deposit limit changes or cooling-off requests). This data is used to operate your account, resolve disputes, detect fraud, and fulfil responsible gaming obligations.

2.5 Technical & Device Data

When you access kxk8, our servers automatically collect certain technical data, including your IP address, device type and model, operating system version, browser type and version, referring URL, and pages visited within the platform. This data is used for platform security, fraud prevention, and service optimisation purposes.

2.6 Communications Data

If you contact kxk8 via live chat, email, or any other channel, we retain records of those communications together with any personal information you choose to include. This enables us to provide consistent, high-quality customer support and to maintain records for dispute resolution purposes.

How We Use Your Data

kxk8 uses the personal data we collect for the following specific purposes:

• Account Management: To create, maintain, and administer your player account, including processing deposits and withdrawals and managing your account settings.
• Identity & Age Verification: To verify that you are who you say you are and that you meet the 21+ age requirement before we allow real-money betting activity.
• Transaction Processing: To process deposits through bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks, and to execute withdrawal requests in Bangladeshi Taka (BDT).
• Responsible Gaming: To monitor your gaming activity for signs of problem gambling, to give effect to any responsible gaming tools you activate (such as deposit limits or self-exclusion), and to contact you proactively where our monitoring identifies concern.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover, and other prohibited conduct.
• Customer Support: To respond to your queries, resolve complaints, and maintain records of our communications for quality assurance purposes.
• Legal Compliance: To fulfil legal obligations including anti-money laundering (AML) checks, record-keeping requirements, and responding to lawful requests from competent authorities.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the performance, design, and content of the kxk8 platform.
• Marketing Communications: Where you have provided explicit consent, to send you promotional offers, bonus notifications, and platform updates via your registered email address or mobile number. You may withdraw this consent at any time by contacting [email protected].

Legal Basis for Processing

kxk8 processes your personal data on the following legal grounds:

• Contractual Necessity: The majority of our data processing is necessary to perform the contract between you and kxk8 — that is, to operate your account, process your transactions, and deliver the betting and gaming services you have signed up for.
• Legal Obligation: Certain processing activities — including KYC identity checks, AML transaction monitoring, and record retention — are required by applicable law and cannot be opted out of.
• Legitimate Interests: We process technical and device data for fraud prevention, platform security, and service improvement on the basis of our legitimate interests as a platform operator, provided those interests do not override your rights and freedoms.
• Consent: Where we process your data for optional purposes (such as direct marketing), we do so only with your explicit, freely given consent, which you may withdraw at any time.

Data Sharing

5.1 What We Do Not Do

kxk8 does not sell, rent, lease, or otherwise commercially transfer your personal data to third-party marketing companies, data brokers, or advertising networks. Full stop.

5.2 Service Providers

We share personal data with carefully selected third-party service providers who assist us in operating the kxk8 platform. These include our payment processing partners (such as bKash, Nagad, Rocket, Upay, and card networks), identity verification service providers, cloud hosting and infrastructure partners, fraud detection and security vendors, and customer support platform providers. All service providers are contractually bound to process your data solely on kxk8's instructions and to implement appropriate technical and organisational security measures.

5.3 Game Providers

When you play games supplied by third-party Game Providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi), the Game Provider's systems process the data necessary to deliver gameplay (including your session data and game results). Each Game Provider operates under its own privacy standards and regulatory certifications. kxk8 does not share your account registration data with Game Providers beyond what is technically necessary for game delivery.

5.4 Legal Disclosure

kxk8 may disclose your personal data to law enforcement, regulatory authorities, or courts where we are legally required to do so, or where disclosure is necessary to prevent serious harm or to protect the rights and safety of kxk8, its players, or the public.

Data Retention

kxk8 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. Our general retention guidelines are as follows:

• Active Account Data: Retained for the full duration of your account being open and active on the kxk8 platform.
• Post-Closure Data: Following account closure, we retain your account records, KYC documents, transaction history, and gaming activity logs for a minimum of five (5) years to comply with anti-money laundering record-keeping obligations and to enable dispute resolution.
• Marketing Consent Records: Retained for as long as your consent remains active, plus a reasonable period thereafter to demonstrate compliance.
• Support Communications: Retained for a minimum of two (2) years from the date of the final communication in any given support thread.
• Technical Logs: IP address and device access logs are retained for a maximum of twelve (12) months, unless a specific investigation requires extended retention.

When data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with any individual player.

Data Security

kxk8 implements a multi-layered approach to data security. Our technical measures include:

• TLS/SSL encryption for all data in transit between your browser or device and our servers.
• AES-256 encryption for sensitive data stored at rest, including identity documents and payment method identifiers.
• Role-based access control ensuring that staff can only access the data strictly necessary for their job function.
• Regular third-party security audits and penetration testing of our platform infrastructure.
• Intrusion detection systems and real-time monitoring for anomalous access patterns or suspicious activity.
• Secure password hashing using industry-standard algorithms — we never store your password in plain text.

While no digital platform can guarantee absolute security against all threats, kxk8 is committed to maintaining standards that are appropriate to the risk level associated with the personal data we hold. In the event of a security breach that poses a material risk to your personal data, we will notify affected players via their registered email address without undue delay and will take immediate containment action.

Cookies & Tracking Technologies

8.1 What Are Cookies

Cookies are small text files placed on your device by a website you visit. kxk8 uses cookies and similar tracking technologies (such as web beacons and local storage) to operate certain essential platform functions and to improve your experience.

8.2 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during an active session. These cannot be disabled without breaking core platform functionality.
• Performance & Analytics Cookies: Used to collect anonymised data about how players use the platform — such as which pages are visited most frequently — to help us improve the user experience. No personally identifiable information is transmitted via these cookies.
• Functional Cookies: Allow the platform to remember your preferences, such as language and display settings, to provide a more personalised experience.
• Security Cookies: Used to detect and prevent fraudulent or suspicious activity, including cross-site request forgery (CSRF) protection tokens.

8.3 Managing Cookies

You can configure your browser to refuse or delete cookies at any time. However, disabling strictly necessary cookies will prevent you from logging in and using core kxk8 platform features. Instructions for managing cookies in major browsers (Chrome, Firefox, Safari, Edge) are available via those browsers' help documentation.

Your Rights

As a player on the kxk8 platform, you hold the following rights in relation to your personal data:

• Right of Access: You may request a copy of all personal data kxk8 holds about you. We will provide this within 30 calendar days of receiving a verified request.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that it be corrected. You can update most account information directly via your account settings, or by contacting support.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Note that we are required by law to retain certain records for a minimum of five years following account closure — erasure requests cannot override this obligation.
• Right to Restriction: You may request that we restrict processing of your data — for example, while we investigate a rectification request — without deleting it.
• Right to Portability: Where our processing is based on your consent or on contractual necessity, you may request a copy of your data in a structured, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including direct marketing. If you object to marketing, we will cease sending you promotional communications immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and fulfil it within 30 calendar days. We may ask you to verify your identity before processing a rights request to prevent unauthorised disclosure.

Minors & Age Restriction

The kxk8 platform is strictly for adults aged 21 and above. We do not knowingly collect or process personal data from individuals under the age of 21. If you are under 21, you must not register on or use the kxk8 platform.

In the event that kxk8 becomes aware that personal data has been collected from a person under the age of 21, we will immediately close the associated account, void all bets, return any deposited real-money funds to the originating payment source, and delete the minor's personal data from our systems as quickly as our legal obligations permit. If you believe a minor has registered on kxk8, please notify us immediately at [email protected].

International Data Transfers

Some of kxk8's service providers — including cloud infrastructure partners and Game Providers — may process data in data centres located outside Bangladesh. Where such transfers occur, kxk8 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to or higher than that described in this Policy. These safeguards include contractual data processing agreements incorporating standard data protection clauses and technical security requirements.

kxk8 does not authorise international transfers of player data for marketing, profiling, or commercial data-trading purposes. Any international transfer is limited to what is technically necessary to deliver the kxk8 service (for example, routing game data to a Game Provider's servers) or to fulfil legal obligations.

Third-Party Services

The kxk8 platform may contain references to payment partners (such as bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank) and Game Providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi). Each of these third parties operates under its own privacy policy and data governance framework. kxk8 is not responsible for the privacy practices of these third parties in relation to the data they independently collect or process as part of their own services.

We recommend reviewing the privacy policy of any payment provider you use to deposit or withdraw funds on kxk8, as those providers have their own data handling obligations applicable to the mobile banking and card services they operate.

Changes to This Policy

kxk8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When material changes are made, we will notify active players via a prominent notice on the kxk8 platform or via email to your registered address, no fewer than 7 calendar days before the changes take effect.

The "Updated" date at the top of this Policy will be revised whenever changes are made. Your continued use of the kxk8 platform after the effective date of any revision constitutes your acceptance of the updated Policy. If you do not agree to the revised Policy, please contact support to close your account before the changes take effect.

Contact & Data Requests

For any question, concern, or formal request relating to this Privacy Policy or the personal data kxk8 holds about you, please contact our support team using the details below:

• Email: [email protected] — use subject line "Privacy Policy Query" or "Data Rights Request" as appropriate
• Live Chat: Available 24/7 directly on the kxk8 platform
• Response Time: Within 4 hours for general queries (email); within 30 calendar days for formal data rights requests

We are committed to resolving all privacy-related queries fairly and transparently. If you are not satisfied with our response to a formal data rights request, you have the right to escalate the matter through applicable legal channels in Bangladesh.