k8xx Privacy Policy — How We Protect Your Personal Data

1 Introduction

k8xx is committed to safeguarding the privacy and personal data of every player who uses our online casino and sports betting platform. We understand that when you register with k8xx and deposit real money, you are placing significant trust in us — not only to provide a fair and enjoyable gaming experience, but also to handle the personal information you share with us responsibly and transparently.

This Policy applies to all personal data collected through the k8xx website, mobile browser interface, customer support channels, and any other touchpoints through which you interact with k8xx. It covers data collected from players based in Bangladesh and from any other jurisdiction where k8xx operates.

If you have questions or concerns about how k8xx processes your personal data, please contact our Data Support team at [email protected] (plain text — not a clickable link). We will acknowledge all privacy-related inquiries within 5 business days.

2 Personal Data We Collect

The categories of personal data we collect depend on how you interact with k8xx. The table below summarises the main data categories and examples of specific data points within each category.

3 How We Collect Your Data

k8xx collects personal data through the following means:

3.1 Directly From You

The majority of personal data k8xx holds is provided directly by you during the account registration process, during identity verification, when you make deposits or request withdrawals, when you contact our support team, or when you voluntarily update your account preferences. You are under no obligation to provide personal data to k8xx; however, failure to provide certain required information (such as identity verification documents) will prevent us from completing account registration or processing withdrawal requests.

3.2 Automatically During Platform Use

When you access and use the k8xx platform, certain technical and usage data is collected automatically. This includes your IP address, device identifiers, browser fingerprint, and behavioural data such as which games you access and how long your sessions last. This data is collected primarily for security monitoring, fraud prevention, and improving the k8xx platform experience.

3.3 From Third Parties

In certain circumstances, k8xx may receive personal data about you from third parties, including:

• Payment providers such as bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard — to confirm transaction status and prevent fraud.
• Identity verification service providers — to cross-check the accuracy of KYC documents you submit.
• Fraud detection and anti-money-laundering (AML) screening services — to meet our regulatory obligations.
• Analytics providers — to understand aggregated (non-personal) usage patterns on the k8xx platform.

4 How We Use Your Personal Data

k8xx uses your personal data for the following purposes:

• Account Management: Creating and maintaining your k8xx player account, processing login authentication, and managing account security.
• Identity Verification: Conducting KYC checks to confirm your identity, age (21+), and residential information before processing your first withdrawal and at any subsequent point required.
• Payment Processing: Processing deposits and withdrawal requests via bKash, Nagad, Rocket, Upay, bank transfer, Visa, and Mastercard, and maintaining accurate financial records of all transactions.
• Fraud Prevention & Security: Monitoring account activity for signs of fraud, unauthorised access, money laundering, match-fixing, or other prohibited conduct as defined in our Terms & Conditions.
• Responsible Gaming: Monitoring betting patterns and session behaviour to identify signs of problem gambling and to administer self-exclusion, deposit limits, or cooling-off periods where requested or required.
• Customer Support: Responding to your queries, complaints, and requests submitted via live chat, email, or WhatsApp.
• Legal & Regulatory Compliance: Meeting obligations under applicable financial crime, consumer protection, and data protection laws.
• Marketing (with consent only): Sending you information about k8xx promotions, bonuses, tournaments, and new games where you have given explicit consent to receive such communications. You may withdraw marketing consent at any time via your account settings or by contacting support.
• Platform Improvement: Analysing aggregated usage data to improve the k8xx platform, identify technical issues, and optimise the player experience.

5 Legal Basis for Processing

k8xx processes your personal data only where a lawful basis exists. The primary lawful bases we rely on are:

• Contract Performance: Processing necessary to provide you with the k8xx service as described in the Terms & Conditions — including account creation, deposits, withdrawals, and bet settlement.
• Legal Obligation: Processing required to comply with applicable legal requirements, including anti-money-laundering (AML) obligations, KYC verification, and financial record-keeping.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and improving the k8xx service — provided these interests do not override your fundamental privacy rights.
• Consent: Processing for optional marketing communications, optional analytics, and optional personalisation features — where you have given us clear, informed, and freely given consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Sharing Your Personal Data

k8xx does not sell, rent, or trade your personal data. We share personal data only in the following limited circumstances and with the following categories of recipients:

6.1 Service Providers

k8xx engages carefully selected third-party service providers to assist in delivering specific operational functions, including payment processing (bKash, Nagad, Rocket, Upay, Visa, Mastercard), identity verification, fraud detection, cloud hosting, and customer support infrastructure. These providers are permitted to process your data only on k8xx's documented instructions and are contractually prohibited from using it for any independent purpose.

6.2 Game Providers

To facilitate your participation in games hosted by third-party studios (including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi), limited technical data (such as a pseudonymous player token) is shared with those providers to manage your game session. These providers do not receive your full identity data.

6.3 Legal & Regulatory Authorities

k8xx may disclose personal data to law enforcement agencies, courts, regulators, or other government authorities where required to do so by applicable law, a valid legal order, or to protect the safety of the public or k8xx's platform.

6.4 Business Transfers

In the event of a merger, acquisition, asset sale, or restructuring of k8xx, personal data held by k8xx may be transferred to the relevant successor entity. Players will be notified in advance of any such transfer that materially affects this Policy.

7 Cookies & Tracking Technologies

k8xx uses cookies and similar tracking technologies (such as pixel tags and local storage) to operate and improve the platform. Cookies are small text files stored on your device when you visit the k8xx website. The categories of cookies we use are:

• Strictly Necessary Cookies: Essential for logging in, maintaining your session, and keeping your account secure. These cannot be disabled without preventing the platform from functioning.
• Functional Cookies: Remember your preferences such as language setting and responsible gaming limits to provide a consistent experience across sessions.
• Analytics Cookies: Collect aggregated, anonymised data about how players navigate the k8xx platform to help us identify technical issues and improve usability. Used with your consent.
• Marketing Cookies: Used to deliver relevant k8xx promotional content where you have consented to marketing communications. k8xx does not use third-party advertising network cookies.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use core platform features including login and account management.

8 Data Retention

k8xx retains personal data for no longer than is necessary for the purpose for which it was collected, subject to any longer retention periods required by applicable law. The general retention framework applied by k8xx is as follows:

• Active Account Data: Retained for the duration of your account relationship with k8xx plus a post-closure period of up to 7 years to meet financial record-keeping and anti-money-laundering obligations.
• Identity Verification Documents (KYC): Retained for a minimum of 5 years from the date of verification, or longer if required by applicable law.
• Transaction Records: Retained for a minimum of 7 years from the date of each transaction.
• Support Communications: Retained for 3 years from the date of the most recent interaction in a support thread, unless the content is relevant to an ongoing dispute or legal matter.
• Marketing Consent Records: Retained for as long as the consent is active, plus 3 years following withdrawal of consent as evidence of our lawful basis.
• Technical & Log Data: Retained for up to 12 months, except where specific log entries are flagged as relevant to a fraud investigation or legal matter.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

9 Data Security

k8xx implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• 256-bit SSL/TLS Encryption: All data in transit between your device and k8xx servers is encrypted using current-generation TLS protocols.
• Encryption at Rest: Sensitive personal data including financial records and identity documents is encrypted in storage using AES-256 encryption.
• Access Controls: Personal data is accessible only to k8xx personnel and authorised service providers with a documented operational need. All access is logged and subject to periodic audit.
• Intrusion Detection: k8xx operates continuous monitoring systems to detect and respond to anomalous network activity and potential data security incidents.
• Data Breach Response: In the event of a personal data breach that poses a risk to your rights, k8xx will notify affected players without undue delay and will take immediate steps to contain and remediate the breach.

10 Your Data Rights

As a k8xx player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected]. We will respond within 30 calendar days of receiving a valid request.

• Right of Access: You may request a copy of all personal data k8xx holds about you, together with information on how it is used and with whom it is shared.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held by k8xx.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose collected, where you have withdrawn consent, or where processing was unlawful — subject to k8xx's legal obligation to retain certain records.
• Right to Restriction: You may request that k8xx restrict processing of your personal data in certain circumstances, such as while an accuracy dispute is pending.
• Right to Data Portability: You may request a structured, machine-readable copy of personal data you have provided to k8xx, where processing is based on consent or contract.
• Right to Object: You may object to processing based on legitimate interests, including profiling for responsible gaming purposes, where you believe your individual circumstances override k8xx's interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.

Please note that certain rights are subject to limitations where k8xx has overriding legal obligations to retain or process your data — for example, financial record-keeping requirements cannot be overridden by an erasure request.

11 Children and Minors

The k8xx platform is strictly for adults aged 21 and above. k8xx does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory part of the k8xx account registration and KYC process.

If k8xx becomes aware that personal data has been collected from a person under the age of 21, all such data will be permanently deleted without delay, the account will be closed, and any deposits will be returned to the originating payment method where technically possible. If you have reason to believe that a minor has registered on k8xx, please contact our support team immediately.

12 Third-Party Links

The k8xx platform may contain references to the game studios and payment providers whose services form part of the k8xx offering. This Privacy Policy applies exclusively to personal data collected and processed by k8xx. k8xx is not responsible for the privacy practices of third-party game studios, payment providers, or any other external services. We recommend reviewing the privacy policies of any third-party services you interact with independently.

13 Updates to This Privacy Policy

k8xx may update this Privacy Policy periodically to reflect changes in our data practices, operational requirements, or applicable law. When material changes are made, k8xx will notify registered players via the email address on file and/or by displaying a prominent notice on the platform. The "Last Updated" date at the top of this document will be revised to reflect the date of the most recent amendment.

Your continued use of the k8xx platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes. If you disagree with any material change, you should cease using the platform and may close your account in accordance with the Terms & Conditions.

14 Contact Us

For all privacy-related queries, data subject access requests, or concerns about how k8xx processes your personal data, please contact our support team through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the k8xx platform
• WhatsApp: Available 24/7 — contact details provided after account registration

Our support team is available 24 hours a day, 7 days a week, in both English and Bengali. Privacy-related requests are handled with strict confidentiality and are escalated to our data protection function for review.