kkeb Privacy Policy

1. Introduction

1.1 kkeb ("we", "us", "our") operates the online betting and casino platform accessible at https://kkeb.io and all associated subdomains, mobile interfaces, and progressive web applications (collectively, the "Platform"). We are committed to protecting the personal data of all individuals who interact with the Platform, including registered players, prospective players who browse without registering, and any person who contacts our support team.

1.2 This Privacy Policy describes in plain and formal English: (a) what personal data we collect and from which sources; (b) the purposes for which we process that data; (c) the legal bases on which we rely; (d) how long we retain data; (e) with whom we share data; and (f) the rights you hold in relation to your personal data and how to exercise them.

1.3 This Privacy Policy applies to all players, including those located in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and across Bangladesh generally. By registering an Account or otherwise using the Platform, you acknowledge that you have read and understood this policy.

1.4 This Privacy Policy should be read alongside the kkeb Terms & Conditions and the Responsible Gaming Policy, both of which are incorporated herein by reference. In the event of any conflict between this policy and those documents on a data-privacy matter, this Privacy Policy governs.

2. Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that identifies or could reasonably identify a living individual, either alone or in combination with other information held by kkeb.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, deletion, and anonymisation.
• "Account" means the registered player account created by you on the Platform.
• "KYC Data" means identity and verification documents submitted to kkeb as part of the Know Your Customer process, including national identity cards, passports, and proof-of-address documents.
• "Device Data" means technical information automatically collected from the device and browser you use to access the Platform, including IP address, device type, operating system version, browser type, and session timestamps.
• "Transaction Data" means records of all financial activity on your Account, including deposits, withdrawals, bets placed, wins, losses, and bonus activity.
• "Behavioural Data" means information about how you interact with the Platform, including pages visited, games played, duration of play sessions, click-path data, and search queries within the Platform.
• "Marketing Communications" means promotional emails, SMS messages, push notifications, and in-platform messages sent to you with your consent.

3. Personal Data We Collect

3.1 Registration Data. When you create an Account, we collect your full name, date of birth, email address, mobile phone number, and the username and password you select. This information is required to establish and manage your Account and to verify your eligibility to use the Platform.

3.2 KYC and Verification Data. To process withdrawals and to comply with anti-money laundering obligations, we require you to submit identity documentation. This may include a copy of your National Identity Card (NID), passport, or other government-issued photo identification, together with documentation confirming your payment method ownership (for example, a screenshot of your bKash or Nagad account registered in your name).

3.3 Financial and Transaction Data. We record all deposits and withdrawals you make through the Platform, including the payment method used (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, Mastercard), the BDT amount, the timestamp, and the transaction reference. We do not store full payment card numbers; card data is tokenised by our payment processor.

3.4 Betting and Gaming Activity. We maintain detailed records of all bets placed, games played, stakes, outcomes, winnings, and bonus usage associated with your Account. These records are necessary for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance.

3.5 Device and Technical Data. We automatically collect Device Data when you access the Platform. This includes your IP address (used for geolocation and fraud prevention), browser type and version, operating system, device identifiers, session start and end times, and referral URL.

3.6 Communications Data. We retain records of all communications between you and the kkeb support team, including live chat transcripts, email correspondence, and any documents or screenshots you submit in connection with a support request or dispute.

3.7 Behavioural and Analytics Data. We use first-party analytics tools to understand how players navigate and use the Platform. This includes pages viewed, features used, time spent per session, and game-type preferences. This data is used in aggregate to improve the Platform and, where you have consented, to personalise your experience.

4. How We Use Your Personal Data

4.1 The table below summarises the primary purposes for which kkeb processes your Personal Data:

4.2 We do not use your Personal Data for automated decision-making that produces legal or similarly significant effects without human oversight, except where such automated processing is necessary to prevent fraud or to enforce account restrictions in real time, in which case you have the right to request human review of any such decision.

5. Legal Bases for Processing

5.1 Contract Performance. The majority of data processing at kkeb is necessary for the performance of the contract between you and kkeb — specifically, the provision of betting, casino, and payment services as described in the Terms & Conditions. Without this processing, we cannot operate your Account or deliver the services you have requested.

5.2 Legal Obligation. Certain processing activities — including KYC identity verification, transaction record-keeping, and reporting to relevant authorities — are required by law. kkeb cannot waive or modify these obligations regardless of any contrary preference you express.

5.3 Legitimate Interest. We process some categories of data on the basis of our legitimate interests as a business, including fraud detection, platform security, analytics, and service improvement. In each case, we have assessed that our legitimate interest is not outweighed by your privacy rights. You may object to processing based on legitimate interest by contacting us as described in Section 15.

5.4 Consent. Where we send you Marketing Communications or use your data for personalisation beyond what is required to deliver the core service, we do so only on the basis of your explicit, freely given, and revocable consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6. Cookies and Tracking Technologies

6.1 kkeb uses cookies and similar tracking technologies on the Platform. Cookies are small text files placed on your device that enable the Platform to function correctly, remember your preferences, and analyse usage patterns.

6.2 The categories of cookies we deploy are as follows:

• Strictly Necessary Cookies: Required for the Platform to function. They include session management cookies that keep you logged in, security tokens, and load-balancing cookies. These cannot be disabled without impairing core Platform functionality.
• Functional Cookies: Used to remember your preferences such as language settings, display options, and game lobby filters. Disabling these cookies will not break the Platform but may reduce your experience quality.
• Analytics Cookies: Used to collect aggregated, anonymised data about how visitors use the Platform. We use this information to identify pages and features that need improvement. These cookies require your consent and may be declined.
• Marketing and Personalisation Cookies: Used to deliver personalised promotions and track the effectiveness of our marketing activity. These require your explicit consent and can be disabled at any time through your account settings.

6.3 You may manage your cookie preferences at any time through your device's browser settings or through the cookie preference centre within the Platform. Please note that disabling strictly necessary cookies will prevent you from logging in to your Account.

7. Data Sharing and Disclosure

7.1 kkeb does not sell, rent, or otherwise commercially transfer your Personal Data to third parties. Data sharing is limited to the following categories of recipient, each of which is bound by confidentiality obligations and data processing agreements with kkeb:

• Payment Service Providers: Transaction Data is shared with payment processors (such as the operators of bKash, Nagad, Rocket, Upay, and card payment gateways) strictly as necessary to execute the financial transaction you have requested.
• Identity Verification Providers: KYC Data may be shared with third-party identity verification services that assist kkeb in confirming the authenticity of documents submitted during the KYC process.
• Game Technology Providers: Gameplay data is shared with licensed game providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) to the extent necessary to deliver the game and to settle outcomes. These providers operate under their own privacy frameworks as independent data controllers for their game engines.
• IT and Infrastructure Providers: Personal Data is processed by cloud hosting, database, and cybersecurity providers acting as data processors under kkeb's instruction.
• Fraud Prevention and Risk Management Services: Device Data and Transaction Data may be shared with fraud detection partners to identify and prevent suspicious activity.
• Legal and Regulatory Authorities: We will disclose Personal Data to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so, or where disclosure is necessary to protect the rights, safety, or property of kkeb, its players, or the public.

7.2 In the event of a merger, acquisition, or sale of all or a material portion of kkeb's business assets, your Personal Data may be transferred to the successor entity. You will be notified of any such transfer and of any material changes to data processing practices that result from it, with a minimum of 30 days' advance notice before the transfer takes effect.

8. International Data Transfers

8.1 Some of kkeb's third-party service providers are located outside Bangladesh. Where Personal Data is transferred internationally, kkeb takes reasonable steps to ensure that equivalent protections apply to the data in the destination jurisdiction, including the use of contractual data transfer clauses with the receiving party.

8.2 Game providers such as Pragmatic Play, Evolution Gaming, and Microgaming operate infrastructure in multiple jurisdictions. By consenting to these Terms and this Privacy Policy, you acknowledge that gameplay data may be processed in those jurisdictions as part of the delivery of those games.

8.3 kkeb does not transfer Personal Data to jurisdictions that lack any form of data protection framework without implementing appropriate safeguards. Where you have concerns about a specific international transfer, you may request details by contacting [email protected].

9. Data Retention

9.1 kkeb retains Personal Data for no longer than is necessary for the purposes for which it was collected, subject to any legal retention obligations that require longer retention periods. The following indicative retention periods apply:

9.2 At the end of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual. Anonymised aggregate data may be retained beyond these periods for statistical purposes.

10. Your Privacy Rights

10.1 You hold the following rights in relation to your Personal Data held by kkeb. To exercise any of these rights, contact us as described in Section 15. We will acknowledge your request within 48 hours and provide a substantive response within 30 calendar days, or within a further 60 days where the request is complex, with prior notification of the extension:

• Right of Access: You may request a copy of all Personal Data we hold about you, together with information about the purposes of processing, the categories of data, the recipients, and the retention period.
• Right to Rectification: If any Personal Data we hold is inaccurate or incomplete, you have the right to request its correction or completion.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where processing is unlawful. This right is subject to overriding legal retention obligations — for example, we cannot delete transaction records that we are legally required to retain for a specified period.
• Right to Restriction of Processing: You may request that we restrict processing of your Personal Data while accuracy is contested, while an objection is assessed, or where processing is unlawful but you prefer restriction over deletion.
• Right to Data Portability: Where processing is based on your consent or on contract performance and is carried out by automated means, you may request a machine-readable copy of your Personal Data for transfer to another service provider.
• Right to Object: You may object at any time to processing based on legitimate interest (including profiling for marketing purposes). We will cease such processing unless we demonstrate compelling legitimate grounds that override your rights.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

11. Children's Privacy

11.1 The kkeb Platform is intended exclusively for individuals aged 21 and above. We do not knowingly collect Personal Data from any person under the age of 21. If you are under 21, you must not create an Account or use the Platform.

11.2 If kkeb becomes aware that it has collected Personal Data from an individual who is under 21, it will immediately close the Account, delete all associated Personal Data that is not subject to a legal retention obligation, and void any bets or winnings accrued through the Account.

11.3 If you are a parent or guardian and believe that your child has registered an Account with kkeb without your knowledge, please contact [email protected] immediately so that we can investigate and act without delay.

12. Security Measures

12.1 kkeb implements a layered security architecture designed to protect Personal Data against unauthorised access, accidental loss, destruction, alteration, and unlawful disclosure. Key technical and organisational measures include:

• TLS 1.3 encryption for all data in transit between your device and kkeb servers;
• AES-256 encryption for all Personal Data stored in our databases;
• Role-based access controls ensuring that kkeb employees can access Personal Data only to the extent required by their specific job function;
• Multi-factor authentication requirements for all kkeb staff who access personal data systems;
• Regular third-party penetration testing of the Platform's infrastructure;
• Continuous monitoring for suspicious access patterns, injection attacks, and anomalous data exfiltration behaviour;
• Formal incident response procedures for personal data breaches, including regulatory notification obligations.

12.2 In the event of a data breach that is likely to result in a risk to your rights and freedoms, kkeb will notify affected players without undue delay after becoming aware of the breach, providing details of the nature of the breach, the categories and approximate number of records affected, the likely consequences, and the measures taken or proposed to address the breach.

12.3 While kkeb implements robust technical controls, no internet-based service can guarantee absolute security. You are responsible for maintaining the security of your own device, Account credentials, and internet connection. Refer to Section 5 of the Terms & Conditions for your obligations in respect of Account security.

13. Third-Party Links and Embedded Content

13.1 The kkeb Platform may contain links to third-party websites or embed third-party game content from licensed game providers. This Privacy Policy applies solely to kkeb's own data processing. It does not govern the data practices of third-party websites or the independent data processing activities of game providers such as Pragmatic Play or Evolution Gaming.

13.2 kkeb is not responsible for the privacy practices or content of any third-party website accessible via a link from the Platform. You are encouraged to review the privacy policy of any third-party site you visit.

13.3 Where kkeb embeds third-party game content, the game provider operates as an independent data controller in respect of gameplay data processed within its own game engine. kkeb will make available, on request, the names of relevant game providers so that you may consult their privacy policies directly.

14. Amendments to This Policy

14.1 kkeb reserves the right to update this Privacy Policy at any time. The updated version will be published at kkeb.io/privacy-policy with the revised effective date clearly displayed at the top of the document.

14.2 Where an amendment is material — meaning it involves a new purpose of processing, a new category of data collection, a change to your rights, or a new category of data recipient — kkeb will notify you via the email address registered to your Account at least 14 days before the change takes effect.

14.3 Where an amendment is non-material — such as a correction of a typographical error, a clarification that does not alter substance, or an update to contact details — the amended policy will be published without advance individual notification.

14.4 Your continued use of the Platform after the effective date of any amendment constitutes your acknowledgement of the revised policy. If you do not accept a material amendment, you must cease using the Platform and may request closure of your Account in accordance with the Terms & Conditions.

15. Contact Us

15.1 For all privacy-related enquiries — including data access requests, erasure requests, objections to processing, consent withdrawals, and data breach reports — please contact the kkeb privacy team through one of the following channels:

• Email: [email protected] (plain text — not a clickable link) — use the subject line "Privacy Request"
• Live Chat: Available 24/7 within the Platform — select "Privacy & Data" from the support topic menu
• WhatsApp: +880 1800 000000 (plain text — not a clickable link)

15.2 To help us process your request efficiently, please include: your full name, the email address registered to your Account, a clear description of your request, and — for identity verification purposes — a reference to the payment method associated with your Account. We will never ask for your Account password.

15.3 If you are dissatisfied with kkeb's response to your privacy request, you have the right to escalate your concern to the relevant data protection authority in your jurisdiction.