Privacy Policy for kp66

1 Introduction

kp66 ("we", "us", "our") operates the online casino and sports betting platform accessible at https://kp66.io (the "Platform"). We are committed to protecting the privacy and personal data of all users ("you", "your") who access or use our Services, particularly players based in Bangladesh.

This Privacy Policy explains what personal data kp66 collects, the purposes for which it is used, how it is protected, with whom it may be shared, and the rights you hold as a data subject. It applies to all interactions with the kp66 Platform, including account registration, deposits, gameplay, withdrawals, and customer support communications.

By registering an account or continuing to use the kp66 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the Platform and contact our support team to close your account.

2 Data Controller

For the purposes of applicable data protection law, kp66 is the data controller responsible for the personal data collected through the Platform. This means that kp66 determines the purposes and means by which your personal data is processed.

If you have any questions, concerns, or requests relating to how kp66 processes your personal data, you may contact our designated data protection point of contact using the details set out in Section 15 of this Policy.

3 Personal Data We Collect

kp66 collects personal data in several categories depending on how you interact with the Platform. The table below summarises the categories of data we collect and the primary purpose of each category:

kp66 does not collect sensitive special-category personal data such as racial or ethnic origin, religious beliefs, political opinions, health data, or biometric data, unless expressly required for KYC compliance purposes (e.g., a photograph on a government-issued ID).

4 How We Collect Your Data

kp66 collects personal data through the following channels and mechanisms:

• Direct registration: When you create a kp66 account, you provide identity, contact, and payment data directly through our registration form.
• KYC submission: When you submit identity documents in response to a KYC verification request, we collect the data contained within those documents.
• Deposits and withdrawals: When you initiate a financial transaction via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, transaction data is passed to kp66's payment processing systems.
• Platform usage: As you browse and interact with the kp66 Platform, our systems automatically record technical and usage data, including IP address, device fingerprint, session timestamps, pages visited, and games played.
• Cookies and similar technologies: kp66 uses session cookies, persistent cookies, and similar browser-based storage mechanisms to recognise returning users, maintain login sessions, and collect anonymised analytics. See Section 8 for full details.
• Customer support interactions: When you contact kp66 via live chat or email, we retain records of those communications including any personal data you provide in the course of seeking assistance.
• Promotions and competitions: If you participate in a kp66 promotion (e.g., a BPL season bonus, Eid cashback offer, or Pohela Boishakh tournament), we may collect additional data relevant to that promotion.
• Third-party data providers: kp66 may receive supplementary identity or fraud-risk data from third-party KYC verification service providers, where this is necessary to complete verification of your account.

5 How We Use Your Personal Data

kp66 uses personal data for the following specific and legitimate purposes:

• Account management: To create, maintain, and administer your kp66 account, including processing registration, login authentication, and account settings changes.
• Service delivery: To enable you to place bets, play casino games, access live dealer tables, participate in slots, cricket betting, and other Services available on the Platform.
• Identity and age verification: To verify that you are who you claim to be and that you are aged 21 or above, in compliance with our responsible gaming obligations.
• Payment processing: To process deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate financial records of all transactions.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible gaming: To monitor gameplay patterns and identify users who may be showing signs of problem gambling, enabling our responsible gaming team to reach out with appropriate support and intervention tools.
• Customer support: To respond to your enquiries, resolve disputes, and provide technical assistance in a timely and effective manner.
• Legal compliance: To fulfil kp66's obligations under applicable laws, including record-keeping requirements, responses to lawful data access requests from authorities, and enforcement of our Terms & Conditions.
• Marketing communications: Where you have given your consent, to send you promotional offers, bonus notifications, tournament invitations, and seasonal campaigns (e.g., BPL season promotions, Eid offers). You may opt out at any time.
• Platform improvement: To analyse anonymised usage data in aggregate in order to improve the kp66 Platform, optimise user experience, and develop new features.

kp66 will not use your personal data for any purpose that is incompatible with the purposes listed above without first providing you with notice and, where required, obtaining your additional consent.

6 Legal Basis for Processing

kp66 processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:

• Contractual necessity: Processing required to perform the contract between you and kp66 — i.e., to operate your account and deliver the Services you have requested.
• Legal obligation: Processing necessary to comply with applicable laws, including anti-money laundering obligations, age verification requirements, and responses to lawful authority requests.
• Legitimate interests: Processing carried out for kp66's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and service improvement — where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing carried out on the basis of your freely given, specific, and informed consent — primarily for marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

7 Data Sharing and Disclosure

kp66 does not sell, rent, or otherwise commercially transfer your personal data to third parties. We may, however, share your data with the following categories of recipients where necessary for the purposes described in this Policy:

• Payment service providers: bKash, Nagad, Rocket, Upay, Visa, and Mastercard — solely to the extent required to process your financial transactions. Each of these providers operates under their own privacy policies and data protection frameworks.
• KYC and identity verification providers: Third-party identity verification services engaged by kp66 to assist with document authentication and fraud screening. These providers are bound by strict data processing agreements and may not use your data for any purpose other than the specific verification task.
• Game software providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data required to deliver their game content on the kp66 Platform. These providers do not receive your full identity data.
• IT and platform infrastructure providers: Cloud hosting, cybersecurity, and technical support vendors who process data on behalf of kp66 under data processing agreements that prohibit independent use of your data.
• Legal and regulatory authorities: Where required by law, court order, or legitimate regulatory request, kp66 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities.
• Professional advisers: Lawyers, auditors, and accountants acting in their professional capacity, subject to professional confidentiality obligations.

In all cases where kp66 shares data with third-party processors, we require those parties to maintain appropriate technical and organisational security measures consistent with this Policy and to use the shared data solely for the specified purpose.

8 Cookies and Tracking Technologies

The kp66 Platform uses cookies and similar browser-based technologies to deliver a functional, personalised, and secure user experience. A cookie is a small text file stored on your device by your web browser when you visit a website. kp66 uses the following categories of cookies:

• Strictly necessary cookies: These cookies are essential for the Platform to function correctly. They maintain your login session, remember your language preference, and enable core security features such as CSRF protection. These cookies cannot be disabled without preventing you from using the Platform.
• Functional cookies: These cookies remember your preferences — such as your preferred game category or display settings — so that you do not need to re-enter them on each visit. They enhance your overall experience without tracking your behaviour across other websites.
• Analytics cookies: kp66 uses anonymised, first-party analytics cookies to understand how users interact with the Platform — for example, which pages are most visited, how long users spend in each section, and where users encounter errors. This data is aggregated and cannot be used to identify individual users.

kp66 does not use third-party advertising cookies, retargeting cookies, or cross-site tracking technologies. We do not allow third-party advertising networks to place cookies on the kp66 Platform.

You may manage or disable cookies through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in and using the kp66 Platform. Instructions for managing cookies are available in your browser's help documentation.

9 Data Retention

kp66 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The table below provides indicative retention periods for the main categories of personal data:

After the applicable retention period has elapsed, kp66 will securely delete or anonymise your personal data so that it can no longer be associated with you as an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

10 Data Security

kp66 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, destruction, or accidental loss. Our key security practices include:

• Encryption in transit: All data exchanged between your browser or mobile device and the kp66 Platform is encrypted using 256-bit TLS (Transport Layer Security). Any attempt to intercept this data in transit will result in an unreadable encrypted stream.
• Encryption at rest: Sensitive personal data — including identity documents, financial records, and password hashes — is stored in encrypted form on kp66's secure servers. Passwords are hashed using a strong one-way cryptographic algorithm and are never stored in plaintext.
• Access controls: Access to personal data within kp66 is restricted to staff members and contractors who have a legitimate need to process that data in the course of their duties. Access is granted on a principle of least privilege and is regularly reviewed.
• Intrusion detection and monitoring: kp66's infrastructure is protected by automated intrusion detection systems and is subject to continuous security monitoring. Suspicious activity triggers immediate alerts to our security team.
• Regular security assessments: kp66 conducts periodic security audits and vulnerability assessments of its platform infrastructure to identify and remediate potential weaknesses before they can be exploited.
• Staff training: All kp66 staff who handle personal data receive regular training on data protection obligations, information security best practices, and how to recognise and respond to data security incidents.

Despite these measures, no security system is completely impenetrable. In the event of a data security incident that poses a significant risk to your rights and freedoms, kp66 will notify affected users promptly and take all necessary steps to contain and remediate the incident.

11 Your Data Protection Rights

As a data subject, you hold the following rights with respect to the personal data kp66 processes about you. To exercise any of these rights, please contact us using the details in Section 15:

• Right of access: You have the right to request a copy of the personal data kp66 holds about you, along with information about how it is used, the categories of recipients to whom it has been disclosed, and the retention periods that apply.
• Right to rectification: If any of the personal data kp66 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to erasure: In certain circumstances, you have the right to request that kp66 delete the personal data we hold about you. This right is subject to overriding legal obligations that may require us to retain certain data for defined periods (see Section 9).
• Right to restriction of processing: You may request that kp66 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to data portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You have the right to object to processing of your personal data carried out on the basis of kp66's legitimate interests, including processing for direct marketing purposes. An objection to direct marketing will always be honoured immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal.

kp66 will respond to all valid data subject requests within 30 days of receipt. In complex cases or where a large volume of requests is received simultaneously, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reasons for it.

12 Children's Privacy and Underage Protection

The kp66 Platform is strictly intended for adults aged 21 and above. kp66 does not knowingly collect personal data from any individual under the age of 21. If you are under 21 years of age, you must not register an account, use the Services, or provide any personal data to kp66.

If kp66 becomes aware that it has inadvertently collected personal data from a person under the age of 21, we will immediately suspend the account in question, delete the associated personal data, and return any funds held (after completing required verification procedures) in accordance with our minor protection policy.

Parents and guardians who believe that a minor in their care has registered on the kp66 Platform should contact our support team at [email protected] immediately. We take underage gambling extremely seriously and will act promptly on all such reports.

13 Third-Party Links and Services

The kp66 Platform may contain references to third-party game providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) whose game interfaces are embedded within our platform. These providers operate under their own privacy policies, and kp66 is not responsible for the data practices of those providers within their own game environments.

To the extent that any third-party game provider processes personal data about you — for example, anonymised session data passed via our API integration — kp66 ensures through contractual agreements that such data is used only for game delivery purposes and not for independent profiling or marketing by the provider.

kp66 does not include links to external third-party websites on the Platform. If you independently navigate away from the kp66 domain, any personal data you provide to third-party websites is governed entirely by those websites' own privacy policies, and kp66 accepts no responsibility for those practices.

14 Changes to This Privacy Policy

kp66 reserves the right to amend, update, or replace this Privacy Policy at any time. Any changes will take effect immediately upon publication on the Platform at https://kp66.io/privacy-policy. The "Effective Date" at the top of this Policy will be updated to reflect the date of the most recent revision.

For material changes — such as new categories of data being collected, significant changes to how data is shared, or the introduction of new processing purposes — kp66 will endeavour to notify registered users via email to their registered address or via a prominent notice on the Platform prior to the change taking effect.

Your continued use of the kp66 Platform after the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you must cease using the Platform and contact our support team to request account closure and data deletion where applicable.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or kp66's data protection practices, please contact our support team using the details below. We are committed to handling all privacy-related enquiries with care, transparency, and professionalism.

• Email: [email protected] — use the subject line "Privacy Policy Enquiry" or "Data Subject Request" as appropriate. Email addresses are displayed as plain text and are not clickable links.
• Live Chat: Available directly within the kp66 Platform, 24 hours a day, 7 days a week, including Bangladesh public holidays such as Victory Day, Independence Day, and Eid.
• Response time: Data subject requests will be acknowledged within 2 business days and substantively resolved within 30 days.
• Support hours: 24/7 — Bangladesh Standard Time (BST, UTC+6).

When contacting us regarding a data protection matter, please provide your registered username and a clear description of your request or concern. Requests that cannot be linked to a registered account may require additional identity verification before they can be processed.