k8999 Privacy Policy

k8999 is an online gaming platform operating at k8999.bio, providing sports betting, live casino, slots, crash games, and related entertainment services to eligible players in Bangladesh. For the purposes of this Policy, k8999 is the data controller responsible for the personal information you provide when using the Platform.

This Policy applies to all personal data collected through the Platform, including data submitted during account registration, during gameplay, during financial transactions, and through any communications you have with the k8999 support team.

k8999 collects personal information that is necessary to operate the Platform, comply with legal obligations, and deliver a safe and personalised experience. The categories of personal data we collect include:

• Identity data: full name, date of birth, username, and government-issued identification documents provided for KYC verification.
• Contact data: email address, mobile phone number, and residential address (district and division within Bangladesh).
• Financial data: mobile wallet identifiers (bKash, Nagad, Rocket, Upay account references), card type, and transaction history. We do not store full card numbers — payment processing is handled by our certified third-party payment partners.
• Technical data: IP address, browser type and version, device model and operating system, time zone (Bangladesh Standard Time, UTC+6), and session data collected automatically when you access the Platform.
• Usage data: games played, bets placed, bet values, session durations, features accessed, and responsible gaming tool settings (deposit limits, self-exclusion status).

We collect this information directly from you when you register or transact, automatically from your device and browser as you use the Platform, and from our payment partners and KYC verification service providers where applicable.

k8999 processes your personal data only for specific, legitimate purposes. We do not use your data for any purpose incompatible with the purposes listed below:

• Account management: creating and maintaining your k8999 account, verifying your identity, processing your registration, and providing access to Platform services.
• Transaction processing: handling deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard; detecting and preventing payment fraud.
• Legal compliance: meeting our obligations under applicable anti-money laundering (AML) regulations, KYC requirements, and any lawful directive from competent authorities.
• Platform improvement: analysing aggregated, anonymised usage data to improve game selection, payment flow, platform performance, and responsible gaming features.
• Customer support: responding to queries, resolving disputes, and communicating updates related to your account or transactions.
• Marketing (opt-in only): sending you promotional offers, bonus notifications, and seasonal promotions (for example BPL or Eid specials) where you have expressly opted in to receive such communications. You may withdraw consent at any time.

k8999 does not use personal data to build individual behavioural profiles for onward sale to third-party advertisers, data brokers, or marketing agencies.

k8999 processes your personal data on the following legal bases:

• Contractual necessity: processing required to fulfil the contract between you and k8999, including account operation, payment processing, and the delivery of gaming services.
• Legal obligation: processing required to comply with applicable laws and regulations, including AML, KYC, and any lawful order from a competent authority.
• Legitimate interests: processing carried out for fraud prevention, platform security, and improving our services, where such interests are not overridden by your privacy rights.
• Consent: processing for optional purposes such as marketing communications, which we carry out only where you have given us your express, freely-given consent and which you may withdraw at any time.

k8999 does not sell, rent, or trade your personal data. We share your data only in the following limited circumstances:

• Service providers: trusted third-party partners who process data on our behalf, including payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard networks), KYC and identity verification providers, cloud infrastructure providers, and fraud detection services. All such partners are bound by confidentiality agreements and are prohibited from using your data for any purpose other than providing the contracted service to k8999.
• Legal authorities: where we are required by applicable law, court order, or a lawful request from a competent regulatory or law enforcement authority to disclose your personal data.
• Business transfers: in the event of a merger, acquisition, or sale of substantially all of k8999's assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.
• Fraud and crime prevention: where we have reasonable grounds to believe that sharing data with another party (including another gaming platform or financial institution) is necessary to prevent, detect, or investigate fraud, money laundering, or other criminal activity.

k8999 does not share your personal data with social media platforms, advertising networks, or data analytics companies for profiling or targeted marketing purposes.

All financial transactions on k8999 are processed in Bangladeshi Taka (BDT) through our certified payment partners. When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, the actual payment credentials (such as full mobile wallet PINs or full card numbers) are entered directly into the secure interface of the payment provider and are never transmitted to or stored by k8999.

k8999 retains only the minimum payment-related data required for transaction records, dispute resolution, and regulatory compliance — specifically the payment method type, last partial identifier (e.g. last four digits of a card), transaction amount in BDT, and timestamp. This data is stored securely and access is restricted to authorised personnel on a need-to-know basis.

k8999 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyse how the Platform is used. We use three categories of cookies:

• Essential cookies: strictly necessary for the Platform to function. These include session authentication cookies and security tokens. You cannot opt out of essential cookies without disabling core Platform features.
• Functional cookies: used to remember your language preference, region settings, and personalised display options. These improve your experience but are not essential for Platform operation.
• Analytics cookies: used in aggregate and anonymised form to understand how players navigate the Platform, which game categories are most visited, and where the user journey can be improved. No individual player is identified through analytics data.

You can manage or disable non-essential cookies through your browser settings at any time. Note that disabling functional cookies may affect your experience on the Platform. k8999 does not use third-party advertising or retargeting cookies.

k8999 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting requirements. In practice, this means that account data is retained for the duration of your active account and for a minimum of five years following account closure, in order to comply with applicable anti-money laundering and record-keeping obligations.

Marketing preference data is retained only for as long as you maintain your opt-in consent. Analytics data is stored in anonymised, aggregated form with no fixed retention limit. When data is no longer needed, k8999 securely deletes or anonymises it in accordance with industry best practices.

k8999 implements industry-standard technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include end-to-end SSL/TLS encryption for all data in transit, encrypted storage for sensitive data at rest, access controls and role-based permissions restricting data access to authorised personnel only, regular security audits and vulnerability assessments, and intrusion detection systems monitoring Platform infrastructure around the clock.

Despite our efforts, no security system is completely impenetrable. In the event of a data breach that is likely to result in a risk to your rights or freedoms, k8999 will take all reasonable steps to contain the breach, assess the impact, and notify affected users as required by applicable law. If you suspect that your account has been compromised, please contact k8999 support immediately.

You have the following rights with respect to the personal data k8999 holds about you. To exercise any of these rights, contact our support team using the details in Section 14 of this Policy:

• Right of access: you may request a copy of the personal data k8999 holds about you, together with information about how it is being used.
• Right to rectification: you may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: you may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where processing is unlawful — subject to our legal retention obligations.
• Right to restrict processing: you may request that we limit how we use your data while a query or complaint is being investigated.
• Right to withdraw consent: where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

k8999 will respond to all data rights requests within 30 days of receipt. Where a request is complex or we have received a high volume of requests, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

The k8999 Platform is strictly intended for adults aged 21 and over. k8999 does not knowingly collect personal data from individuals under the age of 21. If we become aware that we have inadvertently collected personal data from a person under 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the Platform, please notify k8999 support immediately so that we can investigate and take appropriate action.

The k8999 Platform does not include links to third-party websites outside of our controlled environment. If you encounter any link that appears to direct you to an external site while using k8999, please report it to our support team immediately. k8999 accepts no responsibility for the privacy practices or content of any third-party websites or services that are accessed independently of this Platform.

k8999 reserves the right to update or amend this Policy at any time. When we make material changes, we will update the "Last Updated" date at the top of this page. Where practicable, we will also notify registered players by email or via an on-Platform notification. Your continued use of the Platform following any update constitutes your acceptance of the revised Policy.

We encourage you to review this Policy periodically to stay informed about how k8999 is protecting your information. If you do not agree with any changes made to this Policy, you should discontinue use of the Platform and may request account closure by contacting k8999 support.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which k8999 handles your personal data, please contact our support team. We are committed to addressing all privacy-related queries promptly and transparently.

Email: [email protected] (plain text only — not a clickable link). We aim to respond to all privacy queries within 48 hours. For urgent data security matters, please mark your message as urgent and our team will prioritise your request.