kkb Privacy Policy

1. Information We Collect

When you use the kkb platform at kkb.today, we collect personal data in several ways: directly from you when you register or interact with our services, automatically through your use of the platform, and in limited cases from third-party service providers who assist us in delivering our services.

1.1 Information You Provide Directly

The following categories of personal data are collected when you register for a kkb account or interact with our support team:

• Identity data: Full legal name, date of birth, nationality, and gender as provided during registration or verification.
• Contact data: Email address, phone number, and residential address in Bangladesh (including district and division).
• Verification documents: Copies of your National Identity Card (NID), passport, or other government-issued identification submitted during the Know Your Customer (KYC) process.
• Financial data: Payment method details including bKash, Nagad, Rocket, and Upay account numbers or Visa/Mastercard card details (card numbers are tokenised and never stored in full on kkb's systems).
• Communications data: The content of messages you send to kkb's support team via live chat or email, including any attachments you provide.
• Account preferences: Responsible gaming settings such as deposit limits, session time limits, and self-exclusion status.

1.2 Information Collected Automatically

When you access the kkb platform, our systems automatically record certain technical information:

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and preferred language settings.
• Usage data: Pages visited, time spent on each page, games played, bets placed, features used, and navigation paths through the platform.
• Session data: Login timestamps, session duration, and logout events.
• Cookies and similar technologies: See Section 4 (Cookies & Tracking) for a full explanation of what cookies kkb uses and how you can manage them.

1.3 Information from Third Parties

kkb may receive limited personal data from carefully selected third-party providers in the following contexts:

• Payment processors: Transaction confirmation and status data from payment partners such as bKash, Nagad, Rocket, and card networks to verify deposits and withdrawals.
• Identity verification services: Where automated identity checks are used to assist with KYC compliance, those providers return a verification result to kkb. We do not receive raw data beyond what is necessary to confirm the verification outcome.
• Fraud prevention partners: Aggregated risk signals from fraud-detection services to identify potentially fraudulent account activity. These signals do not include your full personal profile.

2. How We Use Your Data

kkb uses the personal data described above for specific, documented purposes. We do not use your data for any purpose that has not been disclosed in this Privacy Policy. The table below summarises our primary data uses and the lawful basis on which each rests.

Purpose	Data Categories Used	Lawful Basis
Account registration and management	Identity, contact, account preferences	Contract performance
Age and identity verification (KYC)	Identity, verification documents	Legal obligation
Processing deposits and withdrawals	Financial, identity	Contract performance
Fraud detection and prevention	Device, usage, financial, identity	Legitimate interest
Anti-money-laundering compliance	Identity, financial, transaction history	Legal obligation
Customer support	Identity, contact, communications	Contract performance
Responsible gaming monitoring	Usage, account preferences, session data	Legal obligation / Legitimate interest
Platform improvement and analytics	Usage, device, session data (aggregated)	Legitimate interest
Promotional communications (opt-in only)	Contact, account preferences	Consent

2.1 Marketing Communications

kkb will only send you promotional emails, SMS messages, or in-platform notifications about bonuses, seasonal offers (such as those tied to Eid, Pohela Boishakh, BPL, or ICC T20 World Cup events), and new game launches if you have explicitly opted in to receive such communications. You can withdraw your consent at any time by updating your notification preferences in the account dashboard or by contacting our support team. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

2.2 Automated Decision-Making

kkb uses automated systems to flag potentially fraudulent activity, detect duplicate accounts, and enforce responsible gaming thresholds such as deposit limits and self-exclusion status. Where an automated process results in a decision that significantly affects your account — such as a suspension or a withdrawal hold — you have the right to request a human review of that decision. Please contact our support team to exercise this right.

3. Data Sharing & Disclosure

kkb does not sell your personal data. We share personal data with third parties only in the specific, limited circumstances described below.

3.1 Service Providers

kkb engages trusted third-party service providers to help operate the platform. These providers are permitted to process personal data only on kkb's documented instructions and are contractually prohibited from using your data for their own independent purposes. Categories of service providers include:

• Payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard network processors)
• Identity verification and KYC technology providers
• Cloud hosting and infrastructure providers
• Customer support platform providers
• Fraud detection and cybersecurity service providers
• Email delivery and notification service providers

3.2 Legal and Regulatory Disclosure

kkb may disclose personal data to law enforcement agencies, regulatory authorities, courts, or other government bodies where required or permitted to do so by applicable law. This includes disclosures required for anti-money-laundering investigations, fraud investigations, or compliance with a valid court order. kkb will notify affected players of such disclosures where we are legally permitted to do so.

3.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of kkb's assets, personal data held about registered players may be transferred to the acquiring entity as part of that transaction. In such circumstances, kkb will provide advance notice to registered players and ensure that the receiving entity is bound by privacy obligations no less protective than those set out in this policy.

4. Cookies & Tracking

kkb uses cookies and similar browser-based technologies to operate the platform, remember your preferences, maintain your login session, and gather anonymised analytics about how the platform is used. A cookie is a small text file stored on your device by your web browser when you visit a website.

4.1 Types of Cookies Used

Cookie Type	Purpose	Duration
Strictly Necessary	Maintain your login session, apply security tokens, remember your responsible gaming settings	Session / up to 30 days
Functional	Remember display preferences, language, odds format, and recently viewed games	Up to 90 days
Analytics	Collect anonymised data on page views, feature usage, and navigation paths to improve the platform	Up to 12 months
Fraud Prevention	Identify unusual device behaviour and detect potential account takeover attempts	Up to 12 months

4.2 Managing Cookies

Strictly necessary cookies cannot be disabled as they are essential to the operation of the kkb platform. You may disable functional and analytics cookies through your browser settings at any time. Note that disabling functional cookies may affect the performance of certain platform features, such as saved display preferences. Instructions for managing cookies in the most common browsers are available through each browser's official help documentation.

kkb does not use third-party advertising cookies or tracking pixels that profile your browsing activity across other websites.

5. Data Security

kkb takes the security of your personal data seriously and has implemented a layered set of technical and organisational measures designed to protect it against unauthorised access, accidental loss, destruction, or disclosure.

5.1 Technical Measures

• 256-bit SSL/TLS encryption on all data in transit between your browser and kkb's servers.
• Data encryption at rest for all stored personal data and payment information.
• Payment tokenisation: Full card numbers and full mobile payment account numbers are never stored on kkb's systems. Payment processors return a secure token that is used for subsequent transactions.
• Multi-factor authentication available for all registered player accounts and mandatory for all internal kkb staff accounts.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Web Application Firewall (WAF) and DDoS protection to defend the platform against common attack vectors.

5.2 Organisational Measures

• Access to personal data is restricted to kkb staff members who have a documented operational need for that access.
• All staff members with access to personal data undergo data protection and security training at the point of onboarding and annually thereafter.
• Internal data access is logged and subject to regular audit.
• kkb maintains an incident response plan. In the event of a data breach that poses a risk to the rights of affected players, kkb will notify impacted individuals as promptly as possible and take all reasonable steps to contain and remediate the breach.

6. Data Retention

kkb retains personal data only for as long as necessary to fulfil the purposes for which it was collected, and in accordance with any legal obligations that require us to retain certain records for a specified minimum period.

6.1 Active Accounts

While your kkb account remains active, we retain all personal data associated with your account, including transaction history, responsible gaming settings, and communications with our support team. This data is necessary to provide you with our services, resolve disputes, and comply with our legal obligations.

6.2 Closed Accounts

Following the closure of a kkb account — whether initiated by you or by kkb — personal data is retained for a minimum period of five years from the date of closure. This retention period reflects our obligations under applicable anti-money-laundering regulations, which require financial service providers to maintain transaction and identity records for defined periods. After the mandatory retention period has expired, personal data is securely deleted or irreversibly anonymised.

6.3 Marketing Data

If you have opted in to marketing communications and subsequently withdraw your consent, your contact details will be removed from our active marketing lists within 10 business days of the withdrawal. A suppression record (containing only the information necessary to honour your opt-out) will be retained indefinitely to ensure we do not inadvertently contact you again in the future.

6.4 Cookie Data

Cookie lifespans are set out in Section 4.1 above. Anonymised analytics data derived from cookies may be retained in aggregate form beyond the individual cookie lifespan, as it no longer constitutes personal data at that point.

7. Your Privacy Rights

As a registered player on the kkb platform, you have the following rights with respect to your personal data. kkb will respond to all valid rights requests within 30 days of receipt. In complex cases we may extend this period by an additional 30 days, in which case we will notify you of the extension and the reason for it before the initial 30-day period expires.

• Right of access: You have the right to request a copy of all personal data kkb holds about you, together with information about how it is used and with whom it is shared.
• Right to rectification: You have the right to request correction of any personal data that is inaccurate or incomplete. You can update most account details directly through the account dashboard without needing to contact support.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other lawful basis applies), or where the data has been unlawfully processed. Note that kkb may be legally required to retain certain records even after an erasure request; in such cases we will explain what data must be retained and why.
• Right to restriction: You have the right to request that processing of your personal data be restricted in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to data portability: You have the right to receive a copy of the personal data you provided to kkb in a structured, commonly used, machine-readable format, and to request that we transmit that data to another service provider where technically feasible.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You also have the right to object to processing carried out on the basis of legitimate interest, though kkb may continue processing where it can demonstrate compelling legitimate grounds that override your interests.
• Rights related to automated decision-making: Where kkb makes decisions about your account through automated processing that have a significant effect on you, you have the right to request human review of that decision. See Section 2.2 for more detail.

To exercise any of these rights, please contact our support team via live chat in your account dashboard or by emailing [email protected] with the subject line "Privacy Rights Request". We may ask you to verify your identity before processing your request to protect you against unauthorised access to your data.

8. Contact & Complaints

8.1 Privacy Enquiries

If you have any questions about this Privacy Policy, the data kkb holds about you, or the way in which your data is processed, please contact our support team:

• Email: [email protected]
• Live Chat: Available 24/7 through your kkb account dashboard
• Response time: Within 2 hours for live chat; within 24 hours for email (Bangladesh Standard Time, UTC+6)

8.2 Changes to This Policy

kkb reviews this Privacy Policy periodically and updates it as needed to reflect changes in our data practices, applicable law, or platform functionality. When material changes are made, we will notify registered players by email and display a prominent notice on the platform for a minimum of 30 days before the new version takes effect. The effective date at the top of this policy indicates when the current version was last updated. We encourage you to review this policy periodically to stay informed about how kkb protects your personal data.

8.3 Policy Scope

This Privacy Policy applies exclusively to the kkb platform accessible at kkb.today. It does not apply to any third-party websites, payment provider platforms, or other external services that you may access via links from kkb. We encourage you to review the privacy policies of any third-party services you use in connection with your kkb account, as kkb has no control over and accepts no responsibility for their data practices.