kbd66 Privacy Policy — How We Protect Your Data

1 Introduction

This Privacy Policy ("Policy") describes how kbd66 ("kbd66", "we", "us", "our") collects, uses, stores, discloses, and protects the personal data of individuals ("you", "Player", "User") who access or use the kbd66 online betting and casino platform available at kbd66.io and any associated mobile-optimised pages.

kbd66 is committed to protecting the privacy and personal data of all players, particularly those accessing the platform from Bangladesh, including players in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. This Policy has been drafted in English and is governed by internationally recognised data protection principles.

This Privacy Policy is incorporated by reference into the kbd66 Terms & Conditions, available at /terms-conditions. In the event of any conflict between this Policy and the Terms & Conditions, the Terms & Conditions shall prevail to the extent of the inconsistency.

2 Who We Are

kbd66 is an online betting and casino platform operating under the brand name kbd66 and accessible via kbd66.io. kbd66 provides online sports betting (including cricket, football, kabaddi, and other sports markets), live casino gaming, slot games, crash games, and associated payment and customer support services to players in Bangladesh.

For the purpose of this Privacy Policy, kbd66 is the data controller in respect of all personal data collected from players via the kbd66 platform. As data controller, kbd66 determines the purposes for which and the means by which personal data is processed.

All privacy-related queries, data subject access requests, and data deletion requests should be directed to the kbd66 support team via live chat or at the email address [email protected]. Our support team operates 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6).

3 Personal Data We Collect

kbd66 collects the following categories of personal data from players, either directly during registration and account use, or automatically through your interaction with the platform:

4 How We Collect Your Data

kbd66 collects personal data through the following methods:

• Direct registration: When you create a kbd66 account, you voluntarily provide your name, date of birth, email address, and mobile number.
• KYC verification: When you submit documents for identity verification prior to your first withdrawal, or when kbd66 requests additional verification at any point during your account lifetime.
• Deposits and withdrawals: When you initiate a transaction via bKash, Nagad, Rocket, or Upay, payment reference data and transaction metadata are collected automatically.
• Platform usage: As you browse, bet, and play on kbd66, technical data including your IP address, device information, and gaming activity is recorded automatically by our systems.
• Support interactions: When you contact kbd66 via live chat or email, the content of those communications is retained as part of your account record.
• Cookies and tracking technologies: kbd66 uses cookies and similar technologies to maintain session state, personalise your experience, and analyse platform usage. See Section 7 for full details.

kbd66 does not purchase personal data from third-party data brokers. All personal data collected about you originates either from your direct interaction with the kbd66 platform or from automated technical systems integral to platform operation.

5 Why We Use Your Personal Data

kbd66 uses your personal data for the following specific purposes, each of which is grounded in a recognised lawful basis for processing:

• Account registration and management: To create, maintain, and administer your kbd66 player account, including verifying your identity, managing your balance, and enabling login access.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, and Upay, including verifying that payment methods belong to you and are not being used fraudulently.
• Age and identity verification (KYC): To confirm that you meet the 21+ age requirement and that you are who you claim to be, in accordance with responsible gaming and anti-fraud obligations.
• Platform security and fraud prevention: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, bot usage, and other prohibited activities as defined in the kbd66 Terms & Conditions.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and provide responsible gaming assistance, including setting deposit limits and processing self-exclusion requests.
• Legal and regulatory compliance: To meet our obligations under applicable anti-money laundering (AML), know your customer (KYC), and data retention requirements.
• Responsible gaming enforcement: To monitor gaming behaviour for signs of problem gambling, to enforce player-requested limits and self-exclusions, and to comply with our Responsible Gaming Policy.
• Platform improvement: To analyse aggregated, anonymised usage data to improve the performance, design, and content of the kbd66 platform. This analysis does not use personally identifiable data.
• Promotional communications: To send you promotional offers, bonus notifications, and seasonal campaign information where you have consented to receive such communications. You may withdraw this consent at any time by contacting support.

6 Data Sharing & Third Parties

kbd66 does not sell, rent, or trade your personal data. We share data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose:

• Payment processors: bKash, Nagad, Rocket, and Upay receive the minimum transaction data required to process your deposit or withdrawal. These providers operate under their own privacy policies and are contractually obligated to handle your data securely.
• Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other game providers receive anonymised or pseudonymised session identifiers to facilitate game delivery and round verification. Your full name and contact details are not shared with game providers.
• Fraud detection and AML services: kbd66 may share transaction data with specialist fraud detection and AML compliance services as part of its obligations to maintain a safe and compliant platform. Such service providers are bound by strict data processing agreements.
• Legal authorities: kbd66 may be required to disclose personal data to law enforcement, regulatory bodies, or courts in response to a lawful request, court order, or legal obligation. kbd66 will notify you of such disclosure where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of kbd66's business, player data may be transferred as part of that transaction. Affected players will be notified prior to their data being transferred and becoming subject to a different privacy policy.

7 Cookies & Tracking Technologies

kbd66 uses cookies and similar tracking technologies (such as local storage and session tokens) to operate the platform effectively and provide you with a personalised experience. The following types of cookies are used on kbd66:

You may manage or disable non-essential cookies through your browser settings. Please note that disabling essential cookies will impair the functionality of the kbd66 platform, including your ability to log in and place bets. Instructions for managing cookies are available in the help documentation of your browser (Chrome, Firefox, Safari, Edge, and others).

8 Data Retention

kbd66 retains your personal data for as long as your account remains active and for a defined period thereafter, as set out below. Retention periods are determined by the purpose for which data was collected and the minimum period required for legal, audit, and dispute-resolution purposes.

Upon expiry of the applicable retention period, personal data is permanently and securely deleted from kbd66 systems using industry-standard data destruction procedures. Anonymised or aggregated data from which you cannot be identified may be retained indefinitely for statistical and platform improvement purposes.

Where an account has been closed due to a confirmed breach of the kbd66 Terms & Conditions (e.g., fraud, money laundering), kbd66 may retain data beyond the standard retention period as required to support any ongoing legal proceedings or investigations.

9 Security Measures

kbd66 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the kbd66 platform, ensuring that your login credentials, personal details, and payment data cannot be intercepted in transit.
• AES-256 encryption at rest for all personal data and KYC documents stored in kbd66 databases.
• Role-based access controls (RBAC) ensuring that only authorised kbd66 personnel with a legitimate business need can access your personal data, with each access event logged and audited.
• Two-factor authentication (2FA) available for all player accounts and mandatory for all kbd66 staff accounts with access to player data.
• Regular security audits and penetration testing conducted by independent security professionals to identify and remediate vulnerabilities before they can be exploited.
• Automated intrusion detection systems (IDS) monitoring the kbd66 platform infrastructure 24/7 for signs of unauthorised access or suspicious activity.
• Secure KYC document handling with documents stored in an isolated, access-controlled environment separate from the main player database.

10 Your Data Rights

As a player on the kbd66 platform, you hold the following rights in respect of your personal data. These rights apply to all players, including those located across Bangladesh:

• Right of Access: You have the right to request a copy of the personal data kbd66 holds about you, including what data is held, how it is used, and with whom it has been shared. kbd66 will provide this information within 14 business days of receiving a verified request.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held by kbd66. You may update certain account details directly via the account settings panel. For corrections to KYC or identity data, please contact support with supporting documentation.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing and there is no overriding legitimate interest. Note that kbd66 may be required to retain certain data beyond your deletion request for legal, regulatory, or fraud-prevention purposes (see Section 8).
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) for transfer to another service. This right applies to data processed on the basis of your consent or for the performance of a contract.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. Upon receiving such an objection, kbd66 will cease sending you promotional communications within 5 business days.
• Right to Restrict Processing: In certain circumstances (e.g., where you contest the accuracy of your data, or where processing is unlawful), you may request that kbd66 restricts its processing of your data to storage only, pending resolution of the dispute.

To exercise any of the above rights, contact the kbd66 support team via live chat or at [email protected]. kbd66 will acknowledge your request within 3 business days and provide a substantive response within 14 business days. Where a request is complex or involves a large volume of data, kbd66 may extend this period by a further 14 business days with written notice.

11 Minors — Under 21 Policy

The kbd66 platform is strictly intended for adults aged 21 years and above. kbd66 does not knowingly collect personal data from individuals under the age of 21. Registration by individuals under 21 is prohibited, and any account found to belong to a person under 21 will be immediately closed, with all data securely deleted (subject to any retention obligations required for fraud prevention purposes) and any deposits returned.

If you are a parent or guardian and believe that a minor in your care has registered a kbd66 account or provided personal data to kbd66, please contact our support team immediately via live chat. kbd66 will investigate the matter promptly and, where confirmed, close the account and delete the associated data in accordance with this Policy.

12 International Data Transfers

kbd66 primarily stores and processes player data on servers located in data centres serving the Asia-Pacific region. However, certain service providers and technology partners used by kbd66 may be located in, or process data in, jurisdictions outside Bangladesh.

Where personal data is transferred outside of Bangladesh, kbd66 takes appropriate steps to ensure that such transfers are conducted securely and that the receiving party applies a standard of data protection equivalent to that described in this Privacy Policy. These steps may include:

• Entering into data processing agreements with third-party recipients that include binding data protection obligations consistent with this Policy.
• Using standard contractual clauses or equivalent contractual safeguards that obligate the recipient to protect your personal data to an adequate standard.
• Transferring data only to recipients in jurisdictions that maintain adequate data protection frameworks recognised by internationally accepted standards.

By using the kbd66 platform, you acknowledge and consent to the transfer of your personal data to third-party service providers as described above, subject to the protections outlined in this section.

13 Changes to This Privacy Policy

kbd66 reserves the right to amend, update, or replace this Privacy Policy at any time. Changes may be made to reflect updates to applicable laws, new platform features, changes in data processing practices, or improvements to our privacy procedures.

When a material change is made to this Privacy Policy, kbd66 will notify active players via their registered email address at least 7 days before the updated Policy takes effect. A notice will also be displayed on the kbd66 platform for a period of not less than 14 days following any update.

The date of the most recent revision is displayed at the top of this Privacy Policy document. Your continued use of the kbd66 platform after the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree with the updated Privacy Policy, you must close your account and cease using the platform prior to the effective date.

14 Contact Us — Privacy Enquiries

If you have any questions, concerns, or complaints regarding this Privacy Policy, the way kbd66 handles your personal data, or if you wish to exercise any of your data rights as described in Section 10, please contact the kbd66 support team through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly from the kbd66 platform. Live chat is the fastest channel for urgent privacy matters, including suspected unauthorised account access or data breach concerns.
• Email: [email protected] — responses are provided within 24 hours for standard enquiries and within 3 business days for formal data rights requests.
• Support Hours: Round-the-clock, Bangladesh Standard Time (BST, UTC+6).
• Languages: English support is available at all times.

kbd66 serves players across all major cities and regions of Bangladesh, including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. Our support team is trained to handle privacy requests with care, efficiency, and strict confidentiality.