k8999 Privacy Policy
At k8999, we treat your personal data with the highest standards of care and confidentiality. This Privacy Policy explains exactly what information we collect, why we collect it, how it is used, and the controls you have over your own data as a k8999 player in Bangladesh.
A plain-English summary of the key privacy principles that guide how k8999 handles your personal information. The complete legal text follows in the numbered sections below.
Minimal Data Collection
k8999 collects only the personal data that is strictly necessary to deliver our betting and casino services, verify your identity, process payments, and comply with our legal obligations. We do not collect data speculatively.
No Data Selling
k8999 will never sell, rent, or trade your personal data to third-party marketers or data brokers under any circumstances. Your information exists to serve you — not to be monetised by others.
SSL Encryption
All data transmitted between your device and k8999 is protected by industry-standard 256-bit SSL encryption. Your login credentials, payment details, and personal documents are never sent in plain text.
Your Rights Respected
You have the right to access, correct, and request deletion of your personal data at any time. k8999 provides clear, accessible channels for exercising all data subject rights without unnecessary delay.
Controlled Third-Party Sharing
Data is shared only with vetted partners — payment processors, KYC verification providers, and fraud prevention services — strictly on a need-to-know basis and under binding confidentiality agreements.
Defined Retention Periods
k8999 does not retain your personal data indefinitely. We apply defined retention schedules to every data category and securely delete or anonymise data once the retention period expires.
As a k8999 player you hold the following rights over your personal data. Contact our support team at [email protected] to exercise any of them.
Right to Access
Request a complete copy of the personal data k8999 holds about you at any time.
Right to Rectification
Ask us to correct any inaccurate or incomplete personal data held on your account.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for us to retain it.
Right to Object
Object to the processing of your personal data for direct marketing or profiling purposes.
Right to Restriction
Request that we restrict processing of your data while a dispute or correction is pending.
Right to Portability
Receive a structured, machine-readable copy of data you provided to k8999 directly.
Right Against Automation
Not be subject to decisions made solely by automated systems that significantly affect you.
Right to Complain
Lodge a complaint with us or a relevant supervisory authority if you believe your rights have been violated.
Plain-Language Notice: This Privacy Policy describes how k8999 collects and handles your personal data. We have written it in clear English so you can understand exactly what we do with your information. If you have any questions after reading this document, please contact us at [email protected].
1 Introduction
k8999 ("we", "us", "our") operates the online betting and casino platform at k8999.io and all associated interfaces available to players in Bangladesh. We are committed to protecting the privacy and personal data of every individual who interacts with our platform, whether as a registered player, a prospective player, or a visitor browsing our site.
This Privacy Policy sets out in detail the categories of personal data we collect, the purposes for which that data is processed, the legal bases on which we rely, the third parties with whom data may be shared, the security measures we apply, the periods for which data is retained, and the rights you hold as a data subject.
This Policy should be read alongside our Terms and Conditions and our Responsible Gaming page, both of which are incorporated by reference into the overall framework governing your use of k8999.
2 Data We Collect
k8999 collects personal data across several categories depending on your level of interaction with the platform. The following table summarises the main data categories and examples of specific data points within each category:
| Data Category | Examples | Collected At |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, National ID number, passport number | Registration & KYC |
| Contact Data | Email address, mobile number, residential address (including city: Dhaka, Chittagong, Sylhet, etc.) | Registration |
| Financial Data | bKash/Nagad/Rocket mobile wallet numbers, Visa/Mastercard partial card numbers, transaction history, deposit and withdrawal amounts in BDT | Payment Processing |
| Verification Documents | Scanned copies of National ID, passport, utility bills, bank statements, selfie photographs | KYC Verification |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, time zone | Automatic (on access) |
| Usage Data | Pages visited, games played, bet history, session duration, click-stream data, search queries on platform | Automatic (on use) |
| Communications Data | Support chat transcripts, emails sent to [email protected], feedback forms, complaint records | Customer Support |
| Preference Data | Responsible gaming limit settings, notification preferences, language settings, favourite games | Account Settings |
We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data (other than selfie photographs used solely for identity verification), health data, or data concerning sexual orientation, unless we are legally required to do so.
3 How We Collect Data
k8999 collects personal data through the following channels:
- Direct interactions: Data you provide when completing the registration form, submitting KYC documents, making deposits or withdrawals, contacting our support team, or configuring your account settings.
- Automated technologies: Data collected automatically when you access or interact with the k8999 platform, including cookies, web beacons, server logs, and similar tracking technologies. See Section 7 (Cookies & Tracking) for full details.
- Third-party sources: Data received from payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard) confirming transaction status; data from KYC verification partners confirming identity document authenticity; data from fraud prevention services flagging known risk indicators.
- Publicly available sources: In limited circumstances where fraud prevention or AML obligations require it, k8999 may cross-reference data against publicly available records such as sanctions lists or politically exposed persons (PEP) databases.
4 Legal Basis for Processing
k8999 processes personal data only where a valid legal basis exists. The legal bases we rely upon are as follows:
- Contractual necessity: Processing required to fulfil our contractual obligations to you under the Terms and Conditions — for example, creating your account, processing bets, handling deposits and withdrawals, and providing customer support.
- Legal obligation: Processing required to comply with our legal obligations under applicable anti-money-laundering (AML), counter-terrorism-financing (CTF), and gaming regulatory requirements — for example, conducting KYC verification and retaining transaction records.
- Legitimate interests: Processing necessary for our legitimate business interests, provided those interests are not overridden by your privacy rights — for example, fraud prevention, platform security monitoring, responsible gaming controls, and improving the quality of our services.
- Consent: Where we send you direct marketing communications by email or SMS, we will only do so with your explicit prior consent. You may withdraw consent for marketing communications at any time by contacting [email protected] or by following the unsubscribe link in any marketing email.
5 How We Use Your Data
The personal data we collect is used exclusively for the following purposes:
- To create and maintain your k8999 player account and verify your identity and eligibility to use the platform.
- To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other supported payment methods, and to maintain accurate transaction records in BDT.
- To fulfil our Know Your Customer (KYC) and anti-money-laundering (AML) obligations, including verifying identity documents and monitoring transaction patterns for suspicious activity.
- To provide and improve the betting and casino services offered on the k8999 platform, including personalising game recommendations and promotional offers based on your play history.
- To administer bonuses, promotions, and loyalty rewards in accordance with the applicable promotional terms.
- To enforce our responsible gaming policies, including monitoring for signs of problem gambling and applying deposit limits, cooling-off periods, or self-exclusion as requested or required.
- To detect, investigate, and prevent fraud, cheating, collusion, match-fixing, and other forms of prohibited conduct as described in our Terms and Conditions.
- To respond to your support enquiries, complaints, and dispute submissions in a timely manner.
- To send you service-related communications (account notifications, transaction confirmations, security alerts) and, where you have consented, marketing communications about promotions and new features.
- To maintain the security, stability, and integrity of the k8999 platform and its underlying technical infrastructure.
- To comply with our legal and regulatory obligations and to cooperate with lawful requests from competent authorities.
6 Data Sharing & Disclosure
k8999 does not sell, rent, or otherwise transfer your personal data to unaffiliated third parties for their own commercial purposes. We share personal data only in the following limited and controlled circumstances:
- Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other licensed payment service providers require transaction data to process deposits and withdrawals. These providers are bound by their own strict data protection obligations and may only use your data for the purpose of processing your specific transactions.
- KYC and identity verification providers: Specialist third-party services that verify the authenticity of identity documents and confirm personal details against authoritative databases. These providers operate under binding data processing agreements with k8999.
- Fraud prevention and AML services: Licensed providers of fraud detection, device fingerprinting, and AML screening services. Data shared with these providers is used solely to protect the integrity of the platform and comply with regulatory requirements.
- Technical infrastructure providers: Cloud hosting, database management, and content delivery providers who process data on k8999's behalf as data processors. These providers are contractually prohibited from using your data for any purpose other than delivering services to k8999.
- Professional advisers: Lawyers, auditors, and insurers who require access to data in the course of providing professional services to k8999, under professional confidentiality obligations.
- Regulatory and law enforcement authorities: Where k8999 is under a legal obligation to disclose personal data to a competent authority — for example, in response to a court order, a request from a financial intelligence unit, or a lawful investigation into suspected criminal activity — we will comply with such requests. Where permissible by law, k8999 will notify affected players of any such disclosure.
All third parties with whom k8999 shares personal data are required to implement appropriate technical and organisational security measures and to process data only in accordance with k8999's documented instructions.
7 Cookies & Tracking Technologies
k8999 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device by your browser when you visit a website. The following categories of cookies are used on k8999.io:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Enable core platform functionality: user authentication, session management, security tokens, load balancing | Session / up to 24 hours |
| Functional | Remember your preferences: language settings, game view options, responsible gaming limit configurations | Up to 12 months |
| Performance / Analytics | Collect anonymised usage data to understand how players interact with the platform and identify areas for improvement | Up to 24 months |
| Fraud Prevention | Device fingerprinting and behavioural analytics used to detect suspicious activity and protect player accounts | Up to 12 months |
Strictly necessary cookies are placed without requiring your consent as they are essential to the operation of the platform. For all other cookie categories, k8999 seeks your consent on first visit. You may withdraw or adjust your cookie preferences at any time through your browser settings. Please note that disabling functional or performance cookies may affect the quality of your experience on k8999.io.
8 Data Security
k8999 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security programme includes, but is not limited to, the following measures:
- 256-bit SSL/TLS encryption for all data in transit between your device and k8999 servers.
- AES-256 encryption at rest for all sensitive personal data and financial records stored in our databases.
- Multi-factor authentication (MFA) for all administrative access to k8999's internal systems.
- Role-based access controls ensuring that k8999 staff can only access personal data categories that are directly relevant to their job function.
- Regular penetration testing and vulnerability assessments conducted by independent cybersecurity specialists.
- Intrusion detection and prevention systems (IDS/IPS) monitoring network traffic in real time for anomalous activity.
- Secure document storage for KYC identity documents, with strict access logging and automatic purging when retention periods expire.
- Staff data protection training conducted at onboarding and on an annual refresher basis.
In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, k8999 will notify affected players without undue delay and will take all reasonable steps to mitigate the impact of the breach. k8999 will also report notifiable breaches to the relevant supervisory authority within the required timeframe.
9 Data Retention Periods
k8999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention schedule applies to the main categories of personal data held by k8999:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account identity and contact data | Duration of account + 5 years after closure | Legal / AML obligation |
| KYC verification documents | 5 years from date of verification or account closure (whichever is later) | AML / regulatory requirement |
| Financial transaction records | 7 years from the date of each transaction | Legal / financial record-keeping |
| Betting and game history | Duration of account + 2 years after closure | Contractual / dispute resolution |
| Customer support communications | 3 years from the date of the last interaction | Legitimate interest / dispute resolution |
| Technical and usage data (logs) | 13 months from collection | Legitimate interest / security |
| Marketing consent records | Until consent is withdrawn + 1 year | Legal obligation (proof of consent) |
| Self-exclusion records | Duration of exclusion + 7 years | Responsible gaming obligation |
Upon expiry of the applicable retention period, personal data is either securely deleted from our systems or rendered permanently anonymous such that it can no longer be associated with any identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.
10 International Data Transfers
k8999 operates a globally distributed technical infrastructure. As a result, your personal data may be transferred to and processed on servers located outside Bangladesh. Where such international transfers occur, k8999 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable data protection law.
Safeguards applied to international data transfers include:
- Standard contractual clauses or equivalent contractual protections agreed with all receiving data processors.
- Transfer only to jurisdictions that maintain an adequate level of data protection as recognised by relevant international standards.
- Application of end-to-end encryption for all data in transit across international networks.
- Strict contractual prohibition on receiving parties from using transferred data for any purpose other than delivering services to k8999.
You may request further information about the specific safeguards applied to any international transfer of your personal data by contacting our support team at [email protected].
11 Children's Privacy
The k8999 platform is strictly intended for adults aged 21 years and above. k8999 does not knowingly collect, process, or retain any personal data relating to individuals under the age of 21. Age verification is a mandatory component of the k8999 account registration and KYC process.
If k8999 becomes aware that personal data has been collected from an individual who is under the age of 21, we will take immediate steps to delete that data from our systems and close the associated account without delay. If you are a parent or guardian and you believe that your child has registered an account with k8999 or submitted personal data to us, please contact us immediately at [email protected] so that we can investigate and take appropriate remedial action.
12 Third-Party Links
The k8999 platform may contain references to game studios, payment providers, or sports organisations (for example, Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, bKash, Nagad, the BPL, IPL, or ICC). These are proper nouns referenced for informational and contextual purposes only.
k8999 does not include outbound hyperlinks to third-party websites within the platform interface. If you independently navigate to any third-party website, k8999 is not responsible for the privacy practices or content of those external sites. We strongly recommend reviewing the privacy policy of any third-party service you use in connection with your gaming activity.
13 Exercising Your Data Rights
You may exercise any of the data subject rights described in the summary section above by submitting a written request to k8999. To help us locate your records and process your request efficiently, please include your full name, registered email address, and a description of the right you wish to exercise.
k8999 will acknowledge your request within 3 business days and will respond substantively within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it before the initial 30-day period expires.
k8999 will not charge a fee for handling data subject rights requests unless a request is manifestly unfounded, repetitive, or excessive, in which case a reasonable administrative fee may be levied or the request may be refused, with written reasons provided.
Requests may be submitted by email to: [email protected] — please use the subject line "Data Rights Request" to ensure your message is routed to the correct team.
14 Updates to This Privacy Policy
k8999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our business practices, or the technical features of the platform. When material changes are made, k8999 will:
- Post the updated Privacy Policy on this page with a revised effective date prominently displayed at the top of the document.
- Send a notification to registered players via their registered email address summarising the key changes.
- Where required by law, seek fresh consent from players before processing their data under the new terms.
Your continued use of the k8999 platform after an updated Privacy Policy has been communicated to you constitutes acceptance of the revised terms. If you do not agree with any material change, you have the right to close your account and request deletion of your personal data in accordance with Section 13 above.
We encourage all k8999 players to review this Privacy Policy periodically to stay informed about how their personal data is being protected. The current version of this Policy is always available at k8999.io/privacy-policy.
15 Contact Us
If you have any questions, concerns, or feedback regarding this Privacy Policy or the way in which k8999 handles your personal data, please do not hesitate to get in touch with our dedicated data privacy team:
- Email: [email protected] (subject line: "Privacy Enquiry")
- Response time: We aim to respond to all privacy-related enquiries within 2 business days.
- Support hours: 24 hours a day, 7 days a week, 365 days a year — Bangladesh Standard Time (BST, UTC+6).
- Platform: k8999.io — serving players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all of Bangladesh.