kkdb1 Privacy
Policy

1 About This Policy

This Privacy Policy ("Policy") describes how kkdb1 ("kkdb1", "we", "us", "our") collects, uses, stores, shares, and protects personal information obtained from users ("you", "your", "User", "Player") of the kkdb1 website at kkdb1.io, including all associated pages, services, games, betting markets, mobile-optimised interfaces, and customer support channels (collectively, "the Platform" or "the Services").

By creating an account on kkdb1, making a deposit, placing a wager, or otherwise using the Platform in any capacity, you acknowledge that you have read this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the kkdb1 Platform.

This Policy forms part of the binding agreement between you and kkdb1 and should be read alongside the kkdb1 Terms & Conditions and Responsible Gaming Policy. In the event of a conflict between this Policy and the Terms & Conditions, the Terms & Conditions shall take precedence unless expressly stated otherwise.

2 Data We Collect

kkdb1 collects personal data from you directly (information you provide during registration or in communications with us) and indirectly (information generated automatically by your use of the Platform). The categories of personal data we collect are as follows:

2.1 Registration & Identity Data

• Full legal name as it appears on your government-issued identification
• Date of birth (used for mandatory age verification — kkdb1 is a 21+ platform)
• Email address
• Bangladeshi mobile phone number registered in your name
• City and division of residence (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi)
• Username and hashed password (passwords are never stored in plain text)

2.2 Verification Documents

• Copies of government-issued identity documents (National ID card, passport) submitted during KYC (Know Your Customer) verification
• Proof of address documents where required for enhanced due diligence
• Source-of-funds documentation for high-value withdrawal requests exceeding ৳50,000

2.3 Financial & Transaction Data

• bKash account number used for deposits or withdrawals
• Nagad account number used for deposits or withdrawals
• Rocket (Dutch-Bangla Bank) account details where applicable
• Bank account details for players using internet banking (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank)
• Transaction history including deposit amounts, withdrawal amounts, timestamps, and reference numbers
• Betting history including wager amounts, game titles, odds, and outcomes

2.4 Technical & Usage Data

• IP address at time of registration and at each login
• Device type, operating system, and browser version
• Session duration, pages visited, and in-platform navigation patterns
• Game launch events, wager placement events, and bonus activation events
• Geolocation data at the city level (derived from IP address, not GPS)

2.5 Communications Data

• Content of emails and live chat messages exchanged with the kkdb1 support team
• Records of any formal complaints or dispute submissions
• Marketing communication preferences and opt-in/opt-out records

3 How We Use Your Data

kkdb1 uses the personal data it collects for the following specific purposes. We do not use your data for any purpose that is incompatible with those listed here without first obtaining your explicit consent or notifying you of the new purpose.

4 Legal Basis for Processing

kkdb1 processes your personal data only where there is a legitimate legal basis for doing so. The applicable legal bases for each category of processing are:

• Contractual necessity: Processing that is necessary to perform the contract between you and kkdb1 — including account management, payment processing, and service delivery — is carried out on the basis of contractual necessity. Without this processing, we cannot provide the Services to you.
• Legal obligation: Processing carried out to comply with applicable legal obligations, including age verification, AML/KYC checks, record-keeping requirements, and cooperation with law enforcement investigations, is carried out on the basis of legal obligation.
• Legitimate interests: Processing carried out for fraud prevention, platform security, internal analytics, and responsible gaming monitoring is carried out on the basis of kkdb1's legitimate interests in operating a safe, secure, and commercially viable platform, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for direct marketing purposes is carried out exclusively on the basis of your freely given, specific, and informed consent. You may withdraw your marketing consent at any time by contacting [email protected] or by using the unsubscribe mechanism in any marketing email you receive. Withdrawal of marketing consent does not affect any other aspect of your account or your access to the Services.

5 Data Sharing & Third Parties

kkdb1 does not sell, rent, or trade your personal data to any third party for their own commercial or marketing purposes. We share your personal data only in the limited circumstances described below, and only to the extent strictly necessary for each purpose:

• Payment Service Providers: We share financial transaction data with payment processors — including bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, and our banking partners — solely to process deposits and withdrawals on your behalf. These providers are contractually bound to use your data only for payment processing purposes.
• Game Content Providers: When you launch a game from a third-party studio such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Habanero, Spribe, or Ezugi, your player ID and session token are shared with that provider to enable the game session. Game providers do not receive your full name, payment details, or contact information.
• Identity Verification Services: We may use third-party KYC/identity verification services to validate the authenticity of documents submitted during account verification. These providers process identity document data on our behalf under strict data processing agreements.
• Fraud Prevention and AML Platforms: We use third-party fraud detection and AML compliance tools that process behavioural and transactional data to flag suspicious activity. These providers act as data processors under kkdb1's instruction.
• IT Infrastructure and Cloud Services: Our Platform is hosted on secure cloud infrastructure. The infrastructure provider has access to server-level data as part of their hosting service but is contractually prohibited from processing that data for any purpose other than infrastructure management.
• Legal and Regulatory Authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, by a valid legal order, or in connection with the investigation of criminal activity involving our platform.

All third-party service providers with whom kkdb1 shares personal data are required to maintain confidentiality, implement appropriate technical and organisational security measures, and process data only in accordance with kkdb1's documented instructions.

6 Payment Data & bKash / Nagad Processing

Given the central role of mobile financial services in Bangladesh, kkdb1 pays particular attention to the handling of bKash, Nagad, and Rocket payment data. The following specific rules apply to payment data processed on the kkdb1 platform:

• Your bKash or Nagad account number is stored in encrypted form on kkdb1 servers and is used exclusively for processing deposits and withdrawals initiated by you.
• kkdb1 does not initiate unsolicited outbound transfers to your bKash or Nagad account. All outbound transfers are either withdrawal requests submitted by you or promotional cashback credits explicitly communicated to you in advance.
• kkdb1 support staff will never ask for your bKash or Nagad PIN, OTP (one-time password), or full account password. Any communication purportedly from kkdb1 requesting this information should be treated as fraudulent and reported to us immediately at [email protected].
• Transaction records involving bKash, Nagad, and Rocket payments are retained for a minimum of 5 years from the date of the transaction in accordance with financial record-keeping best practices.
• In the event of a disputed transaction involving a mobile financial service, kkdb1 will cooperate fully with the relevant provider's investigation process and provide transaction records as required.

7 Cookies & Tracking Technologies

The kkdb1 Platform uses cookies and similar tracking technologies to deliver a functional, personalised, and secure user experience. Cookies are small text files placed on your device by your browser when you visit the Platform. The categories of cookies used on kkdb1 are as follows:

• Essential Cookies: Required for the core functionality of the Platform, including maintaining your login session, remembering your language and display preferences, and securing your account against session hijacking. These cookies cannot be disabled without significantly impairing your ability to use the Platform.
• Security Cookies: Used to detect and prevent fraudulent activity, including bot traffic, credential stuffing attacks, and suspicious session behaviour. These cookies process technical identifiers only and do not contain personally identifiable information.
• Analytics Cookies: Used to collect aggregated, anonymised data about how users navigate the Platform — including which pages are most visited, how long sessions last, and at what point users exit. This data is used exclusively to improve the Platform's design and functionality. Analytics data is processed in anonymised form and cannot be used to identify individual users.
• Personalisation Cookies: Used to remember your game preferences, recently played titles, preferred payment method, and personalised bonus offers. These cookies improve your experience by reducing the need to reconfigure your preferences on each visit.

You can manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete specific categories of cookies. Please note that disabling essential or security cookies will impair Platform functionality and may prevent you from logging in or completing transactions. kkdb1 does not use third-party advertising cookies or cross-site tracking cookies.

8 Data Retention

kkdb1 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law. The following retention schedule applies to the main categories of personal data we hold:

Upon the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any identifiable individual. Where data has been anonymised, the resulting anonymised dataset may be retained indefinitely for statistical and analytical purposes.

If your account is suspended or closed due to a breach of the kkdb1 Terms & Conditions, or as a result of a confirmed fraud or AML investigation, kkdb1 may retain your personal data for a longer period where necessary to pursue or defend legal claims, cooperate with law enforcement, or prevent you from opening a new account in violation of a permanent exclusion.

9 Data Security

kkdb1 implements a multi-layered information security framework to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include, but are not limited to:

• SSL/TLS Encryption in Transit: All data exchanged between your browser or device and the kkdb1 Platform is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher). This ensures that your login credentials, payment details, and personal information cannot be intercepted by third parties during transmission.
• Encryption at Rest: Sensitive data fields — including passwords (stored as salted hashes), payment account numbers, and identity document copies — are encrypted at rest using strong symmetric encryption. Even in the unlikely event of a server breach, sensitive fields cannot be read without the corresponding decryption keys.
• Access Controls: Access to personal data is restricted to kkdb1 staff and authorised service providers on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and receive mandatory data protection training.
• Intrusion Detection and Monitoring: Our infrastructure is monitored continuously for signs of unusual or suspicious activity. Automated alerting systems flag anomalous access patterns for immediate investigation by the kkdb1 security team.
• Regular Security Audits: The kkdb1 Platform undergoes regular independent security assessments, including vulnerability scanning and penetration testing, to identify and remediate potential weaknesses before they can be exploited.
• Two-Factor Authentication: kkdb1 supports two-factor authentication (2FA) for player accounts. We strongly encourage all users to enable 2FA to add an additional layer of protection to their account beyond their username and password.

Despite our rigorous security measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a significant risk to the rights and freedoms of affected users, kkdb1 will notify impacted players by email within a reasonable timeframe and take all available steps to contain and mitigate the breach.

10 Your Rights

As a kkdb1 user, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Request". We will acknowledge your request within 5 business days and aim to fulfil it within 30 calendar days.

11 Children & Minors

The kkdb1 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, store, or process personal data from any individual under the age of 21. Age verification is a mandatory step in the kkdb1 account registration process, and we reserve the right to request additional documentary proof of age at any point.

If kkdb1 discovers or is notified that personal data belonging to a person under the age of 21 has been collected — whether as a result of misrepresentation during registration, a third party using another person's details, or any other circumstance — we will take immediate steps to:

• Suspend the account pending investigation
• Return any deposits made to the original payment source after deducting any winnings generated, in line with the kkdb1 Terms & Conditions
• Permanently close the account and flag it to prevent re-registration
• Delete all personal data associated with the account to the extent permitted by legal obligations

If you are a parent or guardian and you believe that a person under the age of 21 in your care has registered an account with kkdb1, please contact us immediately at [email protected] with the subject line "Minor Account Report". We will investigate all such reports as a matter of urgency and take appropriate action within 48 hours of verification.

12 International Data Transfers

kkdb1 operates a globally distributed infrastructure, which means that personal data collected from users in Bangladesh may be stored on or processed by servers located in jurisdictions outside Bangladesh. Such transfers may occur in connection with cloud hosting services, game content delivery networks, fraud prevention platforms, and KYC verification services.

Whenever personal data is transferred outside Bangladesh to a jurisdiction that may not offer an equivalent level of data protection, kkdb1 ensures that appropriate safeguards are in place, including:

• Contractual clauses with the recipient service provider that impose data protection obligations equivalent to those described in this Policy
• Technical security measures — including encryption in transit and at rest — that protect the data regardless of the jurisdiction in which it is stored
• Access controls that limit personnel access to personal data to those with a legitimate operational need

By using the kkdb1 Platform and accepting this Privacy Policy, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Bangladesh for the purposes described in this Policy, subject always to the safeguards described above. If you have concerns about international data transfers, please contact us at [email protected].

13 Policy Updates

kkdb1 reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we offer. The date of the most recent revision is displayed at the top of this page. The version number is incremented each time a material change is made.

For material changes — defined as changes that significantly alter how we collect, use, or share your personal data, or that significantly affect your rights as a data subject — kkdb1 will provide at least 14 days' advance notice by:

• Sending a notification email to the email address registered on your kkdb1 account
• Displaying a prominent notice on the Platform homepage and account dashboard for the 14-day notice period

Your continued use of the kkdb1 Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you must cease using the Platform and may close your account by contacting [email protected] before the effective date of the update.

For non-material changes — such as minor corrections to wording, updated contact details, or clarifications that do not alter the substance of our data practices — kkdb1 may update the Policy without advance notice. We encourage you to review this page periodically to stay informed of our current privacy practices.

14 Contact & Privacy Requests

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or want to raise a concern about how kkdb1 handles your personal data, please contact the kkdb1 data protection team using the details below. All communications must be in English to ensure accurate and timely handling.

• General Privacy Enquiries: [email protected]
• Data Access / Portability Requests: [email protected] (subject line: "Privacy Request — Access")
• Erasure / Right to be Forgotten: [email protected] (subject line: "Privacy Request — Erasure")
• Objection to Processing: [email protected] (subject line: "Privacy Request — Objection")
• Minor Account Reports: [email protected] (subject line: "Minor Account Report")
• Data Breach Notifications: [email protected] (subject line: "Security Concern")

All email addresses listed above are provided as plain text for reference only and are not clickable links. kkdb1 customer support and data protection staff are available 7 days a week. We aim to acknowledge all privacy-related requests within 5 business days (Bangladesh Standard Time, UTC+6) and to complete requests within 30 calendar days. Where a request is complex or where a high volume of requests has been received simultaneously — for example, during major sporting events such as the BPL or T20 World Cup — the completion period may be extended to a maximum of 60 days. We will inform you in writing if such an extension is necessary.