kd999 Privacy Policy — Your Data, Handled Responsibly

1. Introduction and Scope

This Privacy Policy describes how kd999 ("we", "us" or "the platform") collects, uses, stores, shares and protects the personal information of players who register and use the kd999 online gaming platform at kd999.one. This policy applies to all registered users in Bangladesh and to any visitor who accesses the platform regardless of location.

By creating an account with kd999 or by continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection and use of your personal data as described herein. If you do not agree with this policy, you should not use the kd999 platform. Players under the age of 21 are not permitted to use kd999 and must not submit any personal data through the platform.

2. Information We Collect

kd999 collects personal data in two ways: information you provide directly when registering or using the platform, and information collected automatically through your use of the platform. The table below summarises the categories of personal data we collect.

Data Categories

Automatically Collected Data

When you access kd999 through a mobile browser, we automatically collect certain technical data to ensure the platform operates securely and reliably. This includes:

• Your IP address and approximate geographic location derived from it (country and city level only — not precise GPS coordinates).
• Device identifiers including device model, operating system version and browser version, used to ensure the platform renders correctly on your device.
• Session data including login timestamps, pages visited and actions taken within the platform. This data is used for responsible gaming monitoring and for detecting unusual account activity.

3. How We Use Your Information

kd999 uses your personal data only for specific, legitimate purposes. We do not use your data for any purpose beyond those listed below without first obtaining your explicit consent:

• Account management: Creating, maintaining and securing your kd999 player account, including processing login credentials and applying responsible gaming limits you have set.
• Transaction processing: Processing deposits via bKash, Nagad, Rocket and Upay, and processing approved withdrawal requests back to your registered payment method.
• Identity and age verification: Verifying that you are who you say you are and that you are aged 21 or above, in accordance with our KYC obligations and responsible gaming commitments.
• Security and fraud prevention: Detecting and preventing fraud, money laundering, multi-accounting, bonus abuse and other activities that breach our Terms & Conditions or applicable law.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and applying protective measures such as session reminders, deposit limits and self-exclusion where required.
• Customer support: Responding to your support requests, resolving account disputes and providing assistance with deposits, withdrawals and game-related queries, all within Bangladesh Standard Time (UTC+6) operating hours.

4. Legal Basis for Processing

kd999 processes your personal data on one or more of the following legal bases, depending on the type of data and the purpose of processing:

• Contractual necessity: Processing that is necessary to perform the contract between you and kd999 — for example, operating your account, processing deposits and withdrawals, and delivering game services.
• Legal obligation: Processing that is required to comply with applicable law, including KYC identity verification, anti-money-laundering checks and age verification (21+).
• Legitimate interests: Processing that is necessary for kd999's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring and improving the platform experience — provided those interests are not overridden by your own rights and interests.
• Consent: Where we rely on your consent as the legal basis for processing (for example, for sending optional promotional communications), you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal.

5. Sharing Your Information

kd999 does not sell your personal data. We share your data only in the specific circumstances described below. In all cases, we take steps to ensure that only the minimum necessary data is shared and that recipients are bound by appropriate data protection obligations.

Game and Technology Providers

kd999 works with certified game studios (including Evolution Gaming, Pragmatic Play, Ezugi and Spribe) and technology infrastructure providers. These providers may receive limited technical data — such as session tokens or game identifiers — that is necessary to deliver the game service. They do not receive your full identity data or financial details.

Payment Processors

To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay or bank transfer, kd999 must share the necessary transaction details with those payment providers. This is limited to the data required to execute and verify the transaction. kd999 does not store your full bKash PIN, Nagad PIN or bank account passwords.

Legal and Regulatory Authorities

kd999 may be required by law to disclose certain personal data to relevant authorities — for example, in response to a court order, a regulatory investigation or a law enforcement request relating to fraud or money laundering. In such cases, kd999 will disclose only the data that is strictly required by the legal demand and will seek legal advice before complying with any request that appears disproportionate or unclear.

6. Payment Data and Financial Information

kd999 treats financial data with the highest level of care. When you make a deposit via bKash, Nagad, Rocket or Upay, the transaction is processed directly through the payment provider's own secure interface. kd999 records the transaction reference, amount, timestamp and the registered wallet number or bank account number linked to your kd999 account — but does not record your full payment credentials (PIN, OTP or full account password) at any point.

Transaction histories are retained for a minimum of five years from the date of the transaction in order to meet financial record-keeping obligations. After the retention period has elapsed and where no legal hold applies, financial transaction records will be securely deleted or anonymised.

7. Cookies and Tracking Technologies

kd999 uses cookies and similar session-tracking technologies to ensure the platform functions correctly and securely. We do not use third-party advertising cookies or cross-site tracking pixels. The cookies used by kd999 fall into the following categories:

• Strictly necessary cookies: These are essential to the operation of the platform. They enable you to stay logged in during a session, maintain your game state and process transactions securely. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: These cookies remember your preferences — such as your preferred language setting — so you do not have to re-enter them on each visit. Functional cookies do not track your activity across other websites.
• Analytics cookies: kd999 uses privacy-respecting analytics to understand how players use the platform — for example, which games are most popular and at what times of day traffic peaks occur. Analytics data is aggregated and anonymised; it is not linked back to individual player identities.

You may manage cookie preferences through your mobile browser's settings. Please note that disabling strictly necessary cookies will prevent the kd999 platform from functioning correctly and you will not be able to log in or place bets.

8. Data Retention

kd999 retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply: active player account data is retained for the duration of the account relationship plus five years after account closure; KYC identity documents are retained for five years from the date of verification; financial transaction records are retained for five years from the date of the transaction; technical and usage data (logs, session records) is retained for up to twelve months and then securely deleted or anonymised.

Where kd999 is required by law to retain data for longer than the periods above, the longer statutory period will apply. Where data is no longer needed and no legal obligation requires its retention, kd999 will securely delete or irreversibly anonymise the data so that it can no longer be associated with any individual.

9. Security Measures

kd999 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction or alteration. These measures include 256-bit SSL encryption for all data in transit, encrypted storage for personal and financial data at rest, strict access controls limiting internal staff access to personal data on a need-to-know basis, regular security reviews of our platform and third-party integrations, and automatic session timeout to protect accounts on shared or unattended devices.

No security system is completely impenetrable, and kd999 cannot guarantee that your data will never be accessed by an unauthorised party. However, in the event of a data breach that is likely to result in a risk to your rights and freedoms, kd999 will notify affected players promptly and take all reasonable steps to contain and remediate the breach.

10. Your Privacy Rights

As a kd999 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected]:

• Right of access: You may request a copy of all personal data kd999 holds about you. We will provide this within a reasonable time and at no charge for first requests.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected or updated. We will action verified correction requests promptly.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, or where you withdraw consent and no other legal basis applies. Please note that certain data must be retained to comply with financial record-keeping laws and cannot be deleted upon request.
• Right to restrict processing: You may request that kd999 restricts the processing of your personal data in certain circumstances — for example, while a correction request is being verified, or while a dispute about the legal basis for processing is being resolved.
• Right to object: Where kd999 processes your data on the basis of legitimate interests, you have the right to object to that processing. kd999 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights and freedoms.

kd999 will respond to all privacy rights requests within 10 business days of receipt. In cases where a request is complex or where a large volume of data is involved, we may extend this period and will notify you of the extension with an explanation.

11. Children's Privacy

kd999 is strictly an adult platform for players aged 21 and above. We do not knowingly collect personal data from any individual under the age of 21. If we become aware that personal data has been submitted by a person under 21, we will delete that data immediately, close the associated account and return any deposited funds. If you are a parent or guardian and believe that a person under 21 has registered with kd999 using your contact details or payment method, please contact us immediately at [email protected].

12. Changes to This Privacy Policy

kd999 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law or the services we offer. When we make material changes, we will update the "Last updated" date at the top of this page. For significant changes that materially affect how we handle your personal data, we will also notify registered players via their registered mobile number or through an on-platform notification. Your continued use of the kd999 platform after the updated policy has been posted constitutes your acceptance of the revised Privacy Policy. If you do not agree with the updated policy, you should stop using the platform and contact support to request account closure.