kb8 Privacy Policy

1. Personal Data We Collect

kb8 collects personal data through several channels: directly from you when you register or use the platform, automatically through your interaction with our website, and from third-party identity verification and payment providers. The categories of personal data we collect are as follows:

1.1 Registration and Account Data

• Full legal name — required for identity verification and account ownership.
• Date of birth — required to confirm that you are 18 years of age or older.
• Email address — used for account communications, security alerts, and support correspondence.
• Mobile phone number — used for account verification and transaction confirmations via bKash, Nagad, or Rocket.
• Residential address — collected during identity verification in accordance with anti-money-laundering obligations.
• Username and encrypted password — used to secure your kb8 account.

1.2 Identity Verification Documents

• Government-issued photo ID (National ID Card, passport, or driving licence).
• Proof of address documents (utility bills, bank statements dated within 90 days).
• Selfie or live photo for facial verification, where required.

1.3 Financial and Transaction Data

• Deposit and withdrawal amounts, dates, and payment method identifiers (e.g., bKash wallet reference, Nagad account number).
• Transaction history associated with your kb8 account.
• Bank account or mobile wallet details used for payment processing.

1.4 Technical and Usage Data

• IP address and approximate geographic location derived from it.
• Device type, operating system, and browser version.
• Pages visited, session duration, click patterns, and navigation paths within the platform.
• Game activity logs, bet history, and session timestamps.

Data Category	Primary Purpose	Retention Period
Registration & Account Data	Account operation, identity verification	Duration of account + 5 years
Identity Documents	KYC compliance, fraud prevention	Duration of account + 5 years
Financial & Transaction Data	Payment processing, AML compliance	7 years from transaction date
Technical & Usage Data	Platform security, performance optimisation	13 months from collection
Support Communications	Dispute resolution, service improvement	3 years from last interaction

2. How We Use Your Personal Data

kb8 uses the personal data it collects for the following specific purposes:

• Account creation and management: To register your account, verify your identity, and maintain your player profile on the kb8 platform.
• Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and linked bank accounts. Transaction data is shared with payment processors solely for the purpose of completing your requested transaction.
• Identity verification and fraud prevention: To verify that you are who you say you are, that you meet the minimum age requirement of 18 years, and that your account is not being used for fraudulent or money-laundering activity.
• Regulatory compliance: To meet our obligations under applicable anti-money-laundering and responsible gaming frameworks, including maintaining records of player activity for the required retention periods.
• Customer support: To respond to your enquiries, resolve disputes, and improve the quality of the support experience.
• Platform security: To detect, prevent, and investigate unauthorised access, suspicious login attempts, and other security incidents affecting the kb8 platform or its players.
• Responsible gaming: To monitor player behaviour for signs of problem gambling and to enforce deposit limits, cooling-off periods, and self-exclusions as requested or required.
• Service communications: To send you transactional and account-related communications such as deposit confirmations, withdrawal updates, and security alerts. These communications are not optional — they are a necessary part of running your account.
• Marketing communications (with consent only): Where you have explicitly opted in, kb8 may send you promotional emails about bonuses, new games, and seasonal offers such as Eid or Pohela Boishakh promotions. You may withdraw this consent at any time by contacting [email protected].

3. Legal Basis for Processing

kb8 processes your personal data on the following legal grounds:

• Contractual necessity: Processing your registration data, payment information, and account activity records is necessary to perform the contract between you and kb8 (i.e., to provide you with betting and gaming services).
• Legal obligation: Identity verification, transaction records, and responsible gaming monitoring are required by applicable regulatory and compliance frameworks.
• Legitimate interests: Processing technical and usage data for platform security, fraud detection, and service improvement is justified by kb8's legitimate interest in maintaining a safe and reliable platform for all users.
• Consent: Where we send marketing communications or use non-essential cookies, we do so only with your explicit consent, which you may withdraw at any time.

4. Data Sharing and Disclosure

kb8 does not sell your personal data to any third party. We share your data only in the following limited and controlled circumstances:

• Payment providers: Transaction data is shared with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, and City Bank solely to process your requested deposits and withdrawals. These providers are bound by their own data protection obligations.
• Identity verification providers: Where third-party KYC providers are used to verify your identity documents, your submitted data is shared with those providers under strict data processing agreements.
• Game software providers: Game providers such as Pragmatic Play, Evolution Gaming, Microgaming, Spribe, and Ezugi receive pseudonymised session data necessary to operate the games you play. These providers do not receive your full identity data.
• Legal and regulatory disclosure: kb8 may disclose personal data to relevant authorities where required to do so by law, court order, or in connection with an investigation into fraud or other unlawful activity.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of kb8's business, player data may be transferred as part of that transaction. You will be notified of any such transfer and any change in the data controller's identity.

5. Cookies and Tracking Technologies

kb8 uses cookies and similar tracking technologies to operate the platform, improve user experience, and maintain security. The types of cookies used on kb8 are as follows:

• Essential cookies: Necessary for the platform to function. These include session cookies that keep you logged in, security cookies that prevent cross-site request forgery, and load-balancing cookies. These cookies cannot be disabled without breaking the platform.
• Functional cookies: Used to remember your preferences, such as language settings and preferred payment method, to provide a more personalised experience on return visits.
• Analytics cookies: Used to collect anonymised information about how visitors interact with the kb8 platform — including which pages are visited most frequently and where users encounter difficulties. This data is used solely to improve platform performance and is not linked to individual identities.
• Marketing cookies (with consent): Where you have consented, these cookies may be used to show you relevant promotional content. You may withdraw consent at any time by adjusting your cookie preferences or contacting [email protected].

You may manage or delete cookies through your browser settings at any time. Note that disabling essential cookies will prevent certain core platform features from functioning correctly.

6. Data Retention

kb8 retains personal data for the periods set out in the table in Section 1, or for as long as is necessary to fulfil the purpose for which the data was collected. The specific retention periods are determined by the following factors:

• The type of data and how sensitive it is.
• The purpose for which it was collected and whether that purpose has been fulfilled.
• Any legal, regulatory, or accounting obligations that require the data to be kept for a minimum period.
• Whether the data is needed in connection with an ongoing dispute, investigation, or legal claim.

When personal data is no longer required, kb8 will securely delete or anonymise it in accordance with our internal data disposal procedures. Anonymised aggregate data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

7. Security Measures

kb8 takes the security of your personal data seriously and implements appropriate technical and organisational measures to protect it against unauthorised access, loss, destruction, or alteration. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the kb8 platform.
• Encryption of sensitive data at rest, including identity documents and financial records.
• Role-based access controls ensuring that only authorised kb8 personnel can access personal data, and only to the extent required by their job function.
• Regular security assessments and vulnerability testing of the kb8 platform infrastructure.
• Logging and monitoring of access to personal data stores to detect and investigate unusual access patterns.
• Staff training on data protection obligations and secure data handling practices.

Despite these measures, no system connected to the internet can be guaranteed to be completely secure. In the event of a data breach that is likely to result in a high risk to your rights, kb8 will notify affected players without undue delay and take all reasonable steps to contain the breach and prevent further harm.

8. Your Privacy Rights

As a kb8 player, you have the following rights with respect to your personal data. To exercise any of these rights, contact [email protected] with the subject line "Privacy Rights Request". kb8 will respond within five business days.

9. Minors and Age Restriction

The kb8 platform is strictly for adults aged 18 years and above. kb8 does not knowingly collect personal data from any individual under the age of 18. If we become aware that a person under 18 has provided personal data to kb8 — including by registering an account — we will take immediate steps to close the account, delete the associated personal data, and return any funds deposited, less any amounts already wagered.

If you are a parent or guardian and believe that a minor has registered on the kb8 platform using your details or their own, please contact [email protected] immediately. We will investigate and respond promptly.

10. Third-Party Content and Links

The kb8 platform integrates third-party game software from providers including Pragmatic Play, Evolution Gaming, Microgaming, Spribe, and Ezugi. These providers operate their own game environments within the kb8 interface. While kb8 takes care to partner with reputable providers, we are not responsible for the data practices of these third parties within their own systems.

This Privacy Policy applies solely to data collected and processed by kb8 directly. It does not apply to any third-party website or service, even if accessed through a link or frame appearing within the kb8 platform.

11. Changes to This Privacy Policy

kb8 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When a material change is made, we will notify registered players by email and display an on-screen notice at next login. The effective date shown at the top of this page will be updated to reflect the date of the most recent revision.

Your continued use of the kb8 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the changes, you must stop using the platform and contact support to close your account and request deletion of your data.

12. Contact and Privacy Requests

All privacy-related enquiries, data subject access requests, and complaints should be directed to the kb8 support team using the contact details below. Please include "Privacy Rights Request" or "Data Protection Enquiry" in the subject line of your message so your request is routed to the correct team.

• Email: [email protected] (plain text — not a clickable link)
• Response time: kb8 aims to acknowledge all privacy requests within 2 business days and provide a full response within 5 business days.
• Language: All privacy correspondence is handled in English.
• Support hours: 24 hours a day, 7 days a week.

If you are not satisfied with kb8's response to a privacy request, you have the right to escalate your complaint through the appropriate legal channels available in your jurisdiction.