kf999 Privacy Policy — How We Protect Your Personal Data

1 Introduction

kf999 operates an online betting and casino platform serving players in the Bangladesh market. As part of delivering our services — which include sports betting on cricket matches such as BPL and T20 World Cup fixtures, live casino games powered by studios including Evolution Gaming and Pragmatic Play, and slot products from providers such as NetEnt and Microgaming — we necessarily process certain personal data about our players.

We take our data protection responsibilities seriously. This Privacy Policy has been written to be clear, specific, and honest about our practices. We do not use vague language to obscure what we do with your data. If you have any questions about anything in this document, our support team is available at [email protected] during Bangladesh Standard Time (BST, UTC+6) business hours.

This Policy should be read together with the kf999 Terms & Conditions, which govern your contractual relationship with the platform, and our Responsible Gaming Policy, which describes the player protection tools available to you.

2 Data Controller

For the purposes of this Privacy Policy, kf999 acts as the data controller in respect of personal data collected from players and visitors using the kf999.io platform. As data controller, kf999 determines the purposes for which, and the means by which, your personal data is processed.

All data protection enquiries, subject access requests, and rights-exercise requests should be directed to our support team at [email protected]. We will acknowledge all requests within 5 business days and aim to resolve them within 30 calendar days from the date of receipt.

3 Personal Data We Collect

kf999 collects personal data across several categories. The table below summarises the types of data we collect and the primary reason for collecting each type:

We do not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or biometric data (beyond the photograph submitted as part of NID-based KYC verification, which is used solely for identity matching purposes).

4 How We Collect Your Data

kf999 collects personal data through the following channels:

• Direct submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or responding to a survey or promotional offer.
• Automated technical collection: Data collected automatically as you interact with the kf999 platform, including IP addresses, device identifiers, browser fingerprints, session logs, and clickstream data, collected via server logs and first-party cookies.
• Payment partners: Confirmation data from payment processors — bKash, Nagad, Rocket, Upay, and Bangladeshi bank partners — relating to transaction completion, failure status, and wallet holder identity matching.
• Identity verification providers: Results and status updates from KYC verification processes where a third-party document verification service is used to validate NID or passport documents.
• Game providers: Aggregated gameplay and wagering data from licensed game studios to support dispute resolution and responsible gaming monitoring.

5 Legal Basis for Processing

kf999 processes your personal data only where a valid legal basis exists. The applicable legal bases for our processing activities are:

• Contractual necessity: Processing required to enter into and perform our contract with you as a registered player — including account creation, identity verification, payment processing, and bet settlement.
• Legal obligation: Processing required for kf999 to comply with applicable anti-money-laundering (AML) rules, counter-terrorist financing obligations, and financial record-keeping requirements.
• Legitimate interests: Processing necessary for kf999's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improvement of our services — where those interests are not overridden by your data protection rights.
• Consent: Processing for direct marketing communications (email newsletters, SMS promotions) where you have given explicit, freely-given, informed consent. You may withdraw this consent at any time.

6 How kf999 Uses Your Personal Data

The personal data collected by kf999 is used for the following specific purposes:

• Account management: Creating and maintaining your kf999 player account, enabling login authentication, and managing account settings and preferences.
• Identity and age verification: Conducting KYC checks to confirm your identity and verify that you are 21 years of age or older before processing withdrawal requests or approving high-value deposits.
• Payment processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, and Bangladeshi bank transfers, and maintaining accurate transaction records denominated in BDT.
• Fraud prevention and security: Monitoring account activity, IP patterns, device fingerprints, and transaction behaviour to detect, prevent, and investigate suspected fraud, money laundering, or platform abuse.
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour; administering self-exclusion, deposit limit, and session time-limit tools; and communicating with players who may require responsible gaming support.
• Customer support: Responding to account queries, resolving disputes, processing complaints, and maintaining records of support interactions for quality assurance and training purposes.
• Platform improvement: Analysing aggregated, anonymised usage data to identify technical issues, improve navigation, and optimise the user experience for players across Bangladesh.
• Marketing communications: Sending promotional offers, bonus notifications, seasonal promotions (e.g., Eid, Pohela Boishakh, BPL season), and kf999 news to players who have opted in to receive such communications.
• Legal and regulatory compliance: Retaining transaction and identity records as required by applicable AML and financial compliance regulations.

7 Data Sharing & Third-Party Disclosure

7.1 No Sale of Personal Data. kf999 does not sell, rent, or trade your personal data to third parties for their own commercial purposes under any circumstances.

7.2 Service Providers. kf999 shares personal data with carefully selected third-party service providers who process data on our behalf and under our instructions, strictly for the purpose of delivering services to you. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, and Bangladeshi banking partners for transaction processing;
• KYC and identity verification providers for document validation and age verification;
• Game studios and platform providers — Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi — for gameplay data necessary to deliver and settle games;
• IT infrastructure and cloud hosting providers who store platform data on secured servers;
• Fraud detection and cybersecurity vendors for real-time threat monitoring.

All third-party service providers are bound by contractual data processing agreements that restrict their use of your data to the specified purpose and require them to maintain appropriate security standards.

7.3 Legal Disclosure. kf999 may disclose personal data to government authorities, law enforcement agencies, or regulatory bodies where required by applicable law, court order, or where disclosure is necessary to prevent, detect, or prosecute criminal activity, including money laundering or fraud.

7.4 Business Transfers. In the event of a merger, acquisition, or sale of all or part of kf999's business, personal data held by kf999 may be transferred to the acquiring entity. You will be notified of any such transfer by email or prominent notice on the platform prior to your data being transferred and subject to a different privacy policy.

8 International Data Transfers

kf999 primarily serves the Bangladesh market and endeavours to process and store data within or as close to the Bangladesh region as operationally feasible. However, some of our third-party service providers — particularly game studio partners and cloud infrastructure providers — may process data in jurisdictions outside Bangladesh.

Where personal data is transferred internationally, kf999 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Privacy Policy. These safeguards may include contractual data processing agreements incorporating standard privacy and security obligations.

By using the kf999 platform, you acknowledge that your data may be processed in jurisdictions outside Bangladesh as described in this section.

9 Data Security Measures

kf999 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS 256-bit encryption applied to all data in transit between your device and kf999 servers;
• Encryption at rest for sensitive stored data including KYC documents, payment details, and account credentials;
• Access controls: Personal data is accessible only to kf999 personnel and authorised service providers who require it to perform specific functions. Access is governed by role-based permission controls and audit logging;
• Intrusion detection and monitoring: Continuous real-time monitoring of platform infrastructure for anomalous activity or security threats;
• Regular security assessments: Periodic vulnerability assessments and penetration testing conducted against kf999 platform infrastructure;
• Incident response procedures: A documented data breach response process including notification procedures in the event of a material security incident affecting player data.

10 Data Retention

kf999 retains your personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy or as required by applicable law. The following general retention guidelines apply:

• Active account data: Retained for the full duration of your account relationship with kf999;
• Transaction and financial records: Retained for a minimum of 5 years from the date of the transaction, in accordance with standard financial record-keeping and AML obligations;
• KYC documents: Retained for a minimum of 5 years from the date of account closure or the last transaction, whichever is later;
• Support and communications records: Retained for up to 3 years from the date of the interaction, or longer where the record relates to an unresolved dispute or legal matter;
• Marketing consent records: Retained for as long as you remain opted in, and for 1 year following opt-out, as evidence of consent status;
• Technical and usage logs: Retained for up to 12 months in identifiable form; thereafter anonymised for aggregate analytics purposes.

When the applicable retention period expires, personal data is securely deleted using industry-standard deletion methods, or irreversibly anonymised so that it can no longer be linked to an identifiable individual.

11 Cookies & Tracking Technologies

kf999 uses cookies and similar technologies on the kf999.io platform. A cookie is a small text file placed on your device when you visit a website. We use the following categories of cookies:

• Strictly necessary cookies: These cookies are essential for the platform to function correctly — they enable login session management, security token validation, and core account functionality. These cookies cannot be disabled without disrupting platform operation.
• Analytics cookies: First-party analytics cookies help us understand how players navigate the platform — which pages are most visited, where sessions begin and end, and how features are used. This data is collected in aggregate and does not identify individual players by name. We use this information solely to improve the kf999 platform experience.
• Functional cookies: These cookies remember your platform preferences — such as your preferred language setting and display options — to personalise your experience on return visits.

kf999 does not deploy third-party advertising cookies, social media tracking pixels, or any cross-site behavioural tracking technologies on the platform.

You may manage or disable non-essential cookies through your browser settings. Note that disabling strictly necessary cookies will prevent you from using core platform features including account login.

12 Children's Privacy and the 21+ Rule

The kf999 platform is strictly intended for adults aged 21 years and above. kf999 does not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification is a mandatory component of the KYC process, and accounts found to belong to individuals under the minimum age will be immediately suspended and all data will be securely deleted.

If you have reason to believe that a minor under the age of 21 has created a kf999 account or submitted personal data to the platform, please notify us immediately at [email protected]. kf999 will investigate and take appropriate action without delay.

13 Exercising Your Data Rights

As a kf999 player, you are entitled to exercise the data rights summarised in the "Player Rights" section above. To submit any data rights request, please contact our support team at [email protected] with the subject line "Data Rights Request" and include:

• Your full registered name;
• Your registered email address or mobile number;
• A clear description of the right you wish to exercise and the specific data it relates to;
• A copy of your NID or other identity document so we can verify your identity before disclosing or acting on data (this is a security requirement, not an obstacle).

kf999 will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days and will notify you accordingly.

There is no charge for submitting a data rights request. However, kf999 reserves the right to charge a reasonable administrative fee for requests that are manifestly unfounded, excessive, or repetitive in nature.

Please note that certain data rights may be limited where kf999 has a legal obligation to retain the relevant data — for example, transaction records that must be kept under AML regulations cannot be erased upon request during the mandatory retention period, even if an erasure request is submitted.

14 Marketing Communications

kf999 may send you promotional communications — including email newsletters, SMS notifications, and in-platform messages — about bonuses, seasonal offers (such as Eid, Pohela Boishakh, and BPL season promotions), new game releases, and platform updates, provided that you have given your explicit consent to receive such communications at the point of registration or thereafter.

You may withdraw your consent to receive marketing communications at any time by:

• Clicking the unsubscribe link included in any marketing email from kf999; or
• Updating your communication preferences in your kf999 account settings panel; or
• Contacting [email protected] with a clear opt-out request.

Opt-out requests will be processed within 5 business days. Please note that opting out of marketing communications does not affect the delivery of transactional messages — such as deposit confirmations, withdrawal notifications, KYC status updates, and security alerts — which are necessary communications related to your account and are sent regardless of marketing preferences.

15 Amendments to This Privacy Policy

kf999 reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in our data processing practices, new legal requirements, or changes to the platform's services. Where changes are material — meaning they significantly affect how we process your personal data or reduce your rights — we will provide advance notice by email to your registered address or by prominent notice on the kf999.io platform.

The updated Privacy Policy will take effect from the date stated in the "Last Updated" field at the top of this document. Your continued use of the kf999 platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with the revised Policy, you must cease using the platform and may request account closure.

We recommend reviewing this Privacy Policy periodically to stay informed about how kf999 protects your data. The most current version will always be accessible on this page at kf999.io/privacy-policy.

16 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way kf999 handles your personal data, please contact our dedicated support team using the details below. All communications are handled in English.

• Email: [email protected] (plain text — not a clickable link)
• Support Hours: Available daily, Bangladesh Standard Time (BST, UTC+6)
• Platform: kf999.io