Privacy Policy — How k3bd Collects, Uses, and Protects Your Data

1. Data We Collect

k3bd collects personal data from you through several channels: during the account registration process, during the KYC (Know Your Customer) verification process, during your ongoing use of the platform, and through automated technical means such as cookies and server logs. The categories of personal data we collect are described in detail below.

1.1 Registration Data

When you create a k3bd account, we collect the following information:

• Full legal name
• Date of birth
• Email address
• Mobile phone number (Bangladeshi carrier)
• Residential address (city and district within Bangladesh)
• Username and encrypted password
• Preferred currency (Bangladeshi Taka, ৳)

This data is collected for the purposes of creating and administering your account, verifying your eligibility to play, communicating with you about your account, and ensuring the security and integrity of the k3bd platform.

1.2 KYC and Identity Verification Data

Before processing any withdrawal, k3bd is required to verify your identity in accordance with anti-money-laundering obligations. During this process, we may collect:

• Government-issued photo ID (National ID card, passport, or birth registration certificate)
• A selfie photograph holding your photo ID, where requested
• Proof of payment method ownership (e.g., a screenshot of your bKash or Nagad account showing your registered name and number)
• Proof of address documents, where required for high-value account reviews

KYC documents are processed and stored in an encrypted, access-restricted environment. Access is limited to authorised k3bd compliance personnel only.

1.3 Transaction and Payment Data

k3bd records all financial transactions associated with your account, including deposits and withdrawals. We collect the payment method type used (bKash, Nagad, Rocket, Upay, Visa, Mastercard, or bank transfer), the transaction reference number provided by your payment provider, transaction amounts in Bangladeshi Taka (৳), and timestamps for each transaction. k3bd does not store full card numbers, CVV codes, or mobile banking PINs — these credentials are handled exclusively by the respective payment providers.

1.4 Gameplay and Betting Data

We collect data about your activity on the k3bd platform, including game sessions played, bet amounts and outcomes, sports markets wagered on, bonus offers claimed, and session start/end times. This data is used to administer your account, calculate bonus eligibility, provide customer support, and — on an anonymised aggregate basis — to improve the platform's game selection and user experience.

1.5 Technical and Device Data

When you access k3bd, our servers automatically log certain technical information, including your IP address, device type and operating system, browser type and version, pages visited and time spent on each, referring URL (if applicable), and preferred language settings. This data is used for security monitoring, fraud prevention, and platform performance optimisation.

2. How We Use Your Data

k3bd processes your personal data on the basis of contractual necessity (to provide the service you have registered for), legal obligation (to comply with anti-money-laundering and responsible gaming requirements), and legitimate interest (to maintain platform security and improve user experience). We do not process your data on the basis of consent alone; however, where consent is the applicable legal basis, you may withdraw it at any time without affecting the lawfulness of prior processing.

Purpose	Data Used	Legal Basis
Account creation and management	Registration data, device data	Contractual necessity
Identity and age verification (KYC)	KYC documents, registration data	Legal obligation
Processing deposits and withdrawals	Transaction data, KYC data	Contractual necessity
Fraud prevention and AML compliance	Transaction data, device data, gameplay data	Legal obligation / Legitimate interest
Customer support and dispute resolution	Registration data, transaction data, gameplay data	Contractual necessity
Bonus administration and wagering tracking	Gameplay data, transaction data	Contractual necessity
Platform security and abuse prevention	Device data, technical logs	Legitimate interest
Service communications (account alerts, policy updates)	Email address, mobile number	Contractual necessity
Promotional communications (opt-in only)	Email address, gameplay preferences	Consent

2.1 Marketing Communications

k3bd will only send promotional emails or SMS messages about bonuses, tournaments, or platform features if you have explicitly opted in to receive marketing communications during registration or via your account settings. You may withdraw your marketing consent at any time by updating your communication preferences in your k3bd account dashboard, or by contacting support at [email protected]. Withdrawing marketing consent does not affect the delivery of essential service communications such as account security alerts, deposit confirmations, withdrawal notifications, and policy update notices.

3. Data Sharing & Disclosure

k3bd does not sell, rent, trade, or otherwise disclose your personal data to unaffiliated third parties for their own commercial or marketing purposes. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the relevant purpose.

3.1 Payment Processors

To process deposits and withdrawals, k3bd shares necessary transaction data with payment providers including bKash, Nagad, Rocket, Upay, and card processing networks (Visa, Mastercard). The data shared is limited to what is required to execute the specific transaction (e.g., account number, transaction amount, reference code). Each payment provider operates under its own privacy policy and data protection obligations.

3.2 Game Content Providers

k3bd integrates games from third-party software providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised session identifiers for the purpose of delivering game content and recording game outcomes for dispute resolution. k3bd does not share identifiable personal data (such as your name, email, or phone number) with game content providers.

3.3 Legal and Regulatory Disclosure

k3bd may be required to disclose personal data in response to a valid legal process, including a court order, regulatory investigation, or law enforcement request. In such cases, k3bd will disclose only the minimum data required to comply with the relevant legal obligation, and will notify the affected player of the disclosure where permitted to do so by law.

3.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of k3bd's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. k3bd will provide notice of any such transfer by updating this Privacy Policy and notifying registered players via the email address on their account. The acquiring entity will be required to honour the commitments made in this Policy with respect to your personal data.

4. Cookies & Tracking Technologies

k3bd uses cookies and similar tracking technologies (such as local storage and session tokens) to operate the platform, maintain your login session, ensure security, and gather anonymised analytics data. A cookie is a small text file placed on your device by a web server when you visit a website. Cookies do not contain executable code and cannot access other files on your device.

4.1 Types of Cookies Used by k3bd

Cookie Type	Purpose	Duration
Essential / Session	Maintain your login session, prevent session hijacking, manage CSRF tokens	Session (deleted on browser close)
Security	Detect suspicious login patterns, enforce two-factor authentication state, fraud detection signals	Up to 30 days
Preference	Remember your language preference, display settings, and last-visited game category	Up to 12 months
Analytics	Anonymised page-view and navigation data used to improve platform layout and game discovery	Up to 12 months

k3bd does not use cross-site tracking cookies, third-party advertising cookies, or any cookie designed to build a profile of your browsing activity across websites other than k3bd.app. You can manage cookie settings in your browser; however, disabling essential or security cookies will prevent you from logging in to your k3bd account.

5. Data Retention

k3bd retains personal data for as long as is necessary to fulfil the purpose for which it was collected, and in any event for no longer than required by applicable law. The retention periods below apply to the main categories of data k3bd holds:

• Account and registration data: Retained for the lifetime of the account, and for a minimum of five (5) years after permanent account closure, to satisfy anti-money-laundering record-keeping obligations.
• KYC and identity documents: Retained for a minimum of five (5) years after account closure, in line with international AML compliance standards.
• Transaction records: Retained for a minimum of five (5) years after each transaction date, as required for financial record-keeping and dispute resolution.
• Gameplay and betting records: Retained for three (3) years after the relevant session date, for the purpose of bonus administration, dispute resolution, and responsible gaming monitoring.
• Customer support communications: Retained for two (2) years after the support ticket is closed.
• Technical and server logs: Retained for ninety (90) days for security and fraud detection purposes, after which they are permanently deleted.
• Marketing preference records: Retained until you withdraw consent or request account closure, plus a short period of up to thirty (30) days to process the withdrawal across all communication systems.

Where data is no longer required and no legal retention obligation applies, k3bd permanently and securely deletes or anonymises the relevant data. Anonymised data (from which no individual can be identified) may be retained indefinitely for statistical and platform improvement purposes.

6. Your Privacy Rights

As a registered player on k3bd, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact k3bd's support team at [email protected] with the subject line "Privacy Rights Request". k3bd will acknowledge your request within 48 hours and provide a substantive response within 14 business days.

6.1 Right of Access

You have the right to request confirmation of whether k3bd processes personal data about you, and if so, to receive a copy of that data along with information about the purposes for which it is processed, the categories of data held, the third parties with whom it has been shared, and the retention period that applies to each category. Requests for access are fulfilled free of charge.

6.2 Right to Rectification

You have the right to request correction of any inaccurate or incomplete personal data k3bd holds about you. Some data fields (such as your registered name and date of birth) can only be corrected through the KYC verification process to prevent fraudulent manipulation of account records. Please contact support if you believe any of your registered details are incorrect.

6.3 Right to Erasure

You have the right to request erasure of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. Please note that k3bd is unable to erase data that must be retained to comply with legal obligations — for example, transaction records required under AML legislation. In such cases, k3bd will erase all data that can be deleted and explain clearly why specific data must be retained.

6.4 Right to Restriction

You have the right to request that k3bd restricts the processing of your personal data in certain circumstances — for example, while the accuracy of the data is disputed, or while a complaint about k3bd's processing is under review. During a restriction period, k3bd will store the data but will not actively process it for any purpose other than storage.

6.5 Right to Object to Marketing

You have the right at any time to object to the processing of your personal data for direct marketing purposes. If you object to marketing, k3bd will stop sending promotional communications to you promptly and in no event later than five (5) business days after receiving your objection. You may also exercise this right directly via your account's communication preferences settings without needing to contact support.

7. Data Security

k3bd takes the security of your personal data seriously and implements a layered set of technical and organisational security measures to protect against unauthorised access, loss, destruction, or alteration of your data. The principal security measures in place include:

• 256-bit SSL/TLS encryption for all data in transit between your device and k3bd servers
• Encrypted storage at rest for all sensitive personal data, KYC documents, and financial records
• Role-based access controls ensuring that only authorised personnel have access to personal data, and only to the extent required for their specific role
• Multi-factor authentication requirements for all k3bd administrative systems
• Regular security audits and penetration testing conducted by independent security professionals
• Automated fraud detection systems that monitor account activity for signs of unauthorised access or unusual behaviour
• Incident response procedures to identify, contain, and notify players of any data security incident within 72 hours of discovery where required

7.1 Password Security

k3bd stores account passwords in a hashed and salted format using a modern cryptographic hashing algorithm. k3bd staff cannot view your password in plain text under any circumstances. If you forget your password, you must use the password reset function on the k3bd login page — k3bd will never ask you to provide your password via email or live chat.

8. Policy Updates & Contact

k3bd reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or platform operations. When material changes are made to this Policy, k3bd will notify registered players via the email address on their account and will update the "Last Updated" date at the top of this page. Your continued use of the k3bd platform after any update takes effect constitutes your acknowledgement of the revised Policy.

For minor, non-material updates (such as clarifications of existing practices or corrections of typographical errors), k3bd will update this page without direct notification, but the "Last Updated" date will always reflect the most recent revision.

8.1 Contact the k3bd Privacy Team

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data k3bd holds about you, please contact the k3bd support and privacy team using the following details:

• Email: [email protected] (subject line: "Privacy Rights Request" or "Privacy Query")
• Live Chat: Available 24/7 via your k3bd account dashboard — response time under 2 minutes
• Response time for privacy requests: Acknowledgement within 48 hours; full response within 14 business days

All privacy-related correspondence is handled in English by k3bd's support team. k3bd is committed to resolving privacy concerns promptly and transparently. If you are not satisfied with k3bd's response to a privacy concern, you have the right to escalate the matter through appropriate legal channels available in your jurisdiction.