kx99 Privacy Policy

1. Introduction

kx99 is committed to protecting the privacy and personal data of every player who chooses to register and play on our platform. We recognise that the trust you place in us extends beyond the fairness of our games and the security of your funds — it encompasses the responsible stewardship of your personal information as well.

This Policy applies to all personal data collected through the kx99 website at kx99.io, including data collected during the registration process, during active gameplay, through payment transactions processed via bKash, Nagad, Rocket, and other supported methods, and through any communications you have with our customer support team.

This Policy is written in English and is intended for players based in Bangladesh. Where local data protection regulations apply, kx99 will comply with those requirements to the extent they are applicable to our operations.

2. Data Controller

2.1 For the purposes of this Policy, kx99 acts as the data controller in respect of personal data collected from players registered on the platform.

2.2 As data controller, kx99 determines the purposes and means of processing personal data and is responsible for ensuring that data is handled lawfully, fairly, and transparently.

2.3 Any queries regarding kx99's role as data controller, or any aspect of this Privacy Policy, may be directed to our support team at [email protected].

3. Data We Collect

3.1 Registration Data

When you create an account on kx99, we collect the following information:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify the 21+ age requirement)
• Mobile phone number registered in Bangladesh
• Email address
• Preferred username and password (password is stored in hashed form only — we never store plain-text passwords)
• City and district of residence within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi)

3.2 Identity Verification (KYC) Data

To comply with our Know Your Customer obligations and to process withdrawals, we may collect:

• Scanned or photographed copy of your National Identity Card (NID), passport, or birth certificate
• Proof of payment method ownership (e.g., screenshot of bKash or Nagad account registered in your name)
• Selfie photograph for identity matching purposes, where required

3.3 Transaction Data

All financial transactions on the platform generate records that we retain, including:

• Deposit amounts, dates, and payment method references (bKash transaction IDs, Nagad references, card last-four digits)
• Withdrawal requests, processed amounts, and destination payment method identifiers
• Bonus credits, wagering activity, and balance history

3.4 Usage and Technical Data

When you use the kx99 platform, our servers automatically record:

• IP address and approximate geographic location (country and city level)
• Device type, operating system, and browser version
• Pages visited, game sessions launched, time spent on site, and click-path data
• Session timestamps and login/logout records

3.5 Communications Data

Any messages you send to kx99 via email ([email protected]) or live chat are retained as part of your support record. This includes enquiries, complaints, responsible gaming requests, and any documentation you provide in support of a dispute.

4. How We Use Your Data

The personal data kx99 collects is used for the following purposes:

Purpose	Data Used
Account creation and authentication	Name, email, phone number, username, hashed password
Age and identity verification (KYC)	Date of birth, NID/passport, selfie photograph
Processing deposits and withdrawals	Transaction records, payment method identifiers
Fraud prevention and security monitoring	IP address, device data, transaction history, login records
Responsible gaming compliance	Wagering history, session duration, deposit frequency
Customer support and dispute resolution	Communications data, account history
Personalised gaming experience	Game preferences, usage data, session history
Platform analytics and improvement	Aggregated, anonymised usage data
Marketing communications (with consent)	Email, phone number, game preferences

4.1 kx99 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or updating this Policy with appropriate notice.

4.2 Where kx99 uses your data for marketing communications — such as BPL season promotions, Eid bonus announcements, or Pohela Boishakh offers — you may opt out at any time by contacting [email protected] or by using the unsubscribe link included in each marketing email.

5. Legal Basis for Processing

kx99 processes personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the player account agreement — including registration, KYC, payment processing, and account management — is carried out on the basis that it is necessary to perform our contract with you.
• Legitimate interests: Processing for fraud prevention, security monitoring, platform analytics, and responsible gaming compliance is carried out on the basis of kx99's legitimate interests in operating a safe and legally compliant platform, balanced against your rights and interests.
• Legal obligation: Where kx99 is required to collect and retain certain data to comply with applicable legal or regulatory obligations, processing is carried out on that basis.
• Consent: Where processing is based on your consent — such as for marketing communications or optional personalisation features — you may withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

6. Data Sharing & Disclosure

6.1 kx99 does not sell, rent, or otherwise commercially transfer your personal data to unaffiliated third parties.

6.2 kx99 may share personal data with the following categories of trusted service partners, strictly for the purposes described in Section 4:

• Payment processors: bKash, Nagad, Rocket, Upay, and card payment networks require transaction data to process your deposits and withdrawals securely.
• KYC and identity verification providers: Third-party identity verification services may receive your NID or passport data to confirm your identity and age in accordance with our KYC obligations.
• Game content providers: Licensed game studios such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi may receive anonymised player session data necessary to deliver and maintain their game software on the kx99 platform.
• IT infrastructure and cloud services: Server hosting, content delivery, and database management providers may process data on kx99's behalf in their role as data processors.
• Fraud and security vendors: Specialist fraud detection and cybersecurity partners may receive technical data (IP addresses, device fingerprints) to identify and prevent fraudulent activity.

6.3 All third-party service partners with whom kx99 shares personal data are required to process that data solely in accordance with kx99's instructions and in compliance with applicable data protection standards. kx99 maintains data processing agreements with all such partners.

6.4 kx99 may disclose personal data to law enforcement agencies, regulatory bodies, or other public authorities where required to do so by applicable law, court order, or regulatory directive.

7. International Transfers

7.1 Some of the third-party service partners described in Section 6 may be located in countries outside Bangladesh. Where personal data is transferred internationally, kx99 takes appropriate steps to ensure that such transfers are subject to adequate safeguards, including contractual data protection clauses or equivalent mechanisms.

7.2 By using the kx99 platform and providing your personal data, you acknowledge that your data may be transferred to, stored in, and processed in countries other than Bangladesh, and you consent to such transfers where they are conducted in accordance with the safeguards described in this section.

8. Cookies & Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and to remember certain information about your preferences and session state.

8.2 How kx99 Uses Cookies

kx99 uses the following categories of cookies on the platform:

• Strictly necessary cookies: These are essential for the platform to function correctly. They enable core functionality such as session management, authentication, and security. You cannot opt out of strictly necessary cookies without disabling your ability to use the platform.
• Functional cookies: These cookies remember your preferences — such as your preferred language display, default game lobby view, or responsible gaming settings — to provide a more personalised experience.
• Analytics cookies: kx99 uses anonymised analytics cookies to understand how players navigate the platform, which games are most popular, and where technical issues may be occurring. This data is aggregated and does not identify individual players.
• Security cookies: These cookies help kx99 detect and prevent fraudulent activity, including login anomalies, unusual session patterns, and multi-account detection.

8.3 kx99 does not use third-party advertising cookies or behavioural tracking cookies that follow your activity beyond the kx99 website.

8.4 You may control cookie settings through your browser's privacy settings. Disabling certain cookies may affect the functionality of the kx99 platform, including game loading performance and session continuity.

9. Data Retention

9.1 kx99 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations.

9.2 The following indicative retention periods apply to the main categories of data kx99 holds:

Data Category	Retention Period	Basis
Account registration data	Duration of account + 5 years post-closure	Contractual & legal obligation
KYC identity documents	5 years from submission or account closure	Legal obligation (AML/KYC regulations)
Transaction records	5 years from transaction date	Legal obligation (financial records)
Customer support communications	3 years from last contact	Legitimate interests (dispute resolution)
Technical / usage logs	12 months on a rolling basis	Legitimate interests (security monitoring)
Marketing consent records	Until consent is withdrawn + 1 year	Consent

9.3 At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual player.

10. Your Rights

As a player on the kx99 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 days.

• Right of Access: You have the right to request a copy of the personal data kx99 holds about you, along with information about how it is being used.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that we correct or update it.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations described in Section 9.
• Right to Restriction of Processing: In certain circumstances, you have the right to request that we limit the processing of your data — for example, while a dispute about its accuracy is being resolved.
• Right to Data Portability: You may request a machine-readable copy of the personal data you have provided to kx99, for the purpose of transmitting it to another service provider.
• Right to Object: You have the right to object to processing of your data that is based on kx99's legitimate interests, including profiling for personalised game recommendations. Where you object, kx99 will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

11. Children's Privacy

11.1 The kx99 platform is strictly intended for adults aged 21 and above. kx99 does not knowingly collect personal data from individuals under the age of 21.

11.2 If kx99 becomes aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete that data and suspend the associated account. Any funds deposited will be returned to the original payment method where technically possible.

12. Security Measures

12.1 kx99 applies a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These include:

• 256-bit SSL/TLS encryption for all data in transit between your device and kx99 servers.
• Encrypted password storage using industry-standard hashing algorithms — plain-text passwords are never stored.
• Access controls restricting internal access to personal data on a strict need-to-know basis, with audit logging of all access events.
• Regular security assessments including vulnerability scanning and penetration testing of the kx99 platform infrastructure.
• Fraud detection systems that monitor for anomalous login behaviour, unusual transaction patterns, and potential account compromise in real time.
• Data backup and disaster recovery procedures to ensure continuity of service and integrity of player data in the event of a system failure.

12.2 While kx99 employs robust security measures, no system is entirely impervious to attack. In the event of a data breach that poses a risk to your rights and interests, kx99 will notify affected players as promptly as possible and take all reasonable steps to contain and remediate the breach.

12.3 You play an important role in keeping your account secure. kx99 recommends using a unique, strong password for your kx99 account, not sharing your credentials with anyone, and contacting support immediately if you suspect unauthorised access.

13. Third-Party Links

13.1 The kx99 platform may display references to third-party services such as game providers (Pragmatic Play, Evolution Gaming, Spribe, Ezugi, Microgaming, NetEnt) or payment partners (bKash, Nagad, Rocket). These are integrated services, not independent external links that take you away from kx99.io.

13.2 kx99 does not include outbound links to external third-party websites. If any such links appear (for example, in blog posts or informational content), please note that kx99 is not responsible for the privacy practices of those external sites and recommends reviewing their privacy policies independently.

14. Policy Amendments

14.1 kx99 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable regulations. The effective date at the top of this page will be updated whenever a revision is made.

14.2 For material changes that significantly affect how we handle your personal data, kx99 will provide advance notice via email to your registered address or via a prominent notice on the platform. We recommend reviewing this Policy periodically.

14.3 Continued use of the kx99 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, please cease using the platform and contact support to initiate account closure.

This Privacy Policy was last reviewed and updated in January 2026. The version published on this page supersedes all prior versions.

15. Contact Us

15.1 If you have any questions, concerns, or requests relating to this Privacy Policy or to the way kx99 handles your personal data, please get in touch with our team:

15.2 kx99 is committed to resolving privacy concerns fairly and promptly. If you are not satisfied with our response, you retain the right to escalate your concern through appropriate legal or regulatory channels available in your jurisdiction.