Privacy Policy — kx8017

1. Introduction

kx8017 ("kx8017", "we", "us", "our") is committed to protecting the privacy and personal data of every individual who interacts with the kx8017 platform at kx8017.app. This Privacy Policy ("Policy") describes how kx8017 collects, uses, stores, shares, and protects personal information provided by members and visitors based in Bangladesh and other accessible territories.

This Policy applies to all personal data collected through the kx8017 website, mobile browser experience, customer support channels (including live chat, email, and WhatsApp), and any other touchpoint through which you communicate with kx8017. By registering an account or continuing to use the kx8017 platform, you confirm that you have read and understood this Policy and consent to the data practices described herein.

This Privacy Policy should be read alongside the kx8017 Terms & Conditions and Responsible Gaming Policy. Where any conflict exists between this Policy and those documents, this Policy governs in relation to data privacy matters.

2. Data We Collect

kx8017 collects personal data in several ways — directly from you during registration and use of the platform, automatically through your interaction with the website, and from third parties such as payment processors and identity verification services. The categories of personal data we collect are set out below.

2.1 Data You Provide Directly

• Identity data: Full legal name, date of birth, nationality, and gender as provided during account registration or identity verification.
• Contact data: Registered Bangladeshi mobile number and email address.
• Address data: Residential address, city (e.g., Dhaka, Chittagong, Sylhet, Khulna), and postal code as provided for KYC purposes.
• Identity documents: Copies of your National Identity Card (NID), passport, or other documents submitted for verification.
• Payment data: Mobile financial service wallet identifiers (bKash, Nagad, Rocket, Upay) and bank account details used for deposits and withdrawals. kx8017 does not store full card numbers or mobile banking PINs.
• Communications data: Records of your correspondence with kx8017 customer support, including live chat transcripts, emails, and WhatsApp messages.
• Responsible gaming data: Any deposit limits, session limits, cooling-off periods, or self-exclusion requests you have submitted through the kx8017 platform.

2.2 Data Collected Automatically

• Technical data: IP address, browser type and version, operating system, device type, screen resolution, and time zone setting.
• Usage data: Pages visited, games played, betting history, session duration, click-stream data, and search queries entered within the kx8017 platform.
• Transaction data: Details of all deposits, withdrawals, bonus credits, wagers placed, and winnings received on your kx8017 account.
• Cookie and tracking data: Session identifiers, preference cookies, and analytics data as further described in Section 6 of this Policy.

2.3 Data Received from Third Parties

• Payment processors: Transaction confirmation data from bKash, Nagad, Rocket, Upay, and partner banks to verify that a deposit or withdrawal has been completed.
• Identity verification providers: Results of automated or manual document verification checks conducted on your submitted KYC documents.
• Fraud and risk screening: Risk scores and flagging data from third-party fraud prevention tools used to protect the integrity of the kx8017 platform.

3. How We Use Your Data

kx8017 uses the personal data it collects for the following specific purposes. We do not use your data for any purpose that is incompatible with the purpose for which it was originally collected without first obtaining your explicit consent.

Purpose	Data Used	Legal Basis
Account registration and management	Identity, contact, address data	Contract performance
Identity verification (KYC)	Identity documents, address data	Legal obligation
Processing deposits and withdrawals	Payment data, transaction data	Contract performance
Fraud prevention and security monitoring	Technical, usage, transaction data	Legitimate interest
Customer support and dispute resolution	Identity, contact, communications data	Contract performance
Responsible gaming monitoring	Usage, transaction, responsible gaming data	Legal obligation / legitimate interest
Platform improvement and analytics	Usage, technical, cookie data	Legitimate interest
Promotional communications (opt-in only)	Contact data, usage preferences	Consent
Legal and regulatory compliance	All categories as required	Legal obligation

4. Legal Basis for Processing

kx8017 processes personal data only where a valid legal basis exists. The four legal bases on which kx8017 relies are:

• Contract performance: Processing is necessary to fulfil the contractual relationship between kx8017 and the member — for example, to operate your account, process your deposits, and pay out winnings.
• Legal obligation: Processing is required to comply with applicable legal and regulatory requirements, including anti-money-laundering (AML) rules, Know Your Customer (KYC) obligations, and responsible gaming regulations.
• Legitimate interest: Processing serves kx8017's legitimate business interests — such as fraud prevention, platform security, and service improvement — provided those interests are not overridden by your rights and freedoms.
• Consent: Where kx8017 relies on your consent — for example, to send you promotional communications — you may withdraw that consent at any time by contacting [email protected] or updating your account notification preferences. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

5. Sharing Your Data

kx8017 does not sell, rent, or trade your personal data to any third party. kx8017 may share your personal information with the following categories of recipient strictly on a need-to-know basis and subject to appropriate contractual data protection safeguards:

5.1 Service Providers

kx8017 engages trusted third-party service providers who process data on our behalf, including payment processors (bKash, Nagad, Rocket, Upay, partner banks), identity verification providers, cloud hosting and infrastructure providers, customer support platform operators, and fraud detection services. These providers are contractually obligated to process data solely in accordance with kx8017's instructions and this Policy.

5.2 Game Content Providers

Game studios and live casino operators whose content is hosted on kx8017 — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive anonymised or pseudonymised session data necessary to operate the game and verify the outcome of each round. These providers do not receive your full identity or payment data.

5.3 Legal and Regulatory Authorities

kx8017 may disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by applicable law, court order, or regulatory direction. kx8017 will make reasonable efforts to notify affected members of such disclosure where legally permitted to do so.

5.4 Business Transfers

In the event of a merger, acquisition, asset sale, or restructuring of kx8017 or its parent entity, personal data held by kx8017 may be transferred to the acquiring or successor entity as part of that transaction. Affected members will be notified in advance of any such transfer and the privacy practices of the successor entity.

6. Cookies & Tracking Technologies

kx8017 uses cookies — small text files stored on your device — and similar tracking technologies to operate and improve the platform. The categories of cookies used on kx8017 are as follows:

• Strictly necessary cookies: Required for the platform to function. These include your login session cookie, security tokens, and load-balancing identifiers. They cannot be disabled without breaking core platform functionality.
• Preference cookies: Store your language, display, and notification preferences so that kx8017 remembers your settings between sessions. Disabling these cookies will result in your preferences being reset each visit.
• Analytics cookies: Collect anonymised data on how members navigate and interact with the kx8017 platform, which pages are most frequently visited, and where errors occur. This data helps kx8017 improve the user experience. No personally identifiable information is included in analytics data.
• Responsible gaming cookies: Record session start times and cumulative session durations to power the session time reminder feature available to all kx8017 members.

kx8017 does not deploy advertising cookies, retargeting pixels, or any cookie that tracks your activity on websites or applications other than kx8017.app. You may manage or clear cookies through your browser settings at any time; however, disabling strictly necessary cookies will impair your ability to use the platform.

7. Data Security

kx8017 applies a layered approach to data security designed to protect your personal information against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and kx8017 servers
• AES-256 encryption for sensitive data stored at rest, including identity documents and payment records
• Two-factor authentication (2FA) available to all members via SMS OTP to protect account access
• Role-based access controls ensuring kx8017 staff can only access member data strictly required for their job function
• Regular security audits and penetration testing conducted by independent third-party security specialists
• Intrusion detection and monitoring systems that flag and respond to anomalous access patterns in real time
• Secure data centres with physical access restrictions, CCTV monitoring, and redundant power and network infrastructure

While kx8017 takes all reasonable and practicable steps to secure your data, no system connected to the internet can be guaranteed to be completely free of risk. In the unlikely event of a data breach that is likely to result in a risk to your rights and freedoms, kx8017 will notify affected members without undue delay and will take all necessary steps to contain and remediate the breach.

8. Data Retention

kx8017 retains personal data only for as long as is necessary for the purposes described in this Policy or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your membership on kx8017 plus a minimum of five (5) years following account closure, to satisfy anti-money-laundering record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with financial record-keeping obligations.
• Identity verification documents: Retained for a minimum of five (5) years from the date of submission or account closure, whichever is later.
• Customer support communications: Retained for three (3) years from the date of the most recent interaction in a given support case, or longer where the matter relates to an ongoing dispute or legal proceeding.
• Cookie and analytics data: Anonymised analytics data is retained for up to twenty-four (24) months. Session cookies expire at the end of your browser session; preference cookies expire after twelve (12) months.
• Marketing consent records: Retained for the duration of your consent plus three (3) years following withdrawal of consent, to demonstrate compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original information.

9. Your Rights

As a kx8017 member, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact kx8017 at [email protected] with your registered mobile number and a description of your request. kx8017 will respond within a reasonable period and no later than thirty (30) days of receiving a valid request.

• Right of access: You may request a copy of all personal data that kx8017 holds about you, together with information about how and why it is being processed.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held about you. For minor corrections such as mobile number updates, you may also make changes directly through your account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where you object to processing based on legitimate interest. This right is subject to legal retention obligations — kx8017 may be required to retain certain data even following an erasure request.
• Right to restriction of processing: You may request that kx8017 temporarily suspend processing of your personal data — for example, while the accuracy of data is being contested or while an objection is being assessed.
• Right to data portability: You may request that kx8017 provide your personal data in a structured, commonly used, machine-readable format so that you may transfer it to another service provider.
• Right to object: You may object to processing of your personal data where kx8017 relies on legitimate interest as the legal basis. kx8017 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where kx8017 processes your data on the basis of your consent — for example, for marketing communications — you may withdraw that consent at any time without detriment to your account standing.

10. Children's Privacy

kx8017 is strictly an adult platform. Access to all kx8017 services is prohibited for individuals under the age of 18. kx8017 does not knowingly collect personal data from anyone under the age of 18. Where kx8017 becomes aware that personal data has been collected from a person under 18, that data will be deleted immediately and the associated account closed.

If you believe that a minor may have registered an account on kx8017 or that kx8017 holds personal data relating to a child, please contact us immediately at [email protected] so that we can take prompt remedial action. kx8017 cooperates fully with parents or guardians seeking to protect children from exposure to online gambling.

11. Third-Party Links

The kx8017 platform does not contain links to external third-party websites as a matter of policy. In the event that informational references to third-party entities appear within the platform — such as mentions of payment providers bKash, Nagad, or Rocket — kx8017 is not responsible for the privacy practices of those entities. We recommend that you review the privacy policies of any third-party service you use to deposit funds to or withdraw funds from your kx8017 account.

12. Policy Updates

kx8017 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory guidance. When material changes are made to this Policy, kx8017 will notify registered members via the mobile number or email address associated with their account at least seven (7) days before the changes take effect. The updated Policy will also be published on this page with a revised effective date.

Where changes to this Policy require your renewed consent — for example, where we seek to use your data for a new purpose — kx8017 will obtain that consent separately and will not rely on acceptance of the updated Policy as implicit consent to new processing activities.

Your continued use of the kx8017 platform following the effective date of an updated Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you should cease using kx8017 and may request account closure in accordance with the Terms & Conditions.

13. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way kx8017 handles your personal data, please contact the kx8017 privacy team through the following channels. All contacts are plain text — none of the details below are clickable links.

• Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week via the kx8017 website
• WhatsApp: +880 1700 000000
• Response Time: kx8017 aims to acknowledge all privacy-related enquiries within 24 hours and to provide a substantive response within 30 days of receiving all relevant information.

For data subject rights requests — including access, rectification, erasure, portability, or objection — please include your registered mobile number and a clear description of your request in your message to ensure the fastest possible response from the kx8017 privacy team.