kb99 Privacy Policy

1 Who We Are

kb99 is an online betting and gaming platform operating at https://kb99.io, offering cricket betting, live casino, slots, and arcade games to adult players in Bangladesh. Throughout this Privacy Policy, "kb99", "we", "us", and "our" refer to the operator of the kb99 platform and its affiliated service providers.

For the purposes of data protection, kb99 acts as the data controller in respect of the personal data of its registered players. This means we determine the purposes for which and the means by which your personal data is processed. Where we engage third-party processors (such as payment gateway providers, identity verification services, or game content providers), we do so under contractual arrangements that obligate those parties to handle your data only as we instruct and only for the purposes we specify.

If you have any questions or concerns regarding this Privacy Policy or the way your data is handled, please contact our support team. Contact details are provided in the relevant section of this policy and on our platform.

2 Data We Collect

kb99 collects personal data from you in the following categories, depending on how you interact with the platform:

2.1 Registration & Identity Data

• Full legal name as it appears on your National Identity Card (NID) or passport
• Date of birth (used to verify that you are aged 21 or above)
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi)
• Email address
• Mobile phone number (used for account verification and bKash/Nagad/Rocket wallet linking)
• Username and encrypted password

2.2 Identity Verification Documents

• Scanned copy or photograph of your National Identity Card (NID), passport, or birth certificate when submitted for age or identity verification
• Selfie or photograph submitted for liveness verification where required

2.3 Financial & Transaction Data

• Mobile wallet account numbers (bKash, Nagad, Rocket, Upay, SureCash) used for deposits and withdrawals
• Visa and Mastercard payment token references (we do not store full card numbers)
• Deposit amounts, withdrawal amounts, transaction timestamps, and transaction reference IDs
• Account balance history

2.4 Gameplay & Betting Data

• Bets placed, games played, wagering history, win/loss records, and bonus usage
• Session durations and gameplay patterns
• Responsible gaming settings you have applied, such as deposit limits or cooling-off periods

2.5 Technical & Device Data

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser type
• Cookies and session identifiers (see Section 7)
• Platform access logs and timestamps

2.6 Communications Data

• Records of live chat conversations with the kb99 support team
• Email correspondence with kb99
• Feedback, complaints, or dispute records submitted through the platform

3 How We Use Your Data

kb99 uses the personal data it collects for the following specific purposes:

Purpose	Data Categories Used
Creating and managing your kb99 account	Registration & Identity Data
Verifying your age and identity (21+ compliance)	Identity Data, Verification Documents
Processing deposits and withdrawals in BDT	Financial & Transaction Data
Detecting and preventing fraud, money laundering, and prohibited conduct	All categories
Providing customer support and resolving disputes	Identity Data, Communications Data, Transaction Data
Delivering and improving platform services and game offerings	Gameplay & Betting Data, Technical Data
Sending account notifications and security alerts	Registration Data, Technical Data
Sending promotional communications (where you have opted in)	Registration Data, Gameplay Data
Monitoring and enforcing responsible gaming limits	Gameplay & Betting Data, Financial Data
Complying with legal and regulatory obligations	All categories

kb99 does not use your personal data for automated decision-making that produces significant legal effects on you without providing an opportunity for human review. Where automated systems flag an account for review (for example, due to suspected fraud or AML concerns), a member of the kb99 compliance team will review the case before any account action is taken.

4 Legal Basis for Processing

kb99 processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing is necessary to perform our contract with you — that is, to operate your kb99 account, process transactions, and deliver gaming services. Without this processing, we cannot provide the platform to you.
• Legal Obligation: We are required to process certain data to comply with applicable laws, including anti-money laundering (AML) requirements, age verification obligations, and fraud prevention measures.
• Legitimate Interests: We process certain data (such as technical and gameplay data) on the basis of our legitimate interests in operating a secure and fair platform, improving our services, and protecting our business and players from fraud and abuse. We balance these interests against your privacy rights.
• Consent: Where we send you marketing communications or use non-essential cookies, we do so on the basis of your consent. You may withdraw consent at any time by updating your account notification preferences or by contacting our support team.

5 Data Sharing & Disclosure

kb99 does not sell your personal data. We may share your data only in the following limited circumstances:

• Payment Processors: We share necessary transaction data with mobile wallet providers (bKash, Nagad, Rocket, Upay, SureCash) and card payment processors (Visa, Mastercard) solely to facilitate deposits and withdrawals. These providers process data under their own privacy policies and applicable financial regulations.
• Identity Verification Services: We may share identity documents and personal data with third-party KYC (Know Your Customer) and age verification providers to fulfil our 21+ compliance obligations.
• Game Content Providers: Where necessary, we share session and account data with our game providers (such as Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, Spribe) to deliver game content and resolve disputes. These providers act as data processors under agreements with kb99.
• Fraud & AML Compliance: We may share data with fraud detection services and, where required by law, with law enforcement agencies, financial intelligence units, or regulatory bodies.
• Legal Requirements: We will disclose personal data where we are compelled to do so by a court order, legal process, or regulatory directive. We will notify you of such disclosure where we are legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of the kb99 business, player data may be transferred as part of that transaction. We will notify registered players of any such change and ensure the receiving entity is bound by equivalent data protection obligations.

In all cases of data sharing, kb99 applies contractual safeguards to ensure that recipient parties handle your data only for the specified purpose and in a manner consistent with this Privacy Policy.

6 Payment Data & Mobile Wallets

Given the prevalence of mobile banking among players in Bangladesh, kb99 handles payment data from bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, and SureCash on a regular basis. The following specific practices apply to payment data:

• Mobile wallet account numbers (e.g., your registered bKash or Nagad number) are stored in encrypted form and are used solely for the purpose of processing deposits and withdrawals to and from your kb99 account.
• kb99 does not store your mobile banking PIN, OTP codes, or any authentication credentials associated with your mobile wallet accounts. These are entered directly in your mobile banking app and are never transmitted to or stored by kb99.
• For Visa and Mastercard transactions, only tokenised payment references are retained by kb99. Full card numbers, CVV codes, and card expiry dates are handled exclusively by the PCI-DSS compliant payment gateway and are never stored on kb99 servers.
• All financial transaction records are retained for a minimum of five years from the date of the transaction in accordance with applicable AML record-keeping obligations.
• Transaction amounts are always denominated and recorded in Bangladeshi Taka (৳ BDT).

7 Cookies & Tracking Technologies

kb99 uses cookies and similar tracking technologies on the platform to ensure it functions correctly, to maintain your logged-in session, and to improve your experience. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the platform to operate. They include session cookies that keep you logged in during your visit. These cannot be disabled without affecting platform functionality.
• Functional Cookies: These cookies remember your preferences, such as your chosen language, notification settings, and responsible gaming limits, so that they persist between sessions.
• Analytics Cookies: We use analytics tools to understand how players navigate the platform, which games are most popular, and where technical issues arise. This data is aggregated and does not identify individual players. You may opt out of analytics cookies in your account settings.
• Security Cookies: These cookies help detect and prevent fraudulent activity and unauthorised account access.

kb99 does not use third-party advertising or behavioural tracking cookies. We do not allow ad networks to place cookies on the kb99 platform. You can manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair your ability to use the platform.

8 Data Retention

kb99 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Active Account Data: Retained for the full duration of your account's active status plus a minimum of five years after account closure.
• Transaction Records: Retained for a minimum of five years from the date of each transaction, in compliance with AML record-keeping requirements.
• Identity Verification Documents: Retained for five years from the date of submission or for the duration of the account relationship, whichever is longer.
• Support Communications: Retained for three years from the date of the most recent communication in each support thread.
• Technical & Log Data: Retained for up to 12 months from the date of generation, after which it is anonymised or deleted.
• Marketing Consent Records: Retained for the duration of your opted-in status plus two years after withdrawal of consent, for audit purposes.

When data is no longer required, kb99 deletes it securely using industry-standard data destruction methods. Where full deletion is not technically feasible immediately (for example, in backup systems), the data is isolated from active processing and scheduled for deletion at the next available cycle.

9 Your Rights

As a kb99 player, you hold the following rights in respect of your personal data. To exercise any of these rights, contact the kb99 support team via live chat or at the email address listed on the platform. We will respond to all valid requests within 30 days.

• Right of Access: You may request a copy of all personal data kb99 holds about you, along with information about how it is used and with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it. For name or date-of-birth corrections, you may be required to provide supporting documentation.
• Right to Erasure: You may request that we delete your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent (for consent-based processing), or where you object to processing and no overriding legitimate interest applies. This right does not apply where we are required to retain data by law (e.g., AML transaction records).
• Right to Restriction: You may request that we restrict the processing of your data in certain circumstances — for example, while a rectification request is being reviewed.
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request a machine-readable export of your personal data.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including profiling for fraud detection purposes. We will assess your objection and cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing emails), you may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

10 Data Security

kb99 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Key security measures include:

• All data transmitted between your device and the kb99 platform is encrypted using TLS 1.2 or higher (256-bit SSL).
• Sensitive data at rest, including identity documents and financial records, is encrypted using AES-256 encryption.
• Access to personal data within kb99's systems is restricted on a need-to-know basis, enforced through role-based access controls and multi-factor authentication for staff.
• Regular penetration testing and vulnerability assessments are conducted by independent security specialists.
• Player passwords are stored as salted cryptographic hashes and are never readable by kb99 staff.
• Automated monitoring systems are in place to detect unusual access patterns, suspicious login attempts, and potential data exfiltration events.

Despite these measures, no system connected to the internet can be guaranteed to be completely secure. In the event of a security incident that affects your personal data, kb99 will notify you promptly via your registered contact details, describe the nature of the incident, and explain the steps taken to mitigate its impact.

11 Children & Minors

The kb99 platform is strictly intended for adults aged 21 years and above. 21+ kb99 does not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory step in the account registration process, and kb99 reserves the right to request documentary evidence of age at any time.

If kb99 becomes aware that personal data has been collected from a person under the age of 21, that account will be immediately suspended, all data associated with the account will be reviewed, and the data will be deleted to the extent permitted by law. Any funds deposited by an underage player will be returned to the original payment method after identity verification is completed. Winnings generated during the period of underage access will be forfeited.

Parents and guardians who believe that a minor in their care may have created a kb99 account should contact the support team immediately. kb99 takes underage access extremely seriously and will cooperate fully with any parental or legal inquiry.

12 Changes to This Policy

kb99 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable laws, or the services we offer. When a material change is made, we will notify registered players via their registered email address and display a notice on the platform prior to the change taking effect.

The effective date at the top of this policy indicates when the current version was last reviewed and approved. Continued use of the kb99 platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms.

If you do not agree with a change to this Privacy Policy, you should cease using the platform and contact the support team to close your account. Any real-money balance held at the time of account closure will be returned to your registered payment method, subject to AML verification requirements.

Previous versions of this Privacy Policy are available on request from the kb99 support team.

Last Updated: 1 January 2026