kx33 Privacy Policy
How We Handle Your Data
with Care and Transparency

Introduction

kx33 ("we", "our", "the platform") is committed to safeguarding the privacy and personal data of every player who visits or registers on the kx33 website at kx33.io. This Privacy Policy describes how kx33 collects, processes, stores, and protects personal information in connection with the operation of the kx33 online casino and sports betting platform serving players across Bangladesh, including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.

This policy applies to all users of the kx33 platform regardless of the device or method of access used — whether via a desktop browser, mobile browser, or any other means. It covers all personal data collected through the kx33 website, account registration forms, live chat support interactions, payment processing flows, and any communications you send to kx33 by email, WhatsApp, or any other channel.

This Privacy Policy should be read alongside kx33's Terms & Conditions and the Responsible Gaming policy, both of which form part of the overall agreement between you and kx33. Where this Privacy Policy conflicts with another document, this Privacy Policy shall take precedence with respect to data protection matters.

kx33 uses industry-standard security technologies — including 256-bit SSL encryption, tokenised payment processing, and server-level access controls — to protect your personal data at every stage of its lifecycle on our platform. We treat data protection as a fundamental component of responsible platform operation, not a box-ticking exercise.

Data We Collect

kx33 collects personal data in several categories depending on the nature of your interaction with the platform. The following table provides a comprehensive breakdown of the data categories, the specific data points within each category, and the primary reason each is collected.

kx33 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, biometric data, or health data, except where health-related information is voluntarily provided by a player in the context of a responsible gaming self-exclusion or cool-off request. Such information is treated with the highest level of confidentiality and is used solely for the purpose for which it was provided.

kx33 collects only the minimum personal data necessary to operate the platform, process payments, verify identities, maintain security, and comply with applicable legal obligations. We do not collect data speculatively or for purposes beyond those described in this policy.

How We Use Your Data

kx33 uses the personal data it collects for the following specific purposes. Each purpose is matched to the data categories listed in Section 2 above.

• Account Registration and Management: Identity Data and Contact Data are used to create and maintain your kx33 player account, verify your eligibility to use the platform (including the 21+ age requirement), and administer your account settings and preferences.
• Payment Processing: Financial Data is used exclusively to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfer, Visa, and Mastercard. kx33 does not store full payment credentials. All financial data is tokenised and processed through encrypted payment gateways.
• Identity Verification (KYC): Identity Data and Verification Documents are used to satisfy Know Your Customer requirements, confirm that you are aged 21 or above, verify that your payment methods are registered in your own name, and comply with applicable anti-money laundering obligations.
• Customer Support: Communications Data and Contact Data are used to respond to your support queries via live chat, email, and WhatsApp, investigate complaints, and resolve disputes in a timely and accurate manner.
• Fraud and Security Monitoring: Technical Data, Financial Data, and Gaming Activity Data are used to detect and prevent fraudulent activity, identify unauthorised account access, flag suspicious wagering patterns, and protect the integrity of the kx33 platform and its player community.
• Responsible Gaming Compliance: Gaming Activity Data is used by kx33's responsible gaming system to monitor play patterns, identify potential indicators of problem gambling behaviour, enforce deposit limits and session time restrictions that you have set, and action self-exclusion or cool-off requests.
• Platform Improvement: Technical Data and anonymised Gaming Activity Data are used in aggregate to analyse platform performance, identify technical issues, improve the user experience, and develop new features. This analysis uses aggregated, anonymised data and does not involve profiling of individual players for commercial targeting purposes.
• Promotions and Bonus Management: Contact Data and Gaming Activity Data are used to determine eligibility for kx33 promotions such as welcome bonuses, reload offers, and seasonal promotions tied to the BPL, IPL, Eid, Pohela Boishakh, and ICC tournaments. kx33 may send you promotional communications by email if you have opted in to receive them. You may opt out at any time by contacting support.
• Legal and Regulatory Compliance: All categories of data may be used to comply with applicable legal obligations, respond to lawful requests from regulatory or law enforcement bodies, and enforce kx33's Terms & Conditions.

Legal Basis for Processing

kx33 processes personal data on the following legal grounds depending on the purpose for which the data is used:

• Contractual Necessity: The majority of kx33's data processing activities are necessary to perform the contract between kx33 and the player — namely, operating your player account, processing your deposits and withdrawals, and delivering the gaming services you have registered to use. Without this data processing, kx33 cannot provide the services described in the Terms & Conditions.
• Legal Obligation: Certain data processing activities — particularly KYC identity verification, anti-money laundering record-keeping, and the retention of transaction records — are required by applicable law and cannot be waived by player preference.
• Legitimate Interests: kx33 processes Technical Data and Gaming Activity Data for fraud prevention, platform security, and responsible gaming monitoring on the basis of legitimate interests. These interests do not override your fundamental privacy rights and are limited to what is strictly necessary for platform security and player safety.
• Consent: Where kx33 processes your data for optional purposes — such as sending you promotional emails about bonuses, new game releases, or seasonal events — we rely on your consent. You may withdraw this consent at any time by contacting support at [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

Data Sharing & Third Parties

kx33 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. Your personal information is shared only in the specific, limited circumstances described below.

• Payment Service Providers: Financial Data is shared with payment partners — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — solely to process your deposits and withdrawals. These partners are bound by their own data protection standards and are not permitted to use your data for any purpose beyond payment processing.
• Game Providers: Where you play games supplied by third-party providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, a session token and anonymised player identifier are shared with the provider to initiate your game session. Full personal details are not transmitted to game providers.
• Identity Verification Services: Verification Documents submitted for KYC may be processed by a third-party identity verification service provider acting as a data processor on behalf of kx33. Such providers are contractually bound to process your data only for the purpose of identity verification and to maintain appropriate security standards.
• Fraud Prevention Services: Technical Data and account metadata may be shared with specialist fraud detection services to identify and prevent fraudulent activity on the platform.
• Legal and Regulatory Authorities: kx33 may be required by law to disclose personal data to regulatory bodies, law enforcement agencies, courts, or other government authorities in response to a lawful request, court order, or legal process. kx33 will make reasonable efforts to notify you of such disclosure where permitted by law.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of kx33's business or assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via the email address associated with your account.

All third parties who receive personal data from kx33 are required to handle that data in a manner consistent with this Privacy Policy and applicable data protection standards. kx33 does not authorise third-party recipients to use your data for any purpose beyond the specific purpose for which it was shared.

Cookies & Tracking Technologies

kx33 uses cookies and similar tracking technologies on the kx33 website to ensure the platform functions correctly, to remember your session and preferences, and to analyse how players interact with the site. The types of cookies used by kx33 are described below.

• Strictly Necessary Cookies: These cookies are essential for the kx33 platform to function. They manage your login session, maintain your account state across page loads, and ensure that security features operate correctly. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: These cookies remember your preferences — such as your chosen game category, display language, and notification settings — so that you do not need to reconfigure them each time you visit. They do not track your activity across other websites.
• Analytics Cookies: kx33 uses anonymised analytics data to understand how players navigate the platform, which games are most popular, where players encounter technical difficulties, and how session time is distributed across different parts of the site. This data is aggregated and does not identify individual users.
• Security Cookies: These cookies help kx33 detect and prevent fraudulent login attempts, bot activity, and suspicious navigation patterns. They form part of the platform's multi-layered security infrastructure.

You may adjust your browser settings to block or delete cookies at any time. However, disabling strictly necessary cookies will prevent you from logging in to your kx33 account and using core platform features. For most players, the default browser cookie settings are appropriate and do not need to be changed.

Data Retention

kx33 retains personal data for as long as it is necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. The following retention periods apply to the main categories of personal data held by kx33.

When personal data reaches the end of its applicable retention period, kx33 will securely delete or anonymise it in a manner that prevents reconstruction of the original data. Anonymised, aggregated data — where no individual player can be identified — may be retained indefinitely for statistical and analytical purposes.

If you request the closure of your kx33 account, your account will be deactivated and access to the platform will cease. However, kx33 is legally required to retain the data categories described above for the periods specified, even after account closure. A data deletion request does not override these legal retention obligations.

Your Rights Over Your Data

As a player on the kx33 platform, you have the following rights with respect to your personal data. kx33 is committed to honouring these rights promptly and without unnecessary barriers.

• Right of Access: You have the right to request a copy of the personal data kx33 holds about you. kx33 will provide this information in a structured, commonly used, machine-readable format within 30 days of receiving your request. There is no charge for a single access request per 12-month period.
• Right to Rectification: If any personal data kx33 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Account-level corrections (such as updating your contact number or address) can typically be made directly from your account dashboard. For identity document corrections, contact support.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent (for consent-based processing), or where you object to processing on the basis of legitimate interests and kx33 has no overriding grounds to continue processing. Note that erasure requests cannot override kx33's legal data retention obligations as described in Section 7.
• Right to Restriction: You may request that kx33 restricts the processing of your personal data in certain circumstances — for example, while an accuracy dispute is being resolved, or where you have objected to processing on legitimate interest grounds and kx33 is considering your objection.
• Right to Data Portability: For data processed on the basis of consent or contractual necessity, you have the right to receive that data in a portable format and to request that kx33 transmit it directly to another data controller where technically feasible.
• Right to Object: You have the right to object to kx33 processing your personal data for direct marketing purposes at any time, with no need to provide a justification. You may also object to processing carried out on the basis of legitimate interests, in which case kx33 will assess whether its interests are overridden by your rights.
• Right to Withdraw Consent: Where kx33 processes your data on the basis of your consent, you may withdraw that consent at any time by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please contact kx33 support at [email protected] (plain text — not a clickable link). kx33 will verify your identity before actioning any data rights request to ensure that personal data is not disclosed to or modified by unauthorised parties. All requests will be acknowledged within 5 business days and actioned within 30 days.

Security Measures

kx33 takes the security of your personal data seriously and has implemented a comprehensive, multi-layered security architecture to protect your information from unauthorised access, disclosure, alteration, and destruction. The key security measures in place are described below.

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or device and the kx33 platform is encrypted using industry-standard 256-bit SSL/TLS protocols. This ensures that your login credentials, payment information, and personal data cannot be intercepted in transit.
• Tokenised Payment Processing: kx33 does not store full payment credentials — including bKash PINs, Nagad account credentials, bank account numbers, or full card details — in any readable format. All payment data is tokenised at the point of entry and processed exclusively through encrypted payment gateways.
• Access Controls: Access to personal data within kx33's internal systems is restricted on a strict need-to-know basis. Only authorised staff members with a direct operational requirement to access specific data categories are granted access. All internal access events are logged and audited.
• Two-Factor Authentication: kx33 supports two-factor authentication (2FA) for player accounts and requires it for all internal administrative access to systems that contain personal data.
• Regular Security Audits: kx33's platform and data systems undergo regular security reviews, penetration testing, and vulnerability assessments to identify and remediate potential security weaknesses before they can be exploited.
• Data Minimisation: kx33 collects only the minimum personal data necessary for each specific purpose. Unnecessary data collection increases security risk and is avoided as a matter of policy.
• Incident Response: In the event of a data security incident affecting your personal data, kx33 has an incident response plan that includes timely notification to affected players via their registered email address, a root-cause investigation, and remediation of the vulnerability that caused the incident.

While kx33 takes all reasonable and proportionate measures to protect your personal data, no online platform can guarantee absolute security against all possible threats. You also have a role to play in protecting your account: use a strong, unique password for your kx33 account, do not share your login credentials with anyone, and contact kx33 support immediately if you suspect any unauthorised access.

Children's Privacy

kx33 employs age verification as part of its registration and KYC processes to enforce the 21+ requirement. If you are a parent or guardian and believe that a person under your care has registered on kx33 or provided personal data to the platform, please contact kx33 immediately at [email protected]. kx33 will investigate the matter promptly and take appropriate action, including account closure and data deletion where confirmed.

kx33 does not direct any of its marketing activities, promotional content, or platform features toward persons under 21. All promotional materials reference the 21+ age restriction prominently. Parents and guardians are encouraged to use parental control software to prevent minors from accessing gambling-related websites.

Third-Party Links

The kx33 platform does not contain links to external third-party websites as a matter of site policy. All navigation on the kx33 platform is internal. However, in the event that any third-party content, game provider interface, or payment gateway redirects you to an external page as part of a payment or verification flow, kx33 wishes to make clear that:

• kx33 is not responsible for the privacy practices, data collection methods, or security standards of any third-party website or service.
• Any personal data you provide directly to a third-party payment provider (such as bKash or Nagad) via their own platform or application is governed by that provider's own privacy policy, not this policy.
• kx33 recommends that you review the privacy policies of any third-party service you interact with in connection with your use of the kx33 platform, particularly in respect of payment processing flows.

Policy Updates

kx33 reserves the right to update or revise this Privacy Policy at any time to reflect changes in platform operations, applicable legal obligations, payment processing arrangements, or data protection best practices. When material changes are made to this policy, kx33 will post the updated version on this page with a revised effective date and notify registered players via their account email address.

The most current version of this Privacy Policy is always available at kx33.io/privacy-policy. It is your responsibility to review this page periodically. Your continued use of the kx33 platform following the posting of an updated Privacy Policy constitutes your acceptance of the changes described therein.

Where a change to this Privacy Policy materially affects how kx33 uses your personal data in a way that requires fresh consent, kx33 will seek that consent through an in-platform notification or email before the new processing begins. You will always have the option to decline consent for new or materially changed processing activities, subject to the understanding that certain processing is necessary to maintain your account and cannot be declined without affecting your ability to use the platform.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way kx33 handles your personal data, please contact the kx33 data support team through any of the following channels. All privacy-related queries are handled in English and will be responded to within the timeframes indicated.

• Email: [email protected] (plain text — not a clickable link) — response within 24 hours
• Live Chat: Available 24/7 on the kx33 platform — response under 2 minutes
• WhatsApp: +880 1700 000000 — response within 2 hours during business hours (Bangladesh Standard Time, UTC+6)
• Serving: Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar — and all players across Bangladesh

When contacting kx33 regarding a data rights request (access, rectification, erasure, restriction, portability, or objection), please include your registered account username and the email address associated with your account so that kx33 can verify your identity and process your request efficiently. kx33 will not action data rights requests from unverified contacts to protect the security of your personal information.