kx08 Privacy Policy — How We Handle Your Personal Data

1 Introduction

kx08 is an online betting and casino platform serving players in Bangladesh. In the course of providing our services — including sports betting, live casino, slots, crash games, and associated payment and account services — we necessarily collect and process personal data about the individuals who use our platform.

This Policy sets out, in clear and formal terms, the categories of personal data we collect, the purposes for which we process that data, the legal bases on which we rely, the parties with whom we may share data, the security measures we apply, and the rights available to you as a data subject. We encourage all players to read this Policy carefully and to contact us if they have any questions about our data practices.

This Policy applies to all personal data collected through the kx08 website at kx08.io, through any mobile-optimised version of that site, and through any direct communications (email, live chat, or telephone) between you and the kx08 support team.

2 Data We Collect

kx08 collects personal data in the following categories. The data collected in each category is limited to what is necessary and proportionate for the purposes described in Section 3.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, biometric data (other than selfie images used solely for identity verification), or health data, unless required to do so by a specific legal obligation.

3 How We Use Your Data

kx08 uses the personal data it collects for the following specific purposes:

• Account creation and management: to register your kx08 account, verify your identity, maintain your account profile, and communicate with you about your account status.
• Service delivery: to process bets, settle winnings, process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to operate all platform features.
• Identity and age verification: to confirm that you are at least 21 years of age and that you are who you claim to be, in compliance with our age restriction policy and anti-fraud obligations.
• Anti-money-laundering and fraud prevention: to monitor account activity for patterns indicative of money laundering, fraud, match-fixing, or other financial crime, and to report suspicious activity as required by applicable law.
• Responsible gaming: to monitor playing patterns that may indicate problem gambling, to apply responsible gaming tools at your request or where required, and to enforce self-exclusion decisions.
• Customer support: to respond to your enquiries, complaints, and support requests, and to maintain records of our communications with you for quality assurance and dispute resolution.
• Platform improvement: to analyse aggregated, anonymised usage data to identify technical issues, improve platform performance, and develop new features and products.
• Marketing communications: to send you promotional offers, bonus notifications, and tournament alerts, where you have provided consent to receive such communications. You may opt out of marketing emails at any time by contacting kx08 support.
• Legal and regulatory compliance: to fulfil our obligations under applicable laws, to respond to lawful requests from regulatory authorities and law enforcement agencies, and to enforce our Terms & Conditions.

4 Legal Basis for Processing

kx08 processes your personal data on the following legal bases, depending on the purpose of the processing activity in question:

• Contractual necessity: processing that is necessary to perform the contract between you and kx08, including account management, bet processing, payment handling, and customer support.
• Legal obligation: processing that is required to comply with applicable legal and regulatory requirements, including identity verification, age verification, anti-money-laundering checks, and reporting obligations.
• Legitimate interests: processing that is necessary for the legitimate interests of kx08, such as fraud prevention, platform security, and platform analytics, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: processing that is based on your freely given, specific, informed, and unambiguous consent, such as the sending of direct marketing communications. Where consent is the basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

5 Cookies & Tracking Technologies

kx08 uses cookies and similar tracking technologies (including local storage, session tokens, and analytics pixels) to operate the platform, maintain your login session, remember your preferences, and collect anonymised usage analytics. Cookies used by kx08 fall into the following categories:

• Strictly necessary cookies: required for the platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cookies cannot be disabled without preventing the platform from operating correctly.
• Functional cookies: used to remember your preferences, such as your preferred display settings and responsible gaming tool configurations.
• Analytics cookies: used to collect anonymised, aggregated data about how players navigate and use the platform. This data is used solely to improve platform performance and user experience and is not used to identify individual players.
• Security cookies: used to detect and prevent fraudulent login attempts, bot activity, and other security threats.

Most web browsers allow you to control cookie settings through the browser's privacy or settings menu. Disabling strictly necessary cookies will impair or prevent your use of the kx08 platform. Disabling functional or analytics cookies will not prevent you from using the platform but may affect your experience.

6 Sharing Your Data

kx08 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your personal data with the following categories of recipients, and only to the extent necessary for the stated purpose:

• Payment service providers: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and other payment processors receive the minimum transaction data necessary to process your deposits and withdrawals. Each provider operates under its own data protection obligations.
• Identity verification providers: third-party KYC service providers who assist kx08 in verifying player identity and age. These providers process verification documents under strict confidentiality and data security obligations.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Spribe, and other studios may receive a player session token and anonymised identifiers necessary to deliver game content. These providers do not receive your full identity or financial data.
• IT and infrastructure providers: cloud hosting, content delivery network, and cybersecurity service providers who support the technical operation of the kx08 platform. All such providers are bound by contractual data processing agreements.
• Regulatory and law enforcement authorities: kx08 may disclose personal data to competent authorities where required or permitted by law, including in connection with anti-money-laundering investigations, court orders, or regulatory enquiries.
• Professional advisers: lawyers, auditors, and other professional advisers who require access to player data in connection with the provision of legal, compliance, or financial advisory services to kx08, subject to professional privilege and confidentiality obligations.

7 Data Security

kx08 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect your data against unauthorised access, accidental loss, destruction, disclosure, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the kx08 platform.
• Encryption of sensitive data fields (including payment details and identity document references) at rest in our databases.
• Role-based access controls ensuring that only authorised kx08 personnel have access to personal data, and only to the extent required for their specific role.
• Comprehensive audit logging of all access to systems that store personal data, with regular review of access logs by the kx08 security team.
• Intrusion detection and prevention systems, web application firewalls, and DDoS mitigation technologies protecting the kx08 platform infrastructure.
• Regular security assessments and penetration testing of the kx08 platform by qualified security professionals.
• Staff training on data protection obligations and security best practices.

Notwithstanding these measures, no internet transmission or digital storage system can be guaranteed to be 100% secure. In the event of a data security incident that affects your personal data, kx08 will notify you promptly in accordance with applicable legal obligations and will take all reasonable steps to mitigate the impact of the incident.

You are also responsible for maintaining the security of your kx08 account. You must keep your login credentials confidential and must not share your username, password, or one-time verification codes with any third party. If you suspect unauthorised access to your account, contact kx08 support immediately.

8 Data Retention

kx08 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or for as long as we are required to retain it by applicable law. Our standard retention periods are as follows:

• Active account data: retained for the full duration of your account being open and active on the kx08 platform.
• Account data following closure: identity, contact, financial, and transaction records are retained for a minimum period following account closure as required to comply with anti-money-laundering regulations and to resolve any pending disputes or legal claims.
• Communications and support records: live chat transcripts, email correspondence, and support ticket records are retained for a defined period to support dispute resolution, quality assurance, and regulatory compliance.
• Technical and analytics data: anonymised, aggregated analytics data may be retained indefinitely as it no longer constitutes personal data once fully anonymised. Raw technical data (such as IP address logs) is retained for a shorter period consistent with security and fraud prevention needs.
• Marketing consent records: records of your consent (or withdrawal of consent) to marketing communications are retained for as long as they are relevant to demonstrate compliance with applicable consent obligations.

At the end of the applicable retention period, personal data is securely deleted or anonymised in a manner that ensures it cannot be reconstructed or linked back to you as an individual.

9 Your Rights

As a player on the kx08 platform, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact kx08 support at [email protected] with the subject line "Data Rights Request — [your account username]".

• Right of access: you have the right to request a copy of the personal data kx08 holds about you, along with information about how that data is being used.
• Right to rectification: you have the right to request that we correct any inaccurate or incomplete personal data we hold about you. You may also update certain account details directly through your kx08 account settings.
• Right to erasure: you have the right to request that we delete your personal data in certain circumstances, such as where the data is no longer necessary for the purposes for which it was collected. This right is subject to our legal obligations to retain certain data for regulatory compliance purposes.
• Right to restrict processing: you have the right to request that we restrict our processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing pending verification of our legitimate grounds.
• Right to object: you have the right to object to processing of your personal data that is based on legitimate interests, including profiling for responsible gaming purposes, subject to our ability to demonstrate compelling legitimate grounds for the processing.
• Right to withdraw consent: where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

kx08 will respond to all data rights requests within 30 days of receipt. In cases of complexity or high volume, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reasons for it.

10 Children & Minors

The kx08 platform is strictly intended for adults aged 21 years and over. kx08 does not knowingly collect, process, or retain personal data relating to individuals under the age of 21. If kx08 becomes aware that personal data has been collected from a person under the age of 21, that account will be immediately suspended, all associated personal data will be deleted from our systems as quickly as technically possible, and any funds deposited will be returned to the originating payment source.

If you are a parent or guardian and believe that a minor in your care has registered a kx08 account or provided personal data to kx08 without your knowledge, please contact us immediately at [email protected] so that we can take prompt action.

11 Third-Party Links

The kx08 platform may contain references to or integrations with third-party services, including payment providers such as bKash, Nagad, and Rocket, and game content from studios such as Pragmatic Play, Evolution Gaming, and Spribe. When you interact with these third-party services, you do so subject to their own privacy policies and terms of service, which are separate from and independent of this Policy.

kx08 does not control and is not responsible for the data practices of any third-party service provider. We recommend that you review the privacy policies of any third-party services you interact with in connection with your use of the kx08 platform. The inclusion of any third-party service on the kx08 platform does not constitute an endorsement of that service's data practices.

12 Policy Amendments

kx08 reserves the right to amend this Privacy Policy at any time. Where a material change is made — for example, a change to the categories of data we collect, the purposes for which we use it, or the parties with whom we share it — we will provide reasonable advance notice to registered players via the email address associated with their kx08 account and via a prominent notice on the platform before the change takes effect.

Non-material amendments, such as corrections of typographical errors, clarifications of existing provisions, or formatting changes, may be made without prior notice. The "Effective Date" at the top of this Policy reflects the date on which the current version entered into force. Continued use of the kx08 platform after the effective date of any amendment constitutes acceptance of the revised Policy.

We encourage you to review this Policy periodically to stay informed about how kx08 is protecting your personal data. Previous versions of this Policy are available on request from the kx08 support team.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way kx08 handles your personal data, please contact the kx08 data team using the details below. All enquiries will be acknowledged within 48 hours and substantively responded to within 30 days (Bangladesh Standard Time, UTC+6).

Email for data enquiries: [email protected] — please use the subject line "Privacy Enquiry — [your account username]" to ensure your message reaches the correct team promptly.

For formal data rights requests (access, rectification, erasure, restriction, objection, or consent withdrawal), use the subject line "Data Rights Request — [your account username]". Please include your full registered name and the email address associated with your kx08 account in all correspondence to allow us to locate your records efficiently.