Privacy Policy — kbdd Platform

1. Data We Collect

1.1 Account Registration Data

When you create a kbdd account, we collect the personal information you provide during the registration process. This includes your full legal name, date of birth, residential address in Bangladesh, mobile phone number, and email address. This data is required to create and maintain your account, verify your identity, and comply with our Know Your Customer (KYC) obligations. Providing false, incomplete, or misleading information during registration is a breach of our Terms & Conditions and may result in immediate account closure.

1.2 Identity Verification (KYC) Data

As part of our KYC verification process, we may collect copies of government-issued identity documents such as your National Identity Card (NID), passport, or driving licence. We may also collect proof of address documents (utility bills, bank statements), proof of payment method ownership (screenshots of bKash, Nagad, Rocket, or Upay accounts showing your registered name and number), and in some cases a selfie photograph of you holding your identity document. KYC documents are used solely for identity verification and anti-money laundering (AML) compliance purposes and are handled with the highest level of confidentiality.

1.3 Financial Transaction Data

When you make a deposit or request a withdrawal, we collect data related to that transaction, including the payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard, or bank transfer via BRAC Bank, City Bank, Islami Bank, Sonali Bank, or Dutch-Bangla Bank), the transaction amount in Bangladeshi Taka (BDT), the transaction timestamp, and the transaction reference number issued by your payment provider. We do not store full card numbers or mobile banking PINs. Payment data is processed through encrypted channels at all times.

1.4 Gaming Activity Data

We collect data about your activity on the kbdd Platform, including the games you play, bets placed and their outcomes, session duration, deposit and withdrawal history, bonus offers claimed, wagering progress, and any game chat or customer support interactions. This data is used to provide the gaming service, detect fraud and bonus abuse, conduct responsible gaming monitoring, and improve the Platform.

1.5 Technical and Device Data

When you access the kbdd Platform, we automatically collect certain technical data about your device and connection. This includes your IP address, browser type and version, operating system, device model, screen resolution, time zone, language preferences, referring URL, and session identifiers. This data is used for security monitoring, fraud prevention, platform optimisation, and analytics purposes. We may also collect device fingerprint data to assist in detecting multi-account creation or automated bot activity.

1.6 Communications Data

If you contact kbdd customer support — whether by email at [email protected], via the in-platform live chat, or through any other channel kbdd makes available — we retain records of your communications, including the content of messages, timestamps, and any attachments you provide. These records allow us to track the progress of your query, maintain service quality, and refer back to prior communications in the event of a dispute.

1.7 Data Collected from Third Parties

kbdd may receive data about you from trusted third-party partners including payment processors, identity verification providers, fraud prevention services, and game providers. This data supplements the information you provide directly to us and helps us maintain the accuracy of your account record and the integrity of the Platform. kbdd does not purchase personal data from data brokers or third-party marketing databases.

1.8 Summary of Data Categories

2. How We Use Your Data

2.1 Providing and Operating the Platform

The primary purpose for which kbdd uses your personal data is to deliver the gaming and betting services you have registered to use. This includes creating and managing your account, processing deposits and withdrawals, enabling you to place bets and play games, crediting and managing promotional bonuses, and providing customer support. Without processing your personal data for these purposes, we would be unable to fulfil our contractual obligations to you as a registered player.

2.2 Identity Verification and AML Compliance

kbdd is required to verify the identity of all players before processing significant withdrawals or where we have reasonable grounds to suspect financial irregularities. We use your registration data and KYC documents to confirm your identity, confirm that you meet the minimum age requirement of 18 years, and to satisfy our anti-money laundering and counter-terrorism financing obligations. This processing is carried out under legal obligation and forms a mandatory part of the kbdd account lifecycle.

2.3 Fraud Prevention and Security

kbdd uses your technical data, gaming activity data, device fingerprints, and IP address information to monitor the Platform for fraudulent activity. This includes detecting multi-account creation, identifying automated bot activity, monitoring for unusual betting patterns that may indicate match-fixing awareness or bonus abuse, and preventing unauthorised access to player accounts. Where our fraud detection systems flag an account for review, a member of the kbdd security team will conduct a manual investigation. kbdd's fraud prevention activities represent a legitimate interest that is proportionate and does not override your fundamental privacy rights.

2.4 Responsible Gaming Monitoring

kbdd takes its responsible gaming obligations seriously. We use your gaming activity data — including session length, deposit frequency, bet size relative to account balance, and interaction with responsible gaming tools — to identify players who may be exhibiting signs of problem gambling behaviour. Where our monitoring systems or support staff identify a player who may need assistance, we may proactively reach out to offer information about our responsible gaming tools, including deposit limits, time-out periods, and self-exclusion options. This processing is carried out in the interests of player welfare and is considered a legitimate interest of kbdd.

2.5 Personalisation and Platform Improvement

kbdd uses anonymised and aggregated gaming activity data to analyse usage patterns, improve the design and functionality of the Platform, and optimise the selection and presentation of games and betting markets. Where permitted by your communication preferences, we may use your account data to personalise your experience on the Platform, such as displaying betting markets relevant to your preferred sports (for example, cricket BPL, T20 World Cup, or IPL markets for players with a history of cricket betting).

2.6 Marketing Communications

kbdd may send you promotional communications by email or SMS regarding new games, promotions, seasonal offers (such as Eid, Pohela Boishakh, or Victory Day specials), and kbdd platform updates, but only where you have provided explicit consent to receive such communications during registration or via your account communication preferences. You may withdraw your consent to marketing communications at any time by updating your account preferences or by contacting support at [email protected]. Withdrawal of marketing consent does not affect your ability to use the Platform or our ability to send you transactional messages related to your account.

2.7 Legal Compliance and Dispute Resolution

kbdd may process and retain your personal data where necessary to comply with applicable legal obligations, respond to lawful requests from competent authorities in Bangladesh, enforce our Terms & Conditions, and resolve disputes between kbdd and players. In particular, transaction records and betting activity logs are retained for the periods specified in Section 5 (Data Retention) to support audit, legal, and dispute resolution purposes.

3. Data Sharing & Third Parties

3.1 Payment Processing Partners

To process your deposits and withdrawals, kbdd shares the minimum necessary transaction data with your chosen payment provider. For mobile money transfers via bKash, Nagad, Rocket, or Upay, this includes the transaction amount and your registered mobile number. For card payments via Visa or Mastercard, transaction data is passed to our card processing partner through a PCI-DSS compliant encrypted channel. For bank transfers via BRAC Bank, City Bank, Islami Bank, Sonali Bank, or Dutch-Bangla Bank, the relevant bank account details and transaction reference are shared with the receiving institution. Each payment partner processes your data under their own privacy policy and applicable financial regulations.

3.2 Identity Verification Providers

kbdd uses trusted third-party identity verification and KYC service providers to assist with the review and validation of identity documents submitted by players. These providers receive only the specific documents and data required to complete the verification check and are contractually prohibited from using your data for any purpose other than the verification service they provide to kbdd. All identity verification providers used by kbdd operate under data processing agreements that include confidentiality obligations and data security standards consistent with this Privacy Policy.

3.3 Game Providers

kbdd's casino games are supplied by third-party game providers including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe. When you launch and play a game, your session data (including player ID, bet amounts, and game outcomes) is processed by the relevant game provider's servers. Game providers do not receive your full personal profile, contact details, or payment information. Each game provider operates under its own privacy policy and independent certification standards.

3.4 Law Enforcement and Regulatory Authorities

kbdd may disclose personal data to law enforcement agencies, regulatory authorities, or other competent government bodies in Bangladesh where required to do so by applicable law, by a court order, or where kbdd determines that disclosure is necessary to protect the safety, rights, or property of kbdd, its players, or the public. kbdd will notify the affected player of any such disclosure where legally permitted to do so.

3.5 Business Transfers

In the event that kbdd or any part of its business is subject to a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. kbdd will notify players of any such transfer that materially affects the handling of their personal data and will ensure that the acquiring entity is bound by privacy obligations no less protective than those set out in this Policy.

4. Cookies & Tracking Technologies

4.1 What Cookies Are

Cookies are small text files placed on your device by the kbdd Platform when you visit or log in to the site. They allow the Platform to recognise your device across sessions, remember your preferences, maintain your login state, and collect analytics data about how the site is used. kbdd uses both first-party cookies (set directly by kbdd) and limited third-party cookies (set by our analytics and security partners).

4.2 Types of Cookies Used by kbdd

4.3 Managing Cookies

Strictly necessary cookies cannot be disabled as they are required for the Platform to function. For functional and analytics cookies, you may adjust your preferences through your account settings on the kbdd Platform. You may also control cookie behaviour through your browser settings — most modern browsers allow you to block or delete cookies. Note that disabling functional cookies may affect your experience on the Platform, such as requiring you to re-enter preferences on each visit. kbdd does not use cross-site tracking cookies or advertising retargeting cookies of any kind.

4.4 Local Storage and Similar Technologies

In addition to cookies, kbdd may use browser local storage and session storage to retain game state, user interface preferences, and session tokens on your device. These technologies function similarly to cookies and are subject to the same controls described above. kbdd does not use Flash cookies (Local Shared Objects) or any other persistent tracking mechanism outside of standard browser-based storage.

5. Data Retention

5.1 Active Account Data

For as long as your kbdd account remains active, we retain all personal data, KYC documents, transaction records, and gaming activity data associated with your account. Active accounts are accounts that have had at least one login within the preceding 12 months. This data is required to provide continuous service, process transactions, and comply with our ongoing legal and regulatory obligations.

5.2 Post-Closure Retention

Following the closure of a kbdd account — whether voluntarily closed by you or closed by kbdd — we retain your personal data and transaction records for a minimum period of five (5) years from the date of closure. This retention period is maintained to comply with anti-money laundering (AML) record-keeping requirements, to enable kbdd to defend legal claims that may arise after account closure, and to support any regulatory or law enforcement requests that relate to the period during which the account was active.

5.3 KYC Document Retention

Identity verification documents submitted as part of the KYC process are retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later. KYC documents are stored in encrypted format on secured servers and access is restricted to authorised kbdd personnel who require the documents to perform their legitimate duties.

5.4 Marketing Data

Where you have consented to receive marketing communications from kbdd, we retain your marketing preferences and communication history for as long as your account is active plus a period of two (2) years following account closure, or until you withdraw your consent, whichever occurs first. Following withdrawal of marketing consent, your data is removed from our active marketing lists within 10 business days.

5.5 Anonymised Analytics Data

Aggregated and fully anonymised analytics data — from which no individual player can be identified — may be retained indefinitely for the purpose of improving the kbdd Platform, analysing long-term usage trends, and informing product development decisions. This data does not constitute personal data and is not subject to the retention limits described in this section.

6. Data Security Measures

6.1 Technical Security Controls

kbdd implements a layered set of technical security controls to protect the personal data we hold. These controls include end-to-end 256-bit SSL encryption for all data in transit, AES-256 encryption for sensitive data at rest (including KYC documents and stored payment references), role-based access controls that restrict database access to authorised personnel only, multi-factor authentication for all kbdd staff accounts that have access to player data, regular penetration testing of the Platform by independent security specialists, automated intrusion detection and alerting systems, and regular security patches applied to all Platform infrastructure components.

6.2 Organisational Security Controls

kbdd maintains organisational security policies that govern how staff handle player data. All kbdd employees and contractors with access to personal data are bound by confidentiality agreements. Staff with access to sensitive data receive regular data protection training. Access to player data is provided on a strict need-to-know basis and is reviewed periodically. kbdd conducts internal audits of data access logs to identify any unauthorised or anomalous access patterns.

6.3 Data Breach Response

In the event of a confirmed personal data breach that poses a risk to the rights and freedoms of affected players, kbdd will notify affected players without undue delay and will take immediate steps to contain the breach, assess its scope, and implement remediation measures. Notification will be provided via the email address registered to the affected account and will include details of the nature of the breach, the categories of data affected, the steps kbdd has taken in response, and the recommended actions for affected players to protect themselves.

6.4 Your Responsibility for Account Security

While kbdd implements robust technical and organisational measures to protect your data, the security of your kbdd account also depends on the measures you take to protect your own login credentials. You are responsible for choosing a strong, unique password for your kbdd account, not sharing your password or two-factor authentication (2FA) codes with any third party, logging out of your account when using shared or public devices, and contacting kbdd support immediately at [email protected] if you suspect your account has been accessed without your authorisation. kbdd will never ask you for your password via email, SMS, or any other channel.

7. Your Privacy Rights

kbdd recognises your rights in relation to the personal data we hold about you. If you wish to exercise any of the rights described in this section, please contact our support team at [email protected] with the subject line "Privacy Rights Request" and your registered account username. We will respond to all verified requests within 30 calendar days.

7.1 Right of Access

You have the right to request a copy of the personal data that kbdd holds about you. Upon receiving a verified access request, kbdd will provide you with a summary of the categories of data we hold, the purposes for which each category is processed, and the third parties with whom your data has been shared. Where technically feasible, we will provide the data in a structured, commonly used, machine-readable format.

7.2 Right to Rectification

If any of the personal data kbdd holds about you is inaccurate or incomplete, you have the right to request that we correct or complete it. For changes to core account details such as name, address, or date of birth, kbdd may require you to provide supporting documentation before making the requested change, in order to maintain the accuracy and integrity of our records.

7.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn the consent on which processing was based, or where the processing was unlawful. However, kbdd is not obliged to erase personal data where retention is required by law (for example, the five-year AML retention requirement described in Section 5) or where the data is necessary for the establishment, exercise, or defence of legal claims. kbdd will inform you clearly of any legal grounds that prevent full erasure of your data.

7.4 Right to Restriction of Processing

You have the right to request that kbdd restricts the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or while an objection to processing is being assessed. During a restriction period, kbdd will continue to store your data but will not process it for any purpose other than storage, except with your consent or for the establishment of legal claims.

7.5 Right to Object

You have the right to object to the processing of your personal data where kbdd relies on legitimate interest as the legal basis for that processing. This includes the right to object to processing for direct marketing purposes, which kbdd will action immediately upon receipt of a valid objection. For other legitimate-interest processing (such as fraud prevention and responsible gaming monitoring), kbdd will assess whether its legitimate interests are overridden by your privacy interests and will inform you of the outcome of that assessment.

7.6 Right to Withdraw Consent

Where kbdd processes your personal data on the basis of your consent (for example, for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that was carried out before the withdrawal. To withdraw consent, update your communication preferences in your account settings or contact [email protected].

8. Changes to This Policy

8.1 How We Notify You of Changes

kbdd reserves the right to update or amend this Privacy Policy at any time. Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — we will notify you via email to your registered address and via an in-platform notification at least 14 days before the changes take effect. Non-material changes (such as corrections of typographical errors, clarifications of existing practices, or updates to contact details) may be made without prior notice, and the updated Policy will be published on this page with a revised effective date.

8.2 Continued Use as Acceptance

Your continued use of the kbdd Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you must stop using the Platform and contact kbdd support to close your account before the updated Policy takes effect. The most current version of this Privacy Policy is always available on this page at kbdd.app/privacy-policy.

8.3 Contact for Privacy Enquiries

If you have any question, concern, or complaint about how kbdd handles your personal data, or if you wish to exercise any of your privacy rights as described in Section 7, please contact our data support team in English at [email protected]. Our customer support team is available from 6:00am to 2:00am Bangladesh Standard Time (BST, UTC+6), seven days a week, and will acknowledge your privacy enquiry within 2 business days of receipt.