k8bd Privacy Policy

1 Who We Are

k8bd is an online betting and casino platform operating at https://k8bd.io and serving players across Bangladesh, including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. k8bd offers cricket betting, live casino games, slot games, and fishing games, with payment support via bKash, Nagad, Rocket, Upay, and major Bangladeshi banks.

For the purposes of this Privacy Policy, k8bd acts as the data controller in respect of all personal data collected from registered players and platform visitors. This means k8bd determines the purposes and means of processing your personal data and is responsible for ensuring that processing is conducted in accordance with applicable data protection principles.

Our designated data protection contact can be reached at: [email protected] (plain text — not a clickable link).

2 Data We Collect

k8bd collects the following categories of personal data from players and platform visitors:

2.1 Registration and Identity Data

• Full legal name as it appears on your government-issued identity document
• Date of birth (used to verify the 21+ age eligibility requirement)
• Bangladesh National Identity Card (NID) number or passport number
• Residential address, city, and district within Bangladesh
• Mobile phone number (used for account authentication and payment method linking)
• Email address (used for account communications and support correspondence)
• Username and encrypted password credential

2.2 Financial and Payment Data

• bKash, Nagad, Rocket, or Upay mobile wallet numbers associated with your account
• Bank account number and bank name (where bank transfer is used for deposits or withdrawals)
• Visa or Mastercard debit card details processed via our payment gateway partner (card numbers are not stored by k8bd directly — they are tokenised by the payment processor)
• Transaction history: deposit amounts, withdrawal amounts, dates, and transaction reference numbers

2.3 KYC Verification Documents

• Scanned or photographed copies of government-issued identity documents (NID, passport, driving licence)
• Selfie or liveness-check images where required for identity confirmation
• Proof of payment method documents (e.g., mobile banking screenshots confirming account ownership)

2.4 Gaming and Account Activity Data

• Betting history: markets wagered on, stakes placed, odds accepted, and settlement outcomes
• Casino game history: games played, wager amounts, session durations, and results
• Bonus and promotion claims: offers activated, wagering requirement progress, and bonus balances
• Responsible gaming settings: deposit limits set, cool-off periods activated, self-exclusion requests
• Account login history: timestamps, device types, and IP addresses

2.5 Technical and Device Data

• IP address and approximate geographic location (country and city level)
• Device type, operating system version, and browser type and version
• Session duration, page views, and navigation paths within the k8bd platform
• Cookie identifiers and similar tracking technology data (see Section 7)

2.6 Support and Communications Data

• Content of support tickets, live chat transcripts, and email correspondence with k8bd
• Survey responses and feedback submitted voluntarily to k8bd

3 How We Collect Your Data

k8bd collects personal data through the following means:

• Direct collection at registration: Information you provide when creating your k8bd account, completing KYC verification, or updating your account profile.
• Transaction processing: Data generated when you make deposits or request withdrawals via bKash, Nagad, Rocket, Upay, bank transfer, or card payment.
• Platform usage: Data automatically generated as you browse the k8bd website, place bets, play casino and slot games, or use account management features.
• Support interactions: Data you provide when contacting k8bd via live chat, email, or any other support channel.
• Cookies and tracking technologies: Data collected automatically via browser cookies, local storage, and similar mechanisms as described in Section 7.
• Third-party payment processors: Transaction confirmation data returned to k8bd by bKash, Nagad, Rocket, or banking partners upon completion of a payment instruction.
• Third-party game providers: Session and outcome data returned to k8bd by integrated game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) to enable bet settlement and account crediting.

4 Why We Use Your Data

The table below summarises the primary purposes for which k8bd processes your personal data:

k8bd does not use your personal data for automated decision-making that produces legal or similarly significant effects on you, beyond fraud detection systems that may flag an account for human review. Any account action resulting from a fraud flag is reviewed by a human member of the k8bd compliance team before being applied.

5 Legal Bases for Processing

k8bd processes your personal data on the following legal bases:

• Contractual necessity: Processing required to create and manage your account, process deposits and withdrawals, settle bets, and provide the services you have contracted for when registering a k8bd account.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and analytics, where k8bd's legitimate interests in operating a safe and sustainable platform are not overridden by your data protection rights.
• Legal obligation: Processing required to comply with applicable legal obligations, including identity verification and anti-money laundering requirements.
• Consent: Processing of your data for promotional and marketing communications, where you have explicitly opted in to receive such communications. You may withdraw consent at any time by contacting [email protected].

6 Data Sharing and Disclosure

6.1 Payment Processors. k8bd shares payment-related data with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, and card payment gateway providers solely to facilitate your deposit and withdrawal transactions. These processors act under contractual obligations that restrict their use of your data to the stated purpose.

6.2 Game Providers. k8bd shares session credentials and account identifiers with integrated game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) to enable seamless game loading and result reporting. These studios are contractually prohibited from using player data for any purpose outside game delivery and result reporting.

6.3 Identity Verification Partners. Where third-party KYC verification tools are used to validate government-issued identity documents, the minimum necessary data is shared with those partners under strict data processing agreements.

6.4 Legal Disclosure. k8bd may disclose personal data to competent authorities where required to do so by applicable law, court order, or to protect the rights, property, or safety of k8bd, its players, or third parties. k8bd will notify affected players of any such disclosure where legally permitted to do so.

6.5 No Marketing Data Sales. k8bd does not sell, licence, or transfer your personal data to any third party for advertising, marketing profiling, or commercial data brokerage purposes under any circumstances.

7 Cookies and Tracking Technologies

k8bd uses cookies and similar browser-based technologies to maintain session state, remember your preferences, and collect aggregated analytics on how the platform is used. The cookies deployed on k8bd fall into the following categories:

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens and security cookies. They cannot be disabled without impairing your ability to use the platform.
• Functional cookies: Store your preferences such as language settings, default bet amounts, and display configurations. Disabling these cookies will not prevent platform access but will reset your preferences on each visit.
• Analytics cookies: Collect aggregated, anonymised data on page visits, navigation paths, and feature usage. This data is used internally by k8bd to improve platform performance and user experience. No individual player is identified in analytics reports.
• Fraud prevention cookies: Device fingerprinting and session integrity tokens used by k8bd's fraud detection systems to identify unusual access patterns consistent with account takeover or coordinated abuse.

k8bd does not deploy third-party advertising or behavioural retargeting cookies. You may manage cookie preferences through your browser settings. Clearing all cookies will log you out of any active k8bd session and reset stored preferences.

8 Data Retention

k8bd retains personal data for as long as is necessary to fulfil the purposes described in this policy, and in any event for no longer than is required by applicable legal obligations. The following retention periods apply as a general guide:

• Active account data: Retained for the full duration of your account's active status plus a minimum of 5 years following account closure, to satisfy potential dispute resolution, audit, and legal compliance requirements.
• KYC documents: Retained for a minimum of 5 years from the date of submission, in line with anti-money laundering best practices.
• Transaction records: Retained for a minimum of 7 years to support financial record-keeping obligations.
• Support communications: Retained for 3 years from the date of the most recent interaction in a given correspondence thread.
• Analytics and device data: Aggregated analytics data is retained indefinitely in anonymised form. Raw device and IP log data is purged within 12 months.

Upon expiry of the relevant retention period, k8bd will securely delete or anonymise the data in question. Where deletion is not immediately technically feasible (e.g., data held in encrypted backup archives), data will be isolated from active processing and scheduled for deletion at the next available secure purge cycle.

9 Data Security

k8bd implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, and disclosure. Key security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and k8bd servers
• AES-256 encryption for sensitive data stored at rest, including payment credentials and KYC documents
• Role-based access control (RBAC) ensuring that k8bd staff can only access personal data relevant to their specific job function
• Two-factor authentication (2FA) enforced for all k8bd staff accounts with access to personal data systems
• Regular vulnerability assessments and penetration testing of the k8bd platform and supporting infrastructure
• Automated anomaly detection systems monitoring for unusual access patterns and data exfiltration attempts
• Incident response procedures with defined escalation paths and player notification protocols in the event of a confirmed data breach

In the event of a data security incident that materially affects your personal data, k8bd will notify you without undue delay and provide clear guidance on any protective steps you should take. Notification will be made via the email address registered on your account.

10 Your Rights

As a k8bd player whose personal data is processed in accordance with this policy, you hold the following rights regarding your data:

• Right of Access: You may request a full copy of all personal data k8bd holds about you. Requests will be fulfilled within 30 days and provided in a commonly used, machine-readable format where possible.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you. Many data fields can be updated directly within your k8bd account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. Erasure requests are subject to k8bd's legal retention obligations, which may require certain data to be retained for a defined period even after account closure.
• Right to Restrict Processing: You may request that k8bd restricts processing of your data in certain circumstances, such as where you contest the accuracy of the data or object to processing based on legitimate interests.
• Right to Data Portability: You may request that k8bd provide your personal data in a structured, commonly used format for transfer to another service provider, where technically feasible.
• Right to Object: You may object at any time to processing of your data for direct marketing purposes. You may also object to processing based on k8bd's legitimate interests, though k8bd may continue processing if it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, contact k8bd at [email protected]. k8bd will acknowledge your request within 2 business days and aim to resolve it within 30 calendar days. Identity verification may be required before fulfilling data subject requests to protect against fraudulent access to another player's data.

11 Children and Minors

The k8bd platform is strictly for adults aged 21 years and above. k8bd does not knowingly collect personal data from persons under the age of 21. If k8bd becomes aware that personal data has been submitted by or on behalf of a person under 21, that account will be immediately suspended, all data associated with the minor will be securely deleted, and any funds held in the account will be returned to the originating payment method after verification.

12 Third-Party Links and Services

The k8bd platform integrates third-party game content from certified studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. While k8bd takes reasonable steps to ensure that these integrations are conducted securely, each game studio operates under its own privacy and security policies in respect of any data processed directly within its game environment.

k8bd does not include outbound links to external websites on its platform. If you encounter a link that appears to redirect outside of the k8bd domain (https://k8bd.io), please report it to [email protected] as it may indicate a security compromise or phishing attempt. k8bd accepts no responsibility for the privacy practices of any third-party website not under k8bd's direct control.

13 Changes to This Policy

k8bd reviews and updates this Privacy Policy periodically to reflect changes in platform practices, applicable legal requirements, or data processing arrangements. When material changes are made, k8bd will:

• Update the "Last Updated" date at the top of this page
• Send a notification email to all registered players at least 7 days before the revised policy takes effect
• Display a prominent notice on the k8bd platform highlighting the nature of the changes

Continued use of the k8bd platform after the effective date of a revised Privacy Policy constitutes acceptance of the updated terms. If you do not agree with a revised policy, you must discontinue use of the platform and may request account closure by contacting [email protected].

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or k8bd's handling of your personal data, please contact us through the following channel:

• Support Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 from within your k8bd account dashboard
• Response Time: All privacy-related enquiries are acknowledged within 2 business days (Bangladesh Standard Time, UTC+6) and resolved within 30 calendar days

For urgent data security concerns — such as suspected unauthorised access to your account or a potential data breach — please mark your email subject line as "URGENT: Data Security" to ensure it is escalated to the k8bd security team immediately.