kktb Privacy Policy

1Introduction & Scope

This Privacy Policy ("Policy") describes the practices of kktb ("the Platform", "we", "us", "our") with respect to the collection, use, storage, disclosure, and protection of personal data relating to individuals ("Players", "you", "your") who register for, access, or use the kktb online gaming and cricket betting platform located at kktb.io.

This Policy applies to all personal data collected through:

• The kktb website and all pages within kktb.io.
• The kktb mobile web interface accessible from any device.
• kktb customer support communications via live chat and email.
• Any promotional or marketing communication sent by kktb to registered players.
• Third-party payment processing interactions initiated through the kktb Platform, including bKash, Nagad, Rocket, and Upay transactions.

This Policy is incorporated by reference into the kktb Terms & Conditions. By accepting the Terms & Conditions at the point of account registration, you also consent to the data processing practices described in this Policy. If you do not agree with any aspect of this Policy, you must not create a kktb account and must cease using the Platform.

2Data Controller Identity

For the purposes of this Privacy Policy, kktb acts as the data controller in respect of personal data collected from players accessing the Platform. As data controller, kktb determines the purposes and means by which personal data is processed and is responsible for ensuring that such processing is conducted in accordance with applicable data protection principles.

kktb is operated as a safe and reliable online entertainment platform serving the Bangladesh market. All data processing activities are conducted with the security, transparency, and fairness principles that underpin responsible data stewardship.

Contact details for data-related enquiries:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available within the kktb Platform following kktb Login, available 24/7.

3Personal Data We Collect

kktb collects the following categories of personal data, depending on the nature of your interaction with the Platform:

kktb does not collect or store full payment card numbers, CVV codes, or full mobile banking PINs at any point. Financial credentials are processed exclusively by the relevant licensed payment service provider and are not transmitted to or retained by kktb.

4How We Collect Your Data

kktb collects personal data through the following channels and mechanisms:

• Direct provision by you: When you complete the kktb account registration form, submit KYC verification documents, make a deposit or withdrawal, contact customer support, or update your account settings, you directly provide us with personal data.
• Automated technical collection: When you visit kktb.io, our servers automatically log technical data including your IP address, device identifiers, browser information, and page interaction data. This occurs on every visit, whether or not you are logged into a kktb account.
• Cookies and similar technologies: kktb uses first-party cookies and session storage to maintain your login state, remember your preferences, and analyse platform usage patterns. See Section 8 for a full explanation of our cookie practices.
• Payment service providers: When you initiate a deposit or withdrawal via bKash, Nagad, Rocket, or Upay, the payment provider transmits a transaction confirmation — including a masked account reference and transaction ID — to kktb for the purpose of crediting or debiting your kktb wallet balance. kktb does not receive your full mobile banking credentials from these providers.
• Game content providers: Third-party game studios such as Pragmatic Play, Evolution Gaming, and Spribe may share anonymised gameplay session data with kktb for the purposes of game integrity monitoring and responsible gaming analysis.
• Identity verification partners: Where enhanced KYC verification is required, kktb may use a third-party identity verification service to cross-reference the documents you submit. The verification result (pass/fail) is shared with kktb; the underlying document data is retained by the verification partner in accordance with their own privacy policy.

5Legal Basis for Processing

kktb processes your personal data on the following legal grounds:

• Contractual necessity: The majority of data processing on kktb — including account administration, payment processing, KYC verification, and game access — is necessary to perform the contract between kktb and you (the Terms & Conditions). Without this processing, kktb could not deliver the agreed service.
• Legal obligation: kktb is required by applicable AML and financial compliance obligations to collect, verify, and retain certain identity and transaction data for prescribed periods. This processing is mandatory and cannot be opted out of without account closure.
• Legitimate interests: kktb processes technical data and gaming activity data for the purposes of fraud prevention, platform security, and responsible gaming monitoring. These interests are balanced against your privacy rights and are conducted with appropriate safeguards.
• Consent: Marketing communications — including promotional emails and SMS notifications about bonuses, tournaments, and seasonal offers — are sent only to players who have actively opted in during registration or subsequently through account settings. You may withdraw consent at any time.

6How We Use Your Data

kktb uses the personal data it collects for the following specific purposes:

• Creating and managing your kktb player account, including verifying your identity and age eligibility (21+ requirement).
• Processing deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and maintaining an accurate transaction history.
• Conducting KYC and AML compliance checks as required by our internal compliance framework.
• Detecting and preventing fraudulent activity, bonus abuse, money laundering, and multi-accounting.
• Delivering customer support services, including responding to account queries, payment disputes, and responsible gaming requests.
• Personalising your experience on kktb, including surfacing relevant game recommendations based on your gameplay history.
• Administering bonuses, free bets, tournaments, and other promotional campaigns for which you are eligible.
• Monitoring responsible gaming indicators — such as rapid deposit escalation, extended session duration, and self-exclusion history — to fulfil our duty-of-care obligations.
• Sending marketing communications about kktb promotions, new games, and seasonal offers (only where consent has been given).
• Analysing aggregated, anonymised platform usage data to improve the kktb product and user experience.
• Complying with any lawful request from a competent authority, court order, or regulatory body.

7Data Sharing & Third Parties

kktb shares personal data with third parties only in the specific, limited circumstances described below. We do not sell your data, and we do not share it for purposes unrelated to the delivery of the kktb service.

All third-party service providers that process personal data on behalf of kktb are required to do so under a data processing agreement that mandates compliance with data protection principles equivalent to those applied by kktb. Third parties are prohibited from using kktb player data for any purpose other than the specific service they provide to kktb.

8Cookies & Tracking Technologies

kktb uses cookies and similar local storage technologies to operate and improve the Platform. The following types of cookies are used:

• Essential cookies: These cookies are strictly necessary for the kktb Platform to function. They maintain your login session, store your language and currency preferences, and ensure that security tokens function correctly. These cookies cannot be disabled without breaking core platform functionality.
• Analytics cookies: kktb uses first-party analytics to understand how players navigate the Platform — which pages are most visited, how long sessions last, and where players encounter difficulty. This data is aggregated and anonymised and is used exclusively to improve the kktb user experience. No individual player behaviour is shared with third-party analytics platforms.
• Functional cookies: These cookies remember your in-session preferences, such as your preferred game categories, table limits, and responsible gaming settings, so that you do not need to re-configure them on each visit.

You can manage cookie preferences through your browser settings. Please note that disabling essential cookies will affect the functionality of your kktb account. For detailed instructions on managing cookies in your specific browser, refer to your browser provider's help documentation.

9Data Retention

kktb retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable legal and compliance obligations. The following retention framework applies:

• Active account data: Retained for the full duration of the account relationship and for a period of 5 years following permanent account closure.
• KYC and identity verification documents: Retained for a minimum of 5 years from the date of the last transaction on the account, in accordance with AML record-keeping requirements.
• Transaction records (deposits, withdrawals, wager history): Retained for a minimum of 5 years from the date of each transaction.
• Customer support communications: Retained for 3 years from the date of the last interaction, to support dispute resolution and quality assurance.
• Technical and analytics data (IP logs, session data): Retained for 13 months on a rolling basis, after which older records are anonymised or deleted.
• Marketing consent records: Retained for 3 years from the date of the last consent action (opt-in or opt-out), to demonstrate compliance with consent obligations.

When personal data is no longer required and no legal retention obligation applies, kktb will securely delete or anonymise the data using industry-standard data destruction methods. Anonymised data — from which no individual can reasonably be identified — may be retained indefinitely for aggregated statistical and product improvement purposes.

10Data Security

kktb implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, and destruction. Our security measures include, but are not limited to:

• TLS/SSL encryption in transit: All data transmitted between your browser or device and the kktb servers is protected by Transport Layer Security (TLS 1.2 minimum). The padlock icon visible in your browser's address bar confirms this encryption is active.
• AES-256 encryption at rest: Sensitive personal data — including identity documents, masked payment account references, and account credentials — is encrypted at rest using AES-256, the same standard used by major international financial institutions.
• Access controls: Internal access to player personal data is governed by a role-based access control (RBAC) system. Only authorised kktb personnel whose specific job function requires access to personal data may retrieve it, and all access is logged for audit purposes.
• Two-factor authentication (2FA): kktb employees with access to production systems and player data are required to use 2FA for all system access. Players are encouraged to enable OTP verification for their own kktb accounts via account settings.
• Regular security assessments: kktb conducts periodic internal security reviews and vulnerability assessments of its platform infrastructure to identify and remediate potential weaknesses before they can be exploited.
• Incident response procedures: kktb maintains a documented data breach response plan. In the event of a breach affecting player personal data, affected players will be notified within a reasonable timeframe with details of the nature of the breach and the steps being taken to address it.

11Your Privacy Rights

As a player on the kktb Platform, you hold the following rights in relation to your personal data. kktb is committed to honouring these rights promptly and without unnecessary obstruction:

• Right of access: You have the right to request a copy of all personal data kktb holds about you. We will respond within 30 calendar days of receiving a valid request.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data held by kktb. Many details can be updated directly through the account settings panel; identity-verified fields require supporting documentation.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer required for the purposes for which it was collected, subject to our legal retention obligations. Requests for erasure will be assessed on a case-by-case basis; we will inform you where legal obligations prevent immediate full deletion.
• Right to restrict processing: You have the right to request that kktb restrict the processing of your personal data while an accuracy dispute or objection is under review.
• Right to data portability: You have the right to receive personal data you have provided to kktb in a structured, commonly used, machine-readable format (CSV or JSON on request), where technically feasible.
• Right to object: You have the right to object to processing of your personal data where that processing is based on legitimate interests or is used for direct marketing purposes. An objection to marketing processing will be acted upon immediately; other objections will be reviewed within 30 days.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without penalty. Withdrawal of consent does not affect the lawfulness of prior processing.

To exercise any of the above rights, please contact us at [email protected] using the email address registered to your kktb account, stating clearly the right you wish to exercise and the specific data or processing activity to which your request relates.

12Children & Underage Players

The kktb Platform is strictly for adults aged 21 and above. kktb does not knowingly collect, process, or retain personal data from any individual under the age of 21. If kktb discovers that an account has been created by a person under 21, the account will be permanently closed, all funds will be handled in accordance with our responsible gaming obligations, and any personal data collected will be securely deleted.

If you are a parent or guardian and believe that a person under the age of 21 in your care has created a kktb account, please contact the support team immediately at [email protected]. We will investigate promptly and take all necessary steps to close the account and protect the minor's data.

13Marketing Communications

kktb sends promotional communications — including bonus offers, tournament announcements, seasonal promotions tied to Eid, Pohela Boishakh, the BPL cricket season, and the T20 World Cup, as well as general platform news — only to players who have actively opted in to receive such communications.

Marketing communications may be delivered via:

• Email to the address registered to your kktb account.
• SMS or mobile notification to the phone number registered to your account.
• In-platform notifications visible after kktb Login.

You may opt out of marketing communications at any time by:

• Updating your communication preferences in the kktb account settings panel following kktb Login.
• Clicking the unsubscribe link present in every marketing email sent by kktb.
• Contacting the kktb support team via live chat or at [email protected] and requesting immediate opt-out.

Opting out of marketing communications does not affect service communications — such as deposit confirmations, withdrawal processing updates, account security alerts, and KYC verification requests — which are sent as a necessary component of your account relationship with kktb and cannot be individually disabled.

14Changes to This Policy

kktb reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or the services we offer. When material changes are made, kktb will notify active account holders via the registered email address or through a prominent notice displayed upon kktb Login, with a minimum of 7 days' notice before the revised policy takes effect.

The date of the most recent update is clearly displayed at the top of this document. We encourage all kktb players to review this Policy periodically to stay informed about how their data is being handled. Continued use of the Platform following the effective date of any update constitutes acceptance of the revised Policy.

For minor, non-material changes — such as typographical corrections, clarifications that do not affect the substance of your rights, or updates to contact information — kktb may update the Policy without advance notice, though the updated date will always be revised to reflect the change.

15Contact & Data Requests

For all privacy-related enquiries, data subject rights requests, marketing opt-out requests, or concerns about how kktb handles your personal data, please use the following contact methods. kktb's support team is available 24/7, every day of the year, including public holidays observed in Bangladesh.

Email: [email protected] (plain text — not a clickable link). Please send your request from the email address registered to your kktb account so we can verify your identity before processing the request.

Live Chat: Available directly within the kktb Platform following kktb Login. Live chat agents can assist with immediate questions and can escalate formal data requests to the relevant compliance team member.

kktb aims to acknowledge all privacy-related requests within 48 hours of receipt and to provide a substantive response within 30 calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days and will notify you of the extension with an explanation.