kg66 Privacy Policy

1 Introduction

kg66 ("we", "us", "our") is committed to protecting the privacy and personal data of all individuals who interact with the kg66 platform, accessible at kg66.ws. This Privacy Policy sets out, in transparent and plain English, the basis on which any personal data we collect from you — or that you provide to us — will be processed by us.

This policy applies to all users of the kg66 platform, including registered Players with active Accounts, visitors who browse the platform without registering, and individuals who contact kg66 customer support through any available channel. It covers personal data collected via the kg66 website, mobile browser interface, live chat, and email communications.

This Privacy Policy should be read alongside the kg66 Terms & Conditions, which govern the overall contractual relationship between you and kg66. In the event of any conflict between this Privacy Policy and the Terms & Conditions on a matter of data processing, this Privacy Policy prevails in respect of that data processing matter.

We take our data protection obligations seriously. The kg66 platform operates primarily to serve players based in Bangladesh, and we have designed our data handling practices to be transparent, proportionate, and respectful of the privacy interests of our player community. We do not process personal data beyond what is reasonably necessary to deliver a secure, reliable, and personalised gaming experience.

2 Data We Collect

kg66 collects different categories of personal data depending on the nature of your interaction with the platform. The categories of data we collect are described below:

2.1 Identity and Contact Data

• Full legal name as it appears on your government-issued identification document
• Date of birth (used to verify that you meet the 21+ age requirement)
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi) and postal code
• Mobile phone number (primary contact channel used for account verification and security alerts)
• Email address, where provided during registration or support contact
• Username selected at registration

2.2 Identity Verification (KYC) Data

• Copies of government-issued identification documents, including National Identity Card (NID), passport, or driver's licence
• Selfie or facial image submitted for liveness verification, where required
• Proof of address documents, such as utility bills or bank statements dated within the past three months

2.3 Financial Data

• Mobile wallet identifiers (bKash account number, Nagad account number, Rocket account number, Upay account number) registered to your Account for deposit and withdrawal purposes
• Bank account details where bank transfer is used as a payment method (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, or other registered institutions)
• Transaction history, including deposit amounts, withdrawal amounts, dates, and payment method used
• Account Balance history and wagering turnover records

kg66 does not store full card numbers, CVV codes, or mobile banking PINs. Payment card processing is handled by certified payment service providers who maintain their own PCI-DSS compliant data environments.

2.4 Technical and Usage Data

• IP address and approximate geolocation derived from IP address
• Device type, operating system, and browser type and version
• Session duration, pages visited, features used, and navigation path within the platform
• Login timestamps and logout timestamps
• Error logs and technical diagnostics generated during your session

2.5 Communications Data

• Records of communications between you and kg66 customer support, including live chat transcripts and email correspondence
• Feedback, complaints, dispute submissions, and responsible gaming requests
• Marketing communication preferences and opt-out records

2.6 Responsible Gaming Data

• Deposit limit settings applied to your Account
• Session alert configurations
• Cooling-off period activation records
• Self-exclusion status and self-exclusion period dates

The data categories marked as mandatory are required for the operation of your Account and the delivery of the kg66 service. Optional data categories are collected only where you choose to provide them and are used solely for the purposes described in this policy.

3 How We Collect Your Data

kg66 collects personal data through the following channels and mechanisms:

• Direct provision by you: Data you enter directly into the platform at registration, during KYC verification, when making a deposit or withdrawal, when contacting customer support, or when completing any form or survey on the platform.
• Automated technical collection: Data collected automatically when you access and use the platform, including IP address, device identifiers, session data, and cookie data. This collection occurs whether or not you have a registered Account.
• Payment processors: Transaction confirmation data returned by mobile wallet operators (bKash, Nagad, Rocket, Upay) and card payment processors following a completed deposit or withdrawal transaction. This data is limited to transaction reference numbers, amounts, timestamps, and status codes.
• Identity verification providers: Where kg66 uses a third-party KYC verification service, that provider may return verification status data (pass/fail/pending) and the document type used, in accordance with its own privacy practices.
• Customer support interactions: Data captured during live chat sessions, email exchanges, and any other support channel through which you contact kg66.

kg66 does not purchase personal data from data brokers or third-party marketing list providers. All personal data we hold about you originates from your direct interaction with the platform or from service providers acting on our instruction in connection with your Account.

4 Purpose of Processing

kg66 processes your personal data for the following specific purposes. We do not use your data for any purpose that is incompatible with the purposes described here without first seeking your consent or establishing a fresh legal basis for that processing.

5 Legal Basis for Processing

Each processing activity carried out by kg66 in respect of your personal data is conducted on one of the following legal bases:

• Contract performance: Processing that is necessary to deliver the services you have contracted for by registering an Account and accepting the kg66 Terms & Conditions. This includes Account management, bet processing, payment handling, and customer support.
• Legal obligation: Processing required to comply with applicable legal obligations, including identity verification, age verification (21+), anti-money laundering record-keeping, and responding to lawful requests from government authorities or law enforcement.
• Legitimate interests: Processing carried out for purposes that are in the legitimate interests of kg66 or our player community, where those interests are not overridden by your privacy interests. This includes fraud detection, security monitoring, platform improvement based on aggregated usage analytics, and responsible gaming monitoring.
• Consent: Processing carried out on the basis of your freely given, specific, informed, and unambiguous consent. This applies primarily to the sending of marketing communications. Where consent is the legal basis for a processing activity, you have the right to withdraw consent at any time without detriment to your Account status or service access.

Where kg66 relies on legitimate interests as the legal basis for a processing activity, we have carried out a balancing assessment to satisfy ourselves that those interests are proportionate and do not override your fundamental privacy rights. You may request information about any such balancing assessment by contacting us at [email protected].

6 Data Sharing and Disclosure

kg66 does not sell, rent, lease, or otherwise transfer your personal data to third parties for their own commercial or marketing purposes. Personal data is shared with external parties only in the circumstances described below, and only to the extent necessary for the relevant purpose:

• Payment service providers: Mobile wallet operators (bKash, Nagad, Rocket, Upay) and card payment networks (Visa, Mastercard) receive the minimum personal and financial data required to authenticate and process your deposit and withdrawal transactions. These providers operate under their own privacy policies and security standards.
• Identity verification providers: Where a third-party KYC service is used, your identity document data and personal details are transmitted to that provider solely for the purpose of conducting the age and identity verification check. The provider is contractually prohibited from using this data for any purpose other than verification.
• Game content providers: Third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a pseudonymous player identifier and session token to facilitate game play. They do not receive your full name, address, or financial data.
• IT and platform infrastructure providers: Cloud hosting, content delivery, and platform security providers who process data on kg66's behalf under data processing agreements that require them to implement appropriate security measures and process data only on kg66's documented instructions.
• Legal and regulatory authorities: kg66 may disclose personal data to law enforcement agencies, financial intelligence units, or other government bodies where required to do so by applicable law, court order, or regulatory direction. kg66 will notify you of any such disclosure to the extent permitted by law.
• Professional advisers: Lawyers, auditors, and other professional advisers engaged by kg66 who require access to certain data in connection with the provision of their professional services, subject to professional confidentiality obligations.

All third parties with whom kg66 shares personal data are required to handle that data in accordance with applicable data protection standards and are prohibited from using it for purposes other than those for which it was shared.

7 Data Retention

kg66 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by applicable legal, regulatory, or operational obligations. The following retention periods apply to the principal categories of data we hold:

• Account and identity data: Retained for the full duration of your Account and for a minimum period of five years following Account closure, to satisfy AML record-keeping requirements and to defend against any legal claims that may arise in connection with your Account activity.
• Financial transaction records: Retained for a minimum of five years from the date of each transaction, in accordance with financial record-keeping requirements applicable to the kg66 platform.
• KYC verification documents: Retained for the duration of your Account and for a minimum of five years following Account closure.
• Customer support communications: Retained for three years from the date of the communication, or for the duration of any ongoing dispute to which the communication is relevant, whichever is longer.
• Technical and usage logs: Retained for up to 12 months from the date of generation, after which they are deleted or anonymised.
• Marketing preference records: Retained for the duration of your Account, or until you withdraw consent, whichever occurs first. Opt-out records are retained indefinitely to ensure that marketing is not inadvertently sent to you following an opt-out.
• Responsible gaming records: Deposit limit, cooling-off, and self-exclusion records are retained for the full duration of any applicable exclusion period and for a minimum of five years thereafter, to prevent circumvention of exclusion commitments.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with you. Where anonymisation rather than deletion is applied, the resulting anonymised data may be retained indefinitely for aggregate statistical purposes.

8 Cookies and Tracking Technologies

The kg66 platform uses cookies and similar tracking technologies to support the operation of the platform, maintain session security, and understand how players interact with the site. The following categories of cookies are used:

• Strictly necessary cookies: These cookies are essential to the functioning of the platform and cannot be disabled. They include session authentication tokens that keep you logged in during a session, security cookies that protect against cross-site request forgery, and load-balancing cookies that ensure stable server connectivity. No personal data beyond a session identifier is stored in these cookies.
• Functional cookies: These cookies remember your platform preferences, such as your most recently used payment method, your preferred game categories, and your language settings. They improve the convenience and personalisation of your experience. They can be disabled via your browser settings, but doing so may impair certain platform functions.
• Analytics cookies: kg66 uses analytics cookies to collect aggregate, anonymised data about how players navigate the platform — which pages are visited most frequently, where players exit the platform, and which features are used most. This data is used solely to improve platform design and performance. These cookies do not identify you individually.

kg66 does not use third-party advertising cookies, retargeting pixels, or behavioural profiling technologies that track your activity across websites other than kg66.ws.

You can control or delete cookies through your browser settings at any time. Most browsers allow you to refuse new cookies, delete existing cookies, and receive a warning before a cookie is stored. Please note that disabling strictly necessary cookies will prevent you from logging in to or using the kg66 platform.

9 Your Data Rights

As a player on the kg66 platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact kg66 customer support at [email protected] with the subject line "DATA RIGHTS REQUEST" and a description of the right you wish to exercise:

• Right of access: You have the right to request a copy of the personal data that kg66 holds about you. We will provide this information in a structured, commonly used, machine-readable format within a reasonable period of receiving your request.
• Right to rectification: You have the right to request correction of any personal data we hold about you that is inaccurate or incomplete. Identity and contact data corrections may require supporting documentation.
• Right to erasure: You have the right to request deletion of your personal data where (a) the data is no longer necessary for the purposes for which it was collected; (b) you withdraw consent and no other legal basis applies; or (c) the data has been processed unlawfully. This right is subject to override where retention is required for legal compliance purposes, including AML record-keeping obligations.
• Right to restriction of processing: You have the right to request that kg66 restricts processing of your data to storage only, pending resolution of a dispute about the accuracy of the data or the lawfulness of the processing.
• Right to data portability: Where processing is carried out on the basis of your consent or for the performance of a contract, you have the right to receive your personal data in a portable format and to request that it be transmitted directly to another service provider, where technically feasible.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests, including for direct marketing purposes. An objection to direct marketing will always be honoured immediately. An objection to other legitimate-interest processing will be considered and honoured unless kg66 can demonstrate compelling legitimate grounds for the processing that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

kg66 will respond to all data rights requests within 30 days of receipt. Where a request is complex or numerous, this period may be extended by a further 60 days, in which case kg66 will notify you of the extension and the reasons for it within the initial 30-day period.

There is no charge for making a data rights request unless the request is manifestly unfounded or excessive, in which case kg66 reserves the right to charge a reasonable fee or decline to act on the request.

10 Data Security

kg66 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in transit: All data transmitted between your device and the kg66 platform is protected by Transport Layer Security (TLS) with 256-bit SSL encryption. This applies to all platform pages, login sessions, and payment interactions.
• Encryption at rest: Sensitive personal data, including identity documents and financial records, is encrypted at rest in our data storage environments.
• Access controls: Access to personal data held by kg66 is restricted on a strict need-to-know basis. kg66 employees and contractors are granted data access only to the extent required for their specific job function. All access is logged and subject to periodic audit review.
• Two-factor authentication: Internal systems containing personal data require multi-factor authentication for staff access. Players are encouraged to use strong, unique passwords for their Accounts.
• Vulnerability management: kg66 conducts periodic security assessments of the platform infrastructure to identify and remediate vulnerabilities. Patches and updates are applied on a structured schedule.
• Incident response: kg66 maintains a data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, kg66 will notify affected players without undue delay and will take immediate steps to contain and remediate the breach.

While kg66 takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your Account credentials and for notifying kg66 immediately if you suspect that your Account has been compromised.

11 Children and Minors

The kg66 platform is strictly intended for adults aged 21 and above. kg66 does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the Account registration process and may be repeated at any point during the Account lifecycle where kg66 has reason to question whether the Account holder meets the minimum age requirement.

If kg66 becomes aware that personal data has been collected from a person under the age of 21, it will take immediate steps to close the relevant Account and delete or return all personal data associated with that Account in accordance with applicable legal requirements.

If you believe that a person under the age of 21 has registered an Account on the kg66 platform, please contact kg66 customer support at [email protected] immediately. We take underage gambling prevention extremely seriously and will act on all credible reports promptly.

12 Cross-Border Data Transfers

The kg66 platform is operated for the Bangladesh market, and the majority of data processing activities are carried out in connection with infrastructure located in or near the Bangladesh region. However, some of kg66's technology and service providers — including cloud infrastructure providers, game content providers, and KYC verification services — may process data in data centre locations outside Bangladesh.

Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection to that applicable in Bangladesh, kg66 ensures that appropriate safeguards are in place, including:

• Data processing agreements with third-party processors that impose contractual obligations equivalent to applicable data protection standards
• Requirements that overseas processors implement technical security measures equivalent to those maintained by kg66 on its own infrastructure
• Restrictions on onward transfer by overseas processors to further sub-processors without kg66's prior written consent

By using the kg66 platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Bangladesh in the circumstances described above, subject to the safeguards set out in this section.

13 Third-Party Links

The kg66 platform does not contain links to third-party websites or services other than those that form an integral part of the kg66 gaming experience (such as game provider interfaces that load within the platform). In the event that any third-party content or link is accessible via the platform, kg66 is not responsible for the privacy practices or content of those third-party destinations.

This Privacy Policy applies solely to the kg66 platform at kg66.ws and its associated services. It does not apply to any external website, mobile application, or service that you may access through a link originating outside the kg66 platform. kg66 encourages you to review the privacy policies of any third-party service you use.

14 Policy Amendments

kg66 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or changes to the services offered on the platform. Where amendments are material — that is, where they substantially affect how we use your personal data or the rights available to you — kg66 will notify registered Players through the platform interface or via their registered contact details prior to the amended policy taking effect.

The "Last Updated" date displayed at the top of this Privacy Policy reflects the date on which the most recent revision was made. We encourage you to review this policy periodically to stay informed about how kg66 handles your personal data.

Your continued use of the kg66 platform following the publication of any amended Privacy Policy constitutes your acknowledgement of the amendments. If you have concerns about any amendment, you may contact kg66 customer support to discuss those concerns before the amended policy takes effect.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which kg66 handles your personal data, please contact our support team using the details below. We are committed to responding to all privacy-related enquiries promptly and thoroughly.

All privacy enquiries, data rights requests, and data breach reports should be directed to:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data rights requests: DATA RIGHTS REQUEST
• Subject line for data breach reports: DATA BREACH REPORT
• Subject line for general privacy enquiries: PRIVACY ENQUIRY

kg66 aims to acknowledge all privacy-related contacts within two business days and to provide a substantive response within 30 calendar days of receipt. Where a request requires additional time, we will inform you of the extended timeline within the initial 30-day period.

If you are not satisfied with kg66's response to a privacy concern, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. Players based in Bangladesh may seek guidance from the Bangladesh Telecommunication Regulatory Commission (BTRC) or other competent authority as applicable under current Bangladesh law.