k999 Privacy Policy — How We Protect Your Personal Data

This Privacy Policy ("Policy") describes how k999 ("k999", "we", "us", "our") collects, processes, stores, and protects personal information provided by users ("Player", "you", "your") of the k999 online gaming platform accessible at k999.bar. k999 is Bangladesh's premier online casino and sports betting platform, offering casino games, live dealer tables, sports betting markets, crash games, and related entertainment services.

By registering an account, accessing any area of the k999 platform, or using any of our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must discontinue use of the k999 platform immediately.

k999 is committed to handling personal data with the highest standards of care, integrity, and confidentiality. We do not sell, rent, or trade your personal information to unaffiliated third parties for their own marketing purposes. All data processing activities described in this Policy are carried out for legitimate operational, legal, and security purposes only.

k999 collects personal data from you through several channels: directly from you when you register or interact with the platform, automatically when you browse and use our services, and from third-party identity verification and payment service providers. The categories of personal data we collect are set out below.

k999 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or health data, except where the collection of health-related information is strictly necessary for responsible gaming assessments initiated at your request or by our responsible gaming team in accordance with our duty of care obligations.

k999 uses the personal data described in Section 2 for the following purposes. Each purpose is paired with its corresponding lawful basis, which is described in greater detail in Section 4.

• Account creation and management: To register your account, verify your identity, maintain your account profile, and deliver all k999 services to you as a registered player.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, and Upay; to verify that payment methods are registered in your name; and to maintain accurate financial records in connection with your account.
• Legal and regulatory compliance: To fulfil our obligations under anti-money-laundering (AML) regulations, Know Your Customer (KYC) requirements, and any other applicable legal obligations. This includes retaining transaction records for the periods specified by law.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, multiple-account creation, bonus abuse, collusion, and other prohibited activities described in our Terms & Conditions.
• Responsible gaming: To monitor gameplay patterns that may indicate problem gambling behaviour, to apply responsible gaming tools requested by the player, and to comply with self-exclusion requests.
• Customer support: To respond to your queries, complaints, and dispute submissions; to maintain records of support interactions for quality assurance and training purposes.
• Platform improvement: To analyse aggregated, anonymised usage data in order to improve the performance, reliability, and user experience of the k999 platform.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates by email or mobile notification — but only where you have provided explicit consent to receive such communications. You may withdraw this consent at any time by contacting k999 support.

Every data processing activity carried out by k999 relies on one or more of the following recognised legal bases. We have mapped the primary legal basis for each major processing purpose below:

• Contractual necessity: Processing your registration data, identity verification information, and payment details is necessary to enter into and perform the contract between you and k999 (governed by our Terms & Conditions). Without this processing, k999 cannot provide its services to you.
• Legal obligation: Processing for AML compliance, KYC verification, transaction record retention, and reporting of suspicious activity to relevant authorities is carried out because k999 is legally required to do so.
• Legitimate interests: Processing for fraud detection, platform security, responsible gaming monitoring, and aggregated analytics is carried out on the basis of k999's legitimate interest in operating a safe, fair, and financially sound platform. We have assessed that these interests are not overridden by your rights and freedoms.
• Consent: Processing for direct marketing communications is carried out only on the basis of your explicit, freely given, and informed consent, provided at the point of registration or subsequently via your account settings. You may withdraw this consent at any time without affecting the lawfulness of any processing carried out prior to withdrawal.

k999 shares personal data with third parties only where strictly necessary and only in the circumstances described below. All third-party data processors engaged by k999 are subject to contractual obligations that require them to process your data only on k999's instructions and to maintain appropriate security measures.

• Payment service providers: Your mobile wallet number and transaction data are shared with bKash, Nagad, Rocket, and Upay solely for the purpose of processing deposits and withdrawals. These providers are independent data controllers and their own privacy policies govern the use of data within their systems.
• Identity verification providers: Where k999 uses a third-party KYC verification service to validate government-issued identification documents, that provider receives the minimum data necessary to complete the verification check and is contractually prohibited from using that data for any other purpose.
• Game technology providers: Game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session identifiers and gameplay data necessary to deliver their games via the k999 platform. These providers do not receive personally identifiable information beyond what is technically required for game delivery.
• Legal and regulatory authorities: k999 may be required by law to disclose personal data — including account information and transaction records — to law enforcement agencies, financial intelligence units, or other competent authorities in response to a valid legal order, warrant, or regulatory obligation. k999 will notify you of such disclosure where permitted by law to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of k999's business assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and of any changes to this Privacy Policy that result from it, with a reasonable period to object before the transfer takes effect.

k999 uses cookies and similar tracking technologies on the k999.bar website to deliver core platform functionality, maintain session security, and analyse how players use the platform. A cookie is a small text file stored on your device by the website you visit. Cookies used by k999 fall into the following categories:

• Strictly necessary cookies: These cookies are essential for you to navigate k999.bar and use its core features, including maintaining your login session, storing your account preferences, and securing your connection. Strictly necessary cookies cannot be disabled without rendering the platform non-functional. No consent is required for their use.
• Performance and analytics cookies: These cookies collect anonymised information about how visitors interact with k999.bar — for example, which pages are visited most frequently and whether visitors encounter error messages. This data is used solely to improve platform performance and is not linked to any identifiable individual.
• Functional cookies: These cookies remember your preferences and settings — such as your preferred language, display settings, and responsible gaming configurations — so that you do not need to re-enter them on every visit.
• Security cookies: These cookies support k999's fraud detection and account security systems. They help identify suspicious login patterns, device anomalies, and potential unauthorised access attempts in real time.

You may control cookie settings through your browser's privacy preferences. Please note that disabling certain cookies — particularly strictly necessary and security cookies — may impair your ability to log in to your account or use certain platform features. k999 does not use third-party advertising cookies or cross-site tracking cookies for the purpose of serving targeted advertisements.

k999 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. The table below summarises our standard retention periods by data category:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that renders re-identification impossible. Where data is anonymised rather than deleted, the resulting anonymous dataset may be retained indefinitely for statistical and analytical purposes without constituting personal data processing.

k999 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes the following controls:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and the k999 platform is encrypted using 256-bit SSL/TLS encryption. This ensures that your login credentials, personal details, and financial information cannot be intercepted in transit.
• Access controls: Access to personal data held by k999 is restricted to authorised employees and service providers who require it to perform their job functions. Access privileges are role-based and reviewed regularly. All staff with access to personal data are subject to confidentiality obligations.
• Infrastructure security: k999's platform infrastructure is hosted on servers with physical security controls, network-level firewalls, intrusion detection systems, and regular vulnerability scanning. Security patches are applied on a prioritised schedule based on severity.
• Password security: Player account passwords are stored using industry-standard one-way cryptographic hashing. k999 staff cannot retrieve your password in plain text. If you forget your password, a reset must be initiated through the account recovery process — your original password cannot be recovered.
• Fraud monitoring: k999 operates real-time fraud detection systems that analyse login patterns, device fingerprints, transaction behaviour, and gameplay anomalies to identify and respond to potential security incidents promptly.

While k999 takes all reasonable precautions to protect your data, no digital platform can guarantee absolute security against all forms of attack. In the event of a data breach that is likely to result in a risk to your rights and freedoms, k999 will notify affected players as soon as reasonably practicable and will take all necessary remediation steps without delay.

As a k999 player, you hold the following rights with respect to your personal data. k999 will respond to all verified data rights requests without charge within 30 days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days with written notice.

To exercise any of the rights above, please contact k999's data support team by email at [email protected] (plain text — not a clickable link) or via the live chat system from within your registered account. We may ask you to verify your identity before processing a rights request to protect against unauthorised requests on your behalf.

The k999 platform is strictly for adults aged 21 years and above. k999 does not knowingly collect, process, or store personal data belonging to any individual under the age of 21. Registration by persons under 21 is prohibited under our Terms & Conditions and constitutes a material breach of our user agreement.

k999 employs age verification controls at the point of registration and may request documentary proof of age before activating a new account or processing a withdrawal. If k999 becomes aware that personal data has been collected from an individual under the age of 21 — whether through a false registration, a shared device, or any other means — that account will be suspended immediately, all data will be reviewed, and the account will be closed. Any balance in such an account will be handled in accordance with applicable legal requirements.

If you are a parent or guardian and believe that your child has registered with k999 and provided personal data, please contact us immediately at [email protected] so that we can investigate and take the appropriate action without delay.

The k999 platform may reference or integrate with third-party services — such as game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — whose software operates within the k999 interface. These providers operate under their own privacy policies and data processing agreements. k999 is not responsible for the privacy practices of third-party game studios, and we encourage you to review their respective policies if you have concerns about how they handle data within their game environments.

k999 does not operate external social media pages, third-party forums, or affiliate websites. Any website that claims to represent k999 and is not accessible at k999.bar is not authorised by k999, and k999 cannot be held responsible for any data collected or processed by such sites. If you encounter a website that appears to impersonate k999, please report it to us at [email protected] immediately.

k999 reserves the right to update, amend, or replace this Privacy Policy at any time. When material changes are made — for example, changes to the categories of data collected, new third-party sharing arrangements, or changes to retention periods — k999 will notify registered players by posting a prominent notice on k999.bar and, where reasonably practicable, by sending a notification to the email address associated with your account.

The updated Policy will take effect 7 days after the date of the notification, except where changes are required urgently to respond to a legal requirement or security incident, in which case they may take effect immediately. The "Last Updated" date displayed at the top of this Policy will always reflect the date of the most recent revision.

Your continued use of the k999 platform following the effective date of any revision constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you must cease using the platform and may request account closure and retrieval of your available balance by contacting k999 support. Historical versions of this Privacy Policy are available on request.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way k999 handles your personal data, please contact our data support team using the details below. All contact information is provided as plain text only and is not clickable.

Email: [email protected]

Platform: k999.bar — live chat support available 24/7 from within your registered account

Response time: We aim to acknowledge all privacy-related enquiries within 2 business days (Bangladesh Standard Time, UTC+6) and to resolve them fully within 30 days of receipt.