Privacy Policy — How kx8013 Protects Your Personal Data

When you register an account, use the kx8013 platform, or interact with our support team, we may collect the following categories of personal data:

1.1 Identity & Contact Data

• Full legal name — as it appears on your National Identity Card (NID) or passport.
• Date of birth — collected to verify that you meet the 18+ age requirement.
• Residential address — including city, district, and postal code within Bangladesh or your country of residence.
• Email address — your primary contact point for account notifications, support responses, and (if opted in) promotional communications.
• Mobile number — used for account security, two-factor authentication (2FA), and payment method verification (e.g., confirming your bKash or Nagad number).

1.2 Identity Verification Documents

• National Identity Card (NID) scan — front and back, as part of the KYC (Know Your Customer) verification process.
• Passport data page — accepted as an alternative identity document.
• Proof of address — a utility bill, bank statement, or official letter issued within the last 90 days.
• Payment method proof — confirmation that the bKash, Nagad, Rocket, Upay, or bank account used for deposits is registered in your name.

1.3 Financial & Transaction Data

• Deposit and withdrawal amounts, timestamps, and payment method used.
• Mobile Financial Service (MFS) account numbers (bKash, Nagad, Rocket, Upay) associated with transactions.
• Bank account or card details where bank transfer or card payment is used — stored in tokenised form only.
• Bonus claims, wagering history, and win/loss records maintained for responsible gaming and AML compliance purposes.

1.4 Technical & Usage Data

• IP address and approximate geographic location at the time of login.
• Device type, operating system, browser type and version.
• Pages visited on kx8013.net, time spent on each section, click patterns, and navigation paths.
• Session start and end times, game titles accessed, bet amounts, and game outcomes (for fair-play auditing).
• Error logs and crash reports that help our technical team maintain platform stability.

1.5 Communications Data

• Content of support chat conversations, emails sent to [email protected], and any WhatsApp messages exchanged with our support team.
• Feedback, complaints, and dispute records.
• Survey responses where you voluntarily participate in player satisfaction research.

kx8013 does not use automated decision-making (including profiling) in ways that produce legal or similarly significant effects on individual players without human review. Where automated systems flag an account for suspicious activity, a human compliance team member reviews the case before any consequential action (such as account suspension) is taken.

Your personal data may be shared with the following categories of recipients under the circumstances described:

3.1 Payment Processing Partners

To process your deposits and withdrawals, kx8013 shares the minimum necessary financial data with licensed payment processors, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and card processing networks (Visa, Mastercard). These partners are contractually required to handle your data securely and use it solely for the purpose of processing your transactions.

3.2 Game & Technology Providers

kx8013 integrates games and platform technology from certified third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, among others. These providers may receive anonymised session data (such as game round IDs and bet amounts) for fair-play auditing, but they do not receive your full identity data unless specifically required for regulatory compliance by the provider in question.

3.3 Fraud Prevention & AML Services

kx8013 works with third-party fraud detection and anti-money laundering (AML) compliance services. These services may receive identity data, transaction data, and device fingerprint information to assess risk and flag suspicious activity. All such partners operate under strict data processing agreements and are prohibited from using your data for any purpose other than the contracted compliance function.

3.4 Legal & Regulatory Authorities

kx8013 may be required by law, court order, or the direction of a competent authority to disclose personal data relating to a registered player. In such cases, kx8013 will disclose only the minimum data required to satisfy the legal obligation and will, where legally permissible, notify the affected player of the disclosure.

3.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of kx8013's business, personal data held by kx8013 may be transferred to the acquiring entity as part of the transaction. In such an event, kx8013 will notify registered players before their data is transferred and becomes subject to a different privacy policy, and players will be given the opportunity to delete their accounts prior to the transfer completing.

A cookie is a small text file placed on your device by a website you visit. Cookies allow the website to recognise your device on subsequent visits, remember your preferences, and maintain session continuity (for example, keeping you logged in between page loads). kx8013 uses the following categories of cookies:

kx8013 does not use third-party advertising cookies or retargeting pixels that track your activity across other websites. The cookies deployed by kx8013 are limited to those needed for platform operation, player safety, and internal analytics.

You can manage, restrict, or delete cookies through your browser's settings menu. Please note that disabling strictly necessary or fraud detection cookies may prevent certain features of the kx8013 platform from functioning correctly, including the ability to log in and maintain a secure session.

The following retention periods apply to the main categories of personal data held by kx8013:

Once a retention period expires, kx8013 securely deletes or anonymises the relevant data. Anonymised data (where all identifying information has been irreversibly removed) may be retained indefinitely for statistical and analytical purposes, as it can no longer be associated with any individual player.

If you request deletion of your personal data (see Section 6 — Your Privacy Rights), kx8013 will action that request within 30 days, subject to any overriding legal retention obligations listed in the table above. Where a legal obligation prevents immediate full deletion, kx8013 will restrict the processing of your data to only those purposes required by law and will delete the data as soon as the obligation expires.

You may exercise any of the following rights at any time by contacting kx8013 support via live chat on the platform or by emailing [email protected]. We will respond to all privacy rights requests within 30 calendar days. In complex cases, this may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.

• Right of Access: You have the right to request a copy of all personal data kx8013 holds about you. This is sometimes called a Subject Access Request (SAR). We will provide the data in a structured, readable format.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account details (such as your email address or mobile number) directly in your account settings; for identity document corrections, please contact support.
• Right to Erasure ("Right to be Forgotten"): You may request that kx8013 delete all personal data we hold about you. We will action this request subject to any overriding legal retention obligations (see Section 5). Exercising this right will result in the permanent closure of your kx8013 account.
• Right to Restrict Processing: You may request that kx8013 stop actively using your personal data while a dispute or investigation is pending, without requiring full deletion of the data.
• Right to Data Portability: You may request that kx8013 provide your personal data in a structured, machine-readable format (such as JSON or CSV) so that it can be transferred to another service provider of your choosing.
• Right to Object: You may object to kx8013 processing your personal data on the basis of legitimate interest — for example, for platform analytics or fraud profiling purposes. We will assess your objection and cease processing unless we have compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where kx8013 processes your data on the basis of your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

The security of your personal data is a continuous operational priority at kx8013. The following measures are in place across all systems that process player data:

• 256-bit SSL/TLS encryption on all data transmitted between your device and kx8013 servers, including login, deposits, withdrawals, and support chat.
• At-rest encryption for sensitive data fields including identity document images, payment method tokens, and KYC records, stored on secured database infrastructure.
• Bcrypt password hashing — your password is stored as a one-way cryptographic hash; it cannot be reversed or read by any kx8013 system or staff member.
• Two-factor authentication (2FA) available for all registered accounts via SMS or authenticator app; strongly recommended for all players.
• Role-based access controls (RBAC) — kx8013 staff can only access the player data categories strictly necessary for their job function. Full data access is restricted to a small number of authorised compliance personnel.
• Real-time intrusion detection and DDoS mitigation protect the kx8013 platform from external attacks that could compromise service availability or data integrity.
• Regular security audits and penetration testing are conducted by independent third-party security firms to identify and remediate vulnerabilities before they can be exploited.
• Incident response procedures are in place to detect, contain, and notify affected players of any data breach within a timeframe consistent with applicable data protection obligations.

When we make material changes to this Privacy Policy — such as introducing a new category of data collection, a new third-party data sharing arrangement, or a significant change to retention periods — we will notify registered players by email to their registered address and by displaying a prominent notice on the kx8013 platform for a minimum of 14 days before the changes take effect.

For minor, non-material updates (such as clarifications to existing language, typographical corrections, or updates to contact details), we will update the "Effective Date" at the top of this page without individual notification. We encourage you to review this Privacy Policy periodically to stay informed about how kx8013 protects your data.

Your continued use of the kx8013 platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the revised policy, you have the right to close your account and request deletion of your personal data by contacting support at [email protected].

All previous versions of this Privacy Policy are archived and available upon request. To obtain a copy of a prior version, contact our support team with the relevant date range and we will provide the archived document within 10 business days.