kk89 Privacy Policy

1. Introduction

kk89 ("we", "us", "our", or "the Platform") is committed to protecting the privacy and personal data of every player who registers, visits, or interacts with the kk89 website at https://kk89.onl and all associated subdomains and services (collectively, the "Platform"). This Privacy Policy sets out in clear and formal terms the categories of personal data we collect, the purposes for which we process that data, the legal bases on which we rely, the parties with whom we may share your data, the rights available to you, and the security measures we employ to safeguard your information.

This Privacy Policy applies to all users of the kk89 Platform, including registered players, visitors who browse without registering, and any individual who contacts kk89 support. By accessing the Platform or creating an account, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue your use of the Platform immediately.

This Privacy Policy forms part of kk89's wider legal framework and should be read alongside our Terms & Conditions and our Responsible Gaming Policy.

2. Data Controller

For the purposes of this Privacy Policy, kk89 acts as the data controller in respect of all personal data collected through the Platform. As data controller, kk89 determines the purposes for which and the means by which personal data is processed. kk89 is responsible for ensuring that personal data is processed lawfully, fairly, and transparently in accordance with applicable data protection principles.

All enquiries relating to data privacy, data subject rights requests, and data protection concerns should be directed to our dedicated support team. Contact details are provided in Section 13 of this policy. kk89 takes its obligations as data controller seriously and has implemented organisational and technical measures to ensure ongoing compliance with applicable data protection standards.

3. Data We Collect

3.1 Registration Data

When you create a kk89 account, we collect the personal data you provide during the registration process. This includes:

• Full legal name (as it appears on your government-issued identity document)
• Date of birth (used to verify compliance with the 21+ age restriction)
• Email address (used for account communications, verification, and support)
• Mobile phone number (used for account security and payment method verification)
• Residential address including city and postcode
• Username and encrypted password credentials
• Preferred currency (Bangladeshi Taka, ৳)

3.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process, we may request and collect copies of identity documents. These include:

• National Identity Card (NID) — issued by the Bangladesh Election Commission
• Passport (photo page)
• Driving licence
• Proof of residential address (utility bill, bank statement dated within 90 days)
• Proof of ownership of payment method (screenshot of bKash, Nagad, Rocket, or Upay account registered in your name)

KYC documents are stored securely and are used solely for identity verification purposes. They are not shared with third parties except where required by law or explicitly listed in Section 5 of this policy.

3.3 Financial and Transaction Data

When you make deposits or request withdrawals on the kk89 Platform, we collect financial transaction data, including:

• Payment method type (bKash, Nagad, Rocket, Upay, Visa, Mastercard, bank transfer)
• Mobile wallet number or bank account number (masked — only last 4 digits stored)
• Transaction amounts in Bangladeshi Taka (৳)
• Transaction reference numbers and timestamps
• Deposit and withdrawal history associated with your account

kk89 does not store full card numbers, CVV codes, or complete mobile wallet PINs. All payment data is handled through PCI-DSS compliant payment processors.

3.4 Gameplay and Betting Data

We record all gameplay activity associated with your account in order to settle bets, manage bonuses, resolve disputes, and fulfil our responsible gaming monitoring obligations. This includes:

• Game sessions, stake amounts, and outcomes for all casino games and sports bets
• Timestamps and duration of play sessions
• Bonus redemptions and wagering progress
• Account balance movements and transaction ledger entries

3.5 Technical and Device Data

When you access the Platform, our servers automatically collect certain technical data, including:

• IP address (used for geolocation, fraud detection, and duplicate account prevention)
• Browser type and version
• Device type and operating system
• Screen resolution and language settings
• Referring URL and pages visited on the Platform
• Session start/end times and page interaction data

3.6 Communications Data

If you contact kk89 via live chat, email, or any other support channel, we retain records of those communications including the content of messages, timestamps, and the support agent who handled your case. This data is used to resolve your query, maintain service quality, and train support staff.

4. Purpose & Legal Basis for Processing

kk89 processes personal data only where a valid legal basis exists. The following table summarises the primary purposes for which we process your data and the corresponding legal basis:

5. Data Sharing

5.1 Who We Share Data With

kk89 does not sell your personal data. We share personal data only with the categories of third parties described below, and only to the extent necessary to fulfil the stated purpose:

• Payment Processors: bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, Visa, Mastercard, and partner banks (BRAC Bank, City Bank, Dutch-Bangla Bank, Islami Bank, Sonali Bank) receive transaction data necessary to process your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC service providers may process copies of your identity documents on our behalf to conduct automated or manual verification checks.
• Game Studios: Certified game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a pseudonymous player identifier necessary to operate their games within our Platform. They do not receive your full name, email, or financial details.
• Fraud Detection Services: Specialist fraud prevention providers may receive technical and transaction data to identify suspicious activity and protect the Platform.
• Customer Support Software: Our support ticketing and live chat systems may store communications data to enable case management and quality assurance.
• Analytics Providers: Platform usage data (anonymised or pseudonymised) may be shared with analytics tools to help us understand usage patterns and improve the Platform.

5.2 Legal Disclosures

kk89 may disclose your personal data to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so, including but not limited to requests related to financial crime investigations, fraud enquiries, or court orders. We will always seek to notify you of such disclosures where permitted by law.

5.3 Business Transfers

In the event that kk89 undergoes a merger, acquisition, or sale of all or part of its assets, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and the privacy commitments that will apply following the transaction.

6. Data Retention

kk89 retains personal data for as long as necessary to fulfil the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. The following general retention periods apply:

When the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised aggregate data (e.g., overall deposit volumes, game popularity statistics) may be retained indefinitely for business analytics purposes.

7. Cookies

7.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember your actions and preferences over a period of time, so you do not have to re-enter them whenever you return to the site or browse from one page to another.

7.2 Cookies Used by kk89

kk89 uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They enable core features such as session management, login state, and security token validation. These cookies cannot be disabled without breaking the Platform.
• Functional Cookies: These cookies remember your preferences such as language settings, display options, and responsible gaming tool configurations (e.g., session time limit reminders). They improve your experience but are not essential to Platform operation.
• Analytics Cookies: These cookies collect anonymised or pseudonymised data about how users interact with the Platform (e.g., pages visited, time spent, navigation paths). This data helps us identify usability issues and improve the Platform. No personally identifiable information is shared with analytics providers through these cookies.

kk89 does not deploy advertising cookies, cross-site tracking cookies, or social media plugin cookies. We do not permit third-party advertising networks to place cookies on the Platform.

7.3 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies at any time. Please note that disabling strictly necessary cookies will prevent you from logging in to your kk89 account and may impair other essential Platform functions. Instructions for managing cookies are available in the help documentation of your browser (Chrome, Firefox, Samsung Internet, Opera Mini, etc.).

8. Security Measures

kk89 takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational security measures to protect against unauthorised access, accidental loss, destruction, or disclosure:

• Transport Encryption: All data in transit between your device and kk89 servers is protected by TLS 1.3 / 256-bit SSL encryption. The Platform enforces HTTPS on all connections and applies HTTP Strict Transport Security (HSTS).
• Data at Rest: Sensitive personal data (identity documents, payment references, account credentials) stored on our servers is encrypted using AES-256 encryption.
• Access Controls: Access to personal data within kk89's internal systems is restricted on a strict need-to-know basis. Staff members who handle personal data are subject to confidentiality obligations and receive regular data protection training.
• Password Security: Player passwords are never stored in plain text. We apply strong one-way cryptographic hashing with salting. kk89 support staff cannot retrieve your password — only a reset is possible.
• Two-Factor Authentication: kk89 supports optional two-factor authentication (2FA) for all player accounts. We strongly recommend enabling 2FA to provide an additional layer of account protection.
• Penetration Testing: kk89 commissions regular third-party security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the unlikely event of a data breach affecting your personal data, kk89 will notify affected players promptly and take all reasonable steps to contain and remediate the breach.

9. Your Data Rights

As a user of the kk89 Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team using the details in Section 13. We will respond to all valid requests within 30 calendar days.

• Right of Access: You have the right to request a copy of all personal data that kk89 holds about you. We will provide this in a structured, commonly used, and machine-readable format upon request.
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay. For certain data categories (e.g., name, date of birth), updated documentary evidence may be required.
• Right to Erasure ("Right to be Forgotten"): You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the data has been processed unlawfully. Please note that certain data must be retained for legal compliance purposes (see Section 6) and cannot be erased upon request.
• Right to Restrict Processing: You may request that we temporarily restrict the processing of your personal data while a rectification or objection request is being considered.
• Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format and to transmit that data to another service provider where technically feasible.
• Right to Object: You may object to processing of your personal data that is carried out on the basis of legitimate interest, including profiling for responsible gaming monitoring. We will consider your objection and cease processing unless we can demonstrate compelling legitimate grounds.
• Right to Withdraw Consent: Where we rely on your consent as the legal basis for processing (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing. To unsubscribe from promotional emails, use the opt-out link in any marketing email or contact support directly.

10. Minors

kk89 strictly prohibits the use of the Platform by any person under the age of 21 years. We do not knowingly collect personal data from individuals under 21. If you are a parent or guardian and believe that a minor has registered an account or provided personal data to kk89 without your consent, please contact us immediately at [email protected]. Upon verification, we will promptly close the account and securely delete all associated personal data.

kk89 employs date of birth verification at registration and may request government-issued identification to confirm that a player meets the minimum age requirement. Players found to be under 21 will have their accounts permanently closed and any funds will be returned to the payment source used for deposit, net of any winnings derived from underage play which are forfeited.

11. International Data Transfers

kk89 primarily stores and processes personal data on servers located in secure data centre facilities. In some cases, data may be transferred to or accessed by service providers located outside of Bangladesh — for example, cloud infrastructure providers, game studios, or fraud detection services operating in other jurisdictions.

Where such international transfers occur, kk89 ensures that adequate safeguards are in place to protect your personal data. These safeguards may include contractual arrangements (standard contractual clauses), the recipient country's adequacy status, or other legally recognised transfer mechanisms. By using the kk89 Platform, you acknowledge that your personal data may be transferred internationally in accordance with these safeguards.

12. Changes to This Privacy Policy

kk89 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. Where changes are material, we will notify registered players by email or by displaying a prominent notice on the Platform at least 14 days before the changes take effect. Your continued use of the Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.

We encourage you to review this Privacy Policy periodically to stay informed about how kk89 protects your personal data. The "Last updated" date at the top of this document indicates when the most recent revision was made. Prior versions of this Privacy Policy are available upon request by contacting our support team.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way kk89 processes your personal data, please contact our dedicated support team. We are available 24 hours a day, 7 days a week, and respond to all data-related enquiries in English.