Your Privacy Matters to Us

When you register for an account, use our services, or interact with kp66 in any way, we may collect the following categories of personal data. We collect only the information that is necessary for the purpose stated and do not engage in excessive data collection.

1.1 Account Registration Data

When you create a kp66 account, we collect the information you provide directly, which may include:

• Full legal name
• Date of birth (for age verification — players must be 18 or older)
• Email address
• Mobile phone number (Bangladesh format, e.g., +880 17XX XXXXXX)
• Residential address (city, district, division within Bangladesh)
• Preferred currency (Bangladeshi Taka, BDT)
• Username and encrypted password

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process — required before your first withdrawal or when triggered by unusual account activity — we may collect:

• Scanned copy or photograph of a government-issued photo ID (National ID Card, passport, or driving licence)
• Proof of address (utility bill, bank statement, or official letter dated within 3 months)
• Proof of payment method ownership (e.g., screenshot of your bKash, Nagad, or Rocket account showing your registered name and number)
• Selfie photograph for facial identity confirmation, where required

1.3 Financial Transaction Data

When you make deposits or withdrawals on kp66, we record transaction data including:

• Payment method type (bKash, Nagad, Rocket, Upay, bank transfer, Visa, Mastercard)
• Transaction amount in BDT
• Transaction timestamp (Bangladesh Standard Time, BST, UTC+6)
• Transaction reference or confirmation number
• Account number or wallet identifier (stored in masked or tokenised format)

1.4 Gameplay and Betting Activity Data

kp66 logs your in-platform activity to ensure fair play, resolve disputes, and comply with our obligations. This includes:

• Games played, bets placed, and results (wins and losses)
• Cricket betting selections, live betting activity, and odds accepted
• Slots sessions, spin counts, and RTP-relevant activity
• Bonus claims, wagering progress, and promotional participation
• Session start and end times in BST

1.5 Technical and Device Data

We automatically collect certain technical data when you visit kp66.bet, including:

• IP address
• Browser type and version
• Operating system and device type
• Referring URL and pages visited on kp66.bet
• Session duration and click-path data
• Cookie identifiers (see the Cookies section below)

kp66 processes your personal data only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. The table below summarises our key data processing activities and their legal basis:

Purpose	Data Used	Legal Basis
Account creation and management	Registration data, contact details	Contractual necessity
Age and identity verification (KYC)	ID documents, selfie, proof of address	Legal obligation / contractual necessity
Processing deposits and withdrawals	Payment method data, transaction records	Contractual necessity
Fraud prevention and AML monitoring	Transaction data, IP address, device data	Legal obligation / legitimate interest
Responsible gaming monitoring	Gameplay data, deposit history, session data	Legal obligation / legitimate interest
Customer support and dispute resolution	Account data, communication history	Contractual necessity / legitimate interest
Platform security and integrity	Device data, IP address, login records	Legitimate interest
Personalised promotions and bonuses	Gameplay activity, registration data	Consent (opt-in marketing preferences)
Service improvement and analytics	Aggregated / anonymised usage data	Legitimate interest

If you have opted in to receive promotional communications from kp66 (including bonus alerts, tournament notifications for BPL and IPL, and seasonal promotions such as Eid or Pohela Boishakh offers), you may withdraw that consent at any time by updating your communication preferences in your account settings or by emailing [email protected]. Withdrawing marketing consent does not affect our right to communicate with you regarding your account or any mandatory service notices.

kp66 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. We may, however, share your information with trusted third parties in the following limited and controlled circumstances:

3.1 Payment Processing Partners

When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, or Mastercard, your transaction data is shared with the relevant payment processor to the minimum extent necessary to complete the transaction. These processors are bound by their own privacy and security obligations and may not use your data for any other purpose.

3.2 Identity Verification Providers

kp66 may use third-party KYC service providers to assist in verifying your identity and age. These providers receive only the data necessary to perform the verification check and are contractually prohibited from using that data for any other purpose or retaining it beyond the period required to complete verification.

3.3 Legal and Regulatory Obligations

kp66 may disclose your personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or official governmental request. We will, where permitted by law, notify you of any such disclosure request before complying.

3.4 Platform Service Providers

We work with a limited number of carefully vetted service providers who assist in operating the kp66 platform, including hosting infrastructure, cybersecurity, analytics, and customer support tools. All such providers are bound by data processing agreements that restrict their use of your data to the services they provide to kp66 and require them to maintain appropriate security standards.

3.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of kp66's business, your personal data may be transferred to the relevant successor entity as part of the transaction. You will be notified of any such change in data controller via the email address registered on your kp66 account, and this Privacy Policy will be updated accordingly.

kp66 uses cookies and similar tracking technologies to ensure the platform functions correctly, to keep your session secure, and to understand how players interact with our site. A cookie is a small text file stored on your device by your browser when you visit kp66.bet. Cookies do not contain your password or payment information.

Cookie Type	Purpose	Duration
Strictly Necessary	Session authentication, CSRF protection, load balancing. Required for kp66 Login and account access to function.	Session / up to 24 hours
Functional	Remembering your language preference, display settings, and last-visited game category (e.g., Cricket, Slots).	Up to 30 days
Performance / Analytics	Aggregated, anonymised data on page load times, error rates, and navigation paths. Used to improve platform performance.	Up to 12 months
Security	Fraud detection signals, unusual login pattern detection, and bot-mitigation checks.	Up to 6 months

kp66 does not deploy third-party advertising cookies, retargeting pixels, or social media tracking scripts on kp66.bet. You will not be tracked across other websites for the purpose of serving you kp66 advertisements based on your browsing history.

You may control cookie behaviour through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will prevent kp66 Login from functioning correctly and may prevent access to your account. Disabling functional cookies will reset your display preferences on each visit. Disabling performance cookies has no impact on site functionality.

kp66 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years after closure	Contractual obligation, AML compliance
KYC identity documents	5 years from date of submission	Regulatory and AML requirements
Financial transaction records	7 years from transaction date	Financial record-keeping obligations
Gameplay and betting logs	3 years from session date	Dispute resolution, fair play audits
Customer support communications	2 years from last interaction	Dispute resolution, service quality
Marketing consent records	Until consent withdrawn + 1 year	Proof of consent compliance
Technical / device logs	90 days	Security monitoring, fraud detection

When the retention period for a given data category expires, kp66 will securely delete or anonymise the relevant records. Anonymised, aggregated data (which cannot be used to identify you) may be retained indefinitely for statistical and platform improvement purposes.

If you request deletion of your account and personal data before the end of an applicable retention period, kp66 will comply with your request to the maximum extent possible while retaining only those records that are legally required to be kept (for example, financial transaction records required by AML regulations).

As a kp66 player, you have the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Privacy Rights Request". We aim to respond to all verified requests within 30 days.

1. Right of Access: You have the right to request a copy of the personal data kp66 holds about you, including your account details, transaction history, and gameplay logs. We will provide this in a structured, readable format.
2. Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may also update most account details directly within your kp66 account settings after kp66 Login.
3. Right to Erasure ("Right to be Forgotten"): You may request that kp66 delete your personal data. We will honour this request where it does not conflict with our legal obligation to retain certain records (e.g., financial transaction data required under AML regulations).
4. Right to Restrict Processing: You may request that kp66 temporarily halt the processing of your personal data while a dispute regarding its accuracy or the lawfulness of its processing is resolved.
5. Right to Data Portability: You have the right to receive your personal data in a commonly used, machine-readable format (such as CSV or JSON) and to transmit that data to another service provider of your choosing.
6. Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing carried out on the basis of kp66's legitimate interests, though we may override such an objection where our interests are compelling and lawful.
7. Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

kp66 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security framework includes, but is not limited to:

• SSL/TLS Encryption: All data transmitted between your browser or mobile device and kp66.bet is encrypted using industry-standard TLS 1.2 or higher protocols. The padlock icon in your browser confirms this connection is active.
• Password Security: Player passwords are stored using one-way cryptographic hashing (bcrypt with salt). kp66 staff cannot read your password, only reset it through a verified process.
• Access Controls: Internal access to player data is restricted to authorised kp66 personnel on a strict need-to-know basis. All internal access is logged and subject to regular audit.
• Two-Factor Authentication (2FA): kp66 supports 2FA for player accounts. We strongly recommend enabling 2FA via your account settings after kp66 Login to protect against unauthorised account access.
• DDoS and Intrusion Protection: kp66 deploys enterprise-grade firewall, DDoS mitigation, and intrusion detection systems to protect our infrastructure from external attacks.
• Regular Security Audits: Our platform undergoes periodic security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Payment Tokenisation: Payment method identifiers (e.g., bKash wallet numbers, bank account numbers) are stored in tokenised or masked format. Full account numbers are never stored in plain text on kp66 systems.

Despite these measures, no online platform can guarantee absolute security against all possible threats. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, kp66 will notify affected players via their registered email address as promptly as practically possible and will take all reasonable steps to contain and remediate the breach.

You also play an important role in keeping your account secure. Use a strong, unique password for your kp66 account, enable 2FA, never share your login credentials with anyone, and contact [email protected] immediately if you suspect any unauthorised access to your account.

kp66 reserves the right to update, amend, or replace this Privacy Policy at any time. Changes may be made to reflect updates to our data processing practices, changes in applicable law, new product features, or operational adjustments.

When we make material changes to this Privacy Policy — meaning changes that significantly affect how your personal data is collected, used, or shared — we will notify you via the email address registered on your kp66 account at least 7 days before the changes take effect. For minor, non-material changes (such as formatting corrections or clarifications that do not alter the substance of our commitments), we may update this page without a separate notification.

The "Last Updated" date at the top of this page always reflects the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed about how kp66 protects your data. Your continued use of kp66 after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms.

If you disagree with any change to this Privacy Policy and do not wish to be bound by the updated terms, you must stop using the kp66 platform and may request account closure by contacting [email protected]. Upon account closure, data retention obligations as described in Section 5 will continue to apply to records we are legally required to keep.