Your Privacy at kf99

1. Information We Collect

kf99 collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with the platform, and occasionally from trusted third-party sources where permitted. The categories of personal data we collect are described below.

1.1 Registration and Account Data

When you create a kf99 account, we collect the following information:

• Full legal name — as it appears on your government-issued identification document.
• Date of birth — required to verify that you meet the 18+ age requirement.
• Email address — used for account communications, security alerts, and (where consented) promotional messages.
• Mobile phone number — used for two-factor authentication and payment verification, particularly for bKash and Nagad transactions.
• Residential address — including division, district, and upazila within Bangladesh, or full international address where applicable.
• Username and encrypted password — for account authentication.

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process, kf99 may request copies of:

• National ID Card (NID) or passport or driver's licence.
• Proof of address (e.g., recent utility bill, bank statement dated within 90 days).
• Selfie or liveness check photograph for biometric identity confirmation.
• Source of funds documentation for high-value accounts, as required by our fraud prevention procedures.

KYC documents are processed securely and retained only for as long as required by our compliance obligations. They are not used for any purpose other than identity verification and regulatory compliance.

1.3 Transaction and Payment Data

kf99 records all financial transactions associated with your account, including deposit amounts, withdrawal requests, payment method references (e.g., bKash account number, Nagad wallet ID), transaction timestamps, and payment statuses. Full card or wallet credentials are never stored directly by kf99 — payment processing is handled by our certified payment partners who maintain their own data security standards.

1.4 Gameplay and Betting Data

We record all gameplay activity on the kf99 platform, including games played, bet amounts and outcomes, session durations, bonus usage, and responsible gaming interactions (e.g., deposit limits set, self-exclusion requests). This data is used for account management, dispute resolution, responsible gaming monitoring, and platform improvement.

1.5 Technical and Device Data

When you access kf99, we automatically collect certain technical information, including:

• IP address and approximate geographic location (city/region level).
• Browser type and version, operating system, and device type.
• Referral URL (the page from which you arrived at kf99).
• Pages visited, click paths, and session duration within kf99.
• Error logs and performance data used for platform diagnostics.

1.6 Communications Data

If you contact kf99 customer support via email ([email protected]) or live chat, we retain records of your communications for quality assurance, dispute resolution, and training purposes. These records are kept for a minimum of 12 months.

---

2. How We Use Your Data

kf99 processes your personal data only for lawful, specified purposes. The table below summarises the primary purposes for which your data is used and the legal basis for each.

kf99 does not use automated decision-making or profiling in ways that produce significant legal effects on individual players, except where required for fraud detection purposes. Where automated processes flag an account for review, a human compliance team member reviews the case before any restrictive action is taken.

---

3. Data Sharing & Disclosure

kf99 does not sell, rent, or trade your personal data to third parties for commercial purposes. We share data only in the limited circumstances described below, and only with parties who are contractually obligated to handle your data securely and in accordance with this Policy.

3.1 Payment Processing Partners

To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, and City Bank, kf99 shares the minimum necessary transaction data with those payment providers. Each payment partner operates under its own privacy and security framework, which we have verified meets our data protection standards.

3.2 Game Technology Providers

Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others may receive anonymised or pseudonymised gameplay session data for the purpose of game integrity verification and RNG audit trails. These providers do not receive your personally identifiable information (PII) unless strictly required for dispute resolution with their platform.

3.3 Identity Verification Services

kf99 uses third-party KYC and identity verification service providers to assist with document verification and biometric checks. These providers process KYC data solely for the purpose of identity verification and are prohibited from using the data for any other purpose.

3.4 Legal and Regulatory Disclosure

kf99 may disclose personal data to law enforcement agencies, regulatory bodies, or other authorised public authorities where required by applicable law, court order, or where we have a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or harm to a third party. We will notify affected players of such disclosures wherever legally permitted to do so.

3.5 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of kf99's assets, your personal data may be transferred to the acquiring entity. You will be notified in advance of any such transfer via the email address registered to your account, and will have the right to close your account and request data deletion prior to the transfer completing.

---

4. Cookies & Tracking

kf99 uses cookies and similar tracking technologies (including local storage and session tokens) to operate the platform, remember your preferences, analyse usage patterns, and deliver relevant content. The categories of cookies used on kf99 are as follows:

You can manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent the kf99 platform from functioning correctly. Disabling analytics or marketing cookies will not affect your ability to use the platform but may mean that certain personalised features are unavailable.

---

5. Data Retention

kf99 retains your personal data for as long as is necessary to fulfil the purposes outlined in this Policy, subject to the following minimum retention periods:

• Active account data: Retained for the lifetime of your kf99 account plus a minimum of 5 years following account closure, to satisfy anti-money laundering (AML) record-keeping obligations.
• KYC and identity documents: Retained for a minimum of 5 years from the date of verification, or from the date of account closure, whichever is later.
• Transaction records: Retained for a minimum of 7 years to meet financial record-keeping standards.
• Customer support communications: Retained for a minimum of 3 years from the date of the last communication in the relevant thread.
• Technical and device logs: Retained for up to 24 months for security and fraud investigation purposes.
• Marketing consent records: Retained until consent is withdrawn, plus 12 months thereafter as evidence of the consent transaction.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an individual. Requests for early deletion may be submitted as described in Section 7 of this Policy, subject to our legal obligation to retain certain categories of data for the minimum periods stated above.

---

6. Data Security

kf99 implements a layered security framework designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption on all data transmitted between your browser or device and kf99 servers.
• Encrypted database storage for all personally identifiable information and financial records at rest.
• Role-based access controls (RBAC) ensuring that only authorised personnel with a verified business need can access player records.
• Multi-factor authentication (MFA) for all internal staff access to production systems containing personal data.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Intrusion detection systems (IDS) and real-time anomaly monitoring to detect and respond to suspicious activity.
• Secure data disposal procedures for physical and digital media containing personal data.

While kf99 employs industry-standard security measures, no internet-based platform can guarantee absolute security. You are responsible for keeping your own account login credentials confidential and for using a strong, unique password for your kf99 account.

---

7. Your Data Rights

As a kf99 player, you have the following rights with respect to your personal data. To exercise any of these rights, contact our Data Protection team at [email protected] with the subject line "Data Rights Request" and your registered account details. We will respond within 30 days of receiving a valid request.

kf99 will not charge a fee for responding to data rights requests unless the request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply. We may need to verify your identity before processing a data rights request to ensure that we do not disclose or delete data in response to a fraudulent request.

---

8. Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way kf99 handles your personal data, please contact our Data Protection team using the details below. We are committed to resolving all privacy-related concerns promptly and transparently.

8.1 Changes to This Policy

kf99 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or platform features. When we make material changes, we will update the effective date shown at the top of this page and, where appropriate, notify registered players via the email address associated with their account. We encourage you to review this Policy periodically. Continued use of the kf99 platform following notification of changes constitutes your acceptance of the revised Policy.

8.2 Third-Party Links

The kf99 platform does not contain links to third-party websites for general browsing purposes. Where references to payment partners or game providers appear on this page, they are provided for identification purposes only and do not constitute an endorsement of those parties' privacy practices. kf99 accepts no responsibility for the privacy practices of third-party payment processors or game studios — please review their respective privacy policies independently.