kxy8 Privacy Policy

1 Introduction

kxy8 ("we", "us", "our", "the Platform") is committed to protecting the personal information of all users who access the kxy8 website at kxy8.io and any associated services or features. This Privacy Policy sets out how we collect, use, store, share, and protect your personal data when you interact with our platform — whether you are browsing as a visitor, registering as a new player, or actively using your account.

This Privacy Policy applies to all registered players and visitors of the kxy8 platform, including those accessing the site from Bangladesh and other locations. It covers all data processing activities associated with account registration, identity verification, deposits and withdrawals, gameplay activity, customer support interactions, and marketing communications.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which form part of our overall agreement with you. Where any conflict exists between this Privacy Policy and those documents, this Privacy Policy governs in respect of data protection matters.

We review and update this Privacy Policy periodically to reflect changes in our data practices, applicable regulations, or platform features. The "Last updated" date at the top of this page indicates when the most recent revision was made. Continued use of the kxy8 platform following a policy update constitutes acceptance of the revised terms.

2 Data We Collect

kxy8 collects personal data through several channels: information you provide directly to us, information collected automatically through your use of the platform, and information received from third parties in connection with payment processing and identity verification.

2.1 Information You Provide Directly

• Registration data: Full name, date of birth, email address, mobile phone number, and chosen username and password when you create a kxy8 account.
• Identity verification (KYC) documents: Government-issued photo identification (e.g., National Identity Card, passport, driving licence), proof of address documents, and any additional documentation requested during enhanced due-diligence checks.
• Payment information: Mobile wallet numbers (bKash, Nagad, Rocket, Upay), bank account details, and card details (Visa, Mastercard) provided for the purpose of deposits and withdrawals. See Section 12 for full details on payment data handling.
• Correspondence: Any messages, emails, live chat transcripts, or other communications you send to kxy8 customer support.
• Responsible gaming preferences: Deposit limits, loss limits, session reminders, and self-exclusion requests submitted through your account settings.

2.2 Information Collected Automatically

• Device and technical data: IP address, browser type and version, operating system, device type, screen resolution, and device identifiers.
• Usage data: Pages visited, time spent on pages, links clicked, games played, bet history, session duration, and navigation patterns within the platform.
• Cookies and tracking technologies: Data collected via cookies, web beacons, and similar technologies. See Section 6 for full cookie details.
• Location data: Approximate geographic location derived from your IP address. kxy8 does not collect precise GPS location data.

2.3 Information Received from Third Parties

• Payment processors: Transaction status, reference numbers, and payment method verification data from mobile wallet providers and card networks.
• Identity verification providers: Results of document authenticity checks and identity verification outcomes from our appointed KYC service providers.
• Fraud prevention partners: Risk signals and flagging data from third-party fraud detection services used to protect the integrity of the platform.

3 How We Use Your Data

kxy8 uses the personal data we collect for the following purposes:

kxy8 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or having a separate legal basis for doing so.

4 Legal Basis for Processing

kxy8 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contract performance: Processing necessary to fulfil our contractual obligations to you as a registered kxy8 player — including account management, bet settlement, payment processing, and customer support.
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including identity verification, anti-money laundering checks, age verification, and record-keeping requirements.
• Legitimate interests: Processing necessary for our legitimate business interests, including fraud prevention, platform security, abuse detection, and internal analytics — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, informed consent — primarily for marketing communications and certain non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

5 Data Sharing & Disclosure

kxy8 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We share your data only in the limited circumstances described below.

• Payment service providers: We share payment information with mobile wallet providers (bKash, Nagad, Rocket, Upay) and card network processors (Visa, Mastercard) solely for the purpose of processing your deposit and withdrawal transactions.
• Identity verification providers: We share identification documents and personal details with our appointed KYC and AML compliance partners for the purpose of verifying your identity and fulfilling regulatory obligations.
• Fraud and risk management partners: We share relevant account and transaction data with fraud detection service providers for the purpose of identifying and preventing fraudulent activity, multi-accounting, and other prohibited conduct.
• Game technology providers: Game studios and providers (such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi) may receive limited technical data necessary for delivering their game content within the kxy8 platform. These providers operate under their own privacy frameworks and are contractually required to maintain appropriate data security standards.
• Legal and regulatory authorities: We may disclose your personal data to law enforcement agencies, regulatory bodies, or courts where we are legally required or compelled to do so, or where disclosure is necessary to protect the rights, property, or safety of kxy8, its players, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of the assets of kxy8, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and your rights will be preserved.

All third parties with whom kxy8 shares personal data are required to handle that data in accordance with applicable data protection standards and are permitted to use it only for the specific purpose for which it was shared.

6 Cookies & Tracking Technologies

kxy8 uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyse usage patterns, and support our security and fraud-prevention systems. This section explains what cookies we use and how you can manage them.

6.1 Types of Cookies We Use

• Strictly necessary cookies: Essential for the platform to function. These cookies enable core features such as session management, login authentication, and secure payment flows. They cannot be disabled without significantly impairing your ability to use the platform.
• Functional cookies: Allow the platform to remember your preferences and settings — such as your preferred language, bet type, and odds format — to provide a more personalised experience.
• Analytics cookies: Help us understand how players use the platform by collecting aggregated, anonymised data about page views, session durations, and navigation paths. This data is used exclusively for internal platform improvement purposes.
• Security cookies: Support our fraud detection and security systems by identifying unusual access patterns, detecting bot activity, and helping to prevent account takeover attempts.

6.2 Managing Cookies

You can manage non-essential cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies stored on your device. Please note that disabling strictly necessary cookies will affect your ability to access and use core platform features. For detailed instructions on managing cookies in your specific browser, refer to your browser's help documentation.

7 Data Retention

kxy8 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including legal, regulatory, and business requirements. The following retention principles apply:

• Active account data: Personal data associated with your active kxy8 account is retained for the duration of your account's existence plus a minimum of five (5) years following account closure, in line with applicable financial record-keeping and AML compliance obligations.
• Transaction records: Records of deposits, withdrawals, and betting history are retained for a minimum of five (5) years from the date of each transaction.
• KYC and identity documents: Identity verification documents are retained for a minimum of five (5) years following the end of the business relationship, in accordance with standard AML compliance requirements.
• Customer support communications: Records of customer support interactions are retained for three (3) years from the date of the interaction.
• Marketing consent records: Records of your marketing consent or opt-out status are retained for the duration of your account and for three (3) years following account closure.
• Anonymised analytics data: Aggregated, anonymised usage data that cannot be linked back to an individual may be retained indefinitely for platform improvement and business intelligence purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Where deletion is not immediately practicable due to technical constraints, the data will be isolated from active processing until deletion can be completed.

8 Data Security

kxy8 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, loss, destruction, or alteration.

• SSL/TLS encryption: All data transmitted between your device and the kxy8 platform is encrypted using industry-standard SSL/TLS protocols. This protects your personal information, login credentials, and payment details during transmission.
• Access controls: Access to personal data held by kxy8 is restricted on a strict need-to-know basis. Staff members are granted access only to the data necessary to perform their specific role, and all access is logged and audited.
• Password security: Account passwords are stored in hashed form using modern cryptographic algorithms. kxy8 staff cannot view your plaintext password. We strongly recommend using a unique, strong password for your kxy8 account and enabling any available two-factor authentication features.
• Infrastructure security: The kxy8 platform is hosted on secure infrastructure with regular security patching, intrusion detection systems, and automated threat monitoring in place.
• Incident response: kxy8 maintains a documented data breach response procedure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected players and, where required, relevant authorities, within the timeframes prescribed by applicable regulations.

9 Your Data Rights

As a player on the kxy8 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us using the details provided in Section 15.

• Right of access: You have the right to request a copy of the personal data kxy8 holds about you, together with information about how it is used and shared.
• Right to rectification: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you. You may also update certain account information directly from within your account settings.
• Right to erasure: In certain circumstances, you have the right to request that kxy8 delete your personal data. This right is subject to limitations where we are required to retain data for legal, regulatory, or compliance reasons.
• Right to restriction of processing: You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or where you have objected to processing.
• Right to data portability: Where processing is carried out on the basis of your consent or a contract, you have the right to receive a structured, commonly used, machine-readable copy of your personal data and to request its transfer to another organisation where technically feasible.
• Right to object: You have the right to object to the processing of your personal data where kxy8 relies on legitimate interests as its legal basis. You also have an absolute right to object to processing for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal.

kxy8 will respond to all valid data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it. kxy8 will not charge a fee for handling data rights requests unless they are manifestly unfounded or excessive.

10 Children's Privacy

The kxy8 platform is strictly intended for adults aged 21 years and over. kxy8 does not knowingly collect personal data from individuals under the age of 21. Our registration process includes mandatory age verification steps designed to prevent minors from accessing the platform.

If kxy8 becomes aware that it has inadvertently collected personal data from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. Any deposits made by an underage player will be returned where possible, and any winnings generated will be voided.

We encourage parents and guardians to make use of parental control software and internet filtering tools to prevent minors from accessing online gambling websites. If you believe a minor may have registered on the kxy8 platform, please contact us immediately at the details provided in Section 15.

11 Third-Party Services & Links

The kxy8 platform integrates games and content provided by third-party game studios and technology providers, including Evolution Gaming, Pragmatic Play, Pragmatic Play Live, NetEnt, Microgaming, Spribe, and Ezugi. When you access games provided by these studios within the kxy8 platform, limited technical data (such as session tokens and game state information) may be transmitted to and processed by those providers' systems.

Each of these third-party providers operates under its own privacy policy and data protection framework. kxy8 is not responsible for the privacy practices of third-party game providers. We recommend reviewing the privacy policies of any third-party services you interact with through the kxy8 platform.

The kxy8 platform does not contain links to external websites for advertising or affiliate purposes. Any third-party service accessible through the platform is integrated solely for the purpose of delivering gaming content or processing payments.

12 Payment Data

kxy8 takes particular care in handling payment-related personal data given its sensitive nature. The following principles govern how we process payment information provided by kxy8 players in Bangladesh.

• Mobile wallet data (bKash, Nagad, Rocket, Upay): Your mobile wallet number is collected solely for the purpose of processing your deposit or withdrawal transaction. This information is transmitted securely to the relevant mobile financial service provider and is not stored in plaintext on kxy8 servers beyond what is necessary for transaction reconciliation and dispute resolution.
• Card data (Visa, Mastercard): Full card numbers are not stored on kxy8's platform infrastructure. Card transactions are processed via our payment gateway partners who are responsible for maintaining PCI-DSS compliance. kxy8 retains only masked card details (e.g., last four digits) for record-keeping purposes.
• Bank account details: Where bank transfer details are provided for withdrawal purposes, these are handled under the same strict security standards as other payment data and are not retained beyond the period necessary to complete the transaction.
• Transaction records: Records of all financial transactions — including deposit amounts, withdrawal amounts, dates, and payment method references — are retained for a minimum of five (5) years in compliance with applicable financial record-keeping requirements.

All payment transactions on the kxy8 platform are processed in Bangladeshi Taka (BDT, ৳) and are secured with SSL/TLS encryption. kxy8 does not share your payment data with third parties other than as described in Section 5 of this Privacy Policy.

13 Marketing Communications

kxy8 may send you promotional communications — including bonus offers, free bet promotions, tournament announcements, and platform news — via email or SMS, subject to your marketing preferences.

• Consent-based marketing: kxy8 will only send you marketing communications where you have provided your consent to receive them, either during the registration process or through your account settings.
• Opt-out options: You may withdraw your consent to receive marketing communications at any time by clicking the "unsubscribe" link included in any marketing email, by adjusting your communication preferences in your account settings, or by contacting our support team at [email protected].
• Transactional communications: Please note that opting out of marketing communications does not affect your receipt of essential transactional and account-related notifications — such as deposit confirmations, withdrawal status updates, security alerts, and changes to Terms or Policies. These communications are sent on the basis of contract performance and cannot be opted out of while your account remains active.
• Personalisation: Where permitted by your preferences, kxy8 may use data about your betting history, game preferences, and platform usage to personalise promotional offers. This personalisation is conducted internally by kxy8 and does not involve sharing your data with third-party advertisers.

14 Policy Updates

kxy8 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or the features and services offered on the platform. When we make material changes to this Privacy Policy, we will notify registered players by email and/or by displaying a prominent notice on the platform.

The updated Privacy Policy will be published on this page with a revised "Last updated" date. We encourage you to review this page periodically to stay informed about how kxy8 handles your personal data. Your continued use of the kxy8 platform following the publication of a revised Privacy Policy constitutes your acknowledgement and acceptance of the updated terms.

If you do not agree with a revised Privacy Policy, you should cease using the platform and contact kxy8 support to request account closure. Any personal data collected prior to your account closure will continue to be handled in accordance with the Privacy Policy in effect at the time of collection, subject to any applicable legal retention requirements.

15 Contact Us

If you have any questions, concerns, or requests in connection with this Privacy Policy or the way kxy8 handles your personal data, please contact our Data Protection team using the details below. We are committed to responding to all privacy-related enquiries promptly and transparently.

• Email: [email protected]
• Subject line for data rights requests: "Data Rights Request – [Your Username]"
• Subject line for privacy complaints: "Privacy Complaint – [Your Username]"
• Support availability: 24 hours a day, 7 days a week
• Response time: General privacy enquiries within 48 hours; formal data rights requests within 30 days
• Time zone: Bangladesh Standard Time (BST, UTC+6)

When submitting a data rights request, please include your registered email address, your kxy8 username, and a clear description of the right you wish to exercise or the concern you wish to raise. This will allow us to process your request as efficiently as possible.