kkb3 Privacy Policy — How We Protect Your Personal Data

1 Introduction and Scope

This Privacy Policy ("Policy") describes how kkb3 ("kkb3", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("you", "your", "Player") who register for or use the kkb3 online gaming and sports betting platform accessible at https://kkb3.io ("Platform").

This Policy applies to all personal data collected through the Platform, including data submitted during account registration, identity verification, deposits and withdrawals, customer support interactions, promotional opt-ins, and ordinary use of the Platform's gaming products.

By registering an account on the Platform, you acknowledge that you have read, understood, and consented to the data practices described in this Policy. If you do not agree with any part of this Policy, you must discontinue use of the Platform immediately and contact support to close your account.

2 Data Controller Identity

For the purposes of this Policy, kkb3 acts as the data controller in respect of personal data collected from Players on the Platform. As data controller, kkb3 determines the purposes and means of processing your personal data.

kkb3 operates as an online gaming platform primarily serving players based in Bangladesh. All data processing activities described in this Policy are carried out in connection with the provision of online casino games, sports betting markets, and associated account management services.

Our designated privacy contact point is the kkb3 support team. You may reach us at [email protected] (plain text — not a clickable link) for all privacy-related enquiries, data subject requests, and complaints.

3 Personal Data We Collect

kkb3 collects and processes the following categories of personal data:

We do not intentionally collect sensitive personal data beyond what is required for age and identity verification. We do not collect biometric data, religious beliefs, political opinions, or health information unless you voluntarily provide such information in the context of a responsible gaming self-assessment.

4 How We Collect Your Data

kkb3 collects personal data through the following channels:

• Direct submission: Data you actively provide when creating an account, completing KYC verification, making a deposit or withdrawal, contacting support, or responding to a promotion.
• Automated technologies: Technical and usage data collected automatically as you browse and interact with the Platform, including via cookies, server logs, and session-tracking technologies (see Section 9).
• Third-party payment providers: Confirmation and reference data received from bKash, Nagad, Rocket, Upay, and banking partners when processing financial transactions. We receive transaction status and reference information only — we do not receive your full payment credentials from these providers.
• Identity verification services: Where kkb3 uses a third-party KYC or document-verification service to authenticate the identity documents you submit, that service provider may return verification results and associated metadata to us.
• Game providers: Aggregate gameplay and session data from our game studio partners (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) necessary for game integrity monitoring and dispute resolution.

5 Purposes and Legal Bases for Processing

The table below sets out the purposes for which kkb3 processes your personal data and the corresponding legal basis for each processing activity:

Where we rely on legitimate interests as a legal basis, we have conducted a balancing test and determined that our interests do not override your fundamental privacy rights. Where we rely on your consent — particularly for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Data Retention

6.1 General Retention Principle. kkb3 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. When data is no longer required, it is securely deleted or anonymised.

6.2 Account Data. Personal data associated with your kkb3 account is retained for the duration of your account's active existence and for a period of five (5) years following permanent account closure. This retention period reflects the need to maintain records for dispute resolution, fraud investigations, and regulatory compliance.

6.3 Financial Transaction Data. Records of all deposits, withdrawals, and betting transactions are retained for a minimum of seven (7) years from the date of the transaction. This extended retention period is required for financial record-keeping and anti-money laundering compliance obligations.

6.4 KYC Documents. Identity verification documents (NID, passport, proof of address, payment method verification) are retained for five (5) years after the closure of the associated account, or longer if required by a specific legal obligation or ongoing investigation.

6.5 Communications Data. Customer support chat transcripts and email correspondence are retained for three (3) years from the date of the interaction, or longer if the interaction is relevant to an unresolved dispute or legal matter.

6.6 Marketing Data. Marketing preferences and opt-in records are retained for the duration of your account plus one (1) year following account closure, to enable us to demonstrate compliance with consent requirements.

7 Data Sharing and Disclosure

kkb3 does not sell, rent, or trade your personal data. We share personal data only in the following circumstances:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, and our banking partners (BRAC Bank, Dutch-Bangla Bank, City Bank, and others) receive the minimum data necessary to process your deposits and withdrawals. These providers are data processors acting under our instructions and are bound by data protection obligations.
• Identity Verification Providers: Where a third-party KYC service is used, your identity document data is transmitted securely to that provider solely for verification purposes. The provider is contractually prohibited from using your data for any other purpose.
• Game Studio Partners: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified studios may receive a pseudonymous player identifier and session data necessary to deliver their games and resolve game-related disputes. They do not receive your full identity or financial data.
• IT and Infrastructure Providers: Cloud hosting, database management, email delivery, and security service providers who process data on our behalf under strict contractual data processing agreements.
• Customer Support Platforms: Third-party live chat or support ticket platforms used to deliver our 24/7 support service. These providers receive only the data you voluntarily share in a support interaction.
• Legal and Regulatory Disclosure: Where required by applicable law, a court order, or a lawful request from a government authority, kkb3 will disclose personal data to the extent necessary to comply. We will notify you of any such disclosure where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of kkb3's assets, your personal data may be transferred to the successor entity. You will be notified of any such transfer and the privacy terms applicable to your data in the new entity.

8 International Data Transfers

8.1 Cross-Border Processing. Some of kkb3's service providers and game studio partners are located outside Bangladesh. Where your personal data is transferred to a country that may not provide the same level of data protection as Bangladesh, kkb3 implements appropriate safeguards to ensure your data remains protected to a standard at least equivalent to this Policy.

8.2 Safeguards. Appropriate safeguards for international data transfers may include contractual clauses requiring the recipient to protect personal data, data processing agreements, and technical security measures such as end-to-end encryption during transmission.

8.3 Your Rights on Transfer. You may request details of any international transfer of your personal data, including the identity of the recipient, the country of transfer, and the safeguards applied, by contacting [email protected] (plain text only).

9 Cookies and Tracking Technologies

9.1 What Are Cookies. Cookies are small text files placed on your device by the Platform when you visit. They help the Platform function correctly, remember your preferences, and collect analytical data about how the Platform is used.

9.2 Types of Cookies We Use.

• Strictly Necessary Cookies: Essential for the Platform to operate. These include session authentication tokens, security cookies, and load-balancing cookies. They cannot be disabled without impairing Platform functionality.
• Functional Cookies: Remember your preferences such as language selection, preferred payment method, and responsible gaming settings between sessions.
• Analytical Cookies: Collect anonymised data about how Players navigate the Platform — which pages are visited most, how long sessions last, and where errors occur. This data is used to improve Platform performance and user experience.
• Marketing Cookies: Used only with your consent to measure the effectiveness of kkb3's own promotional campaigns (e.g., whether a player who clicked a kkb3 promotional banner subsequently registered). We do not use marketing cookies to track you across third-party websites.

9.3 Managing Cookies. You can control and manage cookies through your browser settings. Please note that disabling strictly necessary cookies will affect your ability to log in and use the Platform. Disabling functional or analytical cookies may result in a reduced experience but will not prevent access to core features.

10 Your Privacy Rights

As a kkb3 player, you hold the following rights in respect of your personal data. To exercise any of these rights, contact our support team at [email protected] (plain text — not a clickable link) with your full name, registered email address, and a clear description of your request. kkb3 will respond within 30 days of receiving a verified request.

• Right of Access: You may request a copy of all personal data kkb3 holds about you, along with information about the purposes for which it is processed and the categories of recipients with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request that we delete your personal data where: (a) the data is no longer necessary for the purpose it was collected; (b) you withdraw consent and no other legal basis for processing exists; (c) you object to processing and there are no overriding legitimate grounds; or (d) the data has been unlawfully processed. This right is subject to legal retention obligations — we cannot delete financial transaction records that we are required by law to retain.
• Right to Restrict Processing: You may request that we suspend processing of your data while a dispute about its accuracy or the lawfulness of processing is being resolved.
• Right to Data Portability: Where processing is based on your consent or a contract, and is carried out by automated means, you may request your personal data in a structured, commonly used, machine-readable format (e.g., CSV or JSON) to transfer to another service provider.
• Right to Object: You may object at any time to processing of your personal data where the legal basis is legitimate interests, including profiling for fraud detection and responsible gaming monitoring. kkb3 will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing emails), you may withdraw consent at any time by updating your account settings or contacting support. Withdrawal does not affect the lawfulness of processing before withdrawal.
• Right Not to be Subject to Automated Decisions: Where kkb3 uses automated decision-making that produces significant effects on you (e.g., automated account suspension for suspected fraud), you have the right to request human review of that decision.

11 Children and Minors

11.1 Minimum Age. The kkb3 Platform is strictly for individuals aged 21 years and above. We do not knowingly collect personal data from anyone under the age of 21. Age verification is performed as part of the account registration and KYC process.

11.2 Discovery of Minor's Data. If kkb3 discovers that personal data has been collected from a person under 21 years of age, we will: (a) immediately suspend the associated account; (b) delete all personal data associated with that account to the extent not required by law; (c) refund any deposits to the original payment method; and (d) notify the relevant responsible adult if practicable.

11.3 Parental Guidance. If you are a parent or guardian and believe that a minor in your household has registered on the kkb3 Platform, please contact us immediately at [email protected] (plain text — not a clickable link) so we can take prompt action.

12 Security Measures

12.1 Technical Safeguards. kkb3 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encrypted storage of sensitive personal data at rest using industry-standard encryption algorithms;
• Multi-factor authentication requirements for internal staff accessing personal data systems;
• Role-based access controls ensuring that staff can only access personal data relevant to their specific job function;
• Regular penetration testing and vulnerability assessments conducted by qualified third-party security specialists;
• Automated intrusion detection and real-time security monitoring systems;
• Secure, geographically redundant data backups with tested restoration procedures.

12.2 Organisational Safeguards. All kkb3 staff and contractors who handle personal data are subject to confidentiality obligations and receive data protection training upon onboarding and annually thereafter. Access to personal data is granted on a strict need-to-know basis.

12.3 Data Breach Response. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, kkb3 will notify you without undue delay — and in any event within 72 hours of becoming aware of the breach — by email to your registered address. The notification will describe the nature of the breach, the data affected, the likely consequences, and the measures taken or proposed to address it.

13 Third-Party Links

The kkb3 Platform may contain references to third-party game studios and payment service providers. While kkb3 takes care to work only with reputable and trusted partners, we are not responsible for the privacy practices of those third parties. This Policy applies only to data processing activities carried out by kkb3 on the Platform. We encourage you to review the privacy policies of any third-party service with which you interact independently of kkb3.

14 Amendments to This Policy

14.1 Right to Update. kkb3 reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or improvements to our services. The version number and effective date at the top of this document will be updated with each revision.

14.2 Notification of Material Changes. Where a change to this Policy is material — meaning it significantly affects the way we process your personal data or reduces your rights — kkb3 will provide at least 14 days' advance notice by email to your registered address and via a prominent in-platform notification before the change takes effect.

14.3 Continued Use. Your continued use of the Platform after the effective date of any revised Policy constitutes your acknowledgement of the updated terms. If you do not agree with a material change, you may close your account before the change takes effect by contacting support.

14.4 Policy Archive. Prior versions of this Privacy Policy are retained by kkb3 and may be requested by contacting [email protected] (plain text only).

15 Contact and Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or kkb3's data processing practices, please contact us through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the in-platform support widget
• WhatsApp: +880-XXXX-XXXXXX (plain text — not a clickable link)
• Response Time: 2–5 minutes via live chat; up to 24 hours via email

kkb3 is committed to resolving all privacy-related complaints promptly and fairly. If you submit a formal written privacy complaint, we will acknowledge receipt within 5 business days and aim to provide a substantive response within 30 days.

All contact details listed above are plain text only — they are not clickable links and cannot be used to submit data electronically through this page.