Privacy Policy — How kx98 Protects Your Personal Data

When you interact with the kx98 platform — whether by registering an account, making a deposit, placing a wager, or contacting our support team — we collect certain information about you. The categories of information we collect fall into the following groups:

1.1 Information You Provide Directly

This is information you supply to kx98 during the course of your relationship with us, including at registration, during verification, and when communicating with our support team:

• Identity Data: Full legal name, date of birth, gender, and National Identity Card (NID) or passport number provided during KYC verification.
• Contact Details: Email address, phone number, and residential address in Bangladesh (city/district such as Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, or Mymensingh).
• Account Credentials: Your chosen username and encrypted password. kx98 stores passwords in hashed form — the plain-text value is never stored or accessible to staff.
• Financial Information: Payment method details including bKash or Nagad account numbers, bank account details (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank), transaction amounts, and transaction reference numbers.
• Support Communications: Any messages, emails, live chat transcripts, or other correspondence you send to kx98's support team.
• Verification Documents: Copies of identity documents, address verification documents, and proof of payment method ownership submitted as part of KYC review.

1.2 Information Collected Automatically

When you access and use kx98.net, certain technical and behavioural data is collected automatically by our systems:

• Device and Technical Data: IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, and time zone settings.
• Usage Data: Pages visited, features accessed, games played, session duration, click-path data, wagering history, and deposit and withdrawal activity.
• Cookies and Tracking Data: Session identifiers, preference cookies, and analytics data as described in the Cookies section of this policy.
• Log Files: Server-side logs recording access times, request types, error events, and system responses associated with your session.

1.3 Information from Third Parties

In limited circumstances, kx98 may receive information about you from third-party sources in connection with our fraud prevention, KYC verification, and payment processing operations. This may include:

• Identity verification data returned by document verification service providers
• Transaction confirmation data from payment processors (bKash, Nagad, Rocket, Upay, and banking partners)
• Fraud risk signals from third-party anti-fraud and security service providers

In all cases, third-party data providers are required to have a lawful basis for sharing the information with kx98 and to comply with applicable data protection standards.

kx98 processes your personal information for specific, defined purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The following table summarises the primary purposes for which your data is used and the legal basis that justifies each processing activity:

Marketing Communications

kx98 will only send you marketing emails, SMS messages, or push notifications if you have given your explicit consent during account registration or subsequently opted in through your account settings. Each marketing communication will include a clear and straightforward option to unsubscribe. Upon unsubscribing, your marketing preferences will be updated within 72 hours and no further promotional messages will be sent to you via that channel.

Please note that even if you opt out of marketing communications, kx98 will continue to send you essential transactional messages relating to your account — such as deposit confirmations, withdrawal notifications, and security alerts — as these are necessary for the operation of your account.

Automated Decision-Making

kx98 uses automated systems to assist with fraud detection and responsible gaming monitoring. These systems analyse account behaviour patterns and may trigger automated actions such as temporary account holds or withdrawal delays pending manual review. Where an automated decision has a significant impact on your account, you have the right to request human review of that decision by contacting our support team.

kx98 does not sell, rent, or trade your personal information to any third party for their own marketing or commercial purposes. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

3.1 Service Providers and Data Processors

kx98 works with a limited number of trusted third-party service providers who process personal data on our behalf, under strict contractual data processing agreements. These providers include:

• Payment Processors: bKash, Nagad, Rocket, Upay, and partner banks require transaction data to process deposits and withdrawals. They receive only the minimum data necessary to execute and confirm each transaction.
• KYC and Identity Verification Providers: Third-party verification services receive identity document data to assist with age and identity checks. These providers are bound by confidentiality obligations and may not use the data for any purpose beyond the verification service.
• Game Technology Providers: Pragmatic Play, Evolution Gaming, Ezugi, Spribe, NetEnt, Microgaming, and other game studios may receive anonymised or pseudonymised session data for the purpose of game delivery and performance monitoring. Game providers do not receive your full personal profile.
• Fraud Prevention Services: Anti-fraud and security partners receive device and behavioural data to help identify and prevent unauthorised account access and financial fraud.
• Analytics Providers: Website analytics services receive aggregated, anonymised usage data to help kx98 understand how the platform is used and where improvements can be made.

3.2 Legal and Regulatory Disclosure

kx98 may be required to disclose your personal information to law enforcement agencies, regulatory bodies, courts, or other governmental authorities where we are legally compelled to do so by valid legal process. In such cases, kx98 will disclose only the minimum information required to satisfy the legal obligation and will, where permitted by law, notify you of such a disclosure.

3.3 Business Transfers

In the event that kx98 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy terms applicable to your data following the transition.

kx98 uses cookies and similar tracking technologies (including browser local storage and session storage) on the kx98.net website. Cookies are small text files placed on your device by a website to store information about your visit. They help us keep you logged in, remember your settings, and understand how our platform is used.

Types of Cookies We Use

Managing Your Cookie Preferences

Strictly necessary and security cookies are required for kx98 to function correctly and cannot be disabled without affecting your ability to use the platform. Functional and analytics cookies may be controlled through your browser settings. Most modern browsers allow you to view, manage, and delete cookies through the browser's privacy or settings menu. Please be aware that disabling functional cookies may affect your experience on kx98.net, such as requiring you to re-enter preferences on each visit.

kx98 does not use cookies to track your activity across unrelated third-party websites, and we do not use advertising or retargeting cookies to display kx98 advertisements on other platforms.

kx98 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting obligations. The following retention guidelines apply to the principal categories of data we hold:

• Account and Identity Data: Retained for the duration of your active account relationship with kx98, and for a minimum period of five (5) years following account closure, in order to comply with anti-money laundering record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of seven (7) years following each transaction date in accordance with applicable financial record-keeping obligations.
• KYC Verification Documents: Retained for a minimum of five (5) years following the completion of the verification process, or five (5) years after account closure, whichever is later.
• Support Communications: Retained for three (3) years from the date of the most recent communication, to assist with dispute resolution and quality review.
• Usage and Analytics Data: Anonymised analytics data may be retained indefinitely. Personally identifiable usage data is retained for a maximum of thirteen (13) months.
• Marketing Consent Records: Retained for the duration of your account and for three (3) years following account closure or withdrawal of consent, whichever is later, to demonstrate compliance with consent obligations.

Data Storage Location

Your personal data is stored on secured servers. kx98 applies appropriate technical and organisational safeguards to protect the data stored on these servers, including access controls, encryption at rest for sensitive data categories, and regular security assessments.

Following the expiry of the applicable retention period, your personal data will be securely deleted or anonymised so that it can no longer be associated with you as an individual, unless a legal hold or active dispute resolution process requires the data to be preserved for a longer period.

As a kx98 member, you have a number of rights with respect to the personal data we hold about you. kx98 is committed to honouring these rights in a timely and transparent manner. The following rights are available to you:

• Right of Access: You may request a copy of the personal data kx98 holds about you. We will provide this information within a reasonable timeframe, ordinarily within 30 days of a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain information directly from your account settings; for other corrections, please contact our support team.
• Right to Erasure: In certain circumstances, you may request that kx98 delete the personal data we hold about you. This right is subject to limitations where retention is required by law (for example, financial records subject to anti-money laundering retention requirements cannot be deleted on request).
• Right to Restrict Processing: You may request that kx98 suspend the active processing of your personal data in certain circumstances, such as while a dispute about accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contractual relationship, you may request that kx98 provide your personal data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where kx98 processes your data on the basis of your consent (such as for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
• Right to Object: You may object to processing of your personal data where kx98 relies on its legitimate interests as the legal basis, unless kx98 can demonstrate compelling legitimate grounds that override your interests.

How to Exercise Your Rights

To exercise any of the rights listed above, please contact the kx98 support team via live chat at kx98.net or by emailing [email protected]. Please include your registered account username and a brief description of the right you wish to exercise. kx98 may need to verify your identity before processing your request to protect your account from unauthorised access.

kx98 takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and kx98.net is encrypted using SSL/TLS protocols. You can verify this by the padlock icon and "https://" prefix visible in your browser's address bar when visiting kx98.net.
• Password Hashing: Account passwords are stored exclusively in hashed, salted form using industry-standard one-way hashing algorithms. Plain-text passwords are never stored on kx98 systems.
• Access Controls: Access to personal data within kx98's systems is restricted to staff members and service providers who have a genuine need to access it in order to carry out their duties. All staff with data access are subject to confidentiality obligations.
• Encryption at Rest: Sensitive personal data categories, including identity document data and financial details, are encrypted when stored in kx98 databases.
• Session Security: kx98 implements session timeout controls that automatically log out inactive accounts after a defined period to reduce the risk of unauthorised access from shared or unattended devices.
• Fraud Monitoring: Continuous automated monitoring systems scan for unusual account activity patterns, including login attempts from unfamiliar locations, rapid transaction sequences, and other signals that may indicate account compromise or fraudulent activity.
• Regular Security Reviews: kx98's security controls and data handling practices are reviewed periodically to identify and address potential vulnerabilities.

Your Responsibility for Account Security

While kx98 implements robust security measures on our end, account security is a shared responsibility. You play an important role in keeping your kx98 account secure. We recommend the following practices:

• Use a unique, strong password for your kx98 account that you do not use on any other website or application.
• Never share your kx98 username or password with any other person, including friends, family members, or anyone claiming to represent kx98 customer support.
• Log out of your kx98 account when using a shared or public device.
• Notify kx98 immediately via live chat if you suspect that your account has been accessed without your authorisation.

kx98 reserves the right to update or amend this Privacy Policy from time to time in response to changes in our data processing practices, changes in applicable law, or improvements to our platform and services. When we make material changes to this policy, we will notify registered members by posting a prominent notice on kx98.net and, where the change is significant, by sending a notification to the email address associated with your account.

The effective date shown at the top of this Privacy Policy reflects the date on which the current version came into force. We encourage you to review this policy periodically to stay informed about how kx98 handles your personal information. Your continued use of the kx98 platform following the effective date of any updated version of this Privacy Policy constitutes your acknowledgement of the changes.

If you have questions or concerns about any aspect of this Privacy Policy — including how your data is collected, used, or protected — please do not hesitate to contact the kx98 support team. We are committed to addressing all privacy enquiries transparently and promptly.