kxy8 Privacy Policy — Your Data, Your Rights

1. Introduction

This Privacy Policy ("Policy") describes how kxy8 ("kxy8", "we", "us", "our") collects, uses, stores, and protects the personal data of users ("you", "Player", "User") who access and use the kxy8 Platform at kxy8.bet. This Policy applies to all kxy8 services including the website, mobile-optimised interface, sports betting products, live casino, slot games, crash games, and all associated account and payment services.

By registering an account on the kxy8 Platform, making a deposit, or using any kxy8 service, you acknowledge that you have read this Policy in its entirety and that you consent to the data practices described herein. If you do not agree with this Policy, you should not use the kxy8 Platform. kxy8 reserves the right to update this Policy at any time; material changes will be communicated via the Platform.

2. Personal Data We Collect

kxy8 collects the following categories of personal data in connection with your use of the Platform. We collect only the data that is necessary to provide you with a safe, functional, and compliant gaming experience:

3. How We Collect Your Data

kxy8 collects personal data through the following methods and channels:

• Direct collection: Data you provide to us voluntarily when registering your account, completing KYC identity verification, submitting a deposit or withdrawal request, contacting our support team, or adjusting your responsible gaming settings.
• Automated collection: Technical and usage data collected automatically by our Platform infrastructure each time you access the kxy8 website or mobile interface, including IP address logging, cookie data, session analytics, and device fingerprinting used for security and fraud prevention.
• Third-party payment providers: When you initiate a deposit or withdrawal via bKash, Nagad, Rocket, or Upay, those payment providers share transaction confirmation data with kxy8 to allow us to credit or debit your account. kxy8 does not receive your full payment credentials from these providers — only transaction reference numbers, amounts, and status confirmations.
• Identity verification partners: Where kxy8 uses a third-party KYC provider to assist with identity and age verification, that provider may share the outcome of verification checks (pass/fail status and any flagged discrepancies) with kxy8. Raw identity documents are processed by the KYC provider under their own applicable data protection obligations.

4. How We Use Your Personal Data

kxy8 uses the personal data it collects for the following specific and legitimate purposes. We do not use your data for any purpose that is incompatible with these stated purposes without first obtaining your explicit consent:

• Account management: To create, verify, maintain, and administer your kxy8 player account, including processing your registration, authenticating your identity at login, and managing your account balance and transaction history.
• Payment processing: To process deposit and withdrawal transactions via bKash, Nagad, Rocket, Upay, and supported Bangladesh bank transfer providers. Financial data is used solely to facilitate transactions in Bangladeshi Taka and to maintain an accurate account ledger.
• Compliance and fraud prevention: To conduct anti-money laundering (AML) screening, verify player age and identity in accordance with responsible gaming obligations, detect and prevent fraudulent activity, investigate account security incidents, and fulfil any regulatory reporting obligations applicable to kxy8.
• Platform improvement: To analyse aggregated usage data in order to improve the performance, reliability, and user experience of the kxy8 Platform. This analysis is conducted on anonymised or pseudonymised data sets wherever possible so that individual players are not identifiable.
• Customer support: To respond to your support enquiries, investigate complaints, resolve disputes relating to your account or transactions, and provide you with Platform-related notifications including deposit confirmations, withdrawal status updates, and security alerts.
• Responsible gaming: To administer the responsible gaming tools you activate on your account — including deposit limits, session time-outs, and self-exclusion arrangements — and to monitor betting patterns that may indicate problem gambling behaviour, in line with our responsible gaming commitment.

5. Legal Basis for Processing

kxy8 processes your personal data on the following legal bases:

• Contractual necessity: The majority of data processing by kxy8 is necessary for the performance of the contract between kxy8 and the player — specifically, to provide you with a functioning player account, to process your financial transactions, and to deliver the Platform's gaming and betting services.
• Legal obligation: Certain data processing activities are required by law, including AML screening, age and identity verification, record-keeping for financial transaction audit purposes, and any disclosures required by competent regulatory or law enforcement authorities.
• Legitimate interests: kxy8 processes certain technical and usage data on the basis of legitimate interests — specifically, to maintain the security and integrity of the Platform, to detect and prevent fraud, and to improve Platform performance. We ensure that our legitimate interests do not override your fundamental privacy rights.
• Consent: Where kxy8 wishes to use your data for a purpose beyond those described above — for example, to send you promotional communications about new Platform features, bonuses, or seasonal campaigns — we will first seek your explicit, informed consent. You may withdraw consent at any time by contacting support.

6. Data Sharing and Third Parties

kxy8 does not sell your personal data to any third party. We share personal data only in the following strictly limited circumstances:

• Payment service providers: Transaction data is shared with bKash, Nagad, Rocket, Upay, and supported Bangladesh bank transfer partners solely to facilitate the processing of your deposit and withdrawal requests. These providers act as independent data controllers for the transaction data they process on their own platforms.
• Game software providers: Aggregated, non-personally-identifiable gaming session data may be shared with licensed game providers — including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe — solely for the purposes of game performance monitoring, RNG audit compliance, and technical support.
• Regulatory and law enforcement authorities: kxy8 will disclose personal data to competent regulatory bodies, financial intelligence authorities, or law enforcement agencies when required to do so by applicable law, court order, or lawful regulatory request. kxy8 will not notify the affected player of such disclosure where prohibited from doing so by applicable law.
• KYC verification partners: Where kxy8 uses a third-party identity verification provider for KYC purposes, identity documentation submitted by the player may be processed by that provider under their own data protection obligations. kxy8 selects KYC partners that maintain data security standards consistent with industry best practice.

7. Cookies and Tracking Technologies

kxy8 uses cookies and similar tracking technologies to operate the Platform, maintain your session state, and improve your experience. The following types of cookies are used:

• Essential cookies: Strictly necessary for the Platform to function. These cookies maintain your login session, remember your language preference, and ensure that security tokens are correctly applied to your account interactions. Essential cookies cannot be disabled without breaking core Platform functionality.
• Analytics cookies: Used to collect anonymised usage statistics about how players interact with the Platform — which pages are visited most frequently, how long sessions last, and which features are used. This data helps kxy8 identify performance issues and prioritise Platform improvements.
• Security cookies: Used to support fraud detection and account security functions, including identifying suspicious login patterns, flagging unusual transaction behaviour, and enforcing session timeout policies. Security cookies are a core component of kxy8's player protection infrastructure.

You may configure your browser to refuse or delete certain cookies. Please note that disabling essential or security cookies may impair your ability to use the Platform correctly, including logging in to your account, completing transactions, and accessing responsible gaming tools.

8. Data Retention

kxy8 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law. The following retention periods apply: active player account data is retained for the duration of the account relationship plus a minimum of five (5) years following account closure to meet financial record-keeping and AML compliance obligations. Transaction records are retained for a minimum of seven (7) years to comply with applicable financial regulations. KYC identity verification records are retained for five (5) years following the end of the account relationship. Technical and usage logs are retained for up to twelve (12) months on a rolling basis, after which they are deleted or fully anonymised.

When retention periods expire, personal data is securely deleted or irreversibly anonymised using industry-standard data destruction methods. Players may request early deletion of their data in accordance with their right to erasure (see Section 9), subject to any overriding legal retention obligations that prevent kxy8 from fulfilling an erasure request in full.

9. Data Security

kxy8 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes SSL/TLS encryption for all data transmitted between your device and the kxy8 Platform, encryption of sensitive data fields at rest within our database systems, access controls that restrict personal data access to authorised kxy8 personnel on a strict need-to-know basis, regular security assessments and penetration testing of the Platform infrastructure, and real-time fraud detection systems that monitor for suspicious account activity patterns.

While kxy8 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security against all possible threats. In the event of a data security incident that is likely to result in a high risk to your rights and freedoms, kxy8 will notify affected players without undue delay and will take immediate steps to contain and remediate the incident. If you believe your account has been compromised, contact our support team immediately at [email protected].

10. Your Data Rights

As a player on the kxy8 Platform, you have the following rights in respect of your personal data. To exercise any of these rights, contact our support team at [email protected] with a clear description of your request:

• 👁️ Right of AccessYou have the right to request a copy of all personal data kxy8 holds about you, including your account information, transaction history, gaming activity records, and any KYC documentation we retain.
• ✏️ Right to RectificationYou have the right to request correction of any inaccurate personal data we hold about you. If your contact details, name, or other account information are incorrect, contact support and we will correct the record promptly.
• 🗑️ Right to ErasureYou have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations. Erasure requests are processed within 30 days of receipt.
• ⛔ Right to ObjectYou have the right to object to kxy8 processing your personal data on the basis of legitimate interests. Where you raise a valid objection, kxy8 will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.
• 📦 Right to PortabilityYou have the right to receive a copy of the personal data you have provided to kxy8 in a structured, commonly used, machine-readable format, and to request that this data be transmitted to another service provider where technically feasible.
• ↩️ Right to Withdraw ConsentWhere kxy8 processes your data on the basis of your consent (for example, for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.

11. Children and Minors

The kxy8 Platform is strictly restricted to players aged 21 and above. kxy8 does not knowingly collect personal data from any person under the age of 21. Account registration requires age verification as part of the KYC process, and kxy8 will immediately close any account found to have been registered by an underage person, void all associated activity, and securely delete the personal data collected in connection with that account to the extent permitted by law.

If a parent, guardian, or responsible adult believes that a person under 21 may have registered an account on the kxy8 Platform, they should contact our support team immediately at [email protected]. kxy8 takes the protection of minors extremely seriously and will investigate all such reports without delay. We encourage parents and guardians in Bangladesh to make use of parental control software to prevent minors from accessing online betting and gaming platforms.

12. Changes to This Privacy Policy

kxy8 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, data processing practices, or Platform services. When material changes are made to this Policy, kxy8 will notify registered players via an in-Platform notification or by message to the mobile number associated with their account. The updated Policy will be published with a revised "Last Updated" date at the top of the page.

Your continued use of the kxy8 Platform following the effective date of any Policy update constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised Policy, you must cease using the Platform and may request account closure by contacting our support team. kxy8 recommends that players review this Policy periodically to stay informed about how their personal data is being protected.

13. Contact and Data Enquiries

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how kxy8 handles your personal data, please contact our support team. We aim to resolve all privacy-related enquiries promptly and transparently.

Email: [email protected]