kbd8 Privacy Policy

This Privacy Policy describes how kbd8 ("we", "us", or "our") collects, uses, discloses, and safeguards personal information obtained from users ("you" or "your") of the kbd8 platform, accessible at kbd8.app. We understand that your personal data is important to you, and we take our responsibilities as a data processor seriously. This Policy is designed to help you understand what information we collect, why we collect it, how it is used, and what controls you have over your own data.

By registering an account on kbd8, making a deposit, or otherwise using the Service, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal information as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Service immediately.

We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, or biometric data beyond what is strictly necessary for identity verification purposes. We collect only the minimum information required to provide the Service, comply with our legal obligations, and protect the security of the platform and its users.

kbd8 uses personal data for specific, legitimate purposes only. We do not sell your personal information to third parties. The primary purposes for which we process your data are:

• Account creation, verification, and ongoing account management, including identity verification under KYC requirements.
• Processing deposits and withdrawals through your chosen payment method (bKash, Nagad, Rocket, or other approved methods).
• Delivering the gaming and sports betting services you request, including personalising game recommendations and promotional offers where you have opted in.
• Detecting, investigating, and preventing fraudulent transactions, money laundering, underage gambling, bonus abuse, and other prohibited activity.
• Complying with applicable laws, regulations, and any requests from competent legal authorities.
• Providing customer support via live chat and email, and communicating service-related announcements such as scheduled maintenance or policy updates.

kbd8 processes personal data only where a legitimate legal basis exists. The primary bases on which we rely are:

• Contractual necessity — processing required to deliver the Service you have registered for, including account management, payment processing, and game delivery.
• Legal obligation — processing required to comply with anti-money laundering laws, KYC requirements, age verification mandates, and any binding regulatory directions.
• Legitimate interests — processing for fraud prevention, platform security, abuse detection, and service improvement, balanced against your rights and interests.
• Consent — where you have explicitly opted in to receive marketing communications or promotional notifications. You may withdraw this consent at any time by contacting support.

The categories of third parties with whom we may share your information include:

• Payment service providers — bKash, Nagad, Rocket, Upay, and licensed banking partners — for the sole purpose of processing transactions on your behalf.
• Identity verification and KYC providers engaged to confirm player age and identity in compliance with responsible gaming obligations.
• Competent authorities — law enforcement agencies, financial intelligence units, or other regulatory bodies — when kbd8 is legally required or permitted to disclose information.

All third-party service providers engaged by kbd8 are contractually required to handle your personal data in accordance with applicable data protection standards and are prohibited from using it for any purpose beyond the specific service they provide to us.

kbd8 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device by your browser. We use session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a defined period). The categories of cookies we use include: strictly necessary cookies required for platform function (such as maintaining your login session), analytical cookies that help us understand how the platform is used, and preference cookies that remember your language and display settings.

You may configure your browser to refuse all cookies or to indicate when a cookie is being sent. However, disabling strictly necessary cookies will impair the functionality of the kbd8 platform and may prevent you from logging into your account or completing transactions. We do not use third-party advertising cookies or sell browsing data to advertising networks.

kbd8 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting obligations. For registered accounts, we retain account data for the duration of the account's active life and for a minimum of five years following account closure, in accordance with standard financial record-keeping practices applicable to online gaming operators.

Transaction records and betting history are retained for a minimum of five years to meet our obligations under applicable financial regulations and to support dispute resolution. Technical data such as server logs is retained for a shorter period, typically 90 days, unless a longer period is required for a specific investigation. When data is no longer required, it is securely destroyed using industry-standard methods.

Subject to applicable law, you have the following rights with respect to your personal data held by kbd8. To exercise any of these rights, please contact our support team at [email protected]. We will respond to all verified requests within a reasonable timeframe.

• Right of access — you may request a copy of the personal data we hold about you, together with information about how it is processed.
• Right of rectification — you may request that we correct inaccurate or incomplete personal data held about you.
• Right of erasure — in certain circumstances you may request that we delete personal data we hold about you, for example where it is no longer necessary for the purposes for which it was collected and there is no legal obligation requiring us to retain it.
• Right to restrict processing — you may ask us to suspend processing of your personal data in certain scenarios, for example while the accuracy of the data is being contested.
• Right to withdraw consent — where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Please note that some of these rights are subject to conditions and limitations under applicable law. For example, we may be unable to delete account data that we are legally required to retain for a minimum period. We will always explain our reasons clearly if we are unable to fulfil a request in full.

kbd8 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption for all data transmitted between your device and our servers, bcrypt hashing for stored passwords, firewall protection, intrusion detection systems, and restricted staff access to personal data on a need-to-know basis. Our payment processing integrations with bKash, Nagad, and Rocket use their respective secure API channels, which do not expose your full financial account credentials to kbd8.

While we work hard to protect your personal data, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee absolute security, and you use the Service at your own risk in this regard. If you believe that your account has been compromised or that your data has been accessed without authorisation, please contact us immediately at [email protected] so we can investigate and take appropriate action.

kbd8 is strictly an adults-only platform. We do not knowingly collect personal data from persons under the age of 21. If we become aware that personal data has been collected from a person under 21 without verified parental or guardian consent, we will take immediate steps to delete that information and close the associated account. If you are a parent or guardian and believe that your child has registered with kbd8, please contact us immediately at [email protected].

kbd8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or the nature of the Service. When we make material changes, we will update the "Last Updated" date at the top of this Policy and, where feasible, notify registered users via their registered contact details. We encourage you to review this Privacy Policy periodically. Your continued use of kbd8 after any amendment constitutes your acceptance of the updated Policy.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how kbd8 handles your personal information, please contact our support team. We are committed to resolving all data-related enquiries promptly and transparently.