Privacy Policy — How kkdd Protects Your Personal Data

1. Who We Are

kkdd (referred to in this Privacy Policy as "kkdd", "we", "us", or "our") is the operator of the online gaming and sports betting platform accessible at https://kkdd.bar. We are the data controller responsible for personal data collected through the Platform and all associated services, communications, and support channels.

This Privacy Policy applies to all users of the kkdd Platform, including registered account holders, visitors who browse without registering, and individuals who contact us via email or other support channels. It covers all personal data collected through the Platform, our mobile-compatible interfaces, promotional communications, and customer support interactions.

If you have any questions about this Privacy Policy or about how kkdd processes your personal data, please contact our Data Protection team at: [email protected]

2. Personal Data We Collect

kkdd collects personal data through several channels: directly from you when you register, verify your identity, make deposits or withdrawals, contact support, or participate in promotions; automatically through your use of the Platform; and in limited circumstances from third-party service providers such as payment processors and identity verification agencies.

The categories of personal data we collect are set out in the table below:

We do not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly required for age and identity verification purposes.

3. How We Use Your Personal Data

kkdd uses your personal data strictly for the purposes set out below. We do not use your data for any purpose that is incompatible with the original purpose for which it was collected without first obtaining your explicit consent.

• Account Management: To create, maintain, and administer your kkdd Account, including processing your registration, managing your profile, and enabling you to log in securely.
• Identity Verification (KYC): To verify your identity, confirm your age (21+), and comply with Know Your Customer obligations prior to processing withdrawal requests and as required for ongoing account monitoring.
• Transaction Processing: To process deposits and withdrawals in Bangladeshi Taka (৳ BDT) via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard; to maintain accurate financial records; and to investigate disputed transactions.
• Service Delivery: To provide you with access to casino games, sports betting markets (including cricket, BPL, IPL, T20 World Cup, and international football), live dealer tables, and all other services available on the Platform.
• Customer Support: To respond to your enquiries, complaints, and dispute submissions; to maintain records of communications for quality assurance and audit purposes.
• Responsible Gaming: To monitor gaming activity for indicators of problem gambling; to enforce deposit limits, session reminders, cooling-off periods, and self-exclusion orders that you have set or that we are required to impose; and to fulfil our duty of care obligations.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting, and other prohibited conduct as defined in the kkdd Terms & Conditions.
• Platform Improvement: To analyse usage patterns, identify technical issues, conduct A/B testing, and improve the performance, content, and user experience of the Platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and event announcements by email or SMS, where you have provided your consent to receive such communications. You may withdraw this consent at any time by updating your preferences in your Account settings or by contacting us at [email protected].
• Legal Compliance: To comply with applicable laws, regulations, court orders, and lawful requests from competent authorities, including record-keeping and reporting obligations.

4. Legal Basis for Processing

kkdd processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform our contract with you — i.e., to operate your Account, process transactions, deliver gaming services, and fulfil our obligations under the kkdd Terms & Conditions.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements, age verification, and record retention obligations.
• Legitimate Interests: Processing necessary for kkdd's legitimate business interests, including fraud prevention, Platform security, responsible gaming monitoring, and service improvement — where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where processing is based on your consent (for example, marketing communications or the use of non-essential cookies), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5. Cookies & Tracking Technologies

kkdd uses cookies and similar tracking technologies (collectively, "cookies") on the Platform to provide core functionality, remember your preferences, analyse usage, and support security measures. A cookie is a small text file placed on your device by a web server when you visit the Platform.

We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These enable you to log in, navigate between pages, maintain your session, and use core features such as the game lobby and the cashier. These cookies cannot be disabled without severely impairing Platform functionality.
• Performance & Analytics Cookies: Collect anonymised data about how visitors use the Platform — such as pages visited most frequently, error messages encountered, and navigation paths. This data is used solely to improve Platform performance and user experience.
• Functional Cookies: Remember your preferences, such as your preferred language, currency display settings, and responsible gaming configurations, so you do not need to re-enter them on each visit.
• Security Cookies: Support fraud detection and prevention by identifying unusual login patterns, suspicious IP address activity, or behavioural anomalies that may indicate unauthorised account access.

You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may impair your ability to use some features of the Platform. kkdd does not use third-party advertising or cross-site tracking cookies.

6. Sharing Your Data with Third Parties

kkdd does not sell, rent, or trade your personal data to third parties. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose:

• Payment Service Providers: We share financial data with authorised payment processors — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — solely for the purpose of processing your deposit and withdrawal transactions.
• Identity Verification Providers: We may share identity and document data with certified KYC and age verification service providers to fulfil our legal obligation to verify that all players are aged 21 or above.
• Game Technology Providers: Third-party game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive limited technical data (such as session tokens or anonymised identifiers) necessary to deliver their games through the kkdd Platform. These providers operate under strict data processing agreements and are not permitted to use player data for any independent purpose.
• IT Infrastructure & Cloud Providers: kkdd uses reputable cloud hosting and infrastructure providers to operate the Platform. These providers act as data processors under binding contractual agreements and process data only on our documented instructions.
• Legal & Regulatory Authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other competent authorities where we are required to do so by applicable law, court order, or where we reasonably believe disclosure is necessary to protect the safety of any person or to prevent fraud or other illegal activity.
• Corporate Transactions: In the event of a merger, acquisition, restructuring, or sale of all or part of our business assets, your personal data may be transferred to the successor entity, subject to equivalent privacy protections. We will notify you of any such transfer via email or prominent notice on the Platform.

All third parties with whom kkdd shares personal data are required to maintain appropriate technical and organisational security measures and are contractually prohibited from using player data for any purpose other than that for which it was shared.

7. Payment Data & Financial Security

kkdd takes the security of financial data with the utmost seriousness. All payment transactions on the Platform are processed in Bangladeshi Taka (৳ BDT). kkdd does not store full payment card numbers, CVV codes, or mobile wallet PINs on its servers at any point.

Payment card data is handled exclusively by our PCI-DSS compliant payment processing partners. Mobile wallet transactions via bKash, Nagad, Rocket, and Upay are processed directly through those providers' own secure API infrastructure. kkdd receives only a transaction confirmation reference and the amount processed — not your wallet PIN or full account credentials.

For withdrawal processing, kkdd retains the mobile wallet number or bank account details you have registered as your preferred withdrawal method. This information is stored in encrypted form and is accessible only to authorised finance team staff for the purpose of processing your withdrawal requests.

8. Data Security

kkdd implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, destruction, or accidental loss. Key security measures in place include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the kkdd Platform.
• Encryption at rest for all personally identifiable information stored in kkdd's databases.
• Role-based access controls limiting data access to staff with a documented operational need.
• Multi-factor authentication requirements for all staff accessing production systems containing personal data.
• Regular penetration testing and vulnerability assessments conducted by qualified third-party security specialists.
• Comprehensive audit logging of all access to and modifications of player data records.
• Incident response procedures with defined escalation paths and notification timelines in the event of a data breach.

While kkdd takes all reasonable precautions to protect your personal data, no internet-based service can guarantee absolute security. You are responsible for keeping your Account credentials confidential and for notifying us immediately at [email protected] if you suspect unauthorised access to your Account.

9. Data Retention

kkdd retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account relationship with kkdd and for a minimum of five years following account closure, to satisfy anti-money laundering record-keeping requirements.
• KYC & Identity Documents: Retained for a minimum of five years from the date of verification, or longer if required by applicable financial regulations.
• Transaction Records: Deposit and withdrawal records are retained for a minimum of five years from the date of the transaction.
• Gaming Activity Logs: Retained for a minimum of three years from the date of activity, for responsible gaming monitoring and dispute resolution purposes.
• Customer Support Communications: Retained for three years from the date of the communication, for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Retained for the duration of your consent and for one year following withdrawal of consent, as evidence of your prior consent status.

When data reaches the end of its applicable retention period, kkdd will securely delete or irreversibly anonymise it so that it can no longer be attributed to an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

10. Your Rights Over Your Personal Data

As a data subject, you hold the following rights with respect to your personal data held by kkdd. To exercise any of these rights, please contact us at [email protected] with a clear description of your request and sufficient information to verify your identity. We will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days.

• Right of Access: You have the right to request a copy of the personal data kkdd holds about you and to receive information about how that data is processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you. You may update most account information directly within your Account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn your consent, or where the data has been unlawfully processed. This right is subject to overriding legal obligations — for example, we cannot erase transaction records that we are required by law to retain.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances, for example while the accuracy of the data is being contested.
• Right to Data Portability: Where processing is based on your consent or on a contractual basis, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data where we rely on legitimate interests as our legal basis, and where you believe your rights and freedoms override those interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

11. Children & Minors

The kkdd Platform is strictly intended for adults aged 21 years and above. kkdd does not knowingly collect, process, or retain personal data from any individual under the age of 21. Age verification is a mandatory step in the account registration and KYC process, and accounts found to belong to individuals under the age of 21 will be immediately suspended and all associated data handled in accordance with our obligations under applicable law.

If you believe that kkdd has inadvertently collected personal data from a minor, please contact us immediately at [email protected]. We will take prompt steps to delete any such data and close the associated Account.

12. Changes to This Privacy Policy

kkdd reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or business operations. The revised Privacy Policy will be published on the Platform with an updated effective date at the top of the document.

Where changes are material — for example, where we introduce a new purpose for processing your personal data or a new category of third-party sharing — kkdd will provide at least 14 days' advance notice by email to the address registered on your Account before the changes take effect. For non-material clarifications or corrections, the updated policy will be posted without prior notice.

Your continued use of the kkdd Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept any changes to this Privacy Policy, you must cease using the Platform and may request account closure by contacting [email protected].

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to kkdd's handling of your personal data, please contact our Data Protection team using the details below. We are committed to addressing all privacy-related enquiries promptly and transparently.

Email: [email protected]

When contacting us regarding a data privacy matter, please include your registered Account username, a clear description of your enquiry or request, and any relevant supporting information to help us identify and address your concern efficiently. We will acknowledge all privacy enquiries within 5 business days and aim to provide a full response within 30 calendar days.

For further information about your rights or our data practices, you may also refer to our FAQ page or review the full Terms & Conditions governing your use of the kkdd Platform.