kz66 Privacy Policy — Your Data, Your Rights

1 Data We Collect

When you register for, access, or use the kz66 Platform, we collect certain categories of personal information. We limit data collection to what is genuinely necessary for the purpose stated — we do not collect data speculatively or in excess of operational need.

1.1 Registration & Identity Data

When you open a kz66 account, you provide us with the following information:

• Full legal name as it appears on your government-issued identification document
• Date of birth (to verify you are aged 18 or above)
• Residential address (street, city, division — e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, or Mymensingh)
• Mobile phone number (used for account verification and support contact)
• Email address (used for account communications, promotional messages where opted-in, and security alerts)
• Username and encrypted password

1.2 Identity Verification (KYC) Data

In accordance with our know-your-customer (KYC) obligations, kz66 may request copies of the following documents before processing your first withdrawal or when triggered by our compliance monitoring systems:

• Bangladesh National Identity Card (NID) — front and back
• Valid Bangladeshi passport (photo page)
• Birth certificate issued by a Bangladeshi government authority
• Proof of payment method (e.g., screenshot of your bKash or Nagad account showing your name and registered mobile number)
• Proof of address (utility bill, bank statement, or mobile operator statement dated within 90 days)

1.3 Financial & Transaction Data

For every deposit and withdrawal you make on kz66, we record:

• Payment method used (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank, City Bank)
• Transaction amount in BDT (৳)
• Transaction reference number and timestamp (Bangladesh Standard Time, UTC+6)
• Account balance before and after each transaction
• Bonus credits and wagering progress where applicable

1.4 Gameplay & Betting Data

kz66 records all gaming and betting activity on your account, including:

• Game titles played, bet amounts, win/loss outcomes, and session durations
• Sports markets selected, odds at time of bet placement, and settlement results
• Crash game and live casino session records
• Responsible gaming interactions (e.g., deposit limit settings, self-exclusion requests, session time-out activations)

1.5 Technical & Device Data

When you access kz66 via browser or mobile device, our systems automatically collect:

• IP address and approximate geographic location (country and city level)
• Device type, operating system, and browser version
• Session start and end times
• Pages visited within the kz66 Platform and navigation paths
• Cookie identifiers and similar tracking technology data (see Section 5 for full details)

2 How We Use Your Data

kz66 processes your personal data only for specific, documented purposes. The table below maps each data category to the purpose for which it is used.

Data Category	Primary Purpose	Secondary Purpose
Registration Data	Account creation and authentication	Customer support, security alerts
KYC Documents	Age and identity verification	AML compliance, fraud prevention
Financial Data	Processing deposits and withdrawals	AML monitoring, dispute resolution
Gameplay Data	Game delivery, bet settlement	Responsible gaming monitoring, analytics
Technical Data	Platform security and fraud detection	Performance optimisation, bug fixing
Email Address	Account communications	Promotional emails (opt-in only)

2.1 Marketing Communications

kz66 will only send you promotional emails, SMS notifications, or in-app messages about bonuses, tournaments, and special offers if you have explicitly opted in to receive such communications during registration or via your account preferences. You may withdraw your consent to marketing communications at any time by updating your notification preferences in your account settings or by contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before the withdrawal.

2.2 Responsible Gaming Monitoring

kz66 uses gameplay and transaction data to monitor for indicators of potentially problematic gambling behaviour. Where our systems identify unusual patterns — such as rapidly escalating deposit amounts, extended session lengths, or frequent cancellation of withdrawal requests — our responsible gaming team may reach out proactively. This processing is carried out in the interests of player welfare and is a core part of our duty of care to users of the kz66 Platform.

3 Legal Basis for Processing

kz66 processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:

• Contractual Necessity: Processing your registration data, financial transactions, and gameplay records is necessary to fulfil the contract between you and kz66 — i.e., to operate your account and deliver the services you have signed up for. Without this processing, kz66 cannot provide its services.
• Legal Obligation: kz66 is required to collect and retain certain data (particularly KYC documents and transaction records) to comply with applicable anti-money-laundering, counter-terrorism-financing, and age-verification obligations. This processing is mandatory and cannot be opted out of by the player.
• Legitimate Interests: kz66 processes technical data (IP address, device fingerprint, session logs) on the basis of our legitimate interest in maintaining platform security, detecting fraud, and preventing the misuse of our services. This processing does not override your fundamental privacy rights.
• Consent: Marketing communications and the placement of non-essential cookies are processed on the basis of your freely given, specific, informed consent. You may withdraw consent at any time without affecting the legality of prior processing.

4 Data Sharing & Third Parties

kz66 does not sell, rent, or trade your personal data. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for each purpose.

4.1 Payment Service Providers

To process your deposits and withdrawals, kz66 shares transaction data with the relevant payment service providers, including bKash, Nagad, Rocket, Upay, and international card processors (Visa/Mastercard networks and their acquiring banks). These providers receive only the information required to execute and verify the specific transaction. They are contractually bound to use this data for no other purpose.

4.2 Game Technology Providers

Casino games on the kz66 Platform are powered by third-party game studios including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe. When you play a live casino table or slot game, your gameplay session data (bet amounts, game result, session duration) is processed by the relevant game provider as part of game delivery and round settlement. Game providers operate under independent licensing and are subject to their own data-handling obligations.

4.3 Compliance & Fraud Prevention

kz66 uses third-party identity verification and anti-fraud service providers to assist with KYC checks, AML screening, and fraud detection. These providers may process your identity documents and transaction data within secure, purpose-limited environments. We do not permit these providers to use your data for their own commercial purposes.

4.4 Legal Disclosures

kz66 may disclose your personal data to competent authorities, regulators, law enforcement agencies, or courts where we are legally required to do so — for example, in response to a court order, regulatory investigation, or to report suspected money laundering activity. In such cases, kz66 will disclose only the minimum data required by the relevant legal obligation and will, where permitted, inform you of the disclosure.

5 Cookies & Tracking Technologies

kz66 uses cookies and similar tracking technologies (such as local storage and session tokens) to make the Platform work correctly and to understand how players interact with it. This section explains the types of cookies used and how you can control them.

5.1 Types of Cookies Used

Cookie Type	Purpose	Consent Required?
Strictly Necessary	Session management, login authentication, security tokens, fraud prevention signals	No — essential for the Platform to function
Functional	Remembering language preferences, game settings, and UI layout choices	No — required for personalised experience
Analytics	Understanding how players navigate the Platform; identifying underperforming pages; improving UX	Yes — consent-based
Marketing	Tracking promotion engagement and measuring campaign effectiveness for kz66's own marketing	Yes — consent-based

5.2 Managing Your Cookie Preferences

You may adjust your cookie preferences at any time through your browser settings. Most modern browsers allow you to block or delete cookies from specific websites, or to be notified before a cookie is stored. Please note that disabling strictly necessary cookies will prevent core Platform functionality — including login and game access — from operating correctly.

For analytics and marketing cookies, consent is captured when you first visit the kz66 Platform and may be updated at any time via your account preferences. Withdrawing consent for analytics or marketing cookies does not affect the functionality of your kz66 account.

6 Data Retention

kz66 retains your personal data for as long as is necessary to fulfil the purpose for which it was collected, or for as long as required by applicable legal or regulatory obligations. The retention periods applicable to each major data category are set out below.

Data Category	Retention Period	Basis
Account Registration Data	Duration of account + 7 years after closure	AML regulatory obligation
KYC Identity Documents	Duration of account + 7 years after closure	AML / age-verification legal requirement
Financial Transaction Records	7 years from date of transaction	Financial record-keeping obligation
Gameplay & Betting Records	5 years from date of session	Dispute resolution, responsible gaming audit
Technical / Log Data	12 months from collection	Security monitoring, fraud investigation
Marketing Consent Records	Until consent is withdrawn + 3 years	Proof of consent under privacy law
Support Correspondence	3 years from last interaction	Customer service quality and dispute resolution

At the end of the applicable retention period, kz66 securely deletes or anonymises your personal data so that it can no longer be linked to you as an individual. Anonymised, aggregated data (such as statistical game performance reports from which no individual can be identified) may be retained indefinitely for analytical purposes.

7 Your Privacy Rights

As a kz66 player, you hold a number of rights in relation to the personal data we process about you. kz66 is committed to facilitating the exercise of these rights promptly and without unnecessary bureaucracy. All rights requests should be submitted by email to [email protected] with sufficient detail to allow us to identify your account and the specific data in question.

7.1 Right of Access

You have the right to request a copy of all personal data that kz66 holds about you. kz66 will provide this in a structured, readable format within 30 days of receiving a valid request. There is no charge for a single access request per year; subsequent requests within the same 12-month period may be subject to a reasonable administrative fee.

7.2 Right to Rectification

If any personal data held by kz66 is inaccurate or incomplete, you have the right to request that it be corrected. Minor account details (such as contact number or email address) can be updated directly via your account settings. Corrections to identity data (name, date of birth) require supporting documentation and are processed by our verification team.

7.3 Right to Erasure

You may request deletion of your personal data where the data is no longer necessary for the purpose it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been processed unlawfully. Note that kz66 is legally required to retain certain data (see Section 6) and cannot fulfil erasure requests that conflict with regulatory retention obligations.

7.4 Right to Restriction of Processing

You may request that kz66 restrict the processing of your personal data — meaning we store it but do not actively use it — in specific circumstances, such as while the accuracy of the data is being verified, or while a legitimate-interests assessment is under review.

7.5 Right to Data Portability

Where processing is carried out on the basis of your consent or contractual necessity, and is performed by automated means, you have the right to receive a machine-readable copy of your personal data and to request that it be transmitted directly to another service provider where technically feasible.

7.6 Right to Object

You have the right to object to processing carried out on the basis of kz66's legitimate interests (including direct marketing). Where you object to marketing, processing for that purpose will cease immediately. Where you object to other legitimate-interests processing, kz66 will assess whether compelling legitimate grounds override your objection on a case-by-case basis.

8 Data Security

kz66 takes the security of your personal data seriously. We implement a layered set of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, alteration, disclosure, or destruction.

8.1 Technical Measures

• SSL/TLS Encryption: All data transmitted between your device and the kz66 Platform is encrypted using TLS 1.2 or higher, preventing interception in transit.
• Encrypted Data Storage: Sensitive data fields — including passwords (hashed and salted), KYC document copies, and payment credentials — are stored in encrypted form at rest.
• Firewall & Intrusion Detection: kz66's infrastructure is protected by enterprise-grade firewalls and continuous intrusion detection and prevention systems (IDS/IPS).
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff with access to sensitive data undergo background checks and regular data-handling training.
• Two-Factor Authentication: kz66 supports two-factor authentication (2FA) for player accounts. We strongly recommend that all players enable 2FA via their account security settings.

8.2 Organisational Measures

• All kz66 staff and contractors who handle personal data are contractually bound by confidentiality obligations.
• kz66 conducts regular internal audits of data-handling practices and access logs.
• Third-party service providers who process data on behalf of kz66 are assessed for security standards before engagement and are bound by data-processing agreements.

8.3 Data Breach Response

In the event of a personal data breach that poses a risk to your rights and freedoms, kz66 will notify affected players without undue delay and, where required by applicable law, report the breach to the relevant supervisory authority. Notification to players will be made via the email address registered on the affected account and will include a description of the breach, the data categories involved, and the steps kz66 is taking to address it.