kp99 Privacy Policy — Your Data, Your Rights, Our Commitment

01 Information We Collect

kp99 collects personal data from you through multiple touchpoints across the platform — during account registration, while you use our services, when you contact our support team, and through automated technical systems that operate in the background to keep the platform secure and functional. The categories of personal data we collect are described in detail below.

Registration & Account Data

When you create a kp99 account, we collect the information you provide directly, including your full legal name, mobile phone number, date of birth, and preferred payment method. This information forms the core of your player profile and is required to provide you with access to the kp99 platform. Without this data, we cannot create or maintain your account.

Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations, we may collect copies of government-issued identity documents such as your National Identity Card (NID), passport, or driver's licence. We may also collect a recent utility bill or bank statement as proof of address. KYC data is collected to verify your identity, confirm your age (18+ requirement), and prevent fraud and financial crime on the platform.

Financial Transaction Data

kp99 records the details of all financial transactions conducted through your account, including deposit amounts, withdrawal requests, transaction timestamps, and the payment method used (for example, bKash account number, Nagad mobile number, Rocket account reference, or bank account details). This data is necessary to process payments, resolve disputes, and comply with financial record-keeping requirements.

Gameplay & Betting Activity Data

We collect a detailed record of your activity on the kp99 platform, including the games you play, bets placed, wager amounts, game outcomes, bonus claims, and session durations. This data is used to deliver personalised game recommendations, administer bonuses and promotions, monitor for signs of problem gambling, and detect fraudulent or abusive behaviour.

Technical & Device Data

When you access kp99 from any device — smartphone, tablet, laptop, or desktop — our systems automatically collect certain technical data, including your IP address, device type and model, operating system and version, browser type and version, screen resolution, and time zone settings. This data helps us optimise platform performance, detect suspicious login attempts, and maintain security across your account.

Communications Data

When you contact kp99 via live chat, email, or any other support channel, we retain records of those communications, including the date, time, content of your messages, and any attachments. This data is used to resolve support queries, maintain service quality, and train our support team.

Summary of Data Categories

02 How We Use Your Data

kp99 uses the personal data we collect for specific, legitimate purposes directly connected to operating the platform and serving our players. We do not use your data for any purpose that is incompatible with the reasons for which it was originally collected. The primary purposes for which kp99 processes personal data are described below.

• Account Creation and Management: We use your registration data to create your player account, verify your identity, authenticate your logins, and manage your account throughout its lifecycle. This is fundamental to providing you access to kp99 services.
• Payment Processing: Financial transaction data is used to process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfer, or other supported payment methods. We retain payment records to handle disputes and comply with financial record-keeping requirements.
• Age and Identity Verification: kp99 processes KYC data to verify that all players are aged 18 or above and to confirm that the account is operated by the individual who registered it. This is a core player protection obligation.
• Fraud Prevention and Platform Security: We analyse technical data, login patterns, IP addresses, and gameplay activity to detect and prevent fraud, money laundering, multi-accounting, bonus abuse, and other prohibited conduct. This protects the integrity of the platform and the interests of all legitimate players.
• Personalisation and Game Recommendations: Gameplay and activity data allows kp99 to tailor the platform experience to your preferences — for example, surfacing cricket betting markets during BPL season, recommending slot titles from providers you have previously enjoyed, or displaying promotions relevant to your activity level.
• Responsible Gaming Monitoring: kp99 uses gameplay data, session duration records, and deposit frequency data to monitor for indicators of problem gambling behaviour. Where our systems detect concerning patterns, we may proactively reach out to offer responsible gaming tools including deposit limits, cool-off periods, or self-exclusion. This is a player welfare obligation, not a marketing activity.
• Customer Support: Communications data is used to resolve your support queries, investigate complaints, and maintain a record of your interactions with the kp99 support team for quality assurance and training purposes.
• Promotional Communications: Where you have provided consent or where our legitimate interests apply, we may use your contact details to send you information about promotions, bonuses, and offers available on kp99. You may opt out of promotional communications at any time by contacting kp99 support via live chat.
• Platform Improvement and Analytics: Aggregated and anonymised technical and gameplay data is used to analyse platform performance, identify areas for improvement, and develop new features. This analysis does not involve individual-level profiling for non-operational purposes.
• Legal and Regulatory Compliance: kp99 may be required to process and disclose personal data to comply with applicable laws, respond to lawful requests from regulatory or law enforcement authorities, or defend legal claims.

03 Legal Basis for Processing

kp99 processes personal data on one or more of the following legal bases, depending on the nature of the processing activity and its purpose:

Where kp99 relies on legitimate interests as the legal basis for processing, we conduct a balancing assessment to ensure that our interests do not override your fundamental rights and freedoms. If you would like further information about any specific balancing assessment, please contact kp99 support via live chat.

04 Cookies & Tracking Technologies

kp99 uses cookies and similar tracking technologies — including local storage, session tokens, and pixel tags — to operate the platform, remember your session state, analyse usage patterns, and maintain security across your account. This section explains what cookies we use and why.

What Are Cookies?

A cookie is a small text file placed on your device by a website when you visit it. Cookies allow the site to recognise your device on subsequent visits, remember your preferences, and maintain session continuity. Some cookies are strictly necessary for the platform to function; others are used for analytics or personalisation purposes.

Categories of Cookies Used by kp99

Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies via the browser's privacy settings menu. Please note that disabling strictly necessary cookies will impair your ability to log in and use the kp99 platform. For detailed instructions on managing cookies in your specific browser, refer to your browser's help documentation.

05 Data Sharing & Disclosure

kp99 does not sell, rent, or trade your personal data to any third party. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for each specific purpose.

Service Providers and Technology Partners

To operate the kp99 platform, we engage a number of third-party service providers who process personal data on our behalf under strict data processing agreements. These include:

• Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified game studios receive gameplay session data necessary to deliver game content and verify game outcomes. These providers do not receive your full personal profile.
• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive the transaction data necessary to process your deposits and withdrawals. Payment processors are PCI-DSS certified and process card data in their own secure environments.
• Identity verification providers: Where kp99 uses a third-party KYC verification service to assist with identity document checks, that provider processes only the identity document data submitted during the verification process.
• Customer support platform: Our live chat support system provider processes communications data to deliver the live chat service. Support platform providers operate under confidentiality obligations.
• Security and fraud detection: Specialist fraud prevention and cybersecurity service providers may receive technical data (IP addresses, device fingerprints) to identify and block threats.

Legal and Regulatory Disclosure

kp99 may disclose personal data to regulatory authorities, law enforcement agencies, or courts when required to do so by applicable law, or when kp99 reasonably believes that disclosure is necessary to prevent fraud, investigate a crime, protect the safety of individuals, or enforce our Terms & Conditions. Any such disclosure will be limited to the data strictly required by the requesting authority.

Business Transfers

In the event that kp99 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, personal data held by kp99 may be transferred to the relevant successor entity as part of that transaction. In such circumstances, kp99 will take reasonable steps to ensure that your data continues to be protected in accordance with this Privacy Policy and will notify affected players of any material change to the data controller.

06 Data Retention

kp99 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The retention periods below reflect our standard practices; specific circumstances may warrant longer or shorter retention in individual cases.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an individual. Where data is anonymised rather than deleted, the anonymised dataset may be retained indefinitely for statistical and research purposes as it no longer constitutes personal data.

07 Your Data Rights

As a kp99 player whose personal data we process, you hold the following rights in relation to your personal information. kp99 is committed to honouring these rights promptly and without undue delay. To exercise any of the rights described below, please contact kp99 support via live chat or by emailing the address published in the Contact & Support section of the kp99 website.

• Right of Access: You have the right to request a copy of the personal data kp99 holds about you. kp99 will provide this information in a structured, commonly used, machine-readable format within 30 days of receiving a verified request.
• Right to Rectification: If any personal data kp99 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details (such as your registered mobile number) directly from your account settings panel.
• Right to Erasure: In certain circumstances, you have the right to request that kp99 delete your personal data. This right is not absolute — kp99 may be required to retain certain data to comply with legal obligations (for example, financial transaction records must be retained for 7 years). Where erasure is not possible, kp99 will explain why and describe the data that must be retained.
• Right to Restrict Processing: You may request that kp99 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to Data Portability: Where processing is based on your consent or on a contract, you have the right to receive the personal data you have provided to kp99 in a structured, commonly used, machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Object: Where kp99 processes your personal data on the basis of legitimate interests, you have the right to object to that processing. kp99 will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, or where processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to Withdraw Consent: Where processing is based on your consent (for example, receiving promotional communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

08 Data Security

kp99 implements a comprehensive set of technical and organisational security measures to protect your personal data from unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes, but is not limited to, the following safeguards:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the kp99 platform is encrypted in transit using 256-bit SSL/TLS protocols. Look for the padlock symbol in your browser's address bar to confirm the connection is encrypted.
• Encrypted Data Storage: Sensitive personal data stored in kp99's databases is encrypted at rest using industry-standard encryption algorithms. Plain-text storage of passwords or payment credentials is strictly prohibited in our systems.
• Access Controls: Access to personal data within kp99's internal systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data categories required to perform their specific role. All internal access is logged and auditable.
• OTP-Based Authentication: Account logins and sensitive operations on kp99 are protected by One-Time Password (OTP) verification sent to your registered mobile number, adding a second layer of authentication beyond your password.
• Continuous Fraud Monitoring: Automated systems monitor all account activity in real time for signs of unauthorised access, unusual transaction patterns, and other security anomalies. Suspicious activity triggers immediate review and, where warranted, temporary account suspension pending investigation.
• PCI-DSS Compliant Payment Processing: kp99 does not store full payment card numbers on its systems. Card and mobile payment transactions are processed via PCI-DSS certified payment gateways that are independently audited for security compliance.
• Security Incident Response: kp99 maintains a documented security incident response procedure. In the event of a data breach that poses a risk to your rights and freedoms, kp99 will notify affected players and, where required, relevant authorities within the timeframes mandated by applicable law.

While kp99 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security against all possible threats. You also play an important role in keeping your account secure — please refer to the account security obligations described in the kp99 Terms & Conditions for guidance on protecting your own credentials.