kc99 Privacy Policy

Definitions

In this Privacy Policy, the following terms carry the meanings set out below unless the context requires otherwise:

• "kc99" refers to the online casino and sports betting platform operated at kc99.asia, including all pages, features, and services available through that domain.
• "Personal Data" means any information that identifies or can reasonably be used to identify a living natural person, including but not limited to name, date of birth, residential address, mobile number, email address, government-issued identification numbers, payment details, and device identifiers.
• "Processing" means any operation performed on Personal Data — including collection, recording, storage, modification, retrieval, use, disclosure, erasure, or destruction — whether by automated means or otherwise.
• "Player" / "You" / "Your" refers to any natural person who has registered a kc99 account, visited the kc99 website, or otherwise engaged with any kc99 service.
• "KYC Data" means the identity verification documents and information collected from Players as part of the Know Your Customer process, including copies of government-issued photo identification and proof of residential address.
• "Cookies" means small text files placed on a Player's device by the kc99 website for purposes of session management, analytics, and service improvement.
• "Third Party" means any natural or legal person other than the Player and kc99, including payment processors, game studios, analytics providers, and identity verification services .
• "BDT" means Bangladeshi Taka (৳), the currency in which all kc99 accounts are denominated.

Data We Collect

kc99 collects only the Personal Data that is necessary to provide its services, verify Player identity, process payments, and comply with applicable legal obligations. The categories of data we collect are set out in the table below:

kc99 does not collect sensitive personal data such as biometric identifiers, health information, religious beliefs, or political opinions except where explicitly required by law and with the Player's prior written consent.

How We Collect Your Data

kc99 collects Personal Data through the following channels:

• Account Registration: When you create a kc99 account, you provide identity, contact, and credential data directly through the registration form.
• KYC Submission: When you submit identity documents for account verification, we receive and store those documents and the data contained within them.
• Deposits and Withdrawals: Financial Data is collected each time you initiate a deposit or withdrawal transaction through bKash, Nagad, Rocket, Upay, Visa, Mastercard, or a supported Bangladeshi bank.
• Platform Usage: Technical and Usage Data is collected automatically as you navigate the kc99 website and use its features. This includes data collected via Cookies and similar tracking technologies as described in Section 7.
• Support Interactions: When you contact kc99 support via email or live chat, we collect and retain the content of those communications together with your account details for quality and compliance purposes.
• Third-Party Verification: Where kc99 uses third-party identity verification services, those providers may return additional data points about a Player's identity to assist with KYC compliance. kc99 ensures that all such providers are bound by appropriate data protection obligations.

Legal Basis for Processing

kc99 processes Personal Data only where a valid legal basis exists. The primary legal bases on which kc99 relies are:

• Contractual Necessity: Processing required to perform the contract between kc99 and the Player — specifically, to operate your account, execute deposits and withdrawals, settle game outcomes, and provide customer support.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including anti-money laundering (AML) obligations, age verification requirements, and fraud prevention duties. kc99 is required to retain certain transaction and identity records regardless of Player preferences.
• Legitimate Interests: Processing necessary for the legitimate business interests of kc99, including platform security monitoring, fraud detection, service improvement, and responsible gaming analytics, provided those interests are not overridden by the Player's rights and freedoms.
• Consent: Processing based on a Player's freely given, specific, informed consent — primarily used for optional marketing communications. Players may withdraw consent for marketing at any time by contacting support at [email protected].

How We Use Your Data

kc99 uses the Personal Data it collects for the following purposes:

• Account Management: Creating, maintaining, and administering your kc99 Player account, including processing login authentication and enabling account features.
• Identity Verification: Conducting KYC checks to confirm your identity, age (21+), and residential address before permitting withdrawals or activating certain account features.
• Payment Processing: Executing deposit and withdrawal transactions via bKash, Nagad, Rocket, Upay, and supported bank channels; reconciling your BDT wallet balance; and investigating disputed transactions.
• Fraud Prevention and Security: Monitoring account activity for signs of fraudulent behaviour, unauthorised access, money laundering, collusion, or bot usage; investigating suspicious patterns; and taking protective action where necessary.
• Responsible Gaming: Monitoring Player betting patterns to identify indicators of problem gambling behaviour; enforcing self-imposed deposit limits and self-exclusion requests; and contacting Players where kc99 has a reasonable concern about their gambling habits.
• Customer Support: Responding to support queries, managing complaints, and resolving disputes in accordance with the processes described in the kc99 Terms & Conditions.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve the design, performance, and content of the kc99 platform, including game selection, navigation, and payment flow.
• Marketing Communications: Sending promotional offers, bonus notifications, and seasonal campaign messages to Players who have opted in to receive such communications. kc99 will not send unsolicited marketing to Players who have not opted in or who have subsequently withdrawn consent.
• Legal Compliance: Retaining records as required by applicable law; responding to lawful requests from governmental or regulatory authorities; and enforcing kc99's rights under the Terms & Conditions.

Data Sharing & Disclosure

kc99 does not sell, rent, or trade Personal Data to third parties for their own commercial purposes. kc99 shares Personal Data only in the limited circumstances described below:

• Payment Service Providers: Financial Data is shared with payment processors — including bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partnered Bangladeshi banks — solely to the extent necessary to process deposit and withdrawal transactions.
• Identity Verification Services: KYC Data may be shared with accredited third-party identity verification providers for the purpose of confirming a Player's identity and age. These providers are contractually bound to process the data solely for verification purposes and to maintain appropriate security standards.
• Game Content Providers: Certain Technical and Usage Data (such as anonymised session identifiers and bet amounts) is shared with game studios — including Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi — in order to deliver their game content within the kc99 platform. These providers do not receive personally identifiable information beyond what is technically required.
• Analytics Providers: Anonymised and aggregated usage data may be shared with analytics service providers for the purpose of platform performance measurement and improvement. No directly identifiable Personal Data is included in analytics data sets.
• Legal and Regulatory Authorities: kc99 may disclose Personal Data to government agencies, law enforcement bodies, or regulatory authorities where required to do so by applicable law, court order, or formal legal process. kc99 will use reasonable efforts to notify the affected Player of any such disclosure unless prohibited from doing so by law.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of kc99's business, Personal Data held by kc99 may be transferred to the acquiring entity as part of that transaction, subject to the acquiring entity assuming the data protection obligations set out in this Privacy Policy.

All third-party service providers who receive Personal Data from kc99 are required to implement appropriate technical and organisational security measures and to process that data only for the purposes for which it was shared.

Cookies & Tracking Technologies

The kc99 website uses Cookies and similar client-side tracking technologies to operate essential platform functions, remember Player preferences, and gather anonymised analytics. The main categories of cookies used by kc99 are:

• Essential Cookies: Required for the kc99 website to function. These include session management cookies that keep you logged in during a gaming session and security tokens that protect your account from cross-site request forgery. These cookies cannot be disabled without impairing Platform functionality.
• Functional Cookies: Used to remember your preferences such as language, currency display, and notification settings so that you do not have to re-enter them on each visit.
• Analytics Cookies: Used to collect anonymised data on how Players interact with the kc99 platform — including which pages are visited most frequently, how long sessions last, and where navigation errors occur. This data is used exclusively to improve the Platform.
• Security Cookies: Used to detect and prevent fraudulent login attempts, bot activity, and account takeover attempts by monitoring login patterns and device fingerprints.

kc99 does not use third-party advertising or retargeting cookies. Your browsing activity on kc99 is not shared with advertising networks or used to deliver targeted advertisements on other websites.

You may control cookie behaviour through your browser settings. Disabling Essential Cookies will prevent you from logging in to your kc99 account. Disabling Analytics Cookies will not affect your ability to use any Platform feature.

Data Retention

kc99 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, subject to longer retention periods required by applicable law. The general retention periods applied by kc99 are as follows:

• Account and Identity Data: Retained for the duration of the Player's account and for a minimum of five (5) years following permanent account closure, in compliance with anti-money laundering record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years from the date of submission, or longer if required by a specific regulatory obligation or ongoing legal proceeding.
• Financial and Transaction Records: Retained for a minimum of seven (7) years from the date of the relevant transaction in accordance with applicable financial record-keeping requirements.
• Support and Communications Data: Retained for three (3) years from the date of the last interaction, or for the duration of any unresolved dispute related to those communications.
• Technical and Usage Data: Retained in identifiable form for up to twelve (12) months, after which it is anonymised and retained indefinitely for aggregated analytics purposes.
• Marketing Preference Records: Opt-in and opt-out records are retained indefinitely to demonstrate compliance with consent obligations.

When Personal Data is no longer required and no legal retention obligation applies, kc99 will securely delete or irreversibly anonymise that data in accordance with industry-standard data destruction practices.

Data Security

kc99 implements a range of technical and organisational security measures designed to protect Personal Data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between Players' devices and kc99 servers.
• Encryption of sensitive data fields — including payment details and KYC documents — at rest using industry-standard encryption algorithms.
• Strict role-based access controls limiting internal access to Personal Data to only those staff members whose job functions require it.
• Two-factor authentication requirements for all staff accessing systems that contain Personal Data.
• Regular security assessments and vulnerability scanning of kc99 infrastructure.
• Incident response procedures for the prompt detection, investigation, and notification of any data breach that poses a material risk to affected Players.

While kc99 takes reasonable and industry-appropriate steps to protect your Personal Data, no digital system can guarantee absolute security against all threats. Players are encouraged to use strong, unique passwords for their kc99 account and to enable SMS-based two-factor authentication from within the account dashboard.

In the event of a data security incident that is likely to result in a high risk to Players' rights, kc99 will notify affected Players without undue delay, providing a description of the nature of the incident, the data categories affected, and the steps kc99 is taking to address it.

Your Privacy Rights

As a kc99 Player, you have the following rights in relation to your Personal Data. To exercise any of these rights, please contact kc99 support at [email protected] with a written request and sufficient information to verify your identity:

• Right of Access: You may request a copy of the Personal Data that kc99 holds about you, together with information about the purposes for which it is processed and the categories of third parties with whom it has been shared.
• Right to Rectification: You may request that kc99 correct any inaccurate or incomplete Personal Data held about you. Where the correction affects data that has been shared with a third party, kc99 will use reasonable efforts to inform that third party of the correction.
• Right to Erasure: You may request the deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected and where no legal retention obligation overrides that request. Please note that kc99 is required by law to retain certain transaction and identity records for defined minimum periods, and those records cannot be deleted on request during the mandatory retention period.
• Right to Restrict Processing: You may request that kc99 restrict the processing of your Personal Data in certain circumstances — for example, where you contest the accuracy of the data or object to processing based on legitimate interests, pending kc99's response to that objection.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request a copy of your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You may object at any time to the processing of your Personal Data for direct marketing purposes. Such objections will be honoured immediately. You may also object to processing based on legitimate interests, in which case kc99 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

kc99 will respond to all valid privacy rights requests within thirty (30) calendar days of receipt. Where a request is complex or where kc99 receives a high volume of requests simultaneously, the response period may be extended by an additional sixty (60) days, in which case kc99 will notify you of the extension and the reasons for it within the initial thirty-day period.

Children & Minors

The kc99 platform is strictly intended for adults aged 21 years and above. kc99 does not knowingly collect Personal Data from persons under the age of 21. The registration process includes mandatory age verification fields, and kc99 requires KYC document submission before authorising withdrawals, which provides an additional layer of age verification.

If kc99 becomes aware that Personal Data has been collected from a person under the age of 21, it will take immediate steps to suspend the associated account, refuse any withdrawal requests, and securely delete the Personal Data of the minor from its systems following the outcome of any necessary investigation into the circumstances of the registration.

Parents or guardians who believe that a minor in their care has registered a kc99 account should contact kc99 support immediately at [email protected]. kc99 takes underage gambling extremely seriously and cooperates fully with parental notifications of this nature.

Third-Party Links

The kc99 website may contain references to or integrations with third-party services, such as game content provided by Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi. While kc99 takes reasonable steps to ensure that its game content partners maintain appropriate data protection standards, kc99 is not responsible for the privacy practices of any third-party service operating under its own terms and privacy documentation.

Players who interact directly with third-party services — for example, by participating in a game provider's own promotional programme outside the kc99 platform — do so under the terms of that third party's privacy policy. kc99 recommends that Players review the privacy documentation of any third-party service with which they interact.

Changes to This Privacy Policy

kc99 reserves the right to update or revise this Privacy Policy at any time. Where changes are material — including changes that affect the categories of data collected, the purposes for which data is processed, the third parties with whom data is shared, or Player rights — kc99 will publish the updated Policy on this page with a revised effective date and will, where practicable, send a notification to the Player's registered mobile number or email address.

Continued use of the kc99 platform after the effective date of any revision constitutes acceptance of the updated Privacy Policy. Players who do not agree with the revised Policy should cease using the kc99 platform and contact support to request account closure and the deletion of their Personal Data to the extent permitted by law.

The current version of this Privacy Policy is always available at kc99.asia/privacy-policy. kc99 encourages Players to review this page periodically to stay informed of any updates.

Contact Us

For any questions, requests, or concerns relating to this Privacy Policy or the processing of your Personal Data by kc99, please contact the kc99 data support team through the following channel:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Please include "Privacy Request" or "Data Enquiry" in the subject line of your email to ensure prompt routing to the appropriate team.
• Response Time: Within 30 calendar days for standard privacy requests; within 48 hours for urgent security-related concerns
• Support Hours: 24 hours a day, 7 days a week, including public holidays in Bangladesh
• Time Zone: Bangladesh Standard Time (BST, UTC+6)

Players are encouraged to provide as much detail as possible in their privacy request, including their registered account username and the specific data category or processing activity their request relates to. This will help kc99 process the request accurately and within the applicable response deadline.