kg899 Privacy Policy — How We Handle Your Data
At kg899, your privacy is a fundamental commitment, not an afterthought. This Privacy Policy explains exactly what personal data we collect from Bangladesh players, why we collect it, how it is stored and protected, and the rights you hold over your own information.
Privacy at a Glance
Six core principles that define how kg899 approaches your personal data — from the moment you register to every transaction you make.
Data Minimisation
kg899 collects only the personal data that is strictly necessary to operate your account, process your transactions, and comply with applicable obligations. We do not harvest data for its own sake.
No Data Sales
kg899 does not sell, rent, or trade your personal information to third-party marketers. Your data is used only for purposes directly related to the operation of the kg899 platform and services.
Encryption in Transit & at Rest
All data transmitted between your device and kg899 servers is protected by SSL/TLS encryption. Sensitive stored data is encrypted at rest using industry-standard ciphers so that it remains protected even in the event of a server-level breach.
Your Rights, Respected
You retain the right to access, correct, restrict, or request deletion of your personal data at any time. kg899 provides a straightforward process for exercising each of these rights, described in detail in Section 7 of this policy.
Limited Third-Party Sharing
Where kg899 shares data with third-party partners — such as payment processors and game studios — those partners are contractually required to handle your data in accordance with the same standards described in this policy.
Transparent Updates
When kg899 makes material changes to this Privacy Policy, we update the "Last updated" date at the top of this page and notify registered players via in-platform notification. Continued use of the platform constitutes acceptance of the updated policy.
Data We Collect
kg899 collects personal data through direct registration, platform usage, and automated technical processes. Below is a complete account of every category of data we may hold.
1.1 — Data You Provide Directly
When you register a kg899 account, update your profile, submit a verification request, or contact customer support, you voluntarily provide us with personal data. This includes:
- Full legal name (as it appears on your government-issued identity document).
- Date of birth (used for mandatory age verification — kg899 is an 18+ platform).
- Mobile telephone number registered in Bangladesh, used for account authentication and SMS OTP delivery.
- Email address (optional at registration; may be required for certain account actions or promotional communications).
- Residential address (requested during enhanced identity verification).
- Copies of identity documents submitted for KYC purposes — for example, Bangladesh National Identity Card (NID), passport, or birth certificate.
- Payment method identifiers — such as bKash account number, Nagad number, Rocket (Dutch-Bangla Bank) number, Upay account number, or USDT wallet address — as provided when making a deposit or requesting a withdrawal.
- Messages and attachments submitted to kg899 customer support via live chat or email.
1.2 — Data Generated by Your Platform Activity
When you use the kg899 platform, we automatically record data about how you interact with our services:
- Login timestamps, session durations, and logout events.
- Game session records including game title, wager amounts, outcomes, and balance changes.
- Sports betting activity including markets selected, stake amounts, odds accepted, and bet outcomes.
- Deposit and withdrawal transaction records, including amounts, timestamps, payment method references, and processing statuses.
- Bonus activation, wagering progress, and bonus expiry records.
- In-platform communications and support ticket history.
1.3 — Technical & Device Data
Our servers and analytics infrastructure automatically collect certain technical data whenever you access kg899:
- IP address at the time of access.
- Device type, operating system, and browser type and version.
- Referring URL (if you arrived at kg899 from another website).
- Pages visited within kg899, click paths, and time spent on each page.
- Cookie identifiers and similar tracking tokens — see Section 4 for full details.
kg899 does not knowingly collect personal data from individuals under 18 years of age. If we determine that data from a minor has been submitted, the associated account will be closed immediately and the data deleted or anonymised as promptly as is technically feasible.
How We Use Your Data
kg899 uses personal data only for clearly defined, legitimate purposes directly connected to the operation of the platform and your account.
The following table summarises every purpose for which kg899 processes personal data, along with the data categories involved and the legal basis for each processing activity.
| Purpose | Data Categories Used | Legal Basis |
|---|---|---|
| Account registration and identity verification | Name, date of birth, mobile number, NID / passport | Contractual necessity; legal obligation |
| Processing deposits and withdrawals | Payment method identifiers, transaction records | Contractual necessity |
| Game and betting session management | Session records, balance data, game history | Contractual necessity |
| Fraud detection and anti-money-laundering compliance | IP address, device data, transaction patterns, identity docs | Legal obligation; legitimate interest |
| Customer support and dispute resolution | Support messages, account history, transaction records | Contractual necessity; legitimate interest |
| Responsible gaming monitoring and intervention | Session data, betting frequency, deposit/withdrawal patterns | Legitimate interest; legal obligation |
| Sending promotional communications (opt-in only) | Mobile number, email address | Consent |
| Platform analytics and service improvement | Aggregated, anonymised usage data | Legitimate interest |
| Legal and regulatory compliance | All categories, as required | Legal obligation |
kg899 does not use your personal data for automated individual decision-making that produces legal or similarly significant effects — including automated account bans — without a subsequent human review step. Automated monitoring systems flag accounts for human investigation; final decisions are made by kg899 compliance personnel.
Legal Basis for Processing
Every processing activity at kg899 rests on one of four recognised legal bases. We do not process personal data without a valid justification.
kg899 relies on the following legal bases when processing personal data about registered players and platform visitors:
Contractual Necessity
The majority of kg899's data processing is necessary to perform the contract between kg899 and the player — specifically, to operate the player's account, facilitate deposits and withdrawals, manage game sessions, and deliver customer support. Without this processing, kg899 cannot fulfil its obligations to the player under the Terms & Conditions.
Legal Obligation
Certain processing activities are mandated by applicable law, including identity verification, age-checking obligations, anti-money-laundering (AML) record-keeping, and cooperation with lawful requests from competent authorities. kg899 is required to retain certain transactional and identity records for a minimum statutory period regardless of whether the player subsequently requests deletion.
Legitimate Interests
Where neither contractual necessity nor legal obligation applies, kg899 may process personal data on the basis of its legitimate interests — provided those interests are not overridden by the player's fundamental rights and freedoms. Legitimate interest processing at kg899 includes fraud prevention, responsible gaming monitoring, and aggregated service analytics. Players have the right to object to legitimate-interest processing — see Section 7.
Consent
Where kg899 wishes to send marketing communications — including promotional SMS messages, email newsletters, and bonus notifications — we will do so only where the player has given explicit, informed, and freely withdrawn consent. Consent to marketing is separate from the Terms & Conditions and may be withdrawn at any time by contacting kg899 customer support or via account settings without affecting the player's account status.
Withdrawal of consent for marketing does not affect any processing that was carried out on the basis of consent prior to the withdrawal. It also does not affect processing carried out on a different legal basis (e.g., contractual necessity for account operations).
Data Sharing & Third Parties
kg899 shares personal data only with partners who are operationally necessary to deliver the platform's services, and only under strict contractual data-protection obligations.
kg899 does not sell personal data. We share data with third parties only where it is necessary to operate the platform, comply with legal obligations, or protect the safety and integrity of the service. The categories of third parties with whom kg899 may share your data are described below.
Payment Processors
To process deposits and withdrawals, kg899 shares transaction-related data (including payment method identifiers and transaction amounts) with payment service providers including bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, and USDT TRC-20 network infrastructure. These providers receive only the data they need to complete the requested transaction. kg899 does not store full payment credentials on its own servers.
Game Studio Partners
Third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, Hacksaw Gaming, and Play'n GO — receive a session token and player identifier that allows them to load the game and record the session outcome. Game studios do not receive your full name, payment details, or identity documents. Each studio is bound by contractual data-processing agreements consistent with the standards set out in this policy.
Identity Verification Providers
When kg899 requires enhanced KYC verification, identity documents submitted by players may be processed through a third-party identity verification service. These providers are used solely for verification purposes and are contractually prohibited from retaining document data beyond the verification process.
Legal and Regulatory Disclosure
kg899 may disclose personal data to law enforcement agencies, courts, financial intelligence units, or other competent authorities where required by applicable law or where kg899 determines in good faith that disclosure is necessary to prevent fraud, protect the rights of third parties, or respond to a lawful legal process. kg899 will endeavour to notify the affected player of any such disclosure where it is legally permissible to do so.
kg899 does not transfer personal data to third parties located outside the relevant jurisdiction for the purposes of targeted advertising, data analytics profiling for third parties, or any commercial purpose unrelated to the operation of the kg899 platform.
Data Retention
kg899 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by law.
The retention periods applied to the main categories of personal data held by kg899 are summarised in the table below. Where a legal obligation requires a minimum retention period that exceeds the operational need, the longer period applies.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration information | Duration of account plus 5 years after closure | AML record-keeping; dispute resolution |
| Identity verification documents | Duration of account plus 5 years after closure | Legal obligation (AML / KYC) |
| Transaction records (deposits & withdrawals) | 7 years from transaction date | Financial record-keeping obligations |
| Game session and betting history | 3 years from session date | Dispute resolution; responsible gaming monitoring |
| Customer support communications | 3 years from last interaction | Dispute resolution; quality improvement |
| IP address and device logs | 12 months from session date | Fraud detection; security investigation |
| Marketing consent records | Until consent is withdrawn plus 1 year | Demonstrating consent compliance |
When a retention period expires, kg899 will either securely delete the relevant data or anonymise it so that it can no longer be attributed to an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and operational analysis purposes.
Effect of Account Closure on Retention
Closing your kg899 account does not result in the immediate deletion of all personal data. Legal and financial record-keeping obligations require kg899 to retain certain data categories for the periods set out above regardless of account status. If you have submitted a data deletion request (see Section 7), kg899 will delete all data that is not subject to a mandatory retention obligation and will clearly communicate what data must be retained and why.
Your Privacy Rights
As a kg899 player, you hold a defined set of rights over your personal data. kg899 is committed to honouring each of these rights promptly and transparently.
The following rights are available to all registered kg899 players. To exercise any of these rights, contact kg899 customer support via live chat or by sending an email to [email protected] (plain text — not a clickable link). kg899 will acknowledge your request within 72 hours and provide a substantive response within 30 calendar days of receiving sufficient information to process it.
Right of Access
You may request a copy of all personal data kg899 holds about you, along with information about how it is used and with whom it has been shared.
Right to Rectification
If any personal data kg899 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to any mandatory retention obligations described in Section 6.
Right to Restriction
You may request that kg899 restrict the processing of your data — for example, while the accuracy of the data is being contested — without requiring full deletion.
Right to Data Portability
Where processing is based on your consent or a contract, you may request a copy of your data in a structured, machine-readable format suitable for transfer to another service provider.
Right to Object
You may object at any time to processing based on legitimate interests, including direct marketing and certain forms of profiling. kg899 will cease that processing unless it can demonstrate compelling grounds that override your interests.
Right to Withdraw Consent
Where processing is based solely on your consent — such as for marketing messages — you may withdraw that consent at any time without affecting prior lawful processing or your account status.
Right Not to Be Subject to Automated Decisions
You have the right to request human review of any significant decision made about your account that was initially produced by an automated system, such as a fraud flag or bonus restriction.
kg899 may need to verify your identity before processing a privacy rights request, to ensure that data is not disclosed or deleted at the request of an unauthorised third party. Verification does not extend the response deadline — the 30-day clock starts from the date of the initial request.
Data Security Measures
kg899 maintains a layered technical and organisational security framework to protect your personal data against unauthorised access, loss, or misuse.
Protecting the personal data of kg899 players is a continuous operational commitment. The following technical and organisational security measures are in place across the kg899 platform infrastructure:
- TLS/SSL encryption: All communications between your browser or app and kg899 servers are encrypted in transit using TLS 1.2 or higher, preventing interception by third parties on the network path.
- Encryption at rest: Sensitive data fields stored in kg899 databases — including identity document records and payment method identifiers — are encrypted at rest using AES-256 encryption.
- Access controls: Access to production systems and player data is restricted to authorised kg899 personnel on a strict need-to-know basis. Administrative access requires multi-factor authentication and is logged for audit purposes.
- Network security: The kg899 platform is protected by Web Application Firewall (WAF) rules, DDoS mitigation systems, and intrusion detection monitoring that operate continuously around the clock.
- Penetration testing: kg899 conducts periodic security assessments and penetration tests of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
- Secure development practices: kg899 engineering teams follow secure coding guidelines including parameterised database queries, input validation, and output encoding to prevent common web vulnerabilities such as SQL injection and cross-site scripting.
- Incident response: kg899 maintains a documented data breach incident response plan. In the event of a breach that is likely to result in significant risk to affected individuals, kg899 will notify affected players and relevant authorities within the timeframes required by applicable obligations.
- Third-party security standards: Game studio partners and payment processors integrated into the kg899 platform are required to maintain security standards consistent with their respective industry certifications (e.g., PCI-DSS for payment processors, RNG certification for game studios).
- Staff training: All kg899 personnel with access to personal data receive mandatory data protection and security awareness training as part of their onboarding and on an annual basis thereafter.
Your Role in Account Security
While kg899 takes extensive measures to secure the platform, account security also depends on steps taken by the individual player. kg899 recommends that all players:
- Use a strong, unique password for their kg899 account that is not reused across other platforms.
- Never share account credentials — including OTP codes — with any third party, including individuals claiming to represent kg899 support. kg899 staff will never ask for your password.
- Log out of the kg899 platform when accessing it from a shared or public device.
- Contact kg899 customer support immediately if they suspect unauthorised access to their account.
No internet-based platform can guarantee absolute security against all possible threats. kg899 maintains industry-standard protections and responds promptly to security incidents, but players should exercise prudent personal security practices as a complementary layer of protection.
Contact & Complaints
If you have questions about this Privacy Policy, wish to exercise your data rights, or want to raise a complaint about how kg899 has handled your personal data, the following channels are available.
Contacting kg899 About Privacy Matters
For all privacy-related enquiries — including subject access requests, rectification requests, deletion requests, consent withdrawal, and general questions about this policy — please contact the kg899 data support team through one of the following channels:
Live Chat Support
Available 24/7 directly within the kg899 platform. Live chat is the fastest channel for privacy requests and typically reaches a response within minutes during peak hours. Available in English around the clock including all Bangladesh public holidays.
Email Support
Privacy requests may also be submitted by email. Send your request to the following address (plain text — not a clickable link):
kg899 targets a response to all privacy emails within 4 hours and a substantive resolution within 30 calendar days.
Complaints Process
If you are dissatisfied with the way kg899 has handled your personal data or responded to a privacy rights request, you have the right to raise a formal complaint. kg899 takes all privacy complaints seriously and will investigate each one thoroughly. The process is as follows:
- Submit your complaint in writing to [email protected] (plain text — not a clickable link), clearly describing the nature of your concern and the outcome you are seeking.
- kg899 will acknowledge your complaint within 72 hours and assign it to a senior member of the compliance team for investigation.
- A written resolution will be provided within 30 calendar days. Where the matter is complex and requires additional time, kg899 will notify you of the extended timeline and the reason for it.
- If you remain dissatisfied with kg899's resolution, you retain the right to escalate your complaint to the relevant data protection authority or seek other appropriate remedies available under applicable law.
Changes to This Privacy Policy
kg899 may update this Privacy Policy from time to time to reflect changes in platform features, applicable laws, or data processing practices. When material changes are made, kg899 will update the "Last updated" date at the top of this page and, where the changes significantly affect how player data is processed, will notify registered players via in-platform notification prior to the changes taking effect. We encourage all players to review this Privacy Policy periodically. Continued use of the kg899 platform following publication of an updated Privacy Policy constitutes acceptance of the revised terms. If you do not agree with any updated version of this policy, you should cease using the platform and may request account closure in accordance with the Terms & Conditions.
This Privacy Policy was last reviewed and updated in January 2026. The previous version of the kg899 Privacy Policy remains available on request by contacting customer support. All historical versions are retained internally for compliance record-keeping purposes.
Ready to Experience the Platform?
Now that you understand how kg899 protects your data, explore our full range of games and sports betting markets — all designed for Bangladesh players.