kb222 Privacy Policy — How We Collect, Use, and Safeguard Your Personal Data

1 Information We Collect

kb222 collects personal information through several channels: directly from you during registration and account management, automatically through your use of the Platform, and from third-party verification and payment partners where necessary. The categories of information we collect are described below.

1.1 Information You Provide Directly

• Registration Data: Full legal name, date of birth, gender, residential address (including city — e.g., Dhaka, Chittagong, Sylhet, Khulna, or Rajshahi), email address, and mobile phone number.
• Identity Verification (KYC) Documents: Copies of your National Identity Card (NID), passport, birth registration certificate, and/or recent utility bill or bank statement confirming your address.
• Payment Information: Mobile banking account numbers for bKash, Nagad, Rocket, or Upay; card numbers (partial, masked — we do not store full card numbers), and Dutch-Bangla Bank or other bank account details used for transactions.
• Support Communications: Messages, screenshots, and attachments you submit to our customer support team via live chat or email.
• Preferences and Settings: Language preferences, responsible gaming limits you voluntarily set, and any marketing communication opt-ins or opt-outs.

1.2 Information Collected Automatically

• Device and Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and unique device identifiers.
• Usage Data: Pages visited, games played, bets placed and their outcomes, session duration, click-stream data, and feature interaction logs.
• Location Data: Approximate geographic location derived from your IP address, used to verify that you are accessing the Platform from Bangladesh and not from a Prohibited Territory.
• Cookies and Tracking Technologies: Session cookies, persistent cookies, and similar tracking technologies as described in Section 5 of this Policy.

1.3 Information from Third Parties

• Payment Processor Confirmations: Transaction status, reference numbers, and account holder name confirmations received from bKash, Nagad, Rocket, Upay, Visa, and Mastercard to verify deposit and withdrawal activity.
• Identity Verification Services: Confirmation of identity document authenticity and age verification results from our KYC partners.
• Anti-Fraud and AML Screening: Risk scores and flagging data from anti-money laundering screening services used to comply with financial integrity obligations.

2 How We Use Your Personal Data

kb222 uses the personal information we collect only for the specific, legitimate purposes listed below. We do not use your data for any purpose that is incompatible with the reason it was collected.

3 Legal Basis for Processing

kb222 processes your personal data only where we have a valid legal basis to do so. The legal bases we rely on are as follows:

• Contractual Necessity: Processing that is required to perform our contract with you — including operating your account, processing your transactions, and providing the gaming and betting services you have requested.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, age verification obligations, financial record-keeping requirements, and fraud prevention duties.
• Legitimate Interests: Processing carried out for kb222's legitimate business interests — including fraud detection, platform security, abuse prevention, and internal analytics — provided those interests are not overridden by your own rights and interests.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for optional marketing communications. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

4 Data Sharing and Disclosure

4.1 Service Providers

kb222 shares personal data with carefully selected third-party service providers who assist us in operating the Platform. These include payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard), KYC and identity verification partners, game content providers (Pragmatic Play, Evolution Gaming, PG Soft, JILI, Spribe, Habanero, Microgaming, Ezugi), customer support platform operators, and cloud hosting and infrastructure providers. All service providers are bound by data processing agreements that prohibit them from using your data for any purpose other than delivering the contracted service to kb222.

4.2 Legal and Regulatory Disclosures

kb222 may disclose personal data to government authorities, law enforcement bodies, financial regulators, or courts where we are legally required to do so, or where disclosure is necessary to prevent fraud, money laundering, or other serious criminal activity. We will not disclose more data than is strictly required to fulfil the legal obligation in question.

4.3 Business Transfers

In the event that kb222 undergoes a corporate restructuring, merger, acquisition, or sale of assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and the privacy practices of the acquiring entity before your data is transferred.

4.4 What We Will Never Do

• Sell, rent, or trade your personal data to any third party for that party's own marketing or commercial use.
• Share your data with advertising networks, data brokers, or social media platforms without your explicit consent.
• Disclose your personal data to other kb222 players or any member of the general public.
• Transfer your data internationally to jurisdictions that do not provide adequate data protection standards without implementing appropriate safeguards.

5 Cookies & Tracking Technologies

5.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They are widely used to make websites function correctly, improve user experience, and provide analytical information to website operators. kb222 uses both first-party cookies (set by kb222 directly) and third-party cookies (set by our service providers).

5.2 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the kb222 Platform to function. They enable you to log in securely, maintain your session state, process transactions, and access protected account features. These cookies cannot be disabled without severely impairing Platform functionality.
• Performance and Analytics Cookies: These cookies help us understand how Players use the Platform — which pages are visited most, which games are most popular, and where users encounter difficulties. This data is collected in aggregated, anonymised form and is used solely to improve the kb222 experience.
• Functionality Cookies: These cookies remember your preferences — such as your preferred language and responsible gaming settings — so you do not need to re-enter them on each visit.
• Fraud Prevention Cookies: These cookies help us detect unusual or suspicious activity patterns that may indicate fraud, multi-accounting, or bot usage. They are an important part of our platform security infrastructure.

5.3 Managing Cookies

You may control or delete cookies through your browser settings. Please note that disabling strictly necessary cookies will prevent the kb222 Platform from functioning correctly, including your ability to log in and place bets. To manage cookies, consult the help documentation for your specific browser (Chrome, Firefox, Safari, Edge, etc.). Blocking analytics cookies will not affect your ability to use the Platform's core features.

6 Data Security

kb222 takes the security of your personal data extremely seriously. We implement a comprehensive, multi-layered security framework designed to protect your information against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• Transport Encryption: All data transmitted between your device and kb222 servers is encrypted using TLS 1.3 with 256-bit AES encryption. Our SSL certificate is visible in your browser's address bar.
• Storage Encryption: All personal data stored in kb222 databases is encrypted at rest using AES-256, ensuring that even in the event of a server breach, raw data cannot be read without the decryption keys.
• Access Controls: Access to personal data within kb222 is strictly limited to authorised personnel who require it to perform their job functions. All staff access is logged, audited, and subject to role-based permissions.
• Two-Factor Authentication: Administrative access to kb222 systems that contain personal data requires multi-factor authentication. We also strongly encourage Players to enable two-factor authentication on their own accounts.
• Regular Security Audits: kb222 conducts regular internal and third-party security audits, penetration tests, and vulnerability assessments to identify and remediate potential security weaknesses before they can be exploited.
• Incident Response: kb222 maintains a documented data breach response plan. In the event of a security incident that affects your personal data, we will notify affected users and relevant authorities in accordance with applicable legal obligations as promptly as possible.

7 Data Retention

kb222 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised using industry-standard data destruction methods. You may request early deletion of your personal data in accordance with Section 8 of this Policy, subject to overriding legal retention obligations.

8 Your Privacy Rights

As a kb222 Player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Privacy Rights Request — [Your Username]". We will acknowledge your request within 5 business days and respond substantively within 30 days.

• Right of Access: You have the right to request a copy of the personal data that kb222 holds about you, including information about how it is used and with whom it is shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For account data, you may also update many fields directly through your account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request that kb222 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where we have no overriding legal basis for continued processing. Note that this right is subject to legal retention requirements — certain financial and KYC records must be kept for a minimum of 5 years regardless of deletion requests.
• Right to Restriction of Processing: You may request that kb222 restrict the processing of your personal data in certain circumstances , for example while a rectification request is being investigated.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) so that you can transfer it to another service provider.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on kb222's legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, or unless processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

9 Third-Party Links and Integrated Services

The kb222 Platform may contain references to or integrations with third-party services — most notably our game content providers (Pragmatic Play, Evolution Gaming, PG Soft, JILI, Spribe, Habanero, Microgaming, Ezugi) and payment processors (bKash, Nagad, Rocket, Upay). While kb222 takes care to work only with reputable partners, we do not control the privacy practices of third-party services and are not responsible for how those parties collect, use, or protect your data.

When you interact with a third-party service integrated into kb222 — such as a live casino game stream delivered by Evolution Gaming, or a payment confirmation page rendered by bKash — that interaction is also governed by the privacy policy of the relevant third party. We encourage you to review the privacy policies of any third-party service you interact with through the kb222 Platform.

10 Children's Privacy and Age Verification

kb222 is strictly an adults-only platform. We do not knowingly collect, store, or process personal data from any individual under the age of 21. Our registration process includes mandatory age verification, and all accounts are subject to KYC checks that confirm a player's date of birth before full access to deposit and betting features is granted.

If kb222 discovers or is notified that an account has been registered by, or personal data has been collected from, an individual under the age of 21, we will:

• Immediately suspend and close the underage account.
• Refund any real-money balance remaining in the account, subject to verification of the payment method.
• Permanently and irreversibly delete all personal data associated with the underage account from our systems, except where retention is required to document the underage access incident for compliance purposes.

If you are a parent or guardian and believe that your child under the age of 21 may have registered an account with kb222, please contact us immediately at [email protected] with the subject line "Underage Account Report". We treat such reports with absolute priority and will investigate and close the reported account within 24 hours of receiving verifiable information.

11 Changes to This Privacy Policy

11.1 Right to Update

kb222 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law or regulation, the introduction of new products or services, or updates to our security measures. The most current version of this Policy will always be available at kb222.io/privacy-policy and will display the "Last Updated" date at the top of this page.

11.2 Notification of Material Changes

Where changes to this Policy are material — meaning they significantly affect how we collect, use, or share your personal data or meaningfully alter your privacy rights — kb222 will notify registered Players by email at least 7 days before the updated Policy takes effect. A notice will also be displayed prominently on the Platform's homepage for a minimum of 14 days following the publication of any material update.

11.3 Continued Use as Acceptance

Your continued use of the kb222 Platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of and agreement to the revised terms. If you do not agree with any material change to this Policy, you should cease using the Platform and may request account closure and data deletion in accordance with Section 8 of this Policy.

12 Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or to kb222's handling of your personal data, please reach out to our dedicated privacy support team using the details below. We are committed to responding to all privacy-related enquiries promptly and thoroughly.