Your Privacy Matters
to kbbd

1. Introduction

This Privacy Policy (the "Policy") is issued by kbbd (the "Platform", "we", "us", or "our"), the operator of the online casino and sports betting platform accessible at https://kbbd.io. This Policy applies to all visitors, registered players, and any other individuals (collectively "you" or "User") who interact with the kbbd website, mobile interface, support channels, or any other kbbd service.

kbbd is committed to handling your personal data with the highest standards of care, transparency, and security. This Policy sets out in clear and accessible terms what personal information we collect, the purposes for which it is processed, the parties with whom it may be shared, the security measures we employ to protect it, and the rights available to you as a data subject.

This Policy is to be read alongside kbbd's Terms & Conditions, which govern the contractual relationship between kbbd and each registered player. In the event of any conflict between this Policy and the Terms & Conditions, the Terms & Conditions shall prevail to the extent of the inconsistency, except where data protection rights are expressly provided for in this Policy.

2. Data Controller

kbbd acts as the data controller in respect of all personal information collected from players and website visitors. As data controller, kbbd determines the purposes for which personal data is collected and the means by which it is processed. All enquiries relating to the processing of your personal data should be directed to the kbbd data support team via the contact details provided in Section 15 of this Policy.

Where kbbd engages third-party service providers to process personal data on its behalf — for example, payment gateway operators, game software providers, or KYC verification partners — those providers act as data processors under instruction from kbbd and are contractually bound to process data only for the specific purpose for which they were engaged and in accordance with appropriate security standards.

3. Data We Collect

3.1 Registration & Account Data

When you create a kbbd account, we collect the following categories of personal data:

• Full legal name (as it appears on your government-issued identification document)
• Date of birth (for age verification — 21+ requirement)
• Bangladesh National ID Card (NID) number or other accepted government-issued ID reference
• Mobile phone number (used for account verification and MFS payment matching)
• Email address (for account correspondence and notifications)
• Residential address (city and district within Bangladesh)
• Username and encrypted password

3.2 Payment & Transaction Data

In order to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and BRAC Bank, kbbd collects and retains transaction-level data, including:

• Mobile Financial Service (MFS) account numbers used for deposit and withdrawal
• Bank account details (where bank transfers are selected)
• Transaction reference numbers provided by your MFS or banking provider
• Deposit and withdrawal amounts in Bangladeshi Taka (৳)
• Transaction timestamps in Bangladesh Standard Time (BST, UTC+6)
• Transaction status logs (pending, completed, failed, reversed)

3.3 Identity Verification (KYC) Data

As part of our mandatory Know Your Customer process, kbbd collects copies or photographs of government-issued identification documents, which may include your Bangladesh National ID Card (NID), passport, or driving licence. These documents are processed solely for the purposes of age and identity verification. KYC document images are stored in encrypted form and are not shared with any party other than authorised KYC verification partners.

3.4 Gaming & Behavioural Data

kbbd automatically records data generated by your use of the platform, including:

• Game session logs (game title, bet amount, result, session duration)
• Sports betting history (market, selection, odds, stake, outcome)
• Bonus activation, wagering progress, and redemption records
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion records)
• Login timestamps and session activity logs

3.5 Technical & Device Data

When you access the kbbd platform, our servers and analytics tools automatically record certain technical information:

• IP address and approximate geographic location (country/city level)
• Device type, operating system, and browser version
• Screen resolution and device language settings
• Pages visited, clickstream data, and session duration
• Referring URL (the webpage from which you navigated to kbbd)

3.6 Communications Data

When you contact kbbd's support team via live chat, email, or any other channel, we retain records of that communication — including the content of messages, the date and time of contact, and the resolution outcome. These records are maintained for quality assurance, dispute resolution, and regulatory compliance purposes.

4. How We Collect Data

kbbd collects personal data through the following means:

• Directly from you — when you complete the registration form, submit KYC documents, make a deposit or withdrawal request, fill in account settings, or contact our support team.
• Automatically via the platform — through server logs, cookies, and analytics tools that record your interaction with the website and games.
• From payment service providers — transaction confirmation data received from bKash, Nagad, Rocket, Upay, and banking partners when you initiate a deposit or withdrawal.
• From KYC verification partners — data returned by our authorised KYC processing partners confirming the validity and authenticity of identity documents you submit.
• From game providers — session and outcome data fed back from game server logs maintained by providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi.

5. Legal Basis for Processing

kbbd processes your personal data on the following legal bases:

Processing Activity	Legal Basis
Account registration and management	Performance of a contract (the Terms & Conditions)
Processing deposits and withdrawals	Performance of a contract
KYC / identity and age verification	Legal obligation; protection of vulnerable persons
Fraud detection and prevention	Legitimate interest; legal obligation
Responsible gaming monitoring	Legitimate interest; legal obligation
Customer support communications	Performance of a contract; legitimate interest
Platform analytics and improvement	Legitimate interest
Promotional communications (opt-in)	Consent
Compliance with legal and regulatory obligations	Legal obligation

6. How We Use Your Data

kbbd uses the personal data it collects for the following specific purposes:

• Account creation and authentication: To establish, verify, and maintain your kbbd player account and to authenticate your identity on each login.
• Payment processing: To facilitate deposits and withdrawals via your chosen MFS or banking channel and to reconcile transaction records accurately.
• Age and identity verification: To confirm that you meet the 21+ age requirement and that your identity matches the registration information provided.
• Game delivery: To deliver casino games, live casino streams, and sports betting markets, and to record game session outcomes for dispute resolution purposes.
• Bonus and promotion management: To track wagering requirement fulfilment, bonus eligibility, and promotional opt-in status.
• Responsible gaming: To monitor play patterns that may indicate problem gambling behaviour and to action responsible gaming tool settings at your request.
• Fraud and abuse prevention: To detect and prevent duplicate accounts, bonus abuse, money laundering, match-fixing, and any other activity that violates our Terms & Conditions.
• Customer support: To investigate and resolve account queries, payment disputes, and technical issues reported via live chat or email.
• Platform improvement: To analyse aggregated usage data that helps us improve game selection, website performance, and the overall player experience.
• Marketing communications (with consent): To send promotional emails or in-platform messages about bonuses, new game launches, and seasonal offers where you have opted in to receive such communications. You may withdraw consent at any time.
• Legal compliance: To fulfil any reporting, record-keeping, or disclosure obligations imposed on kbbd by applicable law.

7. Data Sharing & Disclosure

7.1 Service Providers

kbbd shares personal data with a limited number of third-party service providers who perform specific functions on our behalf. These providers are permitted to use your data only for the defined purpose for which they were engaged and are contractually obligated to maintain appropriate data security standards. Current categories of service provider with whom kbbd shares data include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and BRAC Bank — for deposit and withdrawal processing.
• KYC verification partners: Authorised identity and document verification providers who confirm the authenticity of submitted identification documents.
• Game software providers: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi — who require session-level data to deliver their game products and resolve technical disputes.
• Platform analytics and security providers: Technology partners who provide fraud detection, traffic analytics, and infrastructure security services.

7.2 Legal Disclosure

kbbd may disclose your personal data to law enforcement agencies, courts, regulatory bodies, or other authorised third parties where such disclosure is required by law, court order, or legally binding government directive. In such cases, kbbd will disclose only the minimum data necessary to satisfy the legal requirement and will, where permitted by law, endeavour to notify you of the disclosure.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of kbbd's assets, your personal data may be transferred to the successor entity as part of the transaction. In such circumstances, kbbd will ensure that the receiving entity is bound by privacy obligations at least as protective as those in this Policy, and affected players will be notified of the transfer and of any material changes to how their data is handled.

8. Cookies & Tracking Technologies

8.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. kbbd uses cookies and similar tracking technologies (such as local storage objects and session tokens) to enable essential platform functionality, maintain your login session, remember your preferences, and collect analytics data that helps us improve the platform.

8.2 Types of Cookies Used

Cookie Type	Purpose	Duration
Strictly Necessary	Session management, authentication, security tokens, load balancing	Session / up to 24 hours
Functional	Language preference, game lobby layout settings, responsible gaming tool states	Up to 12 months
Analytics	Aggregated traffic analysis, page performance monitoring, error logging	Up to 13 months
Fraud Prevention	Device fingerprinting and duplicate account detection signals	Up to 12 months

8.3 Managing Cookies

You may configure your browser to block or delete cookies at any time. Please note that disabling strictly necessary cookies will impair your ability to log in and use the kbbd platform, as these cookies are integral to session management and security. Analytics and functional cookies may be disabled without affecting core platform functionality. Browser-level cookie controls are typically available under your browser's Privacy or Settings menu.

9. Data Retention

kbbd retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or for as long as required by applicable legal or regulatory obligations. The following general retention periods apply:

• Account and registration data: Retained for the duration of your active account and for a minimum of five years following permanent account closure, in accordance with anti-money laundering (AML) record-keeping obligations.
• Transaction and payment data: Retained for a minimum of seven years following the date of each transaction, consistent with financial record-keeping requirements.
• KYC documentation: Retained for the duration of the account and for five years following account closure.
• Gaming session logs: Retained for a minimum of three years for dispute resolution and audit purposes.
• Support communications: Retained for a minimum of two years from the date of the final message in each support thread.
• Marketing consent records: Retained for as long as you are subscribed to marketing communications and for one year following opt-out, to evidence the consent record.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original information.

10. Data Security

kbbd implements a multi-layered security framework designed to protect your personal and financial data against unauthorised access, disclosure, alteration, or destruction. Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the kbbd servers.
• Encryption at rest for all sensitive personal data and financial records stored in our databases.
• Access controls: Personal data is accessible only to kbbd staff and authorised service partners who require it for specific operational purposes. Role-based access controls limit staff access to the minimum data necessary for their job function.
• Two-factor authentication (2FA) on all kbbd internal system access points.
• Regular penetration testing and vulnerability assessments conducted by qualified independent security specialists.
• Continuous intrusion detection and monitoring across kbbd's server infrastructure.
• Incident response procedures that define the steps kbbd will take in the event of a confirmed or suspected data security incident.

While kbbd employs substantial security measures, no online platform can guarantee absolute security against all possible threats. You are responsible for maintaining the security of your own login credentials and should notify kbbd immediately if you suspect any unauthorised access to your account.

11. Your Rights

As an individual whose personal data is processed by kbbd, you hold the following rights:

• Right of Access: You may request a copy of all personal data kbbd holds about you. kbbd will provide this information within 30 days of receiving a verified request.
• Right to Rectification: If any personal data held by kbbd is inaccurate or incomplete, you may request that it be corrected. Account details can be updated directly via the account settings dashboard or by contacting support.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw your consent. Note that kbbd is required to retain certain records for minimum legal periods as set out in Section 9, which may delay or limit erasure in specific cases.
• Right to Restriction of Processing: You may request that kbbd restrict the processing of your data in specific circumstances — for example, where you contest the accuracy of the data, while kbbd verifies it.
• Right to Data Portability: You may request that kbbd provide your personal data in a structured, commonly used, machine-readable format for transfer to another data controller.
• Right to Object: You may object to the processing of your personal data where kbbd relies on legitimate interest as its legal basis. You may also withdraw consent for marketing communications at any time.

To exercise any of the above rights, please contact the kbbd support team via live chat or email with your registered username and a description of your request. kbbd will acknowledge receipt within 48 hours and will aim to fulfil verified requests within 30 calendar days. Where a request is complex or involves a large volume of data, kbbd may extend this period by up to a further 30 days, with prior notification.

12. Children & Age Verification

The kbbd platform is strictly for adults aged 21 years or older. kbbd does not knowingly collect, process, or store personal data from any individual under the age of 21. Age verification is enforced through the KYC process required prior to the processing of any withdrawal. Where kbbd has reasonable grounds to believe that a registered account belongs to a person under the age of 21, that account will be immediately suspended, all personal data associated with it will be securely deleted following the completion of any legally mandated retention obligations, and deposited funds will be returned to the originating payment method.

If you are a parent or guardian and believe that your child has registered on the kbbd platform, please contact our support team immediately. We will act on any such report with the highest priority.

13. Third-Party Links

The kbbd website does not contain links to third-party websites for commercial or affiliate purposes. Where game providers' names are referenced within the platform (e.g., Evolution Gaming, Pragmatic Play), these are acknowledged as content and technology partners, not as outbound links to external sites. kbbd accepts no responsibility for the privacy practices of any third-party platform, and this Privacy Policy applies exclusively to data processed by kbbd within the scope of its own Services.

14. Changes to This Privacy Policy

kbbd reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. The effective date at the top of this Policy will be updated whenever material changes are made.

Where changes are material — such as the introduction of a new category of data collection, a new sharing arrangement with a third party, or a significant change to retention periods — kbbd will provide at least 14 days' advance notice to registered players via the email address on file or via a prominent in-platform notification. For non-material changes (such as typographical corrections or clarifications that do not alter the substance of the Policy), kbbd may update the Policy without individual notification.

Your continued use of the kbbd platform following the effective date of any amended Policy constitutes your acceptance of the updated terms. If you do not accept the changes, you must cease using the Services and contact support to arrange account closure before the revised Policy takes effect.

15. Contact Us

For any questions, requests, or concerns relating to this Privacy Policy or kbbd's data processing practices, please contact our support team via live chat, available 24 hours a day, seven days a week directly from the kbbd platform. You may also send a written inquiry to the official kbbd support email address displayed in the footer of this website.

When submitting a data subject rights request, please include your registered kbbd username, the specific right you wish to exercise, and any relevant context to help us process your request efficiently. All data-related requests are handled by kbbd's designated data support staff and are treated with strict confidentiality.