kxy8 Privacy
Policy

1 Data We Collect

When you register for and use the kxy8 platform, we collect personal data across several categories. The type of data collected depends on the nature of your interaction with the platform — some data is provided directly by you during registration and gameplay, while other data is gathered automatically through your use of the site.

Data You Provide Directly

During registration and ongoing account management, kxy8 collects the following categories of personal information:

Data Category	Examples	Purpose
Identity Data	Full legal name, date of birth, gender, nationality, photograph (where required for KYC)	Account verification and age compliance
Contact Data	Email address, mobile phone number, residential address	Account communication, support, and regulatory obligations
Financial Data	bKash/Nagad/Rocket mobile banking numbers, bank account details, Visa/Mastercard details (masked)	Processing deposits and withdrawals in BDT (৳)
Verification Documents	National ID card, passport, driving licence, utility bills	KYC identity and address verification
Account Credentials	Username, hashed password	Secure account access

Data Collected Automatically

When you access the kxy8 platform — whether via desktop browser or mobile device in Dhaka, Chittagong, Sylhet, or elsewhere in Bangladesh — we automatically collect certain technical data:

• Device and Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage Data: Pages visited, games played, bet amounts and outcomes, session duration, login and logout timestamps, and navigation paths through the site.
• Location Data: General geographic location derived from your IP address (city-level, not precise GPS location).
• Communications Data: Records of live chat conversations and email correspondence with kxy8 support agents.

2 How We Use Your Data

kxy8 processes personal data only where a valid legal basis exists. We rely on the following legal bases for processing, depending on the specific purpose:

• Performance of a contract — processing necessary to provide the gaming and betting services you have signed up to receive.
• Legal obligation — processing required to comply with applicable anti-money laundering obligations and age verification requirements.
• Legitimate interests — processing that is necessary for the legitimate operational and security interests of kxy8, provided those interests are not overridden by your fundamental rights.
• Consent — for marketing communications and non-essential cookies, where your express consent has been obtained.

Specific Purposes of Processing

Your personal data may be used for the following specific purposes:

• Creating, maintaining, and managing your kxy8 player account.
• Verifying your identity and age as part of the KYC process, including verifying that you are 18 years of age or older as required by kxy8's responsible gaming policy.
• Processing deposits made via bKash, Nagad, Rocket, Upay, and card payments, and processing withdrawal requests back to the player's registered payment method.
• Delivering the casino games, sports betting markets, and promotional offers available through the platform.
• Detecting, investigating, and preventing fraud, money laundering, bonus abuse, and other prohibited activities as defined in the kxy8 Terms & Conditions.
• Providing responsive 24/7 customer support via live chat and email.
• Sending transactional communications such as account registration confirmations, deposit receipts, withdrawal notifications, and security alerts.
• Sending promotional communications about kxy8 bonuses, seasonal offers, and new game releases — but only where you have opted in to receive such communications and have not subsequently unsubscribed.
• Analysing platform usage patterns to improve the user experience, optimise the game lobby, and develop new features.
• Complying with all applicable legal obligations including anti-money laundering reporting requirements.

3 Data Sharing & Third Parties

kxy8 does not sell, rent, or trade your personal data to any third party for that party's own marketing or commercial purposes. Personal data is shared with third parties only in the following defined circumstances, and only to the minimum extent necessary:

Service Providers and Technology Partners

kxy8 works with carefully selected third-party service providers who process personal data on our behalf, strictly in accordance with our instructions and under data processing agreements that impose equivalent data protection obligations. These partners include:

• Payment processors facilitating bKash, Nagad, Rocket, Upay, and card transactions within Bangladesh. These providers receive the financial data necessary to authorise and complete transactions.
• Game content providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe. These providers receive session tokens and gameplay data necessary to load and operate their games within the kxy8 environment. They do not receive your full identity data.
• KYC and identity verification technology providers who assist with document verification and fraud detection.
• Customer support platform providers who power the live chat infrastructure used by kxy8's support team.
• Cloud hosting and infrastructure providers on whose servers kxy8 platform data is stored and processed.

Legal and Regulatory Disclosure

kxy8 may be required to disclose personal data to law enforcement agencies, regulatory bodies, or other authorised public authorities where required by applicable law, court order, or where disclosure is necessary to protect the safety and rights of kxy8, its players, or the general public. In such cases, kxy8 will disclose only the minimum data required and, where legally permissible, will notify the affected player of the disclosure.

Business Transfers

In the event that kxy8 is involved in a merger, acquisition, or sale of all or a portion of its business assets, player personal data may be transferred as part of that transaction. Where such a transfer occurs, kxy8 will ensure that the receiving entity is bound by privacy obligations equivalent to those set out in this Privacy Policy, and registered players will be notified of the change of data controller in advance.

4 Cookies & Tracking

The kxy8 website uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and — where you have consented — to analyse site usage and deliver relevant promotional content.

What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit, such as your preferred language, login session status, and previously viewed pages. Cookies can be session-based (deleted when you close your browser) or persistent (retained for a set period).

Categories of Cookies Used by kxy8

Cookie Type	Purpose	Required?
Strictly Necessary	Session management, authentication, security tokens, load balancing	Yes — cannot be disabled
Functional	Remembering your login, language preference, and display settings	Recommended
Analytics	Understanding how users navigate the platform, identifying popular games and pages (anonymised data)	Optional — requires consent
Marketing	Delivering relevant bonus offers and promotions based on your browsing behaviour	Optional — requires consent

You may manage or withdraw your consent to non-essential cookies at any time through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling certain cookies may affect the functionality of the kxy8 platform — in particular, strictly necessary cookies must remain active for the site to operate correctly.

5 Data Retention

kxy8 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to maintain an active player account, and to comply with applicable legal and regulatory obligations. The following retention periods apply:

• Active account data (identity, contact, financial, and gameplay records): retained for the duration of your active account relationship with kxy8.
• Transaction and financial records: retained for a minimum of five (5) years from the date of the transaction, in compliance with applicable anti-money laundering record-keeping requirements.
• KYC verification documents: retained for a minimum of five (5) years from the date of account closure or the date of the last transaction, whichever is later.
• Customer support records (live chat transcripts, emails): retained for three (3) years from the date of the interaction.
• Marketing preferences and consent records: retained for as long as you have an active account and for three (3) years thereafter as evidence of consent status.
• Closed account data: following account closure, data that is not subject to a legal retention obligation will be deleted or anonymised within twelve (12) months.

Where personal data is retained beyond the period of active account use solely to comply with a legal obligation, that data is held in restricted storage and is not used for any other purpose.

6 Your Privacy Rights

As a player on the kxy8 platform, you hold the following rights in relation to your personal data. You may exercise any of these rights at any time by contacting our support team via the 24/7 live chat or by emailing [email protected].

• Right of Access: You have the right to request a copy of the personal data that kxy8 holds about you, together with information about how it is being used and with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You can also update many details directly from within your account dashboard.
• Right to Erasure ("Right to be Forgotten"): You may request that kxy8 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing), or where you object to processing based on legitimate interests. This right is subject to overriding legal obligations — kxy8 may be required to retain certain data for regulatory compliance purposes even after an erasure request.
• Right to Restriction of Processing: In certain circumstances, you may request that kxy8 restrict its processing of your personal data — for example, while an accuracy dispute is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contract, you have the right to receive a copy of the personal data you provided to kxy8 in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object at any time to processing of your personal data for direct marketing purposes, including profiling for marketing. You may also object to processing based on legitimate interests on grounds relating to your particular situation.
• Right to Withdraw Consent: Where kxy8 relies on your consent as the legal basis for processing (such as for marketing communications or non-essential cookies), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.

7 Data Security

kxy8 takes the security of your personal data seriously and has implemented a layered set of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, disclosure, alteration, and destruction.

Technical Safeguards

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or mobile device and the kxy8 servers is encrypted in transit using industry-standard 256-bit SSL/TLS protocols. The padlock icon in your browser address bar confirms this encryption is active during every session.
• Password Hashing: Player passwords are never stored in plain text. They are processed using a one-way cryptographic hashing algorithm with individual salts, meaning that even in the event of a data breach, stored passwords cannot be reversed.
• Access Controls: Access to personal data within kxy8's internal systems is restricted on a strict need-to-know basis. Staff accounts are subject to role-based access permissions, multi-factor authentication, and regular access audits.
• Secure Payment Processing: Financial transactions via bKash, Nagad, Rocket, Upay, Visa, and Mastercard are processed through payment gateways that operate under their own rigorous security standards. kxy8 does not store full card numbers or mobile banking PINs on its own servers.
• Intrusion Detection and Monitoring: kxy8 operates continuous monitoring systems designed to detect and respond to unusual access patterns, potential intrusion attempts, and other security anomalies in real time.

Organisational Safeguards

• All kxy8 personnel who handle personal data receive mandatory data protection training and are bound by confidentiality obligations.
• Third-party service providers who process personal data on behalf of kxy8 are assessed for security compliance before engagement and are required to maintain equivalent security standards under contractual data processing agreements.
• kxy8 maintains an incident response plan to ensure that any personal data breach is identified, contained, and reported promptly.

Despite these measures, no online platform can guarantee absolute security against all threats. In the unlikely event of a data breach that poses a risk to your personal data, kxy8 will notify affected players promptly and will take all reasonable steps to mitigate any harm.

8 Policy Updates & Contact

kxy8 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, the services we offer, or applicable legal requirements. The "Effective Date" at the top of this document indicates when the current version of the Policy came into force.

Where changes to this Privacy Policy are material — meaning they significantly affect your rights or the way we process your data — kxy8 will provide advance notice via the registered email address on your account and through a prominent notice on the platform, at least 14 days before the changes take effect. Continued use of the kxy8 platform after the effective date of any revision constitutes your acceptance of the updated Privacy Policy.

For any questions, concerns, or requests relating to this Privacy Policy or the way kxy8 handles your personal data, you may contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly within your kxy8 account dashboard. Average response time is 2–5 minutes.
• Email: [email protected] — plain text only, not a clickable link. Please include "Privacy Request" in your subject line for faster routing.

kxy8 is committed to resolving all privacy-related enquiries fairly, promptly, and in accordance with the principles set out in this Policy. If you are not satisfied with our response, you retain the right to escalate your concern to the relevant data protection authority in your jurisdiction.