kx80 Privacy Policy

Introduction

kx80 ("we", "us", "our") is committed to protecting the privacy and personal data of all players who use the kx80 platform at kx80.io. This Privacy Policy explains what personal information kx80 collects, the purposes for which it is used, how it is stored and protected, and the rights available to you as a data subject.

This policy applies to all users of the kx80 platform, including registered account holders, visitors browsing the site without an account, and individuals who contact kx80 via support channels. It covers all data collected through the kx80 website, any associated mobile-optimised interface, and any communication channels operated by kx80.

kx80 operates its platform for and markets its services primarily to players based in Bangladesh. This Privacy Policy is written in English and governs the processing of personal data in connection with the kx80 service. It should be read alongside the kx80 Terms & Conditions and Responsible Gaming policy, both of which are incorporated herein by reference.

Data We Collect

kx80 collects personal data in several ways: directly from you when you register an account or contact support; automatically when you use the platform; and from third-party partners where necessary to verify your identity or process payments.

2.1 Registration & Account Data

When you create a kx80 account, we collect:

• Full legal name
• Date of birth (to verify you are aged 21 or above)
• Residential address (city, district, division within Bangladesh)
• Mobile number registered with your bKash, Nagad, Rocket, or Upay account
• Email address
• Username and hashed password

2.2 Identity Verification (KYC) Data

As part of the kx80 Know Your Customer (KYC) process, we may collect copies of:

• National Identity Card (NID) issued by the Bangladesh Election Commission
• Valid Bangladeshi passport (photo data page)
• Proof of address documents (utility bill, bank statement dated within 90 days)
• Screenshots or confirmation of mobile wallet accounts used for deposits

2.3 Financial & Transaction Data

For each deposit and withdrawal transaction processed through kx80, we record:

• Transaction amount (in BDT)
• Payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard)
• Transaction reference number and timestamp
• Account balance before and after the transaction

kx80 does not store full card numbers, CVV codes, or full mobile wallet PINs. Payment card data is tokenised by our payment processing partners.

2.4 Gameplay & Betting Data

kx80 records all betting and gaming activity associated with your account, including sports bets placed (markets, odds, stakes, outcomes), casino game sessions (game title, provider, session duration, results), bonus usage, and wagering progress toward bonus requirements. This data is used to manage your account, detect suspicious activity, and support responsible gaming interventions.

2.5 Technical & Usage Data

When you access the kx80 platform, our servers automatically collect:

• IP address and approximate geographic location (city/district level)
• Device type, operating system, and browser version
• Pages visited, features used, and time spent on the platform
• Referral source (how you found the kx80 website)
• Session identifiers and cookie data (see Section 6)

2.6 Communications Data

If you contact kx80 via live chat, email, or any other support channel, we retain records of those communications including the content of messages, timestamps, and any attachments you provide. This helps us resolve disputes, improve support quality, and meet our compliance obligations.

How We Use Your Data

kx80 uses the personal data it collects for the following purposes:

kx80 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review. If any automated processing forms part of a significant decision (for example, detecting and actioning a suspected duplicate account), a member of the kx80 compliance team will review the case before any action is taken.

Legal Basis for Processing

kx80 processes your personal data on the following legal grounds:

• Contractual necessity: Processing your registration data, KYC documents, and transaction records is necessary to provide the kx80 service under our Terms & Conditions.
• Legitimate interests: kx80 has a legitimate interest in detecting fraud, preventing money laundering, securing the platform, and improving the quality of its services. These interests are balanced against your privacy rights.
• Legal obligation: kx80 may be required to process and retain certain data to comply with applicable anti-money-laundering obligations, financial regulations, or requests from law enforcement authorities.
• Consent: Where kx80 relies on your consent (for example, to send marketing communications), you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Data Sharing & Disclosure

kx80 does not sell, rent, or lease your personal data to any third party for their own marketing or commercial purposes. We share personal data only in the following limited circumstances:

5.1 Payment Processors

To process deposits and withdrawals, kx80 shares necessary transaction data with our payment processing partners including bKash, Nagad, Rocket, Upay, and card scheme operators Visa and Mastercard. These partners receive only the minimum data required to complete your transaction and are bound by their own privacy and security obligations.

5.2 Game Studios & Platform Providers

Third-party game providers including Pragmatic Play, Evolution Gaming, Ezugi, Microgaming, NetEnt, and Spribe receive session identifiers and game-round data necessary to deliver their games within the kx80 platform. These providers do not receive your full name, NID, or payment details unless required for regulatory compliance under their own licensing obligations.

5.3 Legal & Regulatory Authorities

kx80 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required by applicable law, a valid court order, or where kx80 reasonably believes disclosure is necessary to prevent fraud, money laundering, or other criminal activity. kx80 will notify affected users of such disclosure where it is legally permitted to do so.

5.4 Business Transfers

In the event that kx80 undergoes a merger, acquisition, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified in advance of any such transfer and of any changes to this Privacy Policy that may result.

Cookies & Tracking Technologies

kx80 uses cookies and similar tracking technologies on the kx80 platform. A cookie is a small text file placed on your device when you visit a website. Cookies enable the platform to recognise your device on return visits and to store certain preferences or session information.

6.1 Types of Cookies Used

• Strictly necessary cookies: Required for the platform to function. These include session cookies that keep you logged in, security tokens that protect your account, and cookies that remember your language preferences. These cannot be disabled without breaking core platform functionality.
• Analytics cookies: Used to understand how players navigate and use the kx80 platform. Data collected through analytics cookies is aggregated and anonymised where possible. We use this information to identify popular features, diagnose technical issues, and plan platform improvements.
• Functional cookies: Store your optional preferences such as preferred deposit method, odds display format, and notification settings. Disabling these cookies will not prevent you from using kx80, but certain personalisation features may not work as expected.
• Fraud prevention cookies: Help kx80 identify unusual activity patterns that may indicate bot access, account sharing, or other security threats. These operate silently in the background and are essential to platform security.

6.2 Managing Cookies

You can control the use of non-essential cookies through your browser settings. Most modern browsers allow you to block, delete, or be notified about cookies. Please note that blocking strictly necessary cookies will prevent the kx80 platform from functioning correctly. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

Data Retention

kx80 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data: Retained for the full duration of your registered account with kx80, plus a minimum period of five years after account closure to meet anti-money-laundering record-keeping requirements.
• KYC documents: Retained for a minimum of five years following the end of your relationship with kx80, as required by financial compliance obligations.
• Transaction records: Retained for a minimum of seven years from the date of each transaction.
• Support communications: Retained for three years from the date of the last communication, unless a longer period is required to resolve an open dispute.
• Analytics data: Retained in anonymised or aggregated form; individual-level session data is deleted within 13 months.

When data is no longer required, kx80 will securely delete or anonymise it in accordance with our internal data destruction procedures.

Data Security

kx80 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, alteration, disclosure, or destruction.

• Encryption in transit: All data transmitted between your device and the kx80 servers is encrypted using 256-bit SSL/TLS encryption. You can verify this by checking for the padlock icon in your browser's address bar when accessing kx80.io.
• Encryption at rest: Sensitive personal data including KYC documents and payment details are encrypted at rest in kx80's secure server environment.
• Password security: Account passwords are stored using a one-way cryptographic hashing algorithm. kx80 staff cannot see your password in plain text. You will never be asked for your password by a kx80 support agent.
• Access controls: Access to player data is restricted to authorised kx80 personnel only, based on the principle of least privilege. All data access is logged and monitored.
• Incident response: kx80 maintains a documented data breach response procedure. In the event of a security incident that poses a risk to your rights, kx80 will notify affected players promptly.

While kx80 employs industry-standard security measures, no system connected to the internet can guarantee absolute security. You are responsible for keeping your own account credentials confidential and for reporting any suspected unauthorised access to [email protected] immediately.

Your Rights

As a kx80 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact the kx80 support team at [email protected] with your registered account details and a clear description of your request.

• Right of access: You may request a copy of the personal data kx80 holds about you. kx80 will respond within 30 days of receiving a valid access request.
• Right to rectification: If any personal data held by kx80 is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic contact details directly in your account settings.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to kx80's legal retention obligations described in Section 7. Note that certain data (particularly KYC and transaction records) cannot be deleted before the mandatory retention period has expired.
• Right to restrict processing: You may ask kx80 to temporarily restrict the processing of your data while a dispute about its accuracy or lawfulness is resolved.
• Right to data portability: Where kx80 processes your data on the basis of your consent or a contract, you may request a copy of your data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where kx80 relies on your consent to process your data (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect processing already carried out.
• Right to object to marketing: You may opt out of receiving marketing communications from kx80 at any time by contacting [email protected] or using the unsubscribe mechanism in any marketing message.

Children & Minors

The kx80 platform is strictly for adults aged 21 and above. kx80 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a minor — whether through a fraudulent registration or otherwise — we will take immediate steps to close the associated account and delete all related personal data.

If you believe that a minor has registered an account with kx80, please contact us immediately at [email protected]. kx80 takes the protection of minors very seriously and cooperates fully with parents, guardians, and relevant authorities on such matters. For further information on protecting young people from gambling harm, please visit our Responsible Gaming page.

International Data Transfers

kx80 operates its platform primarily for players in Bangladesh. Some of kx80's technology and service partners — including certain game studio providers and payment infrastructure providers — may process data in server environments located outside Bangladesh. Where such transfers occur, kx80 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to the protections described in this policy.

These safeguards may include contractual data protection clauses with third-party service providers, limiting the scope of data transferred to the minimum necessary for the service to function, and ensuring that recipient parties are subject to binding security and confidentiality obligations.

Third-Party Links

The kx80 platform may contain links to third-party websites, game provider pages, or payment partner portals. This Privacy Policy applies solely to the kx80 platform at kx80.io and does not extend to any third-party websites or services. kx80 is not responsible for the privacy practices of third-party sites and encourages you to review the privacy policies of any external site you visit.

Links to third-party sites are provided for your convenience only. The inclusion of any link does not constitute an endorsement by kx80 of the linked site or its content. kx80 has no control over and assumes no responsibility for the content, privacy policies, or practices of third-party sites or services.

Policy Updates

kx80 reserves the right to update or modify this Privacy Policy at any time. When we make material changes to this policy, we will notify registered players by email or by posting a prominent notice on the kx80 platform. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

Your continued use of the kx80 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes to this policy, you should stop using the kx80 platform and may request account closure by contacting [email protected].

We recommend reviewing this page periodically to stay informed about how kx80 protects your personal data. Previous versions of this Privacy Policy are available on request by contacting our support team.

Contact & Data Requests

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how kx80 handles your personal data, please contact the kx80 support team using the details below.

All privacy-related enquiries are handled by the kx80 Data Protection team. We aim to acknowledge all requests within 5 business days and to provide a full response within 30 calendar days of receiving a valid, verifiable request.

• Email (plain text — not a link): [email protected]
• Subject line for data requests: "Data Rights Request – [Your Username]"
• Support hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)
• Response language: English

Please include your registered username and the email address associated with your kx80 account in all privacy-related correspondence to help us locate your records promptly and process your request without unnecessary delay.