Privacy Policy of ka999

Introduction

ka999 is committed to protecting the privacy of every individual who interacts with our platform. We recognise that when you share personal information with us — whether during registration, while making a deposit via bKash or Nagad, or when contacting our support team — you are placing trust in us. This Policy exists to explain precisely how that trust is honoured.

This Privacy Policy applies to all personal data processed by ka999 in connection with the operation of the ka999 platform at ka999.io, including data collected through desktop browsers, mobile browsers, and any associated communications channels such as email and live chat. It applies to registered players, prospective players who have begun but not completed registration, and visitors who browse the platform without registering.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which contain additional provisions that interact with how we process your personal data.

Data Controller

For the purposes of data protection law, ka999 acts as the data controller in respect of personal data collected through the ka999 platform. As data controller, ka999 determines the purposes for which and the means by which personal data is processed.

Where ka999 engages third-party service providers to process data on our behalf — such as KYC verification providers, payment processors, or game studios — those parties act as data processors under written agreements that prohibit them from using your data for any purpose other than delivering the contracted service.

If you have any questions about how ka999 processes your personal data, or wish to exercise any of your rights under this Policy, you may contact the ka999 data team via email at [email protected] with the subject line "Privacy Enquiry".

Data We Collect

ka999 collects personal data in the following categories. We only collect information that is proportionate to the purpose for which it is needed.

How We Collect Data

ka999 collects personal data through the following means:

• Direct submission: Information you provide when completing the ka999 registration form, submitting KYC documents, making a deposit or withdrawal, or contacting the support team.
• Automated collection: Technical data collected automatically when you browse or interact with the platform, including IP address, device identifiers, session data, and cookie data (see Section 10).
• Payment partners: Transaction confirmation data provided by mobile wallet operators (bKash, Nagad, Rocket, Upay) and bank partners (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank) when you initiate a deposit or withdrawal.
• KYC and fraud screening providers: Identity verification results returned by our contracted KYC service provider after you submit identity documents.
• Game providers: Session and outcome data from certified game studios including Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Spribe, and Ezugi, which is generated when you play their games on the ka999 platform.

ka999 does not purchase personal data from data brokers, social media platforms, or any other commercial data source.

Legal Basis for Processing

ka999 processes your personal data on the following legal grounds, depending on the nature of the processing activity:

• Contractual necessity: Processing that is required to perform the contract between you and ka999 — specifically, to operate your account, process your bets and transactions, and provide customer support. Without this processing, we cannot deliver the service.
• Legal obligation: Processing required for ka999 to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements, identity verification, and the retention of financial transaction records.
• Legitimate interests: Processing carried out for the legitimate interests of ka999 or third parties, provided those interests are not overridden by your own rights and interests. This includes fraud prevention, platform security, responsible gaming monitoring, and product improvement through aggregated analytics.
• Consent: Processing for which you have provided explicit, informed consent — primarily marketing communications (email and SMS promotions). You may withdraw this consent at any time without affecting the lawfulness of prior processing.

How We Use Your Data

ka999 uses the personal data we collect for the following specific purposes:

• Creating and managing your ka999 player account, including verifying your age (21+ requirement) and identity during registration and KYC review.
• Processing deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, and partner banks, and maintaining accurate financial records of all transactions.
• Operating the responsible gaming tools available to you — including deposit limits, session reminders, cool-off periods, and self-exclusion — which require access to your behavioural and financial data to function correctly.
• Monitoring betting and gaming activity to detect prohibited conduct as defined in our Terms & Conditions, including the use of automated betting software, collusion, and bonus abuse.
• Conducting anti-money laundering screening and reporting to competent authorities where legally required.
• Sending transactional communications essential to your account, such as deposit confirmations, withdrawal status updates, and security alerts. These communications are not marketing and cannot be opted out of while your account remains active.
• Sending promotional communications (bonus offers, seasonal promotions tied to BPL, IPL, T20 World Cup, Eid, and other events) where you have opted in to receive them. You may opt out at any time.
• Improving the ka999 platform through aggregated, anonymised analysis of player behaviour. No individual player is identifiable from this analysis.
• Responding to support enquiries, complaints, and formal dispute submissions in accordance with our Terms & Conditions.

Third-Party Disclosure

ka999 does not sell, rent, or otherwise transfer your personal data to third parties for their own marketing or commercial purposes. Your data is shared with third parties only in the following strictly defined circumstances:

• Payment processors and banking partners: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other payment partners receive the minimum data required to process your deposit or withdrawal transaction.
• KYC and identity verification providers: Contracted providers receive your identity documents for the sole purpose of returning a verification result to ka999. They are contractually prohibited from retaining or using your data for any other purpose.
• Game studios and content providers: Providers including Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Spribe, and Ezugi receive session data necessary to serve game content and resolve game-round disputes.
• Fraud prevention and security services: Contracted providers that screen transactions and login events for fraud signals. Data shared is limited to the technical and financial data required for screening.
• Legal and regulatory authorities: ka999 may be required by law to disclose personal data to law enforcement agencies, courts, regulators, or other government bodies. In such cases, disclosure is made to the minimum extent required by the applicable legal obligation.
• Business transfers: In the event of a merger, acquisition, or sale of ka999's business or assets, player data may be transferred to the acquiring entity, which will be required to honour the commitments made in this Privacy Policy.

International Data Transfers

Some of ka999's service providers — in particular, certain game studios and cloud infrastructure providers — are located outside Bangladesh. When personal data is transferred to these providers, ka999 ensures that appropriate safeguards are in place to protect the data to a standard equivalent to the protections afforded under this Policy.

Safeguards used by ka999 for international transfers include:

• Contractual clauses in data processing agreements that impose data protection obligations on the receiving party.
• Transferring only the minimum data necessary for the specific purpose of the transfer.
• Conducting due diligence on the data protection practices of receiving parties before entering into any data processing relationship.

If you would like more information about the safeguards in place for any specific international transfer, please contact the ka999 data team at [email protected] with the subject line "International Transfer Enquiry".

Data Retention

ka999 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your account and for a minimum of 5 years following account closure, in order to comply with anti-money laundering record-keeping obligations.
• Financial transaction records: Retained for a minimum of 5 years from the date of the transaction, consistent with standard financial record-keeping requirements.
• KYC documents: Retained for the duration of your account and for 5 years following account closure.
• Support and communications data: Retained for 3 years from the date of the interaction, or longer where the interaction relates to an ongoing dispute or legal matter.
• Behavioural and session data: Retained in identifiable form for 2 years, after which it is anonymised and may be retained indefinitely for aggregated analytics purposes.
• Marketing preference records: Retained for the duration of your account plus 3 years, to demonstrate consent or opt-out choices in the event of a complaint.

Once the applicable retention period has expired, personal data is securely deleted or irreversibly anonymised. Where data is required for an ongoing investigation, dispute, or legal proceeding, retention is extended until the matter is fully resolved.

Cookies & Tracking

ka999 uses cookies and similar technologies to operate the platform securely and to deliver a consistent user experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential to the operation of the platform. These cookies maintain your login session, protect against cross-site request forgery (CSRF), and enable core platform functionality such as account balance display and bet placement. These cookies cannot be disabled without breaking the platform.
• Functional Cookies: Used to remember your preferences, such as your selected language and display settings, so that you do not need to reconfigure them on each visit. These cookies do not track your activity across other websites.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate the platform, which pages receive the most traffic, and where technical errors occur. This data is used solely to improve platform performance and is not linked to individual player profiles.

You may control cookie settings through your browser's privacy settings. Disabling strictly necessary cookies will prevent you from logging in and using the platform. Disabling functional and analytics cookies will not prevent you from using the platform but may reduce the quality of your experience.

Data Security

ka999 implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data we process. These measures are reviewed and updated on a regular basis in response to evolving security threats.

Key security measures in place include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your browser or device and the ka999 platform servers, protecting your login credentials, payment data, and personal information in transit.
• Encrypted storage of sensitive data fields, including payment method details and identity document information, at rest on ka999's servers.
• Access controls limiting staff access to personal data on a strict need-to-know basis. All staff access to player data is logged and subject to periodic audit.
• Two-factor authentication (2FA) available to players to add an additional layer of security to their ka999 account login.
• Automated fraud and anomaly detection monitoring login patterns, device changes, and transaction behaviour to identify and flag suspicious activity.
• Regular security assessments to identify and address vulnerabilities in the platform infrastructure before they can be exploited.

Despite these measures, no security system is entirely impenetrable. In the unlikely event of a personal data breach that is likely to result in a risk to your rights and freedoms, ka999 will notify affected players as promptly as practicable and will take immediate steps to contain and remediate the breach.

Your Privacy Rights

As a player on the ka999 platform, you hold the following rights in relation to the personal data we process about you. To exercise any of these rights, contact the ka999 support team at [email protected] with the subject line "Privacy Rights Request". We will respond within 30 calendar days of receiving your request.

• Right of Access: You may request a copy of the personal data ka999 holds about you, together with information about how it is used and with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may ask us to correct it. Account details such as your registered email address can be updated through account settings; other corrections should be requested through the support team.
• Right to Erasure: You may ask us to delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent and no other legal basis exists, or where the data has been unlawfully processed. This right is subject to overriding legal obligations — for example, transaction records that must be retained for AML compliance cannot be deleted upon request.
• Right to Restriction: You may ask us to restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested or while a complaint is under investigation.
• Right to Data Portability: You may request a copy of the personal data you have provided to ka999 in a structured, commonly used, machine-readable format (such as CSV), where technically feasible and where the processing is based on your consent or on a contract.
• Right to Object: You may object to the processing of your personal data on the basis of legitimate interests. We will stop such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (primarily marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Children & Minors

The ka999 platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from any person under the age of 21. The registration process includes an age declaration, and ka999 reserves the right to request proof of age documentation at any point during the account lifecycle.

If ka999 discovers that personal data has been collected from a person under the age of 21, we will immediately suspend the associated account, delete the data as promptly as possible consistent with our legal obligations, and take appropriate steps to prevent further access.

If you are a parent or guardian and believe that a minor in your care has registered an account on ka999, please contact the support team immediately at [email protected]. We will prioritise your report and act without delay.

Parents and guardians are strongly encouraged to install parental control software on devices accessible to minors to prevent access to online gambling platforms.

Marketing Communications

ka999 may send you promotional communications — including bonus offers, tournament promotions tied to BPL, IPL, T20 World Cup, and seasonal events such as Eid and Pohela Boishakh — by email or SMS, but only where you have opted in to receive them during registration or through your account settings.

Marketing communications will always:

• Clearly identify ka999 as the sender.
• Contain accurate information about the promotion being advertised, including any wagering requirements or time limits.
• Include a clear and easy method to opt out of future communications (typically an unsubscribe link in emails).
• Comply with applicable rules on responsible gambling marketing — in particular, we will not send promotional messages to players who have applied a self-exclusion or cool-off period to their account.

You may withdraw your consent to marketing communications at any time by clicking the unsubscribe link in any marketing email, by adjusting your communication preferences in your account settings, or by contacting the support team. Opt-out requests are processed within 5 business days.

Changes to This Policy

ka999 reserves the right to update or revise this Privacy Policy at any time. Where changes are material — meaning they substantively affect your rights or the way we process your personal data — we will notify registered players by email at least 14 calendar days before the revised Policy takes effect.

For minor or administrative changes (such as corrections to contact details, formatting updates, or clarifications that do not alter the substance of any provision), ka999 may update the Policy without prior notice, with changes taking effect upon publication on the platform.

The effective date displayed at the top of this document will be updated each time a new version is published. We encourage you to review this Policy periodically so that you remain informed about how your data is being protected. Your continued use of the ka999 platform after any revised Policy takes effect constitutes your acceptance of the updated terms.

Previous versions of this Privacy Policy are available upon request by contacting [email protected] with the subject line "Previous Privacy Policy Version".

Contact & Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or about the way ka999 handles your personal data, please contact us using the details below:

• Email: [email protected] — use the subject line "Privacy Enquiry" for the fastest response.
• Response time: We aim to acknowledge all privacy-related enquiries within 2 business days and to provide a substantive response within 30 calendar days.
• Support hours: 24 hours a day, 7 days a week, in English.

If you are not satisfied with ka999's response to your complaint, or if you believe that ka999 is processing your personal data in a manner that is inconsistent with applicable data protection principles, you have the right to escalate your complaint to a relevant supervisory or consumer protection authority in your jurisdiction.