Privacy Policy —
How kkdk Protects Your Data

kkdk ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of all individuals who interact with our online casino and sports betting services at kkdk.io. This Privacy Policy ("Policy") sets out in clear, plain English what personal information we collect, how we process it, the legal basis on which we rely, how long we retain it, who we share it with, and what rights you hold over that information.

This Policy applies to:

• All registered account holders on the kkdk platform, regardless of their country of residence.
• Visitors who browse kkdk.io without a registered account.
• Individuals who contact kkdk via email, live chat, WhatsApp, or any other support channel.
• Individuals who receive marketing communications from kkdk, where they have consented to receive such communications.

This Policy does not apply to third-party websites, apps, or services that may be linked to or from kkdk.io. We are not responsible for the privacy practices of third-party operators, game providers, or payment processors beyond the scope of their data processing agreements with kkdk.

This Policy should be read alongside our Terms & Conditions, available at kkdk.io/terms-conditions, and our Responsible Gaming Policy, available at kkdk.io/responsible-gaming. Together, these documents govern the full scope of your relationship with the kkdk platform.

kkdk collects personal data through several channels: directly from you when you register an account, make a deposit or withdrawal, contact support, or interact with the platform; automatically as you use the platform; and from trusted third-party sources such as payment processors and identity verification services. The categories of personal data we collect are set out in the table below.

We do not collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless specifically required for identity verification purposes and only with your explicit consent where applicable law mandates it.

kkdk uses your personal data for specific, documented purposes only. We do not use your data for any purpose that is incompatible with the purposes described in this section. The primary purposes for which we process personal data are as follows:

• Account Registration & Management: To create and administer your kkdk player account, verify your identity and age (21+), and maintain accurate account records.
• Service Delivery: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and Bangladesh bank transfer channels; to facilitate access to sports betting, live casino, slots, and other platform features.
• KYC & Age Verification: To comply with our know-your-customer obligations by verifying that you are who you say you are, that you are at least 21 years old, and that you are eligible to use the platform.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, money laundering, bonus abuse, multi-accounting, and other prohibited conduct as described in our Terms & Conditions.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and maintain records of your support interactions for quality assurance and training purposes.
• Legal & Regulatory Compliance: To fulfil our obligations under applicable anti-money laundering (AML) regulations, to respond to lawful requests from law enforcement and regulatory authorities, and to maintain financial records as required by law.
• Responsible Gaming: To monitor your gambling behaviour for signs of potential problem gambling, to apply self-exclusion and deposit limit settings you have activated, and to provide you with responsible gaming communications where appropriate.
• Platform Improvement: To analyse usage patterns, improve platform performance, personalise your experience, and develop new features and game offerings based on aggregate player behaviour data.
• Marketing Communications: Where you have provided explicit consent, to send you promotional offers, bonus notifications, tournament announcements, and other marketing materials relevant to your interests. See Clause 11 for full details on marketing and how to opt out.

Every instance of personal data processing at kkdk is underpinned by a valid legal basis. The legal bases we rely upon are as follows, mapped to the processing purposes described in Clause 3:

• Contractual Necessity: Processing required to perform the contract between you and kkdk — including account registration, payment processing, game access, and withdrawal delivery. Without this processing, we cannot provide the services you have signed up for.
• Legal Obligation: Processing required to comply with our legal and regulatory obligations, including AML checks, KYC identity verification, record-keeping for financial compliance, and responding to lawful authority requests.
• Legitimate Interests: Processing undertaken for our legitimate business interests where those interests are not overridden by your rights and freedoms. This includes fraud prevention, security monitoring, platform analytics, responsible gaming monitoring, and customer support quality assurance.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent. This basis applies primarily to marketing communications. You may withdraw consent at any time without detriment to your account status — see Clause 11.

kkdk does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We share personal data with third parties only in the following circumstances, and only to the minimum extent necessary:

• Payment Service Providers: We share relevant financial data with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank solely to facilitate your requested deposit and withdrawal transactions. These providers operate under their own privacy policies and are not authorised by kkdk to use your data for any other purpose.
• Game Providers: Platform session data and game-specific identifiers may be shared with certified game studios — including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi — to the extent necessary to deliver their games within the kkdk platform. No sensitive personal data (name, address, payment details) is shared with game providers.
• Identity Verification Services: Where KYC verification is required, we may share submitted identity documents and personal details with trusted third-party identity verification providers. These providers process data solely for the purpose of verifying your identity and age on our behalf and are contractually bound to strict data protection standards.
• Technology & Infrastructure Partners: We use cloud hosting, analytics, and platform security partners who process technical and usage data on our behalf as data processors. All such partners are subject to data processing agreements requiring them to process data only under our documented instructions.
• Law Enforcement & Regulatory Authorities: We will disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by law, court order, or binding regulatory direction. We will notify you of such disclosures where we are legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of kkdk's business, your personal data may be transferred to the acquiring entity as part of the transaction. We will notify affected players prior to any such transfer taking effect.

All third parties with whom kkdk shares personal data are required to implement appropriate technical and organisational security measures to protect that data, and are permitted to use it only for the purposes for which it was shared.

kkdk uses cookies and similar tracking technologies (including web beacons, pixel tags, and local storage objects) to operate and improve the platform. Cookies are small text files placed on your device when you visit kkdk.io. They enable us to recognise your browser, remember your preferences, maintain your session, and collect analytical data about platform usage.

The types of cookies used on kkdk.io are categorised as follows:

• Strictly Necessary Cookies: Required for the platform to function. These cookies manage your login session, maintain your account authentication state, and enable core features such as the betting slip and deposit flow. These cannot be disabled without breaking core functionality.
• Performance & Analytics Cookies: Used to collect anonymised data about how visitors use kkdk.io — including which pages are visited most, where users enter and exit the site, and how long sessions last. This data is used in aggregate to improve platform performance and user experience.
• Functional Cookies: Used to remember your preferences such as language settings, interface layout preferences, and your responsible gaming tool configurations. These cookies enhance your experience but are not strictly essential.
• Fraud Prevention & Security Cookies: Used by our security systems to detect unusual behaviour patterns, flag potentially fraudulent sessions, and protect against account takeover attempts.

You may manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of parts of the kkdk platform. kkdk does not use cookies to serve third-party advertising or to track your browsing activity on external websites.

kkdk retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law and regulation. Our data retention periods are determined by the following principles:

• Active Account Data: Personal data associated with an active player account is retained for the full duration that the account remains open, plus an additional period after account closure as required by applicable financial and AML regulations.
• Financial Transaction Records: Transaction histories, deposit and withdrawal records, and payment method data are retained for a minimum of five (5) years from the date of each transaction, in accordance with standard financial record-keeping requirements.
• KYC & Identity Verification Documents: Identity documents submitted for KYC verification are retained for a minimum of five (5) years following account closure, in line with AML compliance obligations.
• Customer Support Records: Live chat transcripts, email correspondence, and support ticket histories are retained for three (3) years from the date of the interaction for quality assurance and dispute resolution purposes.
• Self-Exclusion Records: Records of self-exclusion requests and responsible gaming tool activations are retained for a minimum of five (5) years to prevent re-registration during an active exclusion period and to comply with responsible gaming obligations.
• Technical & Analytics Data: Anonymised aggregate analytics data may be retained indefinitely as it contains no personally identifiable information. Raw technical data including IP logs is retained for no longer than twelve (12) months unless retained for active fraud or security investigations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to any identifiable individual. Requests for early deletion are subject to our legal obligations — see Clause 9 for your rights in this regard.

kkdk implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes the following controls:

• 256-Bit SSL Encryption: All data transmitted between your device and the kkdk platform is encrypted using industry-standard 256-bit SSL/TLS protocols. The padlock icon visible in your browser confirms an active encrypted connection.
• Encryption at Rest: Sensitive personal data stored in our databases — including financial data and KYC documents — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is strictly limited to kkdk staff and contractors who have a legitimate business need to access it. All access is role-based, logged, and subject to regular audit.
• Fraud Monitoring: Our automated security systems monitor platform activity in real time, 24 hours a day, 7 days a week, to detect and flag anomalous patterns associated with account takeover, fraud, or money laundering.
• Penetration Testing: The kkdk platform undergoes regular third-party security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: kkdk maintains a documented data breach response procedure. In the event of a security incident that is likely to result in a risk to your rights and freedoms, we will notify affected players without undue delay and take all necessary steps to contain the breach.

As a data subject, you hold a number of rights in relation to the personal data that kkdk holds about you. These rights are as follows. To exercise any of these rights, please contact us through the channels described in Clause 13. kkdk will respond to all valid data rights requests within 30 days of receipt, subject to identity verification.

• Right of Access: You have the right to request a copy of all personal data that kkdk holds about you, together with information about how it is processed (commonly known as a "Subject Access Request" or SAR). There is no fee for making such a request.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data that kkdk holds about you. You may also update many of your own account details directly through the account settings section of the platform.
• Right to Erasure: You have the right to request deletion of your personal data ("the right to be forgotten") where the data is no longer necessary for the original purpose, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. Please note that we may be required to retain certain data for legal and regulatory compliance purposes even following an erasure request.
• Right to Restriction: You have the right to request that kkdk restrict processing of your personal data in certain circumstances — for example, while the accuracy of your data is being contested, or while an objection to processing is being assessed.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit it to another data controller.
• Right to Object: You have the right to object to processing of your personal data where that processing is based on legitimate interests. You also have an unconditional right to object to processing for direct marketing purposes at any time.
• Rights Related to Automated Decision-Making: Where kkdk makes automated decisions that have a significant effect on you (for example, automated account suspension triggered by fraud detection systems), you have the right to request human review of that decision.

kkdk's platform, services, and content are intended exclusively for adults aged 21 years and above. We do not knowingly collect or process personal data from individuals under the age of 21. Registration by individuals under 21 is strictly prohibited under our Terms & Conditions.

If kkdk discovers or has reasonable grounds to believe that personal data has been collected from a person under 21 years of age, we will take immediate steps to:

• Suspend the associated account pending investigation.
• Delete or anonymise the personal data collected from the underage individual, subject to any legal retention obligations.
• Refund any deposits made to the account, in accordance with applicable law.
• Permanently close the account and block re-registration under the same identity.

If you are a parent or guardian and believe your child has registered on kkdk or provided personal data to us, please contact us immediately via the channels in Clause 13 and we will act on your report without delay.

kkdk may send you promotional emails, SMS messages, or WhatsApp notifications about bonuses, new games, tournaments, and seasonal offers — but only where you have provided explicit consent to receive such communications during the registration process or through your account settings.

You may withdraw your consent to receive marketing communications at any time by:

• Clicking the unsubscribe link included in any marketing email sent by kkdk.
• Updating your communication preferences in the notifications section of your account settings.
• Contacting our support team directly via live chat or email and requesting that all marketing communications be stopped.

Withdrawal of marketing consent will be processed within 5 business days. Please note that withdrawing consent does not affect the lawfulness of processing carried out before withdrawal, and does not affect our ability to send you service-related transactional communications (such as deposit confirmations, withdrawal notifications, account security alerts, and responsible gaming messages) which are sent on the basis of contractual necessity or legitimate interest, not consent.

kkdk reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, regulatory requirements, or the services we offer. When material changes are made, we will:

• Publish the revised Policy on this page with an updated effective date at the top of the document.
• Use reasonable endeavours to notify registered players of material changes via the email address associated with their account or via an in-platform notification.
• Where required by applicable law, seek your renewed consent before applying material changes that affect how we process your personal data on a consent basis.

Your continued use of the kkdk platform after the effective date of a revised Privacy Policy constitutes your acknowledgement of, and agreement to, the updated terms. If you do not agree with any changes to this Policy, you should discontinue use of the platform and may request account closure by contacting our support team.

We encourage you to review this Privacy Policy periodically to stay informed about how kkdk protects your personal data. Previous versions of this Policy are available upon written request submitted through the contact channels in Clause 13.

For all privacy-related enquiries, data subject rights requests, or concerns about how kkdk handles your personal data, please contact our support team using the details below. All correspondence is handled in English and responses will be provided within 30 days of a valid, verifiable request being received.

• Email: [email protected] (plain text — not a clickable link)
• WhatsApp: +880 1700 000000
• Live Chat: Available 24/7 directly on the kkdk platform (BST UTC+6)
• Response Time: Up to 30 calendar days for formal data subject rights requests; typically within 24 hours for general support enquiries.

When submitting a data subject rights request, please include your registered email address, your username, and a brief description of the right you wish to exercise. We will request verification of your identity before processing any request that involves disclosure, amendment, or deletion of personal data, in order to protect you against unauthorised access to your information.