kkrb Privacy Policy — How We Handle Your Personal Data

01 Who We Are

This Privacy Policy is issued by kkrb (referred to in this document as "kkrb", "we", "us", or "our"). kkrb operates an online casino and sports betting platform accessible at kkrb.io, offering services including cricket betting, live casino games, slot machines, table games, and associated promotional activities to players in Bangladesh.

For the purposes of this Privacy Policy, kkrb acts as the data controller in respect of personal information collected through the kkrb Platform. This means we determine the purposes and means by which your personal data is processed. Where we engage third-party service providers to process data on our behalf, those parties act as data processors and are bound by written agreements that limit their use of your information strictly to the services they provide to kkrb.

02 Information We Collect

kkrb collects personal information in three primary ways: information you provide directly to us, information generated automatically through your use of the Platform, and information received from trusted third parties. The categories of personal data we collect are set out below.

2.1 Information You Provide Directly

• Account Registration: Full name, date of birth, email address, mobile number, and chosen username and password
• Identity Verification (KYC): Government-issued photo ID (e.g., National ID Card, passport), proof of address, and any additional documents requested during the verification process
• Payment Information: Mobile financial service account details (bKash, Nagad, Rocket, Upay), bank account details, or card information used for deposits and withdrawals. Full payment credentials are not stored by kkrb — they are processed by our payment partners using their own secure infrastructure
• Support Communications: Content of messages, emails, or live chat conversations you initiate with the kkrb support team
• Responsible Gaming Requests: Details you provide when setting deposit limits, requesting a cooling-off period, or applying for self-exclusion

2.2 Information Collected Automatically

• Device and Browser Data: IP address, device type, operating system, browser type and version, screen resolution, and language settings
• Session Activity: Pages visited, game sessions played (including game titles, bet amounts, and outcomes), time spent on the Platform, and navigation paths
• Transaction Logs: Records of all deposits, withdrawals, bonus activations, and wagering activity associated with your account
• Cookies and Similar Technologies: Data collected via cookies, web beacons, and local storage — see Section 6 for full details

2.3 Information From Third Parties

• Payment Processors: Transaction confirmation data from bKash, Nagad, Rocket, Upay, and other payment partners to verify deposits and process withdrawals
• Identity Verification Providers: Results of automated KYC checks carried out by third-party verification services engaged by kkrb
• Fraud Prevention Services: Risk signals and device fingerprinting data from anti-fraud and security providers used to protect the integrity of the Platform

03 How We Use Your Information

kkrb uses the personal data we collect for the following purposes. Each purpose is matched to the legal basis under which it is carried out — see Section 4 for details on legal bases.

04 Legal Basis for Processing

kkrb processes your personal data under one or more of the following legal bases, depending on the specific activity involved:

• Contract Performance: Processing is necessary to fulfil the agreement between you and kkrb — for example, to operate your account, process your transactions, and deliver the gaming services you have signed up for
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including age verification, anti-money-laundering checks, and responsible gaming requirements
• Legitimate Interests: Processing is necessary for kkrb's legitimate business interests — such as fraud prevention, platform security, and service improvement — where those interests are not overridden by your fundamental rights and freedoms
• Consent: For certain activities such as marketing communications and non-essential cookies, kkrb relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing

05 Sharing Your Information

kkrb does not sell your personal data. We share information only in the circumstances described below, and only to the extent necessary for the specified purpose.

5.1 Service Providers and Data Processors

kkrb engages trusted third-party service providers to perform functions on our behalf. These include payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard), identity verification providers, fraud detection and security services, customer support platforms, and IT infrastructure providers. All such providers are required to handle your data in accordance with our instructions and applicable data protection standards.

5.2 Game Software Providers

Game providers whose software is integrated into the kkrb Platform — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe — may receive limited technical data (such as a pseudonymous player identifier and game session data) that is necessary to operate their games within the kkrb environment. These providers operate under their own software licences and data handling standards.

5.3 Legal and Regulatory Disclosure

kkrb may disclose personal data to law enforcement authorities, regulatory bodies, or other government agencies where required to do so by applicable law, court order, or valid legal process. We will disclose only the minimum data necessary to comply with any such obligation.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of kkrb's business assets, personal data held by kkrb may be transferred to the successor entity. In such an event, we will provide reasonable notice to affected players and ensure that the successor entity is bound by privacy obligations consistent with this Policy.

06 Cookies and Tracking Technologies

kkrb uses cookies and similar technologies (including web beacons and local storage) to operate and improve the Platform. The categories of cookies we use are as follows:

• Essential Cookies: Required for the Platform to function correctly. These include session authentication cookies, security tokens, and load-balancing identifiers. Essential cookies cannot be disabled without breaking core site functionality
• Functional Cookies: Used to remember your preferences, such as language settings, preferred payment method, and game display options, to provide a more personalised experience on return visits
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate and use the kkrb Platform. This data helps us understand which features are popular and where improvements are needed
• Security Cookies: Used to support our fraud detection and responsible gaming monitoring systems, including device fingerprinting and session anomaly detection

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the performance and functionality of the kkrb Platform. For essential cookies, no opt-out mechanism is available as they are strictly necessary for service delivery.

07 Data Retention

kkrb retains your personal data for as long as is necessary to fulfil the purposes outlined in this Policy, or for as long as required by applicable law, whichever is longer. The general retention periods applied by kkrb are:

• Active Account Data: Retained for the duration of your account's active status plus a reasonable period following account closure to enable support queries and dispute resolution
• Financial Transaction Records: Retained for a minimum of five years following the date of each transaction, in accordance with standard financial record-keeping obligations
• Identity Verification Documents: Retained for a minimum of five years following account closure or the date of the last transaction, whichever is later
• Support Communications: Retained for up to three years following the closure of a support ticket, unless the content relates to an unresolved dispute
• Marketing Consent Records: Retained for the duration of your marketing consent, plus a reasonable period thereafter to demonstrate compliance

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked to an individual player.

08 Data Security

kkrb implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes:

• 256-bit SSL/TLS encryption for all data in transit between your browser or device and our servers
• Encryption at rest for sensitive data categories stored in our databases
• Role-based access controls limiting internal access to personal data to authorised personnel with a legitimate need
• Continuous monitoring for security threats, unusual access patterns, and anomalous transaction activity
• Regular security assessments and penetration testing of our platform infrastructure
• Vendor due diligence and contractual security obligations imposed on all third-party data processors

While kkrb takes rigorous steps to protect your data, no method of transmission over the internet or electronic storage is completely immune to risk. You play an important role in keeping your account secure by protecting your login credentials and notifying us promptly of any suspected unauthorised access.

09 Your Rights Over Your Data

As a kkrb player, you hold the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact our support team using the details in Section 13.

• Right of Access: You may request a copy of the personal data kkrb holds about you, together with information about how it is used and with whom it is shared
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis applies. Note that certain data must be retained to fulfil legal obligations and cannot be deleted on request
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved
• Right to Data Portability: Where processing is based on your consent or contract performance, you may request that we provide your personal data in a structured, machine-readable format
• Right to Withdraw Consent: Where processing is based on your consent (e.g., for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling, where your individual circumstances justify such an objection

kkrb will respond to all valid data rights requests within a reasonable period. We may need to verify your identity before acting on a request to ensure we do not disclose or delete data belonging to the wrong individual.

10 Children and Minors

The kkrb Platform is strictly intended for individuals who are 21 years of age or older. kkrb does not knowingly collect personal data from any person under the age of 21. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a minor has registered or used kkrb without your knowledge, please contact our support team immediately using the contact details in Section 13. We take reports of underage access seriously and will investigate and act upon them promptly.

11 Third-Party Links and Services

The kkrb Platform may contain references to or integrations with third-party services, including payment gateways and game software providers. While kkrb takes care in selecting its partners, we are not responsible for the privacy practices of any third party operating their own independent services or websites.

When you interact with a third-party service — for example, initiating a bKash or Nagad transaction through their own interface — that interaction is governed by the privacy policy of the respective third-party provider. We encourage you to review the privacy notices of any third-party services you use in connection with kkrb.

12 Changes to This Policy

kkrb reserves the right to update or amend this Privacy Policy at any time. Any changes will be published on this page with an updated effective date. Where changes are material — for example, a significant new use of your personal data — kkrb will notify registered players by email or via an in-platform notification prior to the changes taking effect.

We encourage you to review this Privacy Policy periodically to stay informed about how kkrb handles your personal data. Continued use of the Platform following the publication of a revised Policy constitutes your acknowledgement of the updated terms.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way kkrb handles your personal data, please contact our support team. Our team is available 24 hours a day, 7 days a week, including Bangladesh public holidays, operating on Bangladesh Standard Time (BST, UTC+6).

Email (plain text — not a clickable link):
[email protected]

Alternatively, you may raise a data rights request or privacy concern directly through the live chat feature available after logging into your kkrb account. Please allow us a reasonable period to investigate and respond to your request fully. We may ask you to provide proof of identity before processing any data access, correction, or deletion request.