k999 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how k999 ("k999", "we", "us", "our") collects, uses, stores, and shares personal data relating to individuals ("you", "User", "Player") who access or use the k999 online casino and sports betting platform at https://k999.vu, including all associated games, services, promotions, and customer support channels.

k999 is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. We apply privacy-by-design thinking throughout our platform operations and give you meaningful control over how your information is used.

By creating a k999 account or using any part of the k999 platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please do not use the k999 platform.

2 Data Controller

For the purposes of this Policy, k999 acts as the data controller in respect of personal data collected from users of the platform. As data controller, k999 determines the purposes and means of processing personal data submitted to or collected through the k999 platform.

If you have any questions about how k999 processes your personal data, or wish to exercise any of your data rights as described in Section 11, please contact our Data Protection team using the contact details provided in Section 15 of this Policy.

3 Data We Collect

k999 collects various categories of personal data in the course of providing its services. The categories of data we may collect include:

k999 does not intentionally collect sensitive personal data (such as health information, political opinions, or religious beliefs) except where strictly necessary for responsible gaming assessments or where you voluntarily provide such information in the context of a support interaction.

5 Legal Basis for Processing

k999 processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to create and manage your account, process deposits and withdrawals, deliver games and betting services, and provide customer support — all of which are necessary to fulfil our contractual obligations to you.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, age verification requirements, and tax reporting duties.
• Legitimate interests: Processing carried out for k999's legitimate business interests, including fraud detection, platform security, abuse prevention, analytics to improve our services, and responsible gaming monitoring — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing carried out on the basis of your explicit consent, such as sending you promotional communications and marketing emails. You may withdraw your consent at any time by updating your communication preferences in your account settings or by contacting support.

6 How We Use Your Data

k999 uses the personal data we collect for the following purposes:

• To create, verify, and maintain your k999 player account.
• To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other supported payment methods.
• To verify your identity and age in compliance with our age verification and KYC obligations, confirming that all players are 18 years of age or older.
• To deliver casino games, sports betting markets, live dealer tables, and all other platform features and services.
• To administer bonuses, promotions, and loyalty rewards, including BPL and IPL seasonal campaigns.
• To detect, investigate, and prevent fraud, money laundering, account abuse, and other prohibited activities.
• To monitor and enforce responsible gaming obligations, including administering deposit limits, cooling-off periods, and self-exclusion requests.
• To provide customer support via live chat and email, and to maintain records of those interactions.
• To send you service communications relating to your account, including security alerts, transaction confirmations, and policy updates.
• To send you marketing and promotional communications where you have opted in to receive them.
• To conduct platform analytics, improve user experience, and develop new features and services.
• To comply with applicable legal and regulatory requirements, including responding to lawful requests from law enforcement or regulatory authorities.

7 Data Sharing and Disclosure

k999 does not sell your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and only to the extent necessary for the stated purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other payment service providers, for the purpose of processing your financial transactions.
• Identity verification providers: Third-party KYC and age verification service providers used to fulfil our legal obligations to verify the identity of players.
• Fraud and AML screening providers: Third-party tools and services used to detect and prevent financial crime, fraud, and platform abuse.
• Game content providers: Casino game and live dealer platform providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive limited session and stake data necessary to deliver game content and resolve technical disputes.
• IT and infrastructure providers: Hosting, cloud storage, and platform maintenance providers who process data on our behalf under strict data processing agreements.
• Legal and regulatory authorities: Government bodies, law enforcement agencies, and regulatory authorities where we are legally required to disclose information, including in response to a court order or a lawful investigation.
• Professional advisers: Lawyers, auditors, and other professional advisers where disclosure is necessary in connection with a legal matter or compliance review.

Any third party with whom k999 shares personal data is required to handle that data securely and only for the specified purpose. k999 does not permit third-party processors to use your data for their own purposes beyond what is strictly required to deliver the service for which they are engaged.

8 Cookies and Tracking

k999 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device that allow us to recognise your browser across sessions and provide a consistent, personalised experience.

The types of cookies used on the k999 platform include:

• Strictly necessary cookies: Required for the platform to function correctly, including maintaining your login session and remembering your responsible gaming settings. These cannot be disabled.
• Performance and analytics cookies: Used to understand how players interact with the k999 platform, which pages are most visited, and where technical errors occur. This data is aggregated and anonymised where possible.
• Functional cookies: Used to remember your preferences, such as language, display settings, and last-played games, to improve your experience between sessions.
• Marketing cookies: Used to deliver relevant promotions to you based on your gaming activity and preferences, where you have consented to marketing communications.

You may manage your cookie preferences through your browser settings. Note that disabling certain categories of cookies may affect the functionality of some parts of the k999 platform. Strictly necessary cookies cannot be disabled as they are essential to platform operation.

9 Data Retention

k999 retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account data: Retained for the duration of your active account and for a period of at least five years following account closure, in accordance with our AML and record-keeping obligations.
• Transaction and financial records: Retained for a minimum of five years from the date of the transaction, as required by applicable financial regulations.
• Identity verification documents: Retained for the duration of your active account and for a minimum of five years following account closure.
• Customer support communications: Retained for up to three years from the date of the interaction, unless a longer retention period is required in connection with an ongoing dispute or legal matter.
• Marketing data: Retained until you withdraw your consent to marketing communications or for up to two years from your last interaction with a k999 promotional campaign, whichever is earlier.

Upon expiry of the applicable retention period, k999 will securely delete or anonymise your personal data in accordance with our internal data disposal procedures.

10 Data Security

k999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• SSL/TLS encryption: All data transmitted between your device and the k999 platform is encrypted using industry-standard SSL/TLS protocols, ensuring that your account credentials, payment details, and personal information cannot be intercepted in transit.
• Access controls: Access to personal data is restricted to authorised k999 personnel who require it to perform their duties. Role-based access controls and multi-factor authentication are enforced for all administrative systems.
• Password security: User passwords are stored in hashed form using modern cryptographic algorithms. k999 never stores passwords in plain text.
• Regular security assessments: k999 conducts periodic security reviews and vulnerability assessments of its platform infrastructure to identify and remediate potential risks.
• Incident response: k999 maintains an internal data breach response procedure. In the event of a security incident that poses a risk to your personal data, we will notify affected users and relevant authorities in accordance with applicable obligations.

While k999 takes all reasonable steps to secure your personal data, no online platform can guarantee absolute security. You also have a role to play in keeping your account secure — please use a strong, unique password and contact k999 support immediately if you suspect any unauthorised access to your account.

11 Your Rights

Subject to applicable law, you have the following rights in respect of your personal data held by k999:

• Right of access: You have the right to request a copy of the personal data k999 holds about you, along with information about how that data is used.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: You may request deletion of your personal data in certain circumstances, such as where it is no longer necessary for the purpose for which it was collected. Note that this right is subject to k999's legal and regulatory retention obligations, which may require us to retain certain data.
• Right to restriction of processing: You may request that k999 restrict the processing of your personal data in certain circumstances, for example while a rectification request is under review.
• Right to data portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing based on legitimate interests, including profiling for direct marketing purposes. If you object to marketing, we will stop processing your data for that purpose immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact k999 via live chat on the platform or by emailing [email protected]. k999 will respond to all valid requests within 30 days. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reasons for it.

12 International Data Transfers

k999 operates a global technology infrastructure, and your personal data may be processed or stored on servers located outside Bangladesh. Where personal data is transferred internationally, k999 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy.

Such safeguards may include contractual data processing agreements with the relevant service providers that incorporate standard data protection clauses. k999 does not transfer personal data to countries or organisations that cannot demonstrate an adequate level of data protection.

13 Children's Privacy

The k999 platform is strictly for adults aged 18 and above. k999 does not knowingly collect personal data from individuals under the age of 18. If we discover or have reason to believe that a user is under 18, we will immediately suspend the account, delete any personal data collected in connection with that account (subject to any overriding legal retention obligations), and refund any deposits made, net of any winnings generated, which will be forfeited.

If you are a parent or guardian and believe that a minor has registered on the k999 platform or provided us with personal data, please contact us immediately at [email protected] so that we can take appropriate action without delay.

14 Changes to This Policy

k999 reserves the right to update or amend this Privacy Policy at any time. Where changes are material, we will provide advance notice via a prominent notice on the k999 platform and, where practicable, via email to the address registered on your account. The effective date of the revised Policy will be clearly stated at the top of the document.

Your continued use of the k999 platform following the effective date of any amendment constitutes your acceptance of the updated Policy. We encourage you to review this Policy periodically to stay informed of how k999 is protecting your personal data.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which k999 handles your personal data, please contact us through any of the following channels:

• Live Chat: Available 24/7 directly on the k999 platform — the fastest way to reach our team.
• Email: [email protected] — please allow up to 24 hours for a response during peak periods. For data rights requests, please mark your email subject line "Data Rights Request – [Your Username]" to help us prioritise your enquiry.

Our support team is available around the clock and is equipped to handle data privacy enquiries from players across Bangladesh, including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.