kc8 Privacy Policy

When you register a kc8 account, we collect your full legal name, date of birth, Bangladeshi mobile number, and optionally an email address. Where KYC verification is required, we may also collect a copy of your national identity card (NID), passport, or other government-issued identification document, together with a selfie or live photo taken for identity verification purposes. This category of data is collected to establish your identity, verify your age eligibility (21+), and comply with applicable anti-money laundering requirements.

We collect records of all deposits, withdrawals, and wagers made through your kc8 account. This includes transaction reference numbers, amounts in BDT, timestamps, payment method identifiers (e.g. the last four digits of a bKash number or Nagad wallet reference), and the outcome of each transaction. We do not store full payment credentials such as complete mobile wallet PINs, full card numbers, or online banking passwords. Financial transaction records are retained as required to meet regulatory and audit obligations.

When you access the kc8 platform, our servers automatically record certain technical data including your IP address, device type and operating system, browser type and version, the pages or features you access, timestamps of each session, and approximate geographic location derived from your IP address. We also collect behavioural data such as game session duration, betting patterns, and feature usage. This data is used to maintain platform security, detect fraudulent or abusive behaviour, improve the user experience, and comply with responsible gaming obligations.

The majority of personal data processing carried out by kc8 is necessary for the performance of the contract between kc8 and each registered player. This includes processing registration data to create your account, processing transaction data to handle deposits and withdrawals, and processing identity data to complete KYC checks required before funds can be released. Without this processing, kc8 cannot provide its services to you.

Certain processing is required for kc8 to comply with applicable legal obligations. This includes retaining transaction records for audit and financial reporting purposes, performing anti-money laundering checks, verifying that players meet the 21+ age requirement, and responding to lawful requests from competent authorities. kc8 will not disclose player data to authorities except where required by a lawful order or to protect the safety of individuals.

Where processing is not strictly required by contract or law, kc8 relies on legitimate interests as its legal basis — for example, using technical and behavioural data to detect fraud, improve platform stability, and monitor for responsible gaming indicators. We only rely on this basis where our interests are not overridden by your rights and interests as a data subject. You may object to processing carried out on the basis of legitimate interests by contacting [email protected].

To deliver games and platform functionality, kc8 shares limited technical data with licensed third-party game providers including Evolution Gaming, Pragmatic Play, Spribe, and others. These providers receive only the data necessary to authenticate your session and record game results. They are contractually prohibited from using your data for any purpose other than delivering the agreed service to kc8 and its players.

Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and partner banks requires transmitting transaction data to those payment providers. kc8 shares only the information strictly necessary to execute and verify your transaction (e.g. transaction amount, reference number, and your registered mobile number or account identifier). kc8 does not share your gaming history, bet amounts, or game behaviour data with payment providers.

kc8 may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by a lawful order, court judgment, or equivalent legal instrument. kc8 will, where legally permitted, notify the affected account holder of such a disclosure request before responding. Where notification is prohibited by law (e.g. in the context of an active investigation), kc8 will comply with the lawful request without prior notice.

While your kc8 account remains active, we retain all personal data associated with it, including registration information, transaction history, and game logs. This data is necessary to operate your account, respond to support queries, and fulfil our regulatory obligations. You may request a summary of the data held about you at any time by contacting [email protected].

Following account closure — whether initiated by you or by kc8 — we retain financial transaction records and identity verification documents for a minimum period of five years to meet anti-money laundering and audit requirements. After the mandatory retention period has elapsed, data is securely deleted or irreversibly anonymised. Technical log data (IP records, session logs) is retained for a shorter period of up to 12 months following last account activity, unless a longer period is required for an active investigation or legal proceeding.

kc8 employs industry-standard security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include SSL/TLS encryption for all data transmitted between your device and our servers, encrypted storage of sensitive data at rest, access controls that restrict data access to authorised personnel only, and regular security reviews of our platform infrastructure. No transmission of data over the internet can be guaranteed to be completely secure; however, kc8 takes all reasonable steps to protect your information.

In the event of a personal data breach that poses a risk to your rights and interests, kc8 will notify affected account holders promptly via their registered contact details. The notification will describe the nature of the breach, the categories of data involved, the likely consequences, and the steps kc8 has taken or intends to take to address the breach. kc8 maintains an internal incident response procedure to ensure breaches are contained, investigated, and reported in a timely manner.