Privacy Policy — kcg999

1 Data We Collect

kcg999 collects personal data from players in several distinct contexts: at the point of account registration, during ongoing use of the platform, and through automated technical means as you interact with our website and applications. The following sets out each category of data we collect and the source from which it is obtained.

Account Registration Data

When you create a kcg999 account, we collect the following information directly from you:

• Full legal name as it appears on your official identification documents.
• Date of birth (used to verify you meet the 18+ age requirement).
• Email address, which serves as your primary account identifier and communication channel.
• Bangladeshi mobile number, used for OTP verification and account security.
• Username and encrypted password.
• City or division of residence within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi).

Identity Verification (KYC) Data

In accordance with our Know Your Customer obligations and responsible gaming commitments, kcg999 may request the following documents at various stages of your account lifecycle:

• Copy of National Identity Card (NID), passport, or birth certificate — to verify age and identity.
• Proof of payment method ownership (e.g., screenshot of bKash or Nagad account registered in your name) — to confirm that deposits originate from an account belonging to you.
• Proof of source of funds — for large transactions above ৳50,000, or where unusual account activity is flagged during routine compliance review.

KYC documents are processed securely and retained only for as long as required by our data retention policy (see Section 6).

Transaction Data

Each financial transaction on kcg999 generates a data record, including:

• Deposit and withdrawal amounts (in BDT), timestamps, and payment method used (bKash, Nagad, Rocket, Upay, bank transfer, or card).
• Transaction reference numbers and payment provider reference codes.
• Bonus credits, bonus usage records, and wagering activity summaries.
• Account balance history and adjustment logs.

Betting and Gaming Activity Data

kcg999 records all betting and gaming activity on the platform, including:

• Sports bets placed — sport, market, selection, stake, odds, and settlement outcome.
• Casino game rounds — game title, studio provider, bet size, round outcome, and session duration.
• Session start and end times, device type, and browser or app version.

Technical and Device Data

When you access kcg999, our servers automatically collect certain technical data:

• IP address and approximate geographic location (country and city level).
• Device type, operating system, and screen resolution.
• Browser type and version.
• Referring URL (the page that directed you to kcg999, if applicable).
• Pages visited within kcg999, time spent on each page, and click-path data.

Communications Data

If you contact kcg999 customer support — whether via in-platform live chat, email, or WhatsApp — we retain records of those communications, including the content of messages, timestamps, and any attachments or screenshots you provide. This data is used to resolve your query, improve our support quality, and as an audit record if a dispute arises.

2 How We Use Your Data

kcg999 processes personal data only where a lawful basis exists for doing so. The table below summarises our primary data processing activities, the legal basis for each, and the category of data involved.

Marketing Communications

kcg999 will only send you promotional emails or SMS messages if you have explicitly opted in to receive marketing communications at the time of registration or via your account preferences. Each marketing message contains a clear and easy unsubscribe mechanism. Withdrawing consent for marketing communications does not affect your ability to continue using the kcg999 platform.

Automated Decision-Making

kcg999 uses automated processes in certain contexts, including fraud detection, responsible gaming triggers, and bonus eligibility checks. Where an automated process results in a significant decision affecting your account — such as account restriction or bonus disqualification — you have the right to request human review of that decision. Contact [email protected] to initiate a manual review.

3 Data Sharing & Disclosure

kcg999 does not sell your personal data to any third party. We share data only in the specific circumstances described below, and only to the minimum extent necessary for the stated purpose.

Essential Service Providers

To deliver the kcg999 platform, we work with a limited set of trusted service providers who process personal data on our behalf as data processors. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — to process financial transactions.
• Identity verification providers: Third-party KYC and age-verification service providers who verify the authenticity of identity documents submitted during account verification.
• Game content studios: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session-level data (player ID, bet amounts, round outcomes) as required to deliver the game content and settle game results. These providers do not receive your full personal profile.
• Cloud infrastructure providers: kcg999 operates on cloud infrastructure hosted in secure data centres. Our hosting provider has access to server-level data under strict data processing agreements.
• Customer support tools: Our live chat and support ticket systems are powered by a third-party helpdesk platform. Support agents interact with account-level data to resolve queries.

All service providers who process personal data on behalf of kcg999 are bound by contractual data processing agreements that require them to process data only for the specified purpose, implement appropriate security measures, and return or delete data upon termination of the relationship.

Legal and Regulatory Disclosure

kcg999 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so. Such disclosures are made only to the extent required by applicable law, and where possible, kcg999 will notify the affected player unless prohibited from doing so by the legal process involved.

Business Transfers

In the event that kcg999 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, player data may be transferred to the acquiring entity as part of that transaction. In such circumstances, kcg999 will notify affected players via the email address registered on their account prior to any transfer taking effect, and the acquiring entity will be required to honour the commitments in this Privacy Policy.

4 Cookies & Tracking

kcg999 uses cookies and similar tracking technologies to ensure the platform functions correctly, to keep you securely logged in during a session, and to understand how players interact with the platform so we can make targeted improvements. This section explains what types of cookies we use and how you can manage them.

Types of Cookies Used

What We Do Not Use

• kcg999 does not deploy third-party advertising cookies or retargeting pixels.
• We do not use cross-site tracking technologies that follow your activity on other websites.
• We do not integrate Facebook Pixel, Google Ads conversion tags, or similar ad-network tracking scripts on the kcg999 platform.

Managing Your Cookie Preferences

You can manage or disable non-essential cookies at any time via the cookie settings panel accessible from your account preferences. You may also configure your browser to block or delete cookies. Note that disabling essential or security cookies will prevent you from logging in and using the platform. Disabling analytics cookies will not affect your ability to use kcg999 normally but will limit our ability to identify and fix platform issues affecting your experience.

Local Storage and Session Storage

In addition to cookies, kcg999 uses browser local storage and session storage to cache non-sensitive data such as game asset preferences and UI layout settings. This data is stored entirely on your device, is not transmitted to kcg999 servers, and is cleared when you clear your browser data.

5 Data Security

kcg999 takes the security of your personal data seriously and implements a layered security architecture designed to protect against unauthorised access, accidental loss, destruction, or disclosure. The following measures are in place across the kcg999 platform.

Encryption

• Transport encryption: All data transmitted between your browser or mobile app and kcg999 servers is protected by TLS 1.3 (256-bit SSL). Any attempt to access kcg999 over an unencrypted HTTP connection is automatically redirected to HTTPS.
• Data at rest: Sensitive personal data stored in kcg999 databases — including identity documents, financial records, and authentication credentials — is encrypted at rest using AES-256.
• Password hashing: Player passwords are never stored in plain text. They are hashed using bcrypt with a unique salt before storage. Even kcg999 system administrators cannot see your password.

Access Controls

Access to personal data within kcg999 is governed by role-based access control (RBAC). Staff members are granted access only to the categories of data required to perform their specific job functions. All data access by kcg999 staff is logged and auditable. Privileged access to production systems requires multi-factor authentication.

Security Monitoring

kcg999 operates continuous security monitoring, including intrusion detection systems, anomaly-based alerting on unusual login patterns, and automated blocking of IP addresses associated with known malicious activity. Our security team conducts periodic penetration testing and vulnerability assessments to identify and remediate potential weaknesses before they can be exploited.

Data Breach Response

In the unlikely event of a personal data breach that poses a risk to player rights, kcg999 will notify affected players via their registered email address without undue delay. The notification will describe the nature of the breach, the categories of data affected, and the steps kcg999 has taken or will take to address it. kcg999 maintains a documented incident response plan specifically for data breach scenarios.

6 Data Retention

kcg999 retains personal data only for as long as it is necessary for the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply to the main categories of personal data we hold.

Deletion After Retention Period

Once the applicable retention period has expired, personal data is permanently deleted or anonymised so that it can no longer be associated with an individual player. Anonymised, aggregated data (e.g., platform-level statistics) may be retained indefinitely as it can no longer identify any individual.

Account Closure and Data

When you close your kcg999 account, your account profile becomes inactive and is no longer accessible to you. However, kcg999 retains the underlying personal data for the periods specified above to meet our legal and compliance obligations. You may request confirmation of what data is held and when it is scheduled for deletion by contacting [email protected].

7 Your Privacy Rights

As a player on the kcg999 platform, you have a number of rights in relation to the personal data we hold about you. These rights are described below together with guidance on how to exercise each one.

Right of Access

You have the right to request a copy of all personal data that kcg999 holds about you. This is commonly called a Subject Access Request (SAR). We will provide a structured summary of your data in a readable format within 15 business days of receiving your verified request. To submit a SAR, email [email protected] from the email address registered on your kcg999 account, with the subject line "Subject Access Request".

Right to Rectification

If any personal data kcg999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For standard account details such as your email address or phone number, you can update these directly via your account settings. For more sensitive corrections — such as your registered name or date of birth — you will need to contact support and provide documentary evidence of the correct information.

Right to Erasure

You have the right to request that kcg999 delete your personal data. This right applies where the data is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. Note that this right is not absolute — kcg999 may be required to retain certain data to comply with legal obligations (see Section 6). We will inform you of any data that cannot be deleted and the reason why.

Right to Restriction of Processing

You may request that kcg999 restrict the processing of your data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved. During a restriction period, kcg999 will continue to store your data but will not actively process it except where required by law or to establish, exercise, or defend legal claims.

Right to Data Portability

Where personal data is processed on the basis of your consent or the performance of a contract, and the processing is carried out by automated means, you have the right to receive that data in a structured, commonly used, machine-readable format (such as CSV or JSON) and to transmit it to another service provider.

Right to Withdraw Consent

Where kcg999 processes your personal data on the basis of your consent (for example, for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. To withdraw marketing consent, use the unsubscribe link in any marketing email, update your preferences in account settings, or contact [email protected].

8 Contact & Complaints

kcg999 is committed to handling all privacy matters transparently and responsively. If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or have a concern about how your personal data has been handled, please use the contact details below.

Privacy Team Contact

• Email: [email protected] — for all privacy rights requests, data queries, and policy questions.
• General Support: [email protected] — for account-related queries including data corrections and consent management.
• In-platform live chat: Available 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6) — for fastest response on any account or data matter.

Response Timeframes

• Initial acknowledgement of privacy requests: within 3 business days.
• Full resolution of Subject Access Requests: within 15 business days.
• Resolution of general privacy queries: within 10 business days.
• Data breach notifications (where applicable): without undue delay, typically within 72 hours of kcg999 becoming aware of the breach.

Changes to This Privacy Policy

kcg999 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable legal requirements. When material changes are made, we will update the "Last updated" date at the top of this page and, where the changes are significant, notify you via the email address registered on your kcg999 account. Your continued use of the kcg999 platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised terms. We encourage you to review this page periodically to stay informed about how kcg999 protects your personal data.

Policy Version History