kx89 Privacy Policy — How We Protect Your Data
Your privacy matters to kx89. This policy explains what data we collect, why we collect it, and how we keep it secure on our Bangladesh gaming platform.
This Privacy Policy ("Policy") describes how kx89 ("Platform", "we", "us", "our") collects, processes, stores, and protects the personal information of users ("Player", "User", "you") who access or use the kx89 online gaming platform available at kx89.app. This Policy forms part of the agreement between you and kx89, alongside the Terms and Conditions. By registering an account or using any part of kx89, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.
kx89 is committed to handling your personal data with care, transparency, and in accordance with applicable data protection standards. We collect only the information that is necessary to deliver our services, comply with legal obligations, and maintain the security and integrity of the platform. We do not sell your personal data to third parties for marketing purposes.
Privacy at a Glance
Six key principles that govern how kx89 handles your personal data.
SSL Encrypted
All data in transit is protected by SSL encryption. Your login sessions and payment data are fully secured.
No Data Selling
kx89 does not sell or rent your personal information to third-party marketers or advertisers.
Mobile-Safe Storage
Data collected via mobile browsers is handled with the same security standards as desktop sessions.
KYC Compliant
Identity verification data is collected only to meet KYC requirements and is stored securely.
Right to Erasure
Eligible players may request deletion of their personal data, subject to legal retention obligations.
Contact Support
Privacy-related queries can be directed to kx89 support via the platform's help channel.
1. Information We Collect
The categories of personal data kx89 collects from players and how we collect it.
kx89 collects personal information across several categories depending on how you interact with the platform. Information is collected at registration, during account use, during KYC verification, when transactions are processed, and through automated technical means during your browsing sessions. The categories of data we collect include:
Identity data includes your full name, date of birth, and government-issued identification details provided during registration or KYC. Contact data includes your registered mobile number and, where provided, email address. Payment data includes transaction identifiers, payment method references (such as your bKash or Nagad mobile wallet number associated with deposits or withdrawals), and transaction history. kx89 does not store full payment card numbers or mobile banking PINs.
Technical data is collected automatically and includes your IP address, device type (Android or iOS), operating system version, mobile browser type and version, session timestamps, and approximate location derived from your IP address. Gaming activity data covers your betting history, game sessions, wagering patterns, deposit and withdrawal history, bonus usage, and responsible gaming tool interactions. This data is used for account management, fraud detection, and to improve the platform experience.
2. How We Use Your Information
The specific purposes for which kx89 processes your personal data.
kx89 processes your personal data only for legitimate purposes that are necessary to operate the platform, maintain legal compliance, and deliver a safe and fair gaming experience. The specific purposes for which we process your data include:
- Account creation and management: processing your registration, verifying your identity, maintaining your account profile, and enabling you to log in securely.
- Transaction processing: facilitating deposits via bKash, Nagad, Rocket, Upay, and bank transfer; processing withdrawal requests; maintaining accurate transaction records.
- KYC compliance: verifying your age and identity to meet know-your-customer obligations and prevent underage gambling. KYC verification is mandatory before your first withdrawal.
- Security and fraud prevention: monitoring account activity for signs of unauthorized access, fraudulent transactions, money laundering, collusion, or Terms violations.
- Responsible gaming: using your gaming activity data to identify patterns that may indicate problem gambling behaviour, and making responsible gaming tools available to you.
- Platform improvement and communications: analysing usage patterns to improve platform performance, and sending service-related communications (such as deposit confirmations, account alerts, and security notifications) to your registered mobile number.
kx89 does not use your personal data for unsolicited third-party marketing. Where we wish to send you promotional communications about kx89 offers and bonuses, we will do so only on the basis of your account relationship with us and only via the platform's own notification channels. You may opt out of promotional communications at any time through your account settings.
3. KYC and Identity Verification Data
How kx89 handles the sensitive identity documents you submit for KYC verification.
KYC verification requires you to submit government-issued identity documentation — typically a Bangladesh National Identity Card (NID), passport, or other recognised government-issued photo ID. The documentation you submit is used solely to verify your identity and age, to confirm that you are the account holder named at registration, and to comply with applicable anti-money-laundering and know-your-customer requirements. KYC documents are stored on encrypted servers with access restricted to authorised kx89 compliance personnel only.
kx89 does not use KYC documents for any purpose other than identity verification and legal compliance. KYC documentation is not shared with third parties except where required by applicable law — for example, in response to a lawful order from a competent authority. Where kx89 is required to disclose KYC information to a legal or regulatory authority, we will notify the affected player unless we are legally prohibited from doing so.
4. Payment Data and Financial Information
How kx89 handles payment method data and transaction records.
kx89 integrates with local payment providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and City Bank to process deposits and withdrawals. When you initiate a transaction, kx89 receives a transaction reference and confirmation from the payment provider. kx89 records the transaction amount, timestamp, payment method type, and the mobile wallet number or bank account reference associated with the transaction. kx89 does not have access to your full mobile banking credentials, PIN, or OTP — these remain entirely within the payment provider's system.
Transaction records are retained for a minimum period in accordance with applicable financial record-keeping requirements. This retention is necessary for audit purposes, dispute resolution, and compliance with anti-money-laundering regulations. Where a player requests deletion of their account, transaction records may be retained for the legally required minimum period even after the account is closed. After the retention period expires, transaction records are securely deleted.
5. Data Sharing and Disclosure
When and with whom kx89 shares your personal data.
kx89 does not sell, rent, or trade your personal data. We may share your data in the following limited circumstances only:
- Service providers and technology partners: kx89 works with third-party service providers who perform functions on our behalf — including payment processing partners (bKash, Nagad, Rocket, Upay), game content providers (Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming), and platform infrastructure providers. These partners receive only the data necessary to perform their specific function and are contractually required to protect it.
- Legal and regulatory requirements: kx89 may disclose your personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law, a court order, or a lawful regulatory request. We will notify affected players of any such disclosure unless legally prohibited.
- Fraud prevention and AML: kx89 may share limited data with financial crime prevention services or AML compliance tools to screen transactions and account activity for indicators of fraud or money laundering. Data shared for this purpose is handled under strict confidentiality obligations.
- Business transfers: in the event of a merger, acquisition, or sale of assets, your personal data may be transferred to a successor entity. In such cases, you will be notified in advance and the receiving entity will be required to comply with this Privacy Policy.
kx89 does not share your data with any third party for advertising, profiling, or audience targeting purposes. Our data sharing is limited strictly to what is necessary for operational, legal, and security purposes as described above.
6. Data Retention
How long kx89 keeps your personal data and what happens when it is no longer needed.
kx89 retains your personal data for as long as your account remains active and for a reasonable period thereafter, subject to the following: transaction records and KYC documentation are retained for the minimum period required by applicable financial regulations, which may extend beyond account closure. Where no specific legal minimum applies, kx89 will retain personal data for no longer than five (5) years after the last account activity or account closure, whichever is later.
When personal data is no longer required for the purposes for which it was collected and no legal retention obligation applies, kx89 securely deletes or anonymises it. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for platform analytics and improvement purposes.
7. Cookies and Device Data
How kx89 uses cookies and automatically collected device information.
kx89 uses session cookies and limited persistent cookies to maintain your login session, remember your language preference, and prevent cross-site request forgery. These cookies are technically necessary for the platform to function correctly and do not track your activity across third-party websites. kx89 does not use advertising cookies, third-party tracking pixels, or behavioural profiling cookies. When you close your browser session, session cookies are automatically deleted. Persistent cookies used for security purposes expire within a short fixed period.
Device data collected automatically includes your IP address, device operating system, mobile browser type, screen resolution, and session duration. This data is used solely for security monitoring, fraud detection, and platform performance optimisation. kx89 does not fingerprint devices for advertising purposes or share device data with advertisers.
8. Your Data Rights
The rights you hold over your personal data held by kx89.
-
Right of Access
You may request a copy of the personal data kx89 holds about you. Requests will be fulfilled within a reasonable period. We may ask you to verify your identity before releasing data.
-
Right of Rectification
If any personal data kx89 holds about you is inaccurate or incomplete, you may request that we correct or update it. You may also update certain account details directly through your account settings.
-
Right of Erasure
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. This right is subject to legal retention obligations — for example, transaction records required for AML compliance cannot be deleted before the mandatory minimum retention period expires.
-
Right to Restrict Processing
In certain circumstances you may request that kx89 restrict the processing of your personal data — for example, where you contest the accuracy of the data held, or where processing is unlawful but you prefer restriction over deletion.
-
Right to Data Portability
Where technically feasible and where processing is based on your consent or a contract with you, you may request that kx89 provide your personal data in a structured, machine-readable format so that you can transfer it to another service.
9. Data Security
The technical and organisational measures kx89 uses to protect your personal data.
kx89 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. These measures include SSL/TLS encryption for all data in transit between your device and kx89 servers; encryption at rest for sensitive data including KYC documents and payment references; access controls that restrict data access to authorised personnel on a need-to-know basis; session management protocols that automatically expire inactive sessions; and regular security reviews of platform infrastructure.
No system is completely immune to security risks. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, kx89 will notify affected players without undue delay and will take all reasonable steps to contain the breach and minimise its impact. kx89 encourages players to use strong, unique passwords for their account and to contact support immediately if they suspect any unauthorised access to their account.
10. Policy Changes and Contact
How kx89 communicates updates to this Policy and how to reach us with privacy queries.
kx89 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform services. When we make material changes — meaning changes that significantly affect how we collect or use your personal data — we will notify registered players via the platform's notification channel and update the effective date at the top of this Policy. We encourage you to review this Policy periodically. Your continued use of kx89 after the effective date of a revised Policy constitutes acceptance of the updated terms.
If you have any questions, concerns, or requests relating to this Privacy Policy or the way kx89 handles your personal data, please contact kx89 support through the platform's help channel. Privacy-related requests — including access requests, rectification requests, and erasure requests — should be submitted in writing through the platform's support channel with sufficient detail to allow us to identify your account and process your request. kx89 aims to acknowledge all privacy-related requests within five (5) business days and to resolve them within thirty (30) days.
Questions About Your Privacy?
Log in to manage your data preferences, or read our FAQ and Terms for more details about how kx89 operates.