kp33 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

kp33 operates the online casino and sports betting platform accessible at kp33.onl ("the Platform", "the Website"). References in this Privacy Policy to "kp33", "we", "us", or "our" refer to the kp33 platform and its operating entity. References to "you", "your", or "the User" refer to any individual who visits, registers on, or otherwise interacts with the kp33 website.

kp33 is the data controller for all personal information collected through the Platform. This means that kp33 determines the purposes and means by which your personal data is processed. If you have any questions or concerns about how kp33 handles your personal data, you may contact us at any time using the details set out in Section 13 of this policy.

The categories of personal data that kp33 may collect and hold about you are set out in the table below. The specific data points collected will depend on which features of the Platform you use and whether you proceed to full account registration and verification.

kp33 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data (other than responsible gaming self-assessments), or biometric data. If you voluntarily provide such information in a support communication, it will be handled with appropriate care and not used beyond the context of that communication.

kp33 collects personal data through the following channels:

• Direct interactions: Data you provide when you complete the registration form, submit KYC documents, initiate a deposit or withdrawal, contact customer support, or respond to a survey or promotion.
• Automated technical collection: Data collected automatically when you visit kp33.onl, including IP address, device identifiers, session cookies, and usage analytics. This data is collected via server logs and first-party analytics tools.
• Payment processors: Confirmation data returned by mobile wallet operators (bKash, Nagad, Rocket, Upay) and banking partners upon completion of a transaction. kp33 does not receive or store full payment credentials; transaction confirmation references are retained for reconciliation and dispute resolution purposes.
• Game software providers: Aggregated game session data (game ID, round ID, stake, outcome) returned by certified game providers such as Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe. This data is used for account balance management, dispute resolution, and responsible gaming monitoring.
• Identity verification services: Where kp33 uses a third-party KYC service to verify the authenticity of identity documents, that service may confirm verification status to kp33 without retaining a copy of the document on kp33's systems.

kp33 uses the personal data it holds about you for the following purposes:

• Account creation and management: To register your account, verify your identity and age (21+ requirement), maintain your account balance, and process deposits and withdrawals via bKash, Nagad, Rocket, and other supported channels.
• Delivery of platform services: To enable you to access cricket betting, live casino games, slots, card games, and all other features offered on kp33.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, underage gambling, and any other misuse of the kp33 platform. This includes automated risk-scoring of account activity patterns.
• Regulatory compliance: To fulfil Know Your Customer (KYC) obligations, maintain transaction records, and respond to lawful requests from competent authorities.
• Responsible gaming: To monitor gambling behaviour for signs of problem gambling, apply and enforce deposit limits and self-exclusion requests, and send responsible gaming communications where appropriate.
• Customer support: To respond to your enquiries, process complaints, and resolve disputes relating to your account, bets, or game outcomes.
• Platform improvement: To analyse aggregated usage patterns and improve the design, performance, and features of kp33 for all Bangladeshi players. Analytics data used for this purpose is aggregated and not linked to identifiable individuals where possible.
• Marketing communications: To send you promotional offers, bonus notifications, and news about kp33 — but only where you have provided consent or where kp33 has a legitimate interest in keeping you informed. You may opt out of marketing communications at any time by contacting [email protected].

kp33 processes your personal data on one or more of the following lawful bases, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil the Terms & Conditions agreement between you and kp33 — including account registration, transaction processing, and game access.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC obligations, anti-money laundering requirements, and responses to lawful authority requests.
• Legitimate interests: Processing carried out in pursuit of kp33's legitimate business interests, such as fraud detection, platform security, and service improvement, where those interests are not overridden by your rights and interests.
• Consent: Processing carried out based on your freely given, specific, and informed consent — primarily for direct marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

kp33 does not sell or rent your personal data. We may share it only in the following limited and controlled circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, and banking partners receive only the minimum data required to process your deposit or withdrawal transaction (e.g., your wallet number and transaction amount).
• Game software providers: Certified providers including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe receive a session token and stake data to run the game. They do not receive your full identity profile.
• Identity verification services: Third-party KYC services used to authenticate your identity documents during the verification process. These partners operate under strict data processing agreements with kp33.
• IT and infrastructure providers: Hosting, content delivery, and platform security providers who support the technical operation of kp33.onl. These providers process data on kp33's behalf under contractual obligations that prohibit independent use of the data.
• Legal and regulatory authorities: kp33 will disclose personal data to law enforcement, regulatory bodies, or courts when required to do so by law or when necessary to protect the rights, property, or safety of kp33, its users, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of kp33's business, personal data may be transferred to the acquiring entity subject to equivalent privacy protections being maintained.

All third parties with whom kp33 shares personal data are contractually required to implement appropriate security measures and are prohibited from using your data for any purpose other than the specific service they provide to kp33.

kp33 uses cookies and similar tracking technologies to operate the Platform and improve your experience. A cookie is a small text file stored on your device by your web browser when you visit a website. kp33 uses the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in to your account, security tokens that protect against cross-site request forgery, and load-balancing cookies. These cannot be disabled without affecting core Platform functionality.
• Functional cookies: Remember your preferences such as language settings, odds format, and display options to provide a more personalised experience on return visits.
• Analytics cookies: Collect anonymised data about how visitors use kp33.onl, including pages visited, time spent, and navigation paths. This data helps kp33 identify areas for improvement. Analytics data is processed in aggregate form and is not linked to individual identities.
• Security cookies: Used by kp33's fraud detection and risk management systems to identify unusual login patterns, detect bot activity, and protect accounts from unauthorised access.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in to your kp33 account. kp33 does not use third-party advertising cookies or retargeting pixels on its Platform.

kp33 retains personal data for as long as necessary to fulfil the purpose for which it was collected, unless a longer retention period is required or permitted by applicable law. The general retention periods applied by kp33 are as follows:

• Active account data: Retained for the duration of your registered account with kp33 plus a period of five years following account closure, to support dispute resolution and regulatory audit requirements.
• KYC and identity documents: Retained for a minimum of five years from the date of verification, in accordance with applicable financial compliance obligations.
• Transaction records: Deposit, withdrawal, and betting records are retained for a minimum of five years from the date of each transaction.
• Customer support communications: Retained for three years from the date of the last correspondence in a support thread.
• Technical and usage data (server logs): Retained for up to 12 months from collection, after which it is deleted or anonymised.
• Marketing consent records: Retained for the duration of your account plus three years, to evidence consent and opt-out history.

When personal data is no longer required within the periods set out above, kp33 will securely delete it from its systems or permanently anonymise it so that it can no longer be associated with you as an individual.

As a kp33 user, you hold the following rights in relation to your personal data. To exercise any of these rights, submit a written request to [email protected], including your registered username and a description of the right you wish to exercise. kp33 will acknowledge your request within 48 hours and respond substantively within 30 days.

Please note that certain rights may be limited where kp33 is required to retain or process data to comply with a legal obligation, to defend a legal claim, or to prevent harm to the public or to kp33's other users. Where a limitation applies, kp33 will explain the reason in its response to your request.

kp33 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or alteration. Key measures include:

• Transport-layer security: All data in transit between your device and kp33 servers is encrypted using TLS 1.2 or higher with 256-bit SSL certificates. The kp33.onl domain enforces HTTPS at all times.
• Password security: Passwords are never stored in plain text. kp33 uses strong one-way cryptographic hashing with salt to store password credentials, ensuring that even in the event of a data breach, raw passwords cannot be recovered.
• Access controls: Access to systems containing personal data is restricted on a strict need-to-know basis. Internal staff access is logged and subject to regular review. Multi-factor authentication is required for all administrative access to production systems.
• Data minimisation at rest: Production databases store only the minimum data required for platform operations. Sensitive fields such as identity document numbers and financial reference identifiers are stored in encrypted form.
• Incident response: kp33 maintains an internal data breach response procedure. In the event of a personal data breach that poses a risk to your rights and interests, kp33 will notify affected users promptly and take all reasonable steps to contain and remediate the incident.

Despite these measures, no internet-based platform can guarantee absolute security. You are encouraged to use a strong, unique password for your kp33 account and to enable two-factor authentication (2FA) through your account settings. Notify kp33 immediately at [email protected] if you suspect any unauthorised access to your account.

kp33 is strictly an adult gambling platform. The minimum age requirement to register an account and use any real-money service on kp33 is 21 years. kp33 does not knowingly collect personal data from individuals under the age of 21.

Age verification is performed as part of the KYC process, and accounts found to belong to individuals under 21 are closed immediately. If kp33 becomes aware that it has inadvertently collected personal data from a person under 21, that data will be deleted promptly and any deposits refunded to the payment source where possible.

If you are a parent or guardian and believe that a person under 21 in your household has registered with kp33 without your knowledge, please contact us immediately at [email protected] with the subject line "Underage Account Report". kp33 will investigate and act without delay.

kp33 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable legal requirements. When a material change is made, kp33 will update the "Last Updated" date at the top of this page and, where feasible, notify registered users via email or an in-platform notification prior to the change taking effect.

The current version of the Privacy Policy published at kp33.onl/privacy-policy is always the operative version. We encourage you to review this page periodically. Continued use of the kp33 platform after a revised Privacy Policy takes effect constitutes your acceptance of the updated terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way kp33 handles your personal data, please contact our support team in writing. We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a full response within 30 days.

For requests to exercise your data rights (access, rectification, erasure, etc.), please follow the procedure described in Section 9. For responsible gaming support or self-exclusion requests, please visit the Responsible Gaming page for dedicated guidance.