kb666 Privacy Policy — Your Data, Our Responsibility

1 Introduction

kb666 is committed to protecting the privacy and personal data of every player who uses our online betting and casino platform. This Privacy Policy has been prepared in accordance with responsible data handling principles and applies to all personal data collected through the kb666 website (kb666.io), any associated mobile-optimised interfaces, and all customer support interactions.

This Policy should be read alongside our Terms & Conditions, which govern the overall use of the kb666 platform. Capitalised terms used but not defined in this Policy carry the same meaning as in our Terms & Conditions. The Effective Date of this Policy is 1 January 2026. All prior privacy policy versions are superseded by this document from that date.

Our primary user base is located in Bangladesh, spanning Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and beyond. All privacy communications are conducted in English. If you have any questions about this Policy before proceeding, please contact our support team at [email protected] before using the platform.

2 Data We Collect

kb666 collects personal data across several categories, as described below. We collect only what is necessary for the specific purpose identified for each category.

3 How We Collect Your Data

kb666 collects personal data through the following channels:

• Direct Submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in promotions.
• Automated Technologies: Data collected automatically as you use the platform, including cookies, session tokens, log files, and similar tracking technologies. See Section 7 (Cookies & Tracking) for full details.
• Payment Providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, and other payment partners when you initiate a deposit or withdrawal through our cashier.
• Third-Party Identity Verification Services: Where we engage a KYC verification partner to authenticate documents you submit during account verification, that partner may provide us with the result of the verification check.
• Fraud Detection Services: Aggregated risk signals from fraud prevention partners used to assess the legitimacy of account activity. These signals do not include your full personal profile.

4 How We Use Your Data

kb666 uses personal data for the following specific purposes:

1. Account Creation and Management: To register your account, verify your identity and age (21+ policy), maintain your account in good standing, and process account closure requests.
2. Payment Processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods. Transaction data is shared with the relevant payment provider only to the extent necessary to complete the specific transaction.
3. Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, multiple account abuse, bot activity, and other prohibited conduct as defined in our Terms & Conditions.
4. Responsible Gaming: To monitor betting patterns and session behaviour in order to identify potential signs of problem gambling and to deliver responsible gaming interventions such as deposit limit reminders and self-exclusion tools.
5. Customer Support: To respond to your enquiries, resolve disputes, investigate complaints, and deliver the highest standard of 24/7 English-language support.
6. Legal and Regulatory Compliance: To fulfil our obligations under applicable anti-money laundering (AML) and Know Your Customer (KYC) requirements, and to respond to lawful requests from competent authorities.
7. Platform Improvement: To analyse aggregated usage patterns, identify technical issues, and improve the quality, performance, and user experience of the kb666 platform.
8. Marketing Communications (Opt-In Only): To send you relevant promotions, bonus offers, and platform updates via email or SMS, but only where you have given your express consent to receive such communications. You may withdraw consent at any time by contacting [email protected].

kb666 does not use your personal data for automated decision-making that produces significant legal effects without human review, except in the limited context of real-time fraud detection where automated flags are always reviewed by a human compliance team member before any account action is taken.

5 Legal Basis for Processing

kb666 processes personal data only where a valid legal basis exists. The primary legal bases we rely upon are as follows:

• Contractual Necessity: Processing that is required to perform the contract between you and kb666 — i.e., to operate your account, process your bets, and manage your deposits and withdrawals.
• Legal Obligation: Processing required to comply with applicable legal obligations, including AML/KYC requirements and lawful authority requests.
• Legitimate Interests: Processing conducted for our legitimate business interests, including fraud prevention, platform security, and product improvement, where those interests are not overridden by your rights and interests.
• Consent: Processing for which we have obtained your prior, freely given, specific, and informed consent — primarily for direct marketing communications. Consent may be withdrawn at any time.

6 Data Sharing & Disclosure

kb666 does not sell your personal data. We share personal data only in the following limited and controlled circumstances:

• Payment Service Providers: We share the minimum necessary transactional data with bKash, Nagad, Rocket, Upay, and other payment partners to process your deposits and withdrawals. These providers are contractually required to process your data only for the specified transaction purpose.
• Identity Verification Partners: Where a third-party KYC service is used, your submitted identity documents and personal details are shared for the sole purpose of verifying your identity and age. These partners do not retain your documents beyond the verification period.
• Fraud Prevention Partners: Aggregated risk signals — not your full personal profile — may be shared with fraud detection service providers to assess account risk levels and protect the integrity of the kb666 platform.
• Game Studios and Software Providers: Game providers including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, and Spribe receive a session token and player identifier to facilitate your game session. They do not receive your full personal profile, payment details, or contact information.
• Legal and Regulatory Authorities: We will disclose personal data to competent authorities, law enforcement agencies, or courts where we are legally obligated to do so, or where disclosure is necessary to protect the safety of persons or the integrity of the platform.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of our business, your personal data may be transferred to the acquiring entity, subject to the same protections described in this Policy. You will be notified of any such transfer.

7 Cookies & Tracking Technologies

kb666 uses cookies and similar tracking technologies to operate the platform efficiently, maintain your session security, and improve your experience. The following categories of cookies are used on kb666.io:

• Strictly Necessary Cookies: These are essential to the functioning of the platform. They enable core features such as session management, login authentication, and secure page navigation. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: These remember your preferences — such as language settings and display preferences — to personalise your experience on return visits. They do not track your activity across third-party sites.
• Analytics Cookies: These help us understand how players interact with kb666.io — which pages are visited most, where sessions begin and end, and how players navigate through the platform. Analytics data is aggregated and anonymised wherever possible.
• Security Cookies: Used to detect and prevent fraudulent activity, identify unusual login patterns, and protect the integrity of the platform against automated attacks and credential-stuffing attempts.

You can manage cookie preferences through your browser settings. Disabling functional or analytics cookies will not prevent you from using the platform but may reduce the personalisation of your experience. Strictly necessary and security cookies cannot be disabled via browser settings without disrupting platform functionality.

8 Data Retention

kb666 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data must be retained beyond its primary use period for legal reasons, it is archived with restricted access and is not used for any operational purpose.

9 Data Security

kb666 implements a layered approach to data security, combining technical controls, organisational measures, and operational practices to protect your personal data against unauthorised access, loss, alteration, or disclosure.

Key security measures in place include:

• SSL/TLS Encryption: All data in transit between your device and the kb666 platform is encrypted using industry-standard SSL/TLS protocols. Look for the padlock icon in your browser's address bar when visiting kb666.io.
• Encrypted Data Storage: Sensitive personal data — including identity documents and financial information — is stored in encrypted form on secured servers with restricted access.
• Access Controls: Personal data is accessible only to kb666 staff and authorised processors who have a genuine need to access it in the course of their duties. All staff with data access undergo privacy and security training.
• Two-Factor Authentication: kb666 supports two-factor authentication (2FA) for player accounts. We strongly encourage all players to enable 2FA to add an additional layer of protection to their account credentials.
• Regular Security Audits: The kb666 platform undergoes regular security reviews and vulnerability assessments to identify and remediate potential weaknesses before they can be exploited.
• Incident Response: In the event of a data security incident that poses a risk to your rights and interests, kb666 will notify affected players promptly and take all reasonable steps to contain the incident and mitigate its impact.

10 Your Rights

As a kb666 player, you have the following rights with respect to your personal data. Requests to exercise any of these rights should be submitted to [email protected] with your registered account username and a clear description of your request. We aim to respond to all data rights requests within 30 days.

• Right of Access: You have the right to request a copy of the personal data kb666 holds about you, along with information about how it is being used.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations (see Section 8). Note that we cannot delete data we are legally required to retain under AML/KYC regulations.
• Right to Restriction: You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to Data Portability: You have the right to receive a copy of personal data you have provided to kb666 in a structured, commonly used, machine-readable format where processing is based on your consent or on a contract.
• Right to Object: You have the right to object to processing based on our legitimate interests, and to opt out of direct marketing communications at any time without providing a reason.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

11 Children's Privacy

The kb666 platform is strictly intended for adults aged 21 years and over. kb666 does not knowingly collect personal data from persons under the age of 21. Our registration process includes mandatory age declaration and, where necessary, documentary age verification as part of our KYC process.

If kb666 discovers that personal data has been collected from a person under 21 years of age, that data will be deleted immediately, the associated account will be permanently closed, and any deposits made will be handled in accordance with our Terms & Conditions governing underage accounts.

Parents and guardians who believe that a minor may have created a kb666 account or accessed the platform are encouraged to contact us immediately at [email protected] so that appropriate action can be taken without delay. We take underage gambling very seriously and will act promptly on all such reports.

12 Third-Party Links

The kb666 platform may contain references to third-party services — such as game providers, payment platforms, or responsible gaming organisations. This Privacy Policy applies exclusively to data collected and processed by kb666. It does not apply to data collected by third-party platforms that you access independently.

When you use bKash, Nagad, Rocket, or Upay to fund your kb666 account, you interact directly with those providers' own interfaces and are subject to their respective privacy policies. kb666 is not responsible for the privacy practices of any third-party service, and we encourage you to review their policies before transacting.

Similarly, when you play games powered by Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, or other studios, those studios operate their software under their own data handling frameworks. kb666 restricts the data passed to game studios to what is operationally necessary for the game session and does not authorise studios to use your data for independent marketing or profiling.

13 Changes to This Privacy Policy

kb666 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, operational requirements, or applicable law. When material changes are made, we will notify registered players by email to their registered address at least 7 days before the changes take effect. The updated Policy will also be published on this page with a revised "Last Updated" date.

For non-material changes — such as typographical corrections or minor clarifications that do not affect how your data is actually used — we may update this page without direct individual notification, relying instead on the updated date at the top of this document as notice of the revision.

Your continued use of the kb666 platform after any updated Privacy Policy has taken effect constitutes your acceptance of the revised terms. If you do not agree with any changes, you must cease using the platform and may request account closure by contacting [email protected] prior to the effective date of the change.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way kb666 handles your personal data, please contact our dedicated privacy team using the details below:

• Email: [email protected]
• Subject Line (for privacy matters): "Privacy Policy Query" or "Data Rights Request"
• Response Time: Within 5 business days for acknowledgement; within 30 days for full resolution
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
• Language: English

We treat all privacy-related communications with the highest priority and complete confidentiality. Our team is trained to handle data rights requests, security concerns, and responsible gaming queries with professionalism and care.