Privacy Policy

1 Information We Collect

When you register for, access, or use the kb22 platform, we collect certain categories of personal data. The nature and extent of the data collected depends on how you use our services. Below is a detailed breakdown of the categories of personal information kb22 collects.

1.1 Registration and Identity Data

When you create a kb22 account, we collect the information you provide during the registration process. This includes your full name, date of birth, residential address (including district, division, and postcode), email address, and mobile phone number. This information is required to establish your identity, communicate with you, and comply with our age verification obligations.

1.2 Identity Verification Documents

As part of our Know Your Customer (KYC) and anti-money laundering (AML) compliance obligations, kb22 may request and retain copies of identity verification documents. These may include your National Identity Card (NID), passport, driving licence, or other government-issued photo identification. We may also request proof of address, such as a recent bank statement or utility bill issued in Bangladesh.

1.3 Financial and Payment Data

To process deposits and withdrawals, kb22 collects information relating to your chosen payment methods. This includes your bKash, Nagad, or Rocket mobile number, bank account details (where applicable), and transaction history. kb22 does not store full card numbers on its servers — card payment data is handled by PCI-DSS-compliant payment processors.

1.4 Technical and Usage Data

kb22 automatically collects certain technical data when you access our platform. This includes your IP address, device type, operating system, browser type and version, screen resolution, language settings, and time zone (Bangladesh Standard Time, UTC+6). We also record session data including pages visited, games played, bets placed, login timestamps, and session duration.

1.5 Communications Data

If you contact kb22's support team via email at [email protected], we retain records of that correspondence, including the content of messages and any attachments. This data is used to resolve your query and to improve our customer service quality.

1.6 Data Collected From Third Parties

In certain circumstances, kb22 may receive personal data about you from third-party sources. These sources may include identity verification agencies, fraud prevention services, payment processing partners (including bKash, Nagad, and Rocket), and game content providers. Any data received from third parties is subject to the same protections described in this Privacy Policy.

2 How We Use Your Data

kb22 uses the personal data we collect only for legitimate, specified purposes. We do not use your personal data for any purpose that is incompatible with the purpose for which it was originally collected without your prior consent. The primary purposes for which we process your personal data are as follows:

2.1 Account Management and Service Delivery

We use your registration and identity data to create and manage your kb22 player account, to verify your identity and age, to process your deposits and withdrawals via bKash, Nagad, Rocket, and other supported payment methods, and to deliver the full range of kb22's betting and gaming services to you.

2.2 Legal and Regulatory Compliance

As an online gaming platform serving players in Bangladesh, kb22 is subject to various legal obligations including anti-money laundering (AML) requirements, counter-terrorist financing (CTF) obligations, and know-your-customer (KYC) duties. We process your personal data as necessary to comply with these legal obligations, which may include reporting certain transactions or activities to relevant authorities.

2.3 Fraud Prevention and Platform Security

kb22 uses technical and usage data — including IP addresses, device fingerprints, and transaction patterns — to detect and prevent fraudulent activity, account takeover attempts, bonus abuse, multi-accounting, and other prohibited conduct. This processing is carried out in our legitimate interest in maintaining a secure, fair platform for all players.

2.4 Responsible Gaming Monitoring

kb22 takes responsible gaming seriously. We use your usage data — including betting frequency, session duration, deposit patterns, and game history — to identify potential signs of problem gambling behaviour. Where such indicators are detected, we may contact you proactively with responsible gaming information or, where necessary, apply account restrictions in accordance with our Responsible Gaming Policy.

2.5 Customer Support

We use your contact data and communications history to respond to your support enquiries, resolve disputes, and provide ongoing customer assistance. Support communications are retained for quality assurance and training purposes.

2.6 Platform Improvement and Analytics

Aggregated and anonymised technical and usage data is used to analyse how players use the kb22 platform, to identify areas for improvement, and to optimise the performance and user experience of our website and games. This analysis does not involve making automated decisions about individual players.

2.7 Marketing Communications

Where you have expressly opted in to receive marketing communications, kb22 may send you information about promotions, new games, seasonal offers (such as BPL season promotions, Eid specials, or IPL betting markets), and platform updates. You may withdraw your consent to marketing communications at any time by contacting [email protected] or by using the unsubscribe function in any marketing email you receive.

3 Cookies and Tracking Technologies

kb22 uses cookies and similar tracking technologies (such as web beacons and local storage objects) to operate the platform, maintain your session, and understand how players interact with our website. This section explains what cookies we use and why.

3.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit — for example, your login status, preferred language, or session identifier — so that your next visit is smoother and the site can provide personalised functionality.

3.2 Categories of Cookies Used by kb22

3.3 Third-Party Cookies

Some cookies on the kb22 platform are set by our trusted third-party service providers, including game content providers such as Pragmatic Play, Evolution Gaming, and Spribe. These providers may use session cookies strictly to deliver their game content within the kb22 platform. kb22 does not permit third-party advertising networks to set tracking cookies on our platform.

3.4 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to block, delete, or restrict cookies. Please note that blocking strictly necessary cookies will prevent you from logging in to your kb22 account and using the platform's core features. Instructions for managing cookies in common browsers are available through the browser's own help documentation.

4 Data Sharing and Disclosure

kb22 does not sell, rent, lease, or otherwise trade your personal data to third parties for marketing purposes under any circumstances. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for the specified purpose.

4.1 Payment Processing Partners

To process your deposits and withdrawals, kb22 shares relevant payment data with our payment processing partners. These include mobile financial service providers (bKash, Nagad, Rocket, Upay), banking partners (Dutch-Bangla Bank, City Bank, BRAC Bank), and international card networks (Visa, Mastercard). Each partner processes your data solely to complete the requested transaction and is bound by contractual data protection obligations.

4.2 Game Content and Technology Providers

To deliver our casino games, live dealer tables, and sportsbook services, kb22 works with internationally recognised game studios and platform technology providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may process limited technical data (such as session IDs and game round identifiers) as part of delivering their services. They do not receive your full name, NID, or financial data.

4.3 Identity Verification and Fraud Prevention Services

kb22 uses third-party identity verification and fraud prevention services to comply with our KYC and AML obligations. These services may process your identity documents and personal data on kb22's behalf, subject to strict confidentiality agreements. Their use of your data is limited to performing the verification or fraud assessment requested by kb22.

4.4 Legal and Regulatory Disclosure

kb22 may be required by law to disclose certain personal data to governmental authorities, law enforcement agencies, or regulatory bodies. Such disclosures are made only where we have a legal obligation to do so, and only to the extent required by that legal obligation. Where permissible, kb22 will notify affected players of such disclosure.

4.5 Business Transfers

In the event that kb22 undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, personal data held by kb22 may be transferred to the acquiring entity as part of that transaction. In such an event, we will take reasonable steps to ensure that your personal data continues to be protected in accordance with standards equivalent to those described in this Privacy Policy, and we will notify registered players of any material change in data controller.

5 Data Retention

kb22 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

5.1 Active Account Data

While your kb22 account remains active, we retain your registration data, identity verification documents, transaction history, and usage data for the lifetime of your account. This data is necessary to provide you with our services on an ongoing basis.

5.2 Post-Closure Retention

Following closure of your kb22 account — whether at your request or by kb22 — we are required by financial and regulatory obligations to retain certain personal data for a minimum period after account closure. Transaction records and identity verification documents are typically retained for a minimum of five (5) years following account closure, in accordance with standard financial record-keeping obligations.

5.3 Marketing Data

Where you have opted in to marketing communications, we retain your marketing preference data for as long as your account is active and for a reasonable period following your opt-out or account closure, to ensure we respect your preferences.

5.4 Support Communications

Records of support communications are retained for up to two (2) years following resolution of the relevant query, for quality assurance and dispute resolution purposes.

5.5 Inactive Account Data

If your account becomes inactive (no login activity for 12 consecutive months), kb22 will retain your personal data in accordance with the timelines above. Inactive accounts may be subject to the inactivity policy described in our Terms and Conditions. Following the applicable retention period, data is securely and irreversibly deleted or anonymised.

6 Your Privacy Rights

As a player on the kb22 platform, you have a number of rights in relation to the personal data we hold about you. kb22 is committed to respecting and facilitating the exercise of these rights. To exercise any of the rights described below, please contact us at [email protected].

6.1 How to Submit a Request

To exercise any of the rights listed above, please send a written request to [email protected] from the email address registered to your kb22 account. Please clearly state the right you wish to exercise and provide sufficient information to identify your account. kb22 will acknowledge your request within 5 business days and will aim to complete your request within 30 days. In cases of complexity or high volume, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reasons for it.

6.2 Identity Verification Before Processing Requests

To protect the security of your personal data, kb22 will verify your identity before processing any data subject request. This may involve asking you to confirm information already on file or to provide a copy of a valid identity document. We cannot process requests from individuals who cannot be satisfactorily verified as the account holder.

6.3 Limitations on Erasure

Your right to erasure is not absolute. kb22 may decline a deletion request where retaining your data is necessary to comply with a legal obligation, to defend a legal claim, or to complete an ongoing financial transaction. Where we decline a deletion request, we will inform you of the reason and the expected retention period for the relevant data.

7 Data Security Measures

kb22 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security programme is aligned with recognised international best practices for online financial services.

7.1 Technical Security Controls

All data transmitted between your browser and kb22 servers is protected by 256-bit SSL/TLS encryption. Our servers are hosted in secure, access-controlled data centre environments with physical security measures including biometric access controls, CCTV monitoring, and redundant power systems. Player passwords are stored as salted cryptographic hashes — they are never stored in plain text and cannot be retrieved by kb22 staff.

7.2 Access Controls

Access to personal data within kb22's systems is restricted to personnel who have a legitimate need to access it as part of their role. All staff with access to personal data receive data protection training and are bound by confidentiality obligations. Access rights are reviewed regularly and revoked promptly when no longer required.

7.3 Payment Security

kb22 does not store full payment card numbers on its own servers. Card transactions are handled by PCI DSS-compliant payment processors. Mobile financial service transactions via bKash, Nagad, and Rocket are processed through encrypted API connections with the respective providers. No sensitive payment authentication data (such as CVV codes or mobile wallet PINs) is retained by kb22.

7.4 Incident Response

kb22 maintains an internal data breach response procedure. In the event of a personal data breach that poses a risk to affected players, kb22 will notify affected account holders as soon as reasonably practicable, providing details of the nature of the breach, the data affected, and the steps we are taking to address it. We will also report qualifying breaches to the relevant authorities as required by applicable law.

7.5 Your Responsibility

While kb22 takes every reasonable precaution to secure your personal data on our side, you also have a role to play in keeping your account secure. You should choose a strong, unique password for your kb22 account, never share your login credentials with anyone, log out of your account after each session (particularly on shared devices), and contact kb22 immediately at [email protected] if you suspect your account has been compromised.

8 Contact and Policy Updates

8.1 Contacting kb22 About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or kb22's handling of your personal data, please contact us in writing at support@kb22. club. Our privacy support team will acknowledge your enquiry within 5 business days and will endeavour to provide a substantive response within 30 days.

8.2 Updates to This Privacy Policy

kb22 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform. When we make material changes to this policy, we will notify registered players by email to the address on file and by posting a prominent notice on the kb22 platform. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

8.3 Continued Use as Acceptance

Your continued use of the kb22 platform following notification of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you should cease using the platform and may request closure of your account by contacting [email protected].

8.4 Governing Language

This Privacy Policy is written in English, which is the governing language of this document. In the event of any ambiguity or dispute arising from a translation of this document into any other language, the English version shall prevail.