kx8020 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how kx8020 ("we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("you", "the Player", "your") who access and use the kx8020 online casino and sports betting platform at https://kx8020.app. This Policy forms an integral part of the kx8020 Terms & Conditions and should be read together with that document.

kx8020 is committed to handling your personal data with care, transparency, and integrity. We collect only the information we genuinely need to deliver a safe, fair, and personalised gaming experience to players across Bangladesh and to comply with our legal obligations. We do not sell your personal data to third parties for marketing purposes.

By registering an account on kx8020, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data in the manner described herein. If you do not agree with this Policy, you should not create an account or use the kx8020 platform.

2. Data We Collect

kx8020 collects the following categories of personal data from players and website visitors. The specific data collected depends on how you interact with the platform:

2.1 Registration & Account Data

• Full legal name — used for account identification and KYC verification
• Date of birth — used to verify that you meet the 18+ age requirement
• Email address — used for account communication, security alerts, and support correspondence
• Mobile phone number — used for two-factor authentication and account recovery
• Residential address — used as part of KYC identity verification and fraud prevention
• Username and hashed password — used for account access and authentication

2.2 Identity Verification (KYC) Documents

• Government-issued photo identification (National ID card, passport, or driving licence)
• Proof of address documents (utility bill, bank statement, or equivalent)
• Payment method verification (bKash, Nagad, Rocket, or Upay account confirmation; card front image for card payments)
• Selfie or live facial recognition data where required to match against identity documents

2.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment methods used
• Running account balance and transaction history
• Bonus credit allocations and wagering progression records
• Payment method identifiers (e.g., masked bKash account number, masked card number)

2.4 Gaming & Betting Activity Data

• Bets placed, games played, wager amounts, and game outcomes
• Session duration records and login/logout timestamps
• Responsible gaming tool usage (deposit limits set, cooling-off periods requested)
• Sports betting selections, live betting activity, and odds accepted

2.5 Technical & Device Data

• IP address and approximate geographic location derived from IP
• Device type, operating system, browser type and version
• Referring URL and navigation path within the kx8020 website
• Cookie identifiers and session tokens (see Section 6)

2.6 Communication Data

• Live chat transcripts between you and the kx8020 support team
• Email correspondence relating to your account or any complaint
• Survey responses and feedback submitted voluntarily

3. How We Collect Data

kx8020 collects personal data through the following channels:

• Directly from you: When you complete the registration form, submit KYC documents, make a deposit, request a withdrawal, contact customer support, or complete any voluntary survey or feedback form on the platform.
• Automatically via technology: When you visit the kx8020 website, our servers automatically log technical data including your IP address, device identifiers, browser information, and navigation behaviour through cookies and similar tracking technologies (see Section 6).
• From payment providers: When you initiate a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, the relevant payment service provider may share transaction confirmation data and payment identifiers with kx8020 to reconcile your account.
• From identity verification partners: kx8020 may use authorised third-party KYC service providers to assist in verifying the authenticity of identity documents and to cross-reference data against relevant databases for the purposes of fraud prevention and anti-money-laundering compliance.
• From fraud prevention and security services: kx8020 may receive risk signals and device fingerprinting data from specialised security partners to detect and prevent account takeover, bonus abuse, and money laundering activity.

4. Purpose & Legal Basis for Processing

kx8020 processes your personal data only when there is a clear and legitimate purpose and an appropriate legal basis for doing so. The following table sets out the principal purposes for which we process personal data and the corresponding legal basis in each case:

5. Data Sharing & Third Parties

kx8020 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Personal data may be shared with the following categories of third parties only where necessary and appropriate:

5.1 Payment Service Providers

To process deposits and withdrawals, kx8020 shares the minimum necessary financial data with authorised payment partners including bKash, Nagad, Rocket, Upay, Visa, and Mastercard. These providers process data in accordance with their own privacy policies and applicable financial services regulations.

5.2 Identity Verification & KYC Providers

kx8020 may engage regulated third-party KYC service providers to assist in verifying identity documents and conducting anti-money-laundering checks. These providers act as data processors on behalf of kx8020 and are contractually obligated to handle data securely and only for the purposes instructed.

5.3 Game Software Providers

Game studios whose titles are featured on the kx8020 platform (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive anonymised session data for the purposes of game integrity monitoring, RNG auditing, and technical support. These providers do not receive personally identifiable registration data unless required for a specific technical investigation.

5.4 Legal & Regulatory Authorities

kx8020 may disclose personal data to law enforcement agencies, courts, regulatory bodies, or other government authorities where required to do so by law, court order, or legally binding regulatory demand. kx8020 will notify you of any such disclosure where permitted to do so by law.

5.5 Fraud Prevention & Security Services

kx8020 may share limited technical data (such as IP addresses, device fingerprints, and behavioural signals) with specialised fraud prevention and cybersecurity service providers to detect account takeover attempts, identify multi-accounting, and prevent financial crime.

6. Cookies & Tracking Technologies

The kx8020 website uses cookies and similar tracking technologies to operate core platform functionality, improve your experience, and analyse how the site is used. By continuing to use the kx8020 website, you consent to the use of cookies as described in this section.

6.1 Types of Cookies Used

• Strictly necessary cookies: Required for the platform to function correctly. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without affecting platform functionality.
• Functional cookies: Remember your preferences such as language settings, display preferences, and responsible gaming tool configurations so that you do not need to reset them on each visit.
• Analytics cookies: Collect anonymised data about how visitors navigate the kx8020 website (pages visited, time on page, entry and exit points) to help us improve the platform's structure and content.
• Security cookies: Used to detect fraudulent activity, prevent cross-site request forgery (CSRF), and protect your account from unauthorised access attempts.

6.2 Cookie Control

You may control and manage cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will impair your ability to log in to and use the kx8020 platform. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.

7. Data Retention

kx8020 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, to comply with applicable legal obligations, and to resolve any disputes or enforce agreements. The following retention periods apply as a general guide:

Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction. Where data cannot be immediately deleted due to technical constraints, it will be isolated from active processing pending scheduled deletion.

8. Data Security

kx8020 takes the security of your personal data extremely seriously. We implement a comprehensive set of technical and organisational security measures to protect your data against unauthorised access, disclosure, alteration, and destruction:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the kx8020 servers is encrypted using industry-standard Transport Layer Security (TLS) protocols, making it unreadable to any third party that might intercept the transmission.
• Password hashing: Account passwords are never stored in plain text. They are processed using strong one-way cryptographic hashing algorithms, meaning that even kx8020 staff cannot view your actual password.
• Two-factor authentication (2FA): kx8020 strongly recommends enabling 2FA on your account. When activated, a second verification step is required at login, significantly reducing the risk of unauthorised account access even if your password is compromised.
• Access controls: Access to personal data within kx8020's internal systems is strictly role-based. Only personnel with a legitimate operational need can access player data, and all access is logged and audited.
• Secure data centres: Player data is stored on servers hosted in secure facilities with physical access controls, environmental monitoring, and redundant systems to ensure availability and integrity.
• Regular security assessments: kx8020's platform undergoes regular security testing including vulnerability assessments and penetration testing to identify and remediate potential weaknesses before they can be exploited.

9. Your Privacy Rights

As a player on the kx8020 platform, you hold a number of rights in relation to your personal data. kx8020 is committed to facilitating the exercise of these rights promptly and without unnecessary barriers:

• Right of access: You have the right to request a copy of the personal data that kx8020 holds about you. We will provide this within a reasonable timeframe upon verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic account information directly via the account settings panel.
• Right to erasure ("right to be forgotten"): You may request that kx8020 delete your personal data. This right is subject to our legal retention obligations — where we are required by law to retain data (e.g., AML regulations), we cannot delete it before the mandatory retention period expires.
• Right to restriction of processing: You may request that kx8020 restrict the processing of your data in certain circumstances, such as while a dispute about the accuracy of your data is being resolved.
• Right to data portability: Where technically feasible and where processing is based on your consent or a contract, you may request a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time via your account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to object: You may object to processing that is based on kx8020's legitimate interests. kx8020 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.

To exercise any of these rights, please contact the kx8020 support team via the live chat service in your account dashboard, or by email at [email protected]. We will respond to all data rights requests within 30 days. For complex requests, we may require identity verification before processing your request.

10. Children's Privacy

The kx8020 platform is strictly intended for adults aged 18 years and above. kx8020 does not knowingly collect, process, or store personal data from individuals under the age of 18. The age verification step in the registration process and the KYC identity verification procedure are both designed to prevent minors from accessing the platform.

If kx8020 becomes aware that personal data has been collected from a person under the age of 18, we will take immediate steps to delete that data, close the associated account, and withhold any funds pending further review in accordance with our Responsible Gaming Policy.

11. International Data Transfers

kx8020 primarily serves players in Bangladesh and processes the majority of player data within secure data centre environments. However, certain third-party service providers (such as KYC verification partners, game software providers, and cloud infrastructure services) may be located in or process data in jurisdictions outside Bangladesh.

Where personal data is transferred internationally, kx8020 ensures that appropriate safeguards are in place to maintain an equivalent standard of data protection. Such safeguards may include contractual data processing agreements incorporating standard data protection clauses, adequacy assessments of the recipient jurisdiction, and technical security requirements imposed on the receiving party.

kx8020 will not transfer your personal data to any jurisdiction or any third party that cannot provide an adequate level of protection for your data. If you have questions about specific international transfers, please contact us using the details in Section 14.

12. Third-Party Links

The kx8020 platform may contain references to third-party game studios, payment providers, and other services. While kx8020 takes care to only reference reputable partners, we have no control over the content, privacy practices, or data handling policies of any third-party website or service. This Privacy Policy applies solely to the kx8020 platform at https://kx8020.app.

kx8020 recommends that you review the privacy policy of any third-party service you interact with independently of the kx8020 platform. kx8020 accepts no liability for the data practices of any external entity.

13. Policy Updates

kx8020 reserves the right to update or amend this Privacy Policy at any time to reflect changes in the way we operate, changes in applicable law, or improvements to our data protection practices. When a material change is made to this Policy, kx8020 will notify registered players via a notice posted on the platform or via email to the address associated with your account, at least 7 days before the changes take effect.

The "Effective Date" at the top of this Policy will always reflect the date on which the current version came into force. We encourage you to review this Policy periodically to stay informed about how kx8020 protects your personal data. Your continued use of the kx8020 platform after the effective date of any updated Policy constitutes your acceptance of the revised terms.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way kx8020 handles your personal data, please contact our dedicated support team using any of the following channels:

• Live Chat: Available directly within your kx8020 account dashboard — the fastest way to reach our team for urgent data queries.
• Email: [email protected] — for formal data rights requests, privacy complaints, or detailed enquiries. We aim to respond within 30 days of receipt.

When submitting a data rights request by email, please include your registered username and a clear description of the right you wish to exercise or the concern you wish to raise. We may ask you to verify your identity before processing the request to ensure your data is protected against fraudulent access requests.

kx8020 takes all privacy concerns seriously. If you believe your data has been mishandled and are not satisfied with our response, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction.