kfbd Privacy Policy — How We Handle Your Data

kfbd ("the Platform", "we", "us", "our") is committed to protecting the privacy and personal data of every Member who registers and uses the kfbd online casino and sports betting platform available at kfbd.bio. This Privacy Policy ("Policy") describes the types of personal information we collect, the purposes for which we use it, the parties with whom we may share it, the security measures we apply to protect it, and the rights that Members have in relation to their personal data.

This Policy applies to all personal data processed by kfbd in connection with the operation of the Platform, including data collected via the website, account registration, deposits and withdrawals, customer support interactions, and gameplay activity. By registering an account with kfbd, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

kfbd collects personal data that is necessary to provide a safe, reliable, and compliant gaming service to Members in Bangladesh. The categories of data we collect, how they are collected, and why they are needed are summarised in the table below:

kfbd does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, unless such information is directly provided by a Member in the context of a support request or a responsible gaming self-assessment.

kfbd uses the personal data we collect only for purposes that are necessary, proportionate, and consistent with the lawful basis for processing. The specific purposes for which we use your data include:

• To create and maintain your kfbd account, verify your identity, and confirm that you meet the 21+ age eligibility requirement before permitting access to gambling services.
• To process deposits from bKash, Nagad, Rocket, and Upay, and to process withdrawal requests back to your registered payment method in BDT.
• To deliver and improve the kfbd gaming experience, including personalising game recommendations, managing bonus eligibility, and maintaining platform performance during peak events such as BPL and IPL cricket seasons.
• To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct as defined in our Terms and Conditions.
• To operate and enforce responsible gaming tools, including deposit limits, session time reminders, cooling-off periods, and self-exclusion, which are available in every Member's account settings.
• To communicate with you regarding your account, respond to support requests, and send policy or service update notifications where we are required or permitted to do so.

kfbd does not use your personal data for unsolicited marketing communications. If you receive a promotional notification from kfbd, it is because you opted in at the time of registration or subsequently through your account settings. You may withdraw this consent at any time by updating your communication preferences in your account settings.

kfbd processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing that is required to perform the contract between kfbd and the Member — for example, verifying identity to open an account, processing a deposit, or settling a withdrawal.
• Legal obligation: Processing required to comply with applicable legal obligations — for example, anti-money laundering (AML) checks, fraud reporting, or responding to a lawful request from a regulatory or law-enforcement authority.
• Legitimate interests: Processing that serves kfbd's legitimate business interests and does not override Member rights — for example, platform security monitoring, responsible gaming analytics, and fraud prevention.
• Consent: Processing based on your freely given, specific, and informed consent — for example, sending promotional communications. You may withdraw consent at any time.

kfbd does not sell, rent, or trade personal data. We may share your information with the following categories of third parties, strictly where necessary and for the purposes outlined in this Policy:

• Game and technology providers: kfbd's game library is powered by third-party providers including Evolution Gaming, Pragmatic Play, Spribe, Ezugi, NetEnt, and Microgaming. These providers receive the minimum data necessary to deliver and record gameplay sessions. They are contractually bound to process data only for the purpose of service delivery and are prohibited from using it for any other purpose.
• Payment processors: Transaction data is shared with bKash, Nagad, Rocket, Upay, and other payment infrastructure partners as required to complete deposits and withdrawals. These partners process payment data under their own published privacy policies and regulatory obligations.
• Regulatory and law-enforcement authorities: kfbd may be required by law to disclose Member data to relevant authorities in connection with financial crime investigations, fraud prevention orders, or other lawful demands. kfbd will comply with such requests but will seek to minimise the scope of disclosure to what is strictly required by the applicable legal demand.
• Fraud prevention and security services: kfbd uses specialist fraud detection and security monitoring services. These services may receive technical data (IP address, device fingerprint, session metadata) to identify suspicious activity. They do not receive identity or financial data beyond what is required for their specific fraud detection function.

kfbd does not share personal data with advertising networks, data brokers, or social media platforms for marketing or targeting purposes. All third-party sharing is governed by data processing agreements that require third parties to implement appropriate security measures and use data only as directed by kfbd.

When you make a deposit or request a withdrawal using bKash, Nagad, Rocket, or Upay, kfbd receives a transaction reference and confirmation from the relevant mobile money provider. kfbd does not store your mobile wallet PIN, one-time passwords (OTPs), or full wallet credentials at any point during or after a transaction. The payment flow is handled directly between your mobile wallet app and the payment provider's infrastructure; kfbd receives only the transaction confirmation data needed to credit or debit your kfbd account balance.

Transaction records — including deposit amounts, withdrawal amounts, timestamps, and payment method references — are retained by kfbd for the period described in Section 8 (Data Retention) of this Policy, in order to comply with financial record-keeping requirements and to support dispute resolution if a Member queries a transaction.

kfbd implements industry-standard technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. All data transmitted between your device and the kfbd platform is protected by SSL (Secure Sockets Layer) encryption. Account access is protected by password authentication. Sensitive account data at rest is stored using encryption. Access to Member data within kfbd's operational systems is restricted on a need-to-know basis and subject to internal access control policies.

While kfbd takes all reasonable steps to protect your data, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights or freedoms, kfbd will notify affected Members and take appropriate remedial action as quickly as practicable. Members are responsible for maintaining the security of their own login credentials and should never share their password or account access details with any third party.

kfbd retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable legal or regulatory obligations. The following general retention periods apply: account data and identity verification records are retained for the duration of the Member's account plus five years after account closure; transaction records are retained for five years from the date of each transaction; technical and usage data (logs, session data) is retained for twelve months in active systems and up to three years in secure archive storage for security and fraud investigation purposes.

When personal data is no longer required for the purposes for which it was collected and no legal retention obligation applies, kfbd will securely delete or anonymise it. Anonymised data (data from which all identifying information has been removed) may be retained indefinitely for aggregate analytics and platform improvement purposes.

As a kfbd Member, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact the kfbd support team at [email protected] with your registered mobile number and a description of your request:

• Right of access: You may request a copy of the personal data kfbd holds about you. We will provide this within a reasonable timeframe and at no charge for a first request in any twelve-month period.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it. We will act on reasonable rectification requests promptly.
• Right to erasure: You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to our legal retention obligations — we cannot delete data that we are required by law to retain.
• Right to restriction: You may request that we restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being reviewed.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

kfbd will respond to privacy rights requests within 30 days of receipt. Where a request is complex or we receive multiple requests from the same Member, we may extend this period by a further 30 days, in which case we will notify you. kfbd will not charge a fee for responding to privacy rights requests except where requests are manifestly unfounded or excessive.

kfbd uses cookies and similar tracking technologies on the Platform to support essential site functionality, maintain session security, and improve platform performance. The categories of cookies we use are:

• Essential cookies: These are required for the Platform to function correctly. They include session tokens that keep you logged in during your visit and security cookies that protect against cross-site request forgery. These cannot be disabled without breaking core site functionality.
• Analytics cookies: kfbd uses anonymised analytics data to understand how Members use the Platform, which pages are most visited, and where technical issues arise. This data is used in aggregate form only and is not used to identify individual Members.
• Functional cookies: These remember your preferences (such as language settings and session preferences) to improve your experience. They are not used for tracking across other websites.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Platform. kfbd does not use third-party advertising cookies or behavioural tracking technologies that profile you across websites for targeted advertising purposes.

kfbd is strictly an adults-only platform. We do not knowingly collect personal data from any person under the age of 21. If kfbd becomes aware that personal data has been collected from a person under 21, the associated account will be immediately closed and all related personal data will be deleted, subject to any legal retention obligations that may apply to the relevant transaction records. If you believe that a minor has registered a kfbd account, please notify our support team immediately at [email protected] so that we can investigate and take action. 21+ only.

kfbd may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the services we offer. Where a change is material, we will provide notice to Members via the Platform or via the contact details registered to their account at least 7 days before the change takes effect. The updated Policy will always show the effective date at the top of the document.

Continued use of the kfbd Platform after the effective date of any updated Privacy Policy constitutes acceptance of the revised Policy. If you do not accept the revised Policy, you should stop using the Platform and may request account closure in accordance with the kfbd Terms and Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data kfbd holds about you, please contact the kfbd data support team. Support is available 24 hours a day, 7 days a week including Bangladesh public holidays. Please include your registered mobile number in any privacy-related communication so that our team can locate your account and respond efficiently.

Contact email: [email protected] (plain text — not a clickable link). This address handles all privacy, data, and account support queries for kfbd Bangladesh members.