kx8007 Privacy Policy

This Privacy Policy ("Policy") sets out the basis on which kx8007 ("kx8007", "we", "us", "our") collects, processes, stores, shares, and protects the personal data of users ("Player", "you", "your") who register or interact with the kx8007 platform at kx8007.app and all associated services (the "Platform").

We are committed to handling your personal information responsibly and in full accordance with applicable data protection principles. By registering an account with kx8007 or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which are incorporated by reference. If you do not agree with any aspect of this Policy, please discontinue use of the Platform and contact our support team to request account closure.

🛡️ Our Data Commitments

📄 Full Privacy Policy

1. Data Controller

kx8007 acts as the data controller in respect of the personal information you provide when registering or using the Platform. As data controller, kx8007 determines the purposes and means by which your personal data is processed. For any data-related enquiries, you may contact our Data Protection team via the support email listed at the foot of this page.

2. What Personal Data We Collect

We collect the following categories of personal data, depending on how you interact with the Platform:

3. How We Use Your Personal Data

kx8007 uses the personal data collected for the following legitimate purposes:

• Account Management: Creating, maintaining, and securing your kx8007 account, including password resets, two-factor authentication, and session management.
• Identity Verification (KYC): Confirming that you are who you say you are, that you meet the 21+ age requirement, and that you are not a politically exposed person or on any sanctions list.
• Payment Processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfer, Visa, and Mastercard. Payment processors receive only the data necessary to complete each transaction.
• Fraud and Money Laundering Prevention: Monitoring account activity for suspicious patterns, investigating potential fraud, and fulfilling our anti-money laundering (AML) obligations.
• Responsible Gaming: Identifying behavioural indicators of problem gambling, applying deposit limits or self-exclusion settings requested by the Player, and proactively reaching out to Players who display at-risk patterns.
• Customer Support: Responding to your enquiries, resolving disputes, and providing technical assistance.
• Marketing Communications: Sending you promotional offers, bonus notifications, and platform updates by email or SMS — only where you have given explicit consent. You may opt out at any time by contacting support or using the unsubscribe link in any marketing email.
• Platform Improvement: Analysing aggregate usage data, game performance metrics, and technical logs to improve the Platform's features, stability, and user experience.
• Legal Compliance: Retaining records and disclosing data as required by applicable law, court orders, or regulatory authority requests.

4. Legal Basis for Processing

kx8007 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions you accepted at registration, including account operation, payment processing, and game delivery.
• Legitimate Interests: Processing required to detect fraud, prevent money laundering, improve Platform security, and conduct internal analytics — where these interests are not overridden by your rights and freedoms.
• Legal Obligation: Processing required to comply with applicable laws, including identity verification, transaction record-keeping, and cooperation with lawful regulatory or law enforcement requests.
• Consent: Processing for direct marketing communications, where you have provided a clear, freely given, and specific consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

5. Cookies and Tracking Technologies

kx8007 uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, and analyse usage patterns. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in and security cookies that prevent cross-site request forgery. These cannot be disabled.
• Functional Cookies: Used to remember your preferences, such as language settings and display options. Disabling these may affect your experience.
• Analytics Cookies: Used to collect aggregate information about how Players use the Platform, which pages are most visited, and where errors occur. This data is anonymised and used solely to improve the Platform.
• Session Cookies: Temporary cookies that expire when you close your browser, used to maintain your session state as you navigate between pages on the Platform.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent the Platform from functioning correctly. kx8007 does not use third-party advertising cookies or cross-site tracking cookies.

6. Sharing Your Personal Data

kx8007 does not sell your personal data. We may share your information only in the following limited and controlled circumstances:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — solely to process your deposits and withdrawals. Each processor operates under its own privacy policy and data protection obligations.
• Identity Verification Providers: Third-party KYC service providers who assist in verifying identity documents and conducting sanctions screening, under strict data processing agreements.
• Game Providers: Software providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive technical session data necessary to load and operate their games within the Platform. These providers are contractually prohibited from using this data for any other purpose.
• Legal and Regulatory Authorities: Where required by law, court order, or a valid request from a regulatory or law enforcement authority, kx8007 will disclose the minimum personal data necessary to comply.
• Corporate Transactions: In the event of a merger, acquisition, or sale of kx8007's business assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections being in place.

7. Data Retention

kx8007 retains personal data for as long as is necessary to fulfil the purposes described in this Policy, subject to any longer retention periods required by applicable law. As a general guide:

• Account data and transaction records are retained for a minimum of five years from the date of the last account activity to satisfy anti-money laundering record-keeping requirements.
• KYC documents (ID copies, proof of address) are retained for five years from the date of verification or from the date of account closure, whichever is later.
• Customer support communications are retained for three years from the date of the last interaction.
• Marketing consent records are retained for the duration of your account and for two years following account closure.
• Technical logs (IP addresses, session logs) are retained for 12 months and then anonymised or deleted.

When personal data is no longer required and no legal retention obligation applies, kx8007 will securely delete or anonymise it so that it can no longer be associated with you as an individual.

8. Your Data Protection Rights

As a user of the kx8007 Platform, you are entitled to exercise the following rights in relation to your personal data. To exercise any of these rights, please contact our support team with your account username and a clear description of your request:

kx8007 aims to respond to all verified data rights requests within 30 calendar days. In complex cases we may require up to 60 days, in which case we will notify you of the delay and the reason for it. We may require you to verify your identity before processing a request to prevent unauthorised disclosure.

9. Security of Your Personal Data

kx8007 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your browser or app and our servers.
• AES-256 encryption for personal data stored at rest in our databases.
• Role-based access controls ensuring that only authorised personnel can access sensitive data, and only to the extent required for their specific function.
• Comprehensive access logging and anomaly detection systems that alert our security team to unusual access patterns.
• Regular penetration testing and vulnerability assessments conducted by independent security professionals.
• Strict vendor security assessments before engaging any third-party processor with access to personal data.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, kx8007 will notify you without undue delay in accordance with applicable legal requirements.

10. Children and Minors

The kx8007 Platform is strictly intended for persons aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately close the relevant account, delete the data, and return any funds held in the account through the registered payment method.

If you believe a minor may have registered an account on kx8007, please contact our support team immediately so that we can investigate and take appropriate action.

11. International Data Transfers

kx8007's primary operations are oriented towards the Bangladeshi market. Where personal data is transferred to or processed by service providers located outside Bangladesh (for example, international game providers or cloud infrastructure partners), kx8007 ensures that appropriate safeguards are in place to protect your data, including contractual clauses that impose equivalent data protection obligations on the receiving party.

12. Changes to This Privacy Policy

kx8007 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or Platform features. The date of the most recent revision is displayed at the top of this page. Where changes are material, we will notify registered Players via a notice displayed prominently on the Platform before the changes take effect.

Your continued use of the Platform following notification of any changes constitutes your acceptance of the revised Policy. If you do not agree with the updated Policy, you may request account closure as described in our Terms & Conditions.

13. Contact Us Regarding Privacy

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the kx8007 Data Protection team via our 24/7 live chat support on the Platform, or by email at [email protected] (plain text — not a clickable link). Please include your account username and a clear description of your query so that we can respond efficiently.