Privacy Policy
at kd666

01 Information We Collect

kd666 collects personal data through several channels in order to provide a safe, compliant, and personalised gambling experience. The categories of information we collect are set out below. We collect only the data that is necessary for the purposes described in this Privacy Policy and do not retain personal information beyond the periods specified in Section 5.

Information You Provide Directly

When you register a kd 666 account or interact with our platform, you voluntarily provide information including but not limited to:

• Identity Data: Full legal name, date of birth, gender, and a copy of your Bangladesh National ID Card (NID) or passport submitted during KYC verification.
• Contact Data: Mobile phone number, email address, and residential address (including district, division, and postal code).
• Financial Data: bKash account number, Nagad account number, Rocket wallet number, Upay account details, bank account numbers, and Visa/Mastercard details where applicable. We do not store full card numbers — payment card data is tokenised by our payment processor.
• Account Credentials: Your chosen username and a hashed (never plain-text) version of your password.
• Support Communications: Any information you share when contacting our support team via email at [email protected], including the content of your enquiry and any attachments you provide.
• Preference Data: Responsible gaming settings such as deposit limits, session time limits, and self-exclusion elections that you configure within your account dashboard.

Information Collected Automatically

When you access the kd666 platform, certain technical data is collected automatically by our servers and analytics systems:

• Device & Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage Data: Pages visited, games launched, session duration, betting history, deposit and withdrawal transaction records, bonus claim activity, and navigation paths within the platform.
• Location Data: Approximate geographic location derived from your IP address. We use this data for fraud prevention and to enforce geographic eligibility restrictions. We do not collect precise GPS coordinates.
• Log Data: Server access logs, error logs, and security event logs including login timestamps, failed authentication attempts, and IP address history.

Information From Third Parties

kd666 may receive information about you from the following third-party sources:

• Payment Processors: Transaction confirmation data from bKash, Nagad, Rocket, Upay, and banking partners to verify deposit and withdrawal completion.
• Identity Verification Services: Results of automated document verification checks where third-party KYC providers are used to authenticate NID or passport submissions.
• Fraud Prevention Partners: Risk scores and flagged behaviour indicators from fraud detection services that help us identify suspicious account activity.
• Game Providers: Aggregate game round data from providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, Play'n GO, and Red Tiger, used to resolve disputes and ensure game integrity.

02 How We Use Your Information

kd666 processes your personal data only for legitimate, specified, and proportionate purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we use your personal information are as follows:

Account Management & Service Delivery

Your personal data is used to create and manage your kd666 account, verify your identity, process deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, and banking channels, and to provide access to all casino, live dealer, and sports betting products available on the platform. Without this processing, we cannot deliver the core kd666 service to you.

Legal Compliance & Anti-Money Laundering

kd666 is obligated to collect and process certain categories of personal data in order to comply with applicable anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and fraud prevention obligations. This includes monitoring transaction patterns for suspicious activity and retaining transaction records for the periods mandated by applicable law. Compliance with these obligations is a non-optional legal basis for processing.

Responsible Gaming Monitoring

kd666 uses behavioural and usage data to monitor for indicators of problem gambling, including unusually rapid deposit escalation, extended session durations, and irregular betting patterns. Where such indicators are identified, our responsible gaming team may reach out to the player concerned to offer support resources and tools such as deposit limits, cool-off periods, or self-exclusion. This processing is carried out in the vital interest of player welfare and is a core component of kd666's commitment to safe gambling.

Promotions & Marketing Communications

Where you have given explicit consent to receive promotional communications, kd666 may use your contact data to send you information about offers, bonuses, seasonal promotions (such as Eid, Pohela Boishakh, and BPL season campaigns), and new product launches. You may withdraw your consent to marketing communications at any time by contacting [email protected] or adjusting your notification preferences within your account settings. Withdrawal of marketing consent does not affect the lawfulness of processing that occurred prior to withdrawal.

Platform Improvement & Analytics

Aggregated and anonymised usage data is used to analyse platform performance, identify technical issues, improve user experience, and inform product development decisions. This analysis does not involve identifying individual users and is conducted on a statistical basis only.

Security & Fraud Prevention

kd666 processes device data, IP address history, login records, and transaction data to detect and prevent fraudulent activity, unauthorised account access, collusion, money laundering, and other forms of platform abuse. This processing is necessary for the legitimate interest of protecting all kd666 players, the integrity of the platform, and the financial security of the operation.

03 Sharing of Personal Data

kd666 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We share your personal data only with the categories of recipients set out below, and only to the extent necessary for the stated purpose.

Payment Processing Partners

To process your deposits and withdrawals in BDT, kd666 shares the minimum necessary financial data with our payment processing partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and Visa/Mastercard network processors. These partners act as independent data controllers for the portions of the transaction that occur within their own systems and are governed by their own privacy policies.

Identity Verification & KYC Providers

Where automated document verification is used, copies of your NID or passport are transmitted to our contracted KYC verification provider over encrypted channels. KYC providers are bound by strict data processing agreements and are prohibited from using your data for any purpose other than the verification service contracted by kd666.

Game Providers

Your anonymised player ID and relevant game round data may be shared with game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, Play'n GO, and Red Tiger for the purposes of resolving game disputes, verifying RNG outcomes, and ensuring game integrity. Game providers do not receive your full name, contact data, or financial information.

Legal & Regulatory Authorities

kd666 will disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory authorities where required to do so by applicable law, court order, or regulatory direction. kd666 will notify the affected player of such a disclosure where legally permitted to do so.

Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or part of kd666's business, your personal data may be transferred to the acquiring or successor entity as part of that transaction. You will be notified of any such transfer and the acquiring entity will be required to honour the terms of this Privacy Policy.

04 Cookies & Tracking Technologies

kd666 uses cookies and similar tracking technologies on the kd666.bio platform to ensure functionality, improve performance, and support security operations. The following categories of cookies are used:

Strictly Necessary Cookies

These cookies are essential for the kd666 platform to function and cannot be disabled. They include session management cookies that keep you logged in during an active session, security tokens that protect against cross-site request forgery (CSRF), and load-balancing cookies that ensure consistent platform performance. These cookies do not collect any personally identifiable information beyond what is required for the technical operation of the session.

Functional Cookies

Functional cookies remember your preferences across sessions — for example, your preferred language setting, previously applied deposit limit configurations, and display preferences. These cookies enhance your experience by reducing the need to re-enter settings on each visit. They may be disabled, but doing so will reduce the personalisation of your kd666 experience.

Analytics Cookies

kd666 uses anonymised analytics cookies to measure aggregated platform usage, including which pages are most visited, which games generate the most engagement, and how users navigate through the deposit flow. This data is used solely to improve the kd666 platform and is not linked to your individual account identity.

Security & Fraud Detection Cookies

Security cookies are used to detect and prevent fraudulent behaviour, including bot activity, credential stuffing attacks, and suspicious login patterns. These cookies analyse device fingerprints, browser characteristics, and behavioural signals to assign a risk score to each session. No personal data is transmitted outside the kd666 security infrastructure in connection with these cookies.

Managing Cookie Preferences

You may manage your cookie preferences at any time through your browser's settings. Most modern browsers allow you to block or delete cookies, or to be notified when a cookie is set. Please note that disabling strictly necessary cookies will impair your ability to use the kd666 platform, including the ability to log in and complete financial transactions. For questions about our use of cookies, contact [email protected].

05 Data Retention & Storage

kd666 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. The following retention periods apply to the principal categories of personal data held by kd666:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures. Anonymised data (data from which all identifying information has been irreversibly removed) may be retained indefinitely for statistical and research purposes.

Data Storage Location

kd666 stores personal data on secure servers. All data at rest is encrypted using AES-256 encryption. All data in transit between your device and kd666's servers is protected using TLS 1.2 or higher. Server infrastructure is maintained in accordance with industry-standard physical and logical access controls, including role-based access restrictions ensuring that only authorised personnel can access personal data.

06 Your Privacy Rights

kd666 respects your rights with respect to the personal data we hold about you. The following rights are available to all registered kd666 players and, where applicable, to unregistered visitors. To exercise any of the rights described below, please contact us at [email protected] with your full name, registered email address, and a description of your request. We will acknowledge your request within 5 business days and provide a substantive response within 30 days.

Right of Access

You have the right to request a copy of all personal data that kd666 holds about you, together with information about how it is being used, who it has been shared with, and how long it will be retained. We will provide this information in a structured, readable format upon verified request.

Right to Rectification

If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. Some data corrections (particularly to identity data) may require you to submit updated documentation for re-verification purposes.

Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent and no other legal basis exists for processing, or where the data has been unlawfully processed. Please note that kd666 is required by law to retain certain categories of data (particularly KYC and transaction records) for defined periods regardless of an erasure request. We will inform you clearly of any data that cannot be erased and the legal reason for its retention.

Right to Restrict Processing

In certain circumstances — for example, where you contest the accuracy of data we hold, or where processing is unlawful but you prefer restriction to erasure — you may request that we restrict our processing of your personal data to storage only, pending resolution of the relevant issue.

Right to Object to Marketing

You have the absolute right to object to the use of your personal data for direct marketing purposes at any time. Upon receipt of a valid objection, we will cease all marketing communications immediately. This right can be exercised by contacting [email protected] or by adjusting your notification settings within your kd666 account.

07 Data Security Measures

kd666 takes the security of your personal data seriously and maintains a comprehensive set of technical and organisational measures designed to protect your information against unauthorised access, loss, alteration, or disclosure. Our security posture includes the following controls:

• 256-bit SSL/TLS Encryption: All data exchanged between your device and kd666 servers is encrypted in transit using TLS 1.2 or higher, preventing interception by third parties.
• AES-256 Data-at-Rest Encryption: Sensitive personal data stored on kd666 servers — including KYC documents and financial records — is encrypted using AES-256, an industry-standard encryption algorithm.
• Role-Based Access Controls: Access to personal data within kd666's internal systems is restricted to authorised personnel on a strict need-to-know basis. All internal access events are logged and audited.
• Two-Factor Authentication (2FA): kd666 supports and recommends 2FA for all player accounts. All internal administrative systems require mandatory 2FA for staff access.
• Intrusion Detection & Monitoring: kd666's infrastructure is continuously monitored for anomalous access patterns, potential intrusions, and denial-of-service activity. Security events trigger automated alerts and human review processes.
• Vulnerability Management: kd666 conducts regular security assessments of its platform infrastructure and applies security patches on a prioritised, risk-based schedule.
• Staff Training: All kd666 personnel who handle personal data receive mandatory data protection and security awareness training as part of their onboarding and on an annual refresher basis.

Notwithstanding the above measures, no system connected to the internet can be guaranteed to be completely secure. In the event of a data breach that is likely to result in a risk to your rights and interests, kd666 will notify affected players without undue delay and will take all reasonable steps to mitigate the impact of the breach.

08 Updates to This Policy

kd666 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. The effective date displayed at the top of this document will be updated whenever a material change is made.

Where changes are material — meaning they significantly affect how we process your personal data or reduce your rights — kd666 will notify registered players via email to the address on file, or via a prominent notice on the kd666.bio platform, at least 14 days before the changes take effect. Your continued use of the kd666 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.

If you do not agree to a material change, you have the right to close your account and request deletion of your personal data (subject to retention obligations described in Section 5) by contacting [email protected] before the effective date of the change.

We encourage you to review this Privacy Policy periodically so that you remain informed about how kd666 protects your personal data. Historical versions of this Privacy Policy are available upon request by contacting our support team.