kg9990 Privacy Policy

1Introduction

This Privacy Policy ("Policy") is published by kg9990, the operator of the online casino and sports betting platform accessible at kg9990.win ("Platform"). It applies to all personal data collected from users ("Players", "you", "your") who access or register on the Platform from Bangladesh or any other territory where the Platform is accessible.

kg9990 acts as the data controller in respect of all personal data processed under this Policy. This means that kg9990 determines the purposes for which, and the means by which, your personal data is processed. We take that responsibility seriously and have implemented robust technical and organisational measures to protect your data at every stage of processing.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which form part of your overall agreement with kg9990.

2Data We Collect

kg9990 collects personal data that is necessary for the lawful operation of a regulated online gambling platform. The categories of personal data we collect include:

2.1 Identity Data

• Full legal name (first name, last name)
• Date of birth
• Gender (optional)
• Government-issued identification number (National ID, passport number, or driving licence number — collected during KYC verification)
• Photograph of identity document

2.2 Contact Data

• Email address
• Mobile phone number
• Residential address (district, city, postal code)

2.3 Financial Data

• Mobile banking account references (bKash, Nagad, Rocket, Upay account numbers — stored in tokenised form only)
• Bank account details where provided for direct bank transfer withdrawals
• Deposit and withdrawal transaction history
• Account balance and bonus credit history

2.4 Technical Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser information
• Session timestamps and duration
• Cookies and similar tracking technologies (see Section 7)

2.5 Usage Data

• Betting history, game play history, and wagering patterns
• Pages visited, features used, and navigation paths within the Platform
• Promotional offers claimed and bonus usage history

2.6 Communications Data

• Records of customer support interactions (live chat, email correspondence)
• Responses to surveys or feedback requests (where voluntarily submitted)

3How We Collect Your Data

kg9990 collects personal data through the following channels:

• Direct Collection: Data you provide directly when completing the registration form, submitting KYC documents, making a deposit or withdrawal request, contacting customer support, or responding to a survey.
• Automated Collection: Data collected automatically as you interact with the Platform, including through cookies, web beacons, server logs, and similar technologies. This includes your IP address, device fingerprint, and session behaviour data.
• Third-Party Sources: In certain cases, kg9990 may receive data about you from identity verification service providers, payment processors, fraud detection agencies, or marketing analytics partners. Such data is used only within the scope described in this Policy.

4How We Use Your Data

kg9990 uses the personal data it collects for the following specific purposes:

5Legal Basis for Processing

kg9990 processes your personal data under one or more of the following legal bases:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and kg9990 (i.e., the Terms & Conditions). This covers account registration, payment processing, and the delivery of gaming services.
• Legal Obligation: Processing is necessary for kg9990 to comply with applicable legal obligations, including anti-money-laundering requirements, age verification obligations, and data retention rules.
• Legitimate Interests: Processing is necessary for the pursuit of kg9990's legitimate business interests — including fraud prevention, platform security, and service improvement — where those interests are not overridden by your rights and freedoms.
• Consent: For processing activities that are not covered by the above bases — principally the sending of promotional and marketing communications — kg9990 relies on your freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6Sharing Your Data

kg9990 does not sell your personal data to third parties. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, and partner banks receive the minimum data necessary to process your transactions.
• Identity Verification Providers: Third-party KYC service providers who assist with document verification and age confirmation. These providers are bound by strict data processing agreements.
• Game Content Providers: Third-party game studios (such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe) receive anonymised or pseudonymised player session data necessary to deliver their games. These providers do not receive your full identity data.
• Fraud & Security Partners: Fraud detection and cybersecurity service providers who help kg9990 identify and prevent unauthorised account access and financial crime.
• Legal & Regulatory Authorities: Law enforcement agencies, courts, or regulatory bodies where kg9990 is required by law to disclose personal data.
• Business Successors: In the event of a merger, acquisition, or sale of all or part of kg9990's business, personal data held by kg9990 may be transferred to the acquiring entity, subject to equivalent data protection obligations.

7Cookies & Tracking Technologies

kg9990 uses cookies and similar technologies on its Platform to enable core functionality, improve performance, and understand how players interact with our services. The types of cookies we use are described below:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They enable session management, login persistence, and security features. They cannot be disabled without impairing the Platform's operation.
• Performance & Analytics Cookies: These cookies collect anonymised information about how players use the Platform — such as which pages are visited most frequently and whether error messages are displayed. This data helps kg9990 improve the Platform's performance and usability.
• Functional Cookies: These cookies remember your preferences, such as your display language and notification settings, to provide a more personalised experience on return visits.
• Marketing Cookies: These cookies are used to deliver promotional content relevant to your interests. They are only set where you have given explicit consent. You may withdraw consent for marketing cookies at any time.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform.

8Data Retention

kg9990 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Active Account Data: Retained for the duration of your account's active status and for a minimum of five (5) years following account closure, in accordance with anti-money-laundering record-keeping obligations.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction.
• KYC Documents: Retained for the duration of your account plus five (5) years following closure.
• Customer Support Records: Retained for three (3) years from the date of the interaction.
• Marketing Consent Records: Retained for as long as you hold an active account, and deleted upon confirmed withdrawal of consent or account closure.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with kg9990's internal data destruction procedures.

9Data Security

kg9990 employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the kg9990 Platform.
• Encryption at rest for all sensitive personal and financial data stored on kg9990's servers.
• Strict role-based access controls limiting internal data access to authorised personnel whose job functions require it.
• Regular penetration testing, vulnerability assessments, and security audits conducted by independent third-party specialists.
• Multi-factor authentication requirements for internal administrative access to systems holding personal data.
• Comprehensive incident response procedures, including mandatory notification processes in the event of a confirmed personal data breach.

10Your Rights

As a data subject, you hold the following rights in relation to the personal data that kg9990 processes about you. To exercise any of these rights, please contact kg9990's support team using the details in Section 14.

• Right of Access: You have the right to request confirmation of whether kg9990 processes personal data about you, and to receive a copy of that data together with supplementary information about how it is used.
• Right to Rectification: You have the right to request the correction of any inaccurate personal data, and the completion of any incomplete personal data, that kg9990 holds about you.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to legal retention obligations that may override it.
• Right to Restriction: You have the right to request that kg9990 restricts the processing of your personal data in certain circumstances, such as while the accuracy of the data is being contested.
• Right to Data Portability: You have the right to receive the personal data you have provided to kg9990 in a structured, commonly used, machine-readable format, and to transmit that data to another controller.
• Right to Object: You have the right to object to the processing of your personal data where kg9990 relies on legitimate interests as its legal basis, unless kg9990 can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

kg9990 will respond to all verified rights requests within thirty (30) calendar days of receipt. In cases of particular complexity, this period may be extended by a further sixty (60) days, of which you will be notified.

11Children's Privacy

The kg9990 Platform is strictly intended for adults aged 18 years and above. kg9990 does not knowingly collect, process, or store personal data belonging to individuals under the age of 18. If kg9990 becomes aware that personal data has been collected from a minor, the relevant account will be closed immediately and all associated personal data will be deleted without delay.

If you believe that a minor has registered an account on the kg9990 Platform, please contact us immediately at [email protected] so that appropriate action can be taken.

12Third-Party Links

The kg9990 Platform may, from time to time, contain references to or integrations with third-party services — such as game providers or payment processors — that operate under their own privacy policies. kg9990 is not responsible for the privacy practices of these third parties and encourages you to review the relevant privacy policies before providing personal data to any third-party service. The presence of a third-party service on the kg9990 Platform does not constitute kg9990's endorsement of that party's data practices.

13Updates to This Privacy Policy

kg9990 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or the structure of the Platform. When material changes are made, registered players will be notified via email or through an in-platform notification. The updated Policy will take effect from the date of publication on kg9990.win. We encourage you to review this Policy periodically to remain informed about how we protect your data. Your continued use of the Platform following the publication of any revised Policy constitutes your acceptance of the updated terms.

14Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way in which kg9990 processes your personal data, please contact our Data Protection team. We aim to respond to all privacy-related enquiries within five (5) business days.

Email: [email protected] (plain text — not a clickable link)

Please include your registered username, the nature of your request, and any relevant details that will help us locate your data and respond accurately and promptly.