kgg99 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how kgg99 ("kgg99", "we", "us", "our") collects, uses, stores, shares, and protects personal data relating to individuals ("you", "Player", "User") who register for or use the kgg99 online betting and casino platform, including the website at https://kgg99.io, any mobile-optimised version of the site, and all associated services (collectively, the "Platform").

kgg99 is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. By registering an account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein.

This Policy should be read alongside the kgg99 Terms & Conditions and Responsible Gaming policy, both of which are incorporated by reference into the overall framework governing your use of the Platform.

2. Data Controller

For the purposes of this Policy, the data controller responsible for your personal data is kgg99, operated under the kgg99 brand and reachable at the contact details set out in Section 15. The data controller determines the purposes and means of processing your personal data and is accountable for ensuring that processing is carried out in accordance with this Policy and applicable data protection law.

If you have any questions about how kgg99 handles your personal data, or if you wish to exercise any of the rights described in Section 11, please contact the kgg99 Data Protection team at [email protected] with the subject line "Data Rights Request".

3. Data We Collect

kgg99 collects the following categories of personal data in connection with the operation of the Platform:

3.1 Identity and Contact Data

• Full legal name;
• Date of birth;
• Residential address (including city, district, and postal code);
• Email address;
• Mobile phone number;
• Government-issued identification number (e.g., National Identity Card number, passport number).

3.2 Financial and Payment Data

• Mobile wallet identifiers (bKash, Nagad, Rocket, Upay account numbers);
• Bank account details (where bank transfer is used);
• Partial card details (last four digits and card type for Visa/Mastercard — full card numbers are never stored by kgg99 and are handled directly by PCI-DSS-compliant payment processors);
• Transaction history, including deposit amounts, withdrawal amounts, dates, and payment method used.

3.3 Account and Activity Data

• Username and encrypted password hash;
• Account registration date and login history;
• Betting and gaming history, including markets wagered on, stake amounts, odds accepted, and outcomes;
• Bonus and promotion usage history;
• Responsible gaming tool settings (deposit limits, self-exclusion status, cool-off periods);
• Customer support interaction records, including live chat transcripts and email correspondence.

3.4 Technical and Device Data

• IP address;
• Device type, operating system, and browser type and version;
• Session duration and page interaction data;
• Referring URL and exit URL;
• Cookie identifiers and similar tracking data (see Section 10).

3.5 Verification Documents

As part of the KYC (Know Your Customer) process, kgg99 may collect and retain copies of:

• Government-issued photo identification documents;
• Proof of address documents (utility bills, bank statements);
• Proof of payment method ownership (wallet screenshots, bank statements, card images).

These documents are handled with heightened care and accessed only by authorised kgg99 compliance personnel and approved third-party verification service providers.

4. How We Collect Data

kgg99 collects personal data through the following channels:

• Directly from you: When you register an account, complete your profile, make a deposit or withdrawal, contact customer support, respond to a survey, or participate in a promotion;
• Automatically: When you use the Platform, we automatically collect technical and device data through server logs, session tracking technologies, and cookies (see Section 10);
• From third-party service providers: Payment processors (such as bKash, Nagad, and card payment gateways) may share transaction confirmation data with kgg99. Identity verification providers may share the results of document checks. Fraud prevention services may share risk-scoring data;
• From publicly available sources: In limited circumstances, kgg99 may verify information against publicly available records (for example, to confirm an address or validate an identity document).

5. How We Use Your Data

kgg99 uses your personal data for the following purposes:

kgg99 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where required for real-time fraud prevention. In such cases, you may request human review of any automated decision by contacting [email protected].

6. Legal Bases for Processing

kgg99 processes your personal data under one or more of the following legal bases:

• Contractual necessity: Processing is necessary to perform the contract between kgg99 and you — for example, to create your account, process your bets, or execute withdrawals;
• Legal obligation: Processing is necessary to comply with applicable law — for example, KYC identity verification, anti-money laundering record-keeping, and age verification;
• Legitimate interests: Processing is in the legitimate interests of kgg99 (or a third party) and those interests are not outweighed by your rights — for example, fraud prevention, Platform security, and internal analytics to improve the service;
• Consent: Where kgg99 has obtained your explicit consent — for example, to send you promotional emails or SMS messages about bonuses and new games. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

7. Sharing Your Data

kgg99 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. kgg99 may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa and Mastercard processing partners — for the purpose of executing deposits and withdrawals;
• Identity verification providers: Third-party KYC and document verification services used to confirm your identity and age in compliance with our legal obligations;
• Fraud prevention and security services: Specialist third-party services that assist in detecting and preventing fraudulent activity, money laundering, and unauthorised account access;
• Game content providers: Software providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session data necessary to deliver their games through the kgg99 Platform;
• IT and hosting providers: Infrastructure and cloud service providers that host the kgg99 Platform and process data on our behalf under strict data processing agreements;
• Legal and regulatory authorities: Where required by applicable law, court order, or regulatory directive, kgg99 may disclose personal data to law enforcement or regulatory bodies.

8. Data Retention

kgg99 retains your personal data for as long as your account remains active and for a period thereafter as required by applicable law or legitimate business purposes. Specific retention periods include:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in order to meet anti-money laundering record-keeping obligations;
• Transaction and financial data: Retained for a minimum of five (5) years following the date of the transaction, in accordance with financial record-keeping requirements;
• Customer support records: Retained for three (3) years following the resolution of the relevant support interaction;
• Marketing consent records: Retained for the duration of the consent and for two (2) years following withdrawal of consent, as evidence of the consent previously given;
• Technical and device data (logs): Retained for up to twelve (12) months from the date of collection, unless a longer retention period is required for security or fraud investigation purposes.

Upon expiry of the applicable retention period, kgg99 will securely delete or anonymise your personal data in a manner that prevents its reconstruction or re-identification.

9. Data Security

kgg99 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in transit: All data transmitted between your device and kgg99 servers is encrypted using 256-bit TLS/SSL protocols;
• Encryption at rest: Sensitive stored data, including identity documents and payment details, is encrypted using AES-256 encryption;
• Access controls: Access to personal data is restricted to authorised kgg99 personnel and approved third-party processors on a strict need-to-know basis. All access is logged and audited;
• Password security: Player passwords are stored as salted cryptographic hashes — kgg99 staff cannot view or retrieve your password in plain text;
• Infrastructure security: kgg99 servers are hosted in secure data centres with physical access controls, redundant power, and network-level DDoS protection;
• Vulnerability management: kgg99 conducts regular security assessments and applies security patches on a timely basis.

Despite these measures, no online service can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, kgg99 will notify affected players without undue delay in accordance with its incident response procedures.

10. Cookies & Tracking Technologies

10.1 What Are Cookies

Cookies are small text files placed on your device by the kgg99 Platform when you visit. They allow the Platform to recognise your device, remember your preferences, maintain your logged-in session, and collect analytics data about how the Platform is used.

10.2 Categories of Cookies Used by kgg99

• Essential cookies: Required for the Platform to function correctly — for example, session authentication cookies that keep you logged in during a visit. These cannot be disabled without impairing Platform functionality;
• Functional cookies: Used to remember your preferences (such as language and display settings) and personalise your experience;
• Analytics cookies: Used to collect aggregated data about how players navigate the Platform, which pages are most visited, and where technical errors occur. This data is used to improve the Platform and is not used to identify individual players;
• Session cookies: Temporary cookies that expire when you close your browser, used to maintain your active session state.

10.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, and set notifications when cookies are placed. Please note that disabling essential cookies will impair your ability to use the Platform, including logging in and placing bets. Instructions for managing cookies in common browsers are available from your browser provider's support pages.

11. Your Rights

Subject to applicable data protection law, you have the following rights in relation to your personal data held by kgg99:

• Right of access: You may request a copy of all personal data kgg99 holds about you, together with information about how it is processed;
• Right to rectification: You may request the correction of any inaccurate or incomplete personal data kgg99 holds about you;
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to kgg99's legal retention obligations (see Section 8);
• Right to restriction: You may request that kgg99 restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed;
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request that kgg99 provide your personal data in a structured, machine-readable format;
• Right to object: You may object to processing carried out on the basis of legitimate interests, including profiling for personalisation purposes. You also have an absolute right to object to direct marketing at any time;
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, please send a written request to [email protected] with the subject line "Data Rights Request" and include your registered username and a description of your request. kgg99 will respond to all verified requests within thirty (30) days. In complex cases, this period may be extended by up to a further sixty (60) days, in which case kgg99 will notify you of the extension and the reason for it.

12. Marketing Communications

With your consent, kgg99 may send you promotional communications by email or SMS, including information about bonuses, new game releases, seasonal promotions (such as Eid, Pohela Boishakh, and BPL season offers), and platform updates.

You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link included in every kgg99 marketing email;
• Replying "STOP" to any kgg99 promotional SMS;
• Updating your communication preferences in your kgg99 account settings;
• Contacting [email protected] with the subject line "Unsubscribe".

Opt-out requests will be processed within 48 hours. Please note that opting out of marketing communications does not affect the delivery of essential transactional notifications, such as deposit confirmations, withdrawal updates, and security alerts — these are necessary for the operation of your account and cannot be disabled.

13. Children & Minors

kgg99 is strictly intended for adults aged 21 years and above. kgg99 does not knowingly collect personal data from individuals under the age of 21. If kgg99 discovers that personal data has been collected from a person under 21, the associated account will be immediately suspended and all personal data relating to that individual will be securely deleted without undue delay.

If you believe that a person under the age of 21 has registered an account with kgg99, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

14. Changes to This Policy

kgg99 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, operational requirements, or applicable law. When material changes are made, kgg99 will notify registered players by email and by displaying a prominent notice on the Platform. The effective date at the top of this Policy will be updated accordingly.

Your continued use of the kgg99 Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you must stop using the Platform and may request account closure in accordance with the kgg99 Terms & Conditions.

15. Contact & Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or the way kgg99 handles your personal data, please contact the kgg99 Data Protection team using the details below:

• Email: [email protected] (subject line: "Privacy Enquiry" or "Data Rights Request")
• Live Chat: Available 24/7 in English via the kgg99 Platform
• Response Time: Email enquiries are acknowledged within 24 hours and resolved within 30 days. Live chat responses are typically under 30 minutes (Bangladesh Standard Time, UTC+6).

kgg99 takes all privacy complaints seriously. Upon receipt of a formal complaint, kgg99 will acknowledge it within 24 hours, assign it a reference number, and aim to provide a full written response within 10 business days. Where a complaint cannot be resolved within this timeframe, kgg99 will provide an interim update explaining the delay and the expected resolution date.