kd66 Privacy Policy

1. About This Policy

This Privacy Policy ("Policy") describes how kd66 ("kd66", "we", "us", "our") collects, uses, stores, shares and protects personal data provided by or generated by users ("you", "your") when accessing or using the kd66 platform at kd66.bio, including all associated games, promotions and payment facilities. By registering an account or continuing to use kd66, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy applies to all personal data processing activities carried out by kd66 in connection with the platform, regardless of the device or channel through which you access kd66. This Policy should be read alongside the kd66 Terms and Conditions, available via the link in the site footer. If you do not agree to this Policy, you must not use kd66.

2. Data We Collect

kd66 collects personal data directly from you (when you register, deposit, or contact support) and automatically through technical systems as you use the platform. The categories of personal data we collect are:

• Identity and Contact Data: Full legal name, date of birth, Bangladeshi mobile number, and government-issued identity document details submitted during KYC verification. Used to verify your identity and enforce the 21+ age requirement.
• Financial and Payment Data: Transaction history including deposit and withdrawal amounts, payment method type (bKash, Nagad, Rocket, Upay, bank name), transaction reference numbers, and timestamps. kd66 does not store your bKash or Nagad PIN — payment authentication occurs directly between you and your payment provider.
• Gaming and Behavioural Data: Records of games played, bets placed, bet outcomes, session durations, game preferences, and bonus claims. Generated automatically as you use kd66 and used to operate the platform, settle bets, administer bonuses, detect fraud, and fulfil responsible gaming obligations.
• Technical and Device Data: IP address, device type, operating system, browser type, mobile carrier, connection type, session timestamps, and pages visited. Collected automatically via cookies and server logs and used for platform security, fraud detection, and technical support.
• Communications Data: Records of your interactions with the kd66 support team, including message content, timestamps, and resolution outcomes. Retained for quality assurance and dispute resolution purposes.

3. How We Use Your Data

kd66 uses your personal data only for the purposes described in this Policy. We do not use your data for purposes that are incompatible with the reason it was originally collected without obtaining your prior consent. The primary purposes for which kd66 processes your personal data are:

• Account Management: To register your account, verify your identity, process deposits and withdrawals, administer bonuses, and manage your kd66 profile.
• Contract Performance: To provide the gaming services you have contracted for, including settling bets accurately, crediting winnings, and maintaining correct account records.
• Legal and Regulatory Compliance: To comply with applicable anti-money laundering (AML) obligations, KYC requirements, fraud prevention duties, and law enforcement requests where legally required.
• Responsible Gaming: To monitor gaming behaviour for signs of potential problem gambling, enforce self-exclusion and time-out requests, administer deposit limits, and provide appropriate intervention resources where indicated.
• Platform Security and Improvement: To detect and prevent fraud, bonus abuse, bot usage, and prohibited conduct; and to analyse aggregated usage data for platform performance optimisation.

4. Legal Basis for Processing

kd66 processes your personal data only where a valid legal basis exists. The legal bases on which kd66 relies are:

• Contract performance — processing your identity, transaction and gaming data is necessary to provide the services you contracted for when you registered on kd66.
• Legal obligation — processing identity and financial data for KYC and AML compliance, and responding to law enforcement requests, is required by applicable law.
• Legitimate interests — processing technical and behavioural data for fraud detection, security monitoring, and responsible gaming compliance, where these interests are not overridden by your data protection rights.
• Consent — sending you promotional communications about kd66 bonuses and offers where you have opted in. You may withdraw consent at any time by contacting [email protected].

5. Data Sharing and Disclosure

kd66 does not sell, rent or trade your personal data to third parties. Personal data is shared only in the following limited circumstances and only to the extent necessary for the relevant purpose:

• Payment Processors: Necessary transaction data is shared with bKash, Nagad, Rocket, Upay, and supported Bangladeshi banks solely to process deposits and withdrawals. Each provider operates under its own privacy policy.
• Game Providers: Technical session data (session token, game result references) is shared with game studios including Pragmatic Play, Evolution Gaming, Spribe, and Ezugi to facilitate game delivery and result verification. Providers do not receive your full identity or financial details.
• Identity Verification Services: Where kd66 uses third-party KYC tools, document data is shared with those providers under strict data processing agreements. They are contractually prohibited from using your data for any purpose other than identity verification.
• Legal Authorities: kd66 may disclose personal data to law enforcement agencies or courts where required by applicable law or a valid legal order. Where legally permissible, kd66 will notify the affected user of any such disclosure.

6. Payment Data and Financial Privacy

kd66 applies particular care to financial data. All deposit and withdrawal transactions are processed via encrypted connections using 256-bit SSL technology. kd66 does not store your bKash PIN, Nagad PIN, mobile banking password, or full card number. Payment authentication occurs directly between you and your payment provider on their secure interface — kd66 never accesses your credentials at the point of authentication.

Transaction records held by kd66 include only information necessary to reconcile your account balance, process withdrawals, and comply with financial record-keeping obligations. Upon account closure, transaction records required for legal compliance are retained in a secure, restricted-access archive and are not used for any other purpose.

7. Cookies and Tracking Technologies

kd66 uses cookies and similar tracking technologies to operate the platform, maintain your session, detect fraud, and improve your experience. The types of cookies kd66 uses are:

• Strictly Necessary Cookies: Essential for platform functionality. They maintain your login session, enable secure payment processing, and preserve your account preferences. These cookies cannot be disabled without breaking core functionality.
• Analytical Cookies: Collect anonymised data about how users interact with kd66 — pages visited, time on each section, errors encountered — to help improve platform performance. Analytical data is processed in aggregated form and is not linked to individual user identities.
• Security Cookies: Support kd66's fraud detection and account protection systems by identifying anomalous login patterns, detecting automated access, and flagging suspicious session activity. Security cookies are strictly necessary and cannot be disabled.

8. Data Retention

kd66 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law, whichever is the longer period. General retention periods: account and identity data is retained for the duration of your active account and a minimum of 5 years after account closure to satisfy anti-money laundering record-keeping obligations; financial transaction data is retained for 5 years from each transaction date; gaming and behavioural data is retained for 3 years from the date of generation; technical log data is retained for up to 12 months.

When personal data is no longer required and no legal retention obligation applies, kd66 securely destroys or anonymises the data so that it can no longer be linked to an individual. Anonymised or aggregated data may be retained indefinitely for platform analytics and improvement purposes.

9. Data Security

kd66 implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. Measures include 256-bit SSL encryption for all data in transit; encrypted storage of sensitive data at rest; role-based access controls restricting internal access on a need-to-know basis; regular security auditing and penetration testing; and incident response procedures for detecting, containing and reporting data security incidents.

While kd66 takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security. If you suspect your kd66 account has been compromised or your personal data accessed without authorisation, please contact kd66 support immediately at [email protected]. All credible security reports will be investigated promptly.

10. Your Data Rights

As a kd66 user, you have the following rights in relation to your personal data. To exercise any right, contact [email protected] with a subject line describing the request (e.g. "Data Access Request"). kd66 will respond within 30 calendar days:

• Right of Access: Request a copy of the personal data kd66 holds about you, together with information about how it is used and with whom it is shared.
• Right to Rectification: Request correction of inaccurate or incomplete personal data. Where corrected data has been shared with a third party, kd66 will notify that party where reasonably practicable.
• Right to Erasure: Request deletion of your personal data in certain circumstances — where it is no longer necessary, where you withdraw consent, or where it has been unlawfully processed. This right is subject to kd66's legal retention obligations under anti-money laundering and financial record-keeping requirements.
• Right to Restriction: Request that kd66 restricts processing of your personal data in certain circumstances — for example, while kd66 investigates a rectification request or where you contest the legal basis for processing.
• Right to Data Portability: Where kd66 processes your data on the basis of consent or contract performance by automated means, you may request that data in a structured, machine-readable format.

To exercise any of your rights, email [email protected] with the subject line describing your request. kd66 may request reasonable proof of identity before processing the request. There is no fee for exercising data rights. If you are unsatisfied with kd66's response, you have the right to escalate your complaint to the relevant data protection authority.

11. Children and Underage Users

kd66 is strictly for users aged 21 and above. kd66 does not knowingly collect personal data from anyone under the age of 21. If kd66 discovers it has inadvertently collected data from an individual under 21, that data will be deleted immediately and the associated account closed without prior notice. If you are a parent or guardian and believe a person in your care has registered on kd66, please contact [email protected] immediately so we can investigate and take appropriate action.

12. Changes to This Policy

kd66 may update this Privacy Policy from time to time to reflect changes in data processing practices, applicable law, or platform features. When material changes are made, kd66 will notify registered users by sending a message to the mobile number on file or by displaying a notice on the platform upon next login. The date of the most recent revision is shown at the top of this Policy. Your continued use of kd66 after the effective date of any revision constitutes acceptance of the updated Policy. If you do not agree to the updated Policy, you must discontinue use of kd66 and may request account closure by contacting [email protected].

13. Contact and Data Requests

If you have any questions, concerns or requests regarding this Privacy Policy or the way kd66 handles your personal data, please contact the kd66 support team. Our team is available 24 hours a day, 7 days a week and aims to respond to all data-related queries within 5 business days. For data access, rectification, erasure, or portability requests, please include your registered mobile number and a clear description of your request in your message.

Data Protection Contact: [email protected]