Privacy Policy — Your Data, Protected

1 How We Collect Your Data

kx8app collects personal data through the following channels:

• Direct submission: Information you provide when registering an account, completing identity verification, making a deposit or withdrawal, contacting support, or participating in a promotion.
• Automated collection: Technical and behavioural data gathered automatically as you browse and interact with the Platform, including via cookies, server logs, and analytics tools.
• Payment providers: Transaction confirmation data shared by bKash, Nagad, Rocket, Upay, and other approved payment partners when you initiate a deposit or withdrawal.
• Third-party verification services: Where required for identity or age verification, we may receive data from third-party KYC (Know Your Customer) service providers.

kx8app does not knowingly collect personal data from individuals under 21 years of age. If we become aware that a registered account belongs to a person below this age threshold, the account will be suspended immediately and any funds held will be subject to a refund review.

2 Legal Basis for Processing

kx8app processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations to you under the Terms and Conditions, including account management, transaction processing, and bonus administration.
• Legitimate interests: Processing undertaken for fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided these interests are not overridden by your data protection rights.
• Legal compliance: Processing necessary to meet our obligations under applicable anti-money-laundering, counter-terrorism financing, and age verification requirements.
• Consent: Where you have opted in to receive marketing communications from kx8app, we process your contact data on the basis of your freely given, specific consent. You may withdraw this consent at any time.

3 How We Use Your Data

kx8app uses the personal data we collect for the following specific purposes:

• Creating, managing, and securing your kx8app account.
• Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other approved payment channels.
• Verifying your age and identity to comply with our responsible gaming obligations.
• Detecting and preventing fraudulent activity, money laundering, and account abuse.
• Personalising your gaming experience, including game recommendations and relevant promotional offers.
• Administering bonuses, promotions, loyalty programs, and tournaments.
• Providing customer support and resolving disputes.
• Monitoring for problem gambling indicators and applying responsible gaming interventions where necessary.
• Sending transactional communications (e.g., deposit confirmations, withdrawal notifications, security alerts).
• Sending marketing communications — only where you have opted in and only for kx8app's own products and services.
• Improving Platform performance, fixing technical issues, and developing new features based on aggregated usage analytics.

4 Cookies and Tracking Technologies

kx8app uses first-party cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device that allow us to recognise your browser across sessions and remember your preferences.

We use the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function, including session management, login state, and security tokens. These cannot be disabled.
• Functional cookies: Remember your language and display preferences to improve your experience on return visits.
• Analytics cookies: Collect aggregated, anonymised data about how players navigate and use the Platform, enabling us to identify and resolve performance issues.

kx8app does not use third-party advertising cookies or cross-site tracking cookies. You may clear cookies stored by kx8app at any time through your browser settings; however, doing so may affect Platform functionality, including your ability to remain logged in.

5 Data Sharing and Third-Party Disclosure

kx8app does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. We may share your data with the following categories of third parties only to the extent necessary to operate the Platform:

• Payment processors: bKash, Nagad, Rocket, Upay, and other approved payment partners receive only the minimum transaction data necessary to process your deposits and withdrawals.
• Identity verification providers: Third-party KYC service providers may receive a copy of your identity documents and personal details solely for the purpose of age and identity verification.
• Fraud prevention services: Anonymised or pseudonymised risk signals may be shared with fraud detection partners to identify suspicious patterns across the industry.
• Game content providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Spribe, and Ezugi may receive a session token and anonymous player identifier to initialise game sessions — they do not receive your full personal profile.
• Legal and regulatory authorities: kx8app may disclose personal data to law enforcement, regulators, or other government bodies where required by applicable law or in response to a valid legal request.

Any third-party service provider engaged by kx8app is bound by contractual data processing obligations that prohibit them from using your data for any purpose beyond the specific service they provide to us.

6 Data Retention

kx8app retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by applicable law. Our standard retention periods are:

• Active account data: Retained for the duration of your account's active status plus a minimum of five (5) years following account closure, for compliance and audit purposes.
• Transaction records: Retained for a minimum of seven (7) years in accordance with standard financial record-keeping obligations.
• Support communications: Retained for up to three (3) years from the date of the last interaction.
• Marketing consent records: Retained until you withdraw consent, plus one (1) year thereafter as evidence of the consent having been given.
• Technical/log data: Anonymised after 90 days; raw logs deleted after 12 months.

When personal data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with any individual.

7 Data Security

kx8app implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Encrypted storage for sensitive data fields including passwords (which are hashed and salted and never stored in plaintext) and identity document copies.
• Role-based access controls ensuring that only authorised personnel with a legitimate need can access personal data.
• Regular penetration testing and security audits of the Platform infrastructure.
• Multi-factor authentication requirements for internal administrative access.
• Real-time intrusion detection and automated alerting for unusual access patterns.

While kx8app takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. You are encouraged to use a strong, unique password for your kx8app account and to enable any two-step verification options available in your account settings.

8 Your Data Rights

As a kx8app player, you have the following rights in relation to the personal data we hold about you:

• Right of access: You may request a copy of all personal data kx8app holds about you, free of charge, with a response provided within 30 days of your request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it.
• Right to erasure: Subject to our legal retention obligations, you may request that we delete your personal data. Note that deletion of your account data will result in permanent account closure.
• Right to restrict processing: You may request that we limit the processing of your data in certain circumstances, for example while a dispute is being investigated.
• Right to data portability: You may request your personal data in a structured, machine-readable format for transfer to another service provider where technically feasible.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time with immediate effect on future processing.
• Right to object: You may object to processing carried out on the basis of legitimate interests, subject to our right to demonstrate compelling grounds for the processing that override your interests.

To exercise any of the above rights, please contact us at [email protected] with the subject line "Data Rights Request — [Your Username]". We will respond within 30 calendar days.

9 Children's Privacy

The kx8app Platform is strictly intended for adults aged 21 and above. We do not knowingly collect, process, or store personal data relating to individuals under 21 years of age. If a parent or guardian believes that their child has registered an account or submitted personal information to kx8app, they should contact us immediately at [email protected]. We will take prompt steps to verify the report and, if confirmed, permanently close the account and securely delete all associated personal data.

10 International Data Transfers

kx8app primarily serves players based in Bangladesh. Some of our technical infrastructure, analytics, and third-party service providers may be located outside Bangladesh. Where personal data is transferred internationally, kx8app ensures that appropriate safeguards are in place — including contractual data processing agreements — to maintain a standard of data protection consistent with this Policy.

By using the Platform, you acknowledge and consent to the transfer of your personal data to servers and processors located outside your country of residence where necessary for the operation of the Platform.

11 Marketing Communications

kx8app may send you promotional communications about new games, bonuses, seasonal offers (such as Eid promotions, Pohela Boishakh specials, or BPL cricket season offers), and other kx8app services — but only where you have explicitly opted in to receive such communications during registration or via your account settings.

You may unsubscribe from marketing messages at any time by contacting [email protected] or by updating your communication preferences in your account settings. Opting out of marketing will not affect transactional communications, which are necessary for the operation of your account.

12 Changes to This Policy

kx8app reserves the right to update this Privacy Policy at any time. Where changes are material — for example, if we begin processing a new category of personal data or change our data retention periods — we will notify registered players via the mobile number or email address on file at least 14 days before the changes take effect. The updated Policy will also be published on this page with a revised effective date. We encourage you to review this page periodically to stay informed about how we protect your data.

13 Contact Us Regarding Privacy

If you have any questions, concerns, or complaints about this Privacy Policy or about the way kx8app handles your personal data, please contact our dedicated privacy support team:

We take all privacy-related communications seriously and commit to providing a substantive, personalised response to every enquiry — not an automated acknowledgement only.