Privacy Policy — kz999 Online Casino

Information We Collect

When you register and use kz999, we collect several categories of personal information. The scope of data collected depends on the stage of your relationship with kz999 — from initial account creation through to ongoing gameplay, deposits, withdrawals, and support interactions. We collect only what is necessary for each specific purpose, and we do not collect sensitive categories of data (such as biometric data or political opinions) unless legally required for identity verification.

Registration & Identity Data

At the point of account registration, kz999 collects the following information:

• Full legal name as it appears on your government-issued identification document.
• Date of birth — required to verify that you meet the minimum age requirement of 18 years.
• Residential address including city, district, and postal code (e.g., Dhaka, Chittagong, Sylhet, Khulna).
• Email address — used for account communications, verification, and support correspondence.
• Mobile phone number — used for two-factor authentication and account security alerts.
• Username and hashed password — your chosen login credentials. Passwords are never stored in plain text.

Identity Verification (KYC) Data

To comply with anti-money laundering obligations and to verify player age, kz999 may request the following documents during the KYC process:

• National Identity Card (NID) or passport copy.
• Proof of address — utility bill, bank statement, or official correspondence dated within 90 days.
• Proof of payment method ownership — screenshot or statement confirming that a bKash, Nagad, Rocket, or Upay account is registered in your name.
• In certain cases, a selfie photograph alongside your identity document for liveness verification.

Financial & Transaction Data

For every deposit and withdrawal processed through kz999, we retain the following transaction-level data:

Gameplay & Behavioural Data

kz999 automatically collects data about how you interact with the platform, including:

• Bets placed, games played, wager amounts, and win/loss history.
• Session duration, login timestamps, and pages visited within the platform.
• Device type, operating system, browser version, and screen resolution.
• IP address and approximate geographic location (used for fraud detection and access control — not used for targeted advertising).
• Responsible gaming interactions — deposit limits set, self-exclusion requests, cooling-off periods activated.

How We Use Your Data

kz999 processes personal data only for specific, legitimate purposes. We do not use your data for purposes that are incompatible with the original reason for collection. The following table summarises our primary processing activities and the legal basis for each:

Where processing is based on consent — specifically for promotional and marketing communications — you may withdraw that consent at any time by adjusting your notification preferences in your account settings or by contacting our support team. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

Data Sharing & Third Parties

kz999 does not sell, rent, or trade your personal data. We share personal information with third parties only where strictly necessary to deliver our services, comply with legal obligations, or protect the integrity of the platform. All third-party recipients of personal data are contractually bound to process that data solely for the agreed purpose and to maintain confidentiality.

Categories of Third-Party Recipients

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and USDT processing partners receive the minimum transaction data required to process deposits and withdrawals. These providers operate under their own privacy and security frameworks.
• Identity verification providers: Third-party KYC vendors who assist with document verification, liveness checks, and sanctions screening. These partners process identity documents on our behalf under strict data processing agreements.
• Game studio providers: Providers such as Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi receive session tokens and bet data necessary to render game content and return results. They do not receive your personal identity or financial details.
• Cloud infrastructure and hosting providers: kz999 uses reputable cloud infrastructure services to host its platform. These providers act as data processors and are bound by data security obligations.
• Anti-fraud and security services: Third-party services that analyse login patterns, IP reputation, and device fingerprinting to detect and prevent fraud and account takeover.
• Law enforcement and regulatory authorities: Where kz999 is legally required to disclose personal data — for example, in response to a court order, regulatory investigation, or anti-money laundering inquiry — we will comply with the applicable legal requirement. We will notify you of any such disclosure where we are lawfully permitted to do so.

Cookies & Tracking Technologies

kz999 uses cookies and similar tracking technologies to operate the platform securely, remember your session state, and understand how players navigate the site. A cookie is a small text file placed on your device by the kz999 web server. Cookies do not execute code and cannot carry viruses.

Types of Cookies We Use

kz999 does not place third-party advertising cookies or allow external advertising networks to set cookies through our platform. You may manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies may impair the functionality of the kz999 platform, including the ability to log in and maintain a secure session.

Data Retention & Storage

kz999 retains personal data only for as long as necessary to fulfil the purpose for which it was originally collected, or as required to comply with applicable legal obligations. The following retention schedule applies:

• Active account data (name, contact details, login credentials): Retained for the duration of the account relationship and for 5 years following permanent account closure.
• KYC and identity verification documents: Retained for a minimum of 5 years following account closure, in accordance with anti-money laundering record-keeping obligations.
• Financial transaction records: Retained for 7 years to satisfy financial record-keeping requirements.
• Gameplay and betting history: Retained for 3 years following the last recorded session for responsible gaming monitoring and dispute resolution purposes.
• Customer support correspondence: Retained for 2 years from the date of the last interaction.
• Marketing consent records: Retained for 3 years from the date consent was given or withdrawn, as proof of lawful processing.

When personal data is no longer required and the retention period has expired, kz999 securely deletes or anonymises the data so that it can no longer be attributed to an identified individual. Anonymised, aggregated data (which cannot identify any individual) may be retained indefinitely for platform analytics purposes.

All personal data is stored on servers protected by industry-standard physical and logical security controls. Data at rest is encrypted. Access to personal data is restricted to kz999 staff and authorised contractors who have a legitimate operational need.

Your Privacy Rights

As a kz999 player, you hold meaningful rights over your personal data. kz999 is committed to honouring these rights promptly and without unnecessary barriers. To exercise any of the rights listed below, please contact our support team via live chat or email at [email protected]. We will respond within 30 days of receiving a valid request.

Rights Available to All Players

• Right of Access: You have the right to request a copy of the personal data kz999 holds about you, along with information about how it is being used. We will provide this in a commonly used electronic format.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain account details directly through your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis exists. Please note that this right is subject to our legal obligation to retain certain records (e.g., financial transaction history for 7 years).
• Right to Restriction of Processing: You may request that kz999 pause processing of your personal data in certain circumstances — for example, while we investigate a dispute about the accuracy of the data.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) and to have it transmitted to another service provider where technically feasible.
• Right to Object: Where processing is based on legitimate interest (rather than consent or contract), you have the right to object to that processing. kz999 will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time with immediate effect on future processing.

Data Security Measures

kz999 takes the security of your personal data seriously and implements a layered set of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes the following controls:

• Transport encryption: All data transmitted between your device and kz999's servers is encrypted using TLS 1.2 or higher (256-bit SSL). This protects your login credentials, payment information, and personal details during transmission.
• Encryption at rest: Sensitive data stored in kz999's databases — including identity document copies, payment method identifiers, and KYC records — is encrypted at rest using AES-256 encryption.
• Access control: Access to personal data systems is restricted to authorised personnel only, on a need-to-know basis. All internal access events are logged and audited.
• Two-factor authentication: kz999 supports and encourages the use of 2FA for all player accounts. Internal administrative access requires mandatory multi-factor authentication.
• Penetration testing: kz999's systems are subject to regular security assessments and penetration tests conducted by independent security professionals.
• Incident response: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, kz999 will notify affected players without undue delay and will take immediate remedial action.

While kz999 employs robust security measures, no internet-based service can guarantee absolute security. Players are encouraged to use strong, unique passwords, enable two-factor authentication, and log out of their accounts after each session — particularly when using shared or public devices.

Children's Privacy & Age Verification

kz999 employs a mandatory age declaration at the point of registration. All players are required to confirm that they are 18 years of age or older before an account can be created. In addition, kz999 applies age verification checks at the point of the first withdrawal, which require the submission of a government-issued identification document confirming the player's date of birth.

If kz999 discovers or is notified that a registered account belongs to a person under the age of 18, the following steps will be taken immediately:

• The account will be suspended without notice.
• All funds held in the account — including deposits and any winnings — will be forfeited and may be returned to the originating payment method at kz999's discretion.
• All personal data associated with the underage account will be securely deleted, except where retention is required for legal reporting purposes.
• The incident will be documented and, where appropriate, referred to relevant child protection authorities.

Parents and guardians who believe that a minor may have created a kz999 account are encouraged to contact us immediately at [email protected]. We will investigate and act promptly on all such reports.

Updates to This Privacy Policy

kz999 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, legal obligations, or platform features. When material changes are made — meaning changes that significantly affect how we collect, use, or share your personal data — we will notify you by email to your registered address and by displaying a prominent notice on the kz999 website, with a minimum of 7 days' advance notice before the changes take effect.

Non-material updates — such as corrections to wording, clarifications of existing practice, or updates to contact information — may be made without advance notice. The "Last Updated" date displayed at the top of this policy will be revised each time a change is made.

Your continued use of the kz999 platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised terms. If you object to any change in this policy, you should cease using the platform and may request account closure in accordance with the account closure provisions in our Terms & Conditions.

All previous versions of this Privacy Policy are archived and available on request by contacting our support team.

Contact & Data Enquiries

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or have a concern about how kz999 handles your personal data, please reach out to us using any of the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available directly on the kz999 platform, 24 hours a day, 7 days a week
• Response Time: Under 5 minutes via live chat; within 24 hours by email
• Time Zone: Bangladesh Standard Time (BST, UTC+6)

All privacy-related enquiries will be logged, tracked, and responded to within the timeframes stated in Section 6 of this policy. We are committed to resolving all data concerns fairly, transparently, and without undue delay.