Privacy Policy — How kg998 Handles Your Personal Data

Introduction & Scope

This Privacy Policy ("Policy") is published by kg998 ("kg998", "We", "Us", "Our") and applies to all personal data collected through the website at kg998.io, its sub-pages, mobile-optimised versions, and any associated customer support channels (collectively, the "Platform").

kg998 acts as the data controller in respect of personal data collected directly from players ("You", "User", "Account Holder") during registration, account use, payment processing, and communications with our support team. Where third-party service providers process data on our behalf, they act as data processors under binding contractual agreements with kg998.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are available via the Quick Links in our footer. In the event of any conflict between this Policy and those documents on matters of data privacy, this Policy shall prevail.

Personal Data We Collect

kg998 collects personal data through several channels: directly from you when you register or interact with the Platform, automatically as you browse and play, and — in limited circumstances — from trusted third-party sources used for identity verification and fraud prevention.

2.1 Data You Provide Directly

• Registration data: full legal name, date of birth, email address, phone number, and chosen username and password.
• Identity verification (KYC) documents: copies of government-issued photo identification (National ID card, passport), proof of address, and proof of payment method ownership as required during verification.
• Payment information: mobile wallet identifiers (bKash, Nagad, Rocket, Upay account numbers), bank account details (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank), and transaction reference numbers. Full payment credentials are handled by our payment partners and are not stored on kg998 servers.
• Support correspondence: messages, attachments, and transaction details you share when contacting our customer support team by email or live chat.
• Responsible gaming data: deposit limits, self-exclusion status, and cooling-off period configurations that you set via your account dashboard.

2.2 Data Collected Automatically

• Device and technical data: IP address, browser type and version, operating system, device type (desktop/mobile/tablet), screen resolution, and time zone.
• Usage and behavioural data: pages visited, games launched, session durations, betting history, wager amounts, bonus activations, and navigation paths within the Platform.
• Session data: authentication tokens, session identifiers, and login timestamps used to maintain the security of your active session.
• Cookie and tracking data: as described in Section 7 of this Policy.

2.3 Data from Third Parties

In certain circumstances, kg998 may receive personal data about you from third-party sources, including:

• Identity verification agencies used to confirm your age and identity as part of our KYC process.
• Fraud prevention and anti-money-laundering (AML) screening services that flag high-risk account activity.
• Payment processors that confirm the status of deposit and withdrawal transactions.

We use data from these sources solely for the purposes of operating your account lawfully and safely. We do not purchase marketing lists or consumer profile data from data brokers.

How We Use Your Personal Data

kg998 uses your personal data for the following specific, documented purposes:

Where we rely on your consent to use your data (for example, to send promotional communications), you may withdraw that consent at any time by updating your notification preferences in your account dashboard or by contacting our support team.

Legal Basis for Processing

kg998 processes personal data only where a valid legal basis exists. The four bases we rely upon are as follows:

• Contractual necessity: Processing required to fulfil the account agreement between you and kg998 — including registration, payment processing, and account management.
• Legal obligation: Processing required to comply with applicable law, including anti-money-laundering regulations, age verification requirements, and record-keeping obligations.
• Legitimate interest: Processing where kg998 has a genuine business interest that is proportionate and does not override your privacy rights — for example, fraud prevention, platform security, and analytics used to improve user experience.
• Consent: Processing based on your freely given, specific, informed consent — for example, marketing emails and SMS notifications. Consent may be withdrawn at any time without penalty.

Data Sharing & Third-Party Disclosure

kg998 does not sell, rent, or trade your personal data. We share data only in the limited circumstances described below, and only with parties who are contractually obligated to handle that data securely and solely for the specified purpose.

5.1 Service Providers (Data Processors)

kg998 engages trusted third-party service providers to deliver specific operational functions. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, and banking partners receive the minimum data necessary to process your deposit or withdrawal transaction.
• KYC and identity verification providers: receive your identity documents and personal details to perform age and identity checks on kg998's behalf.
• Fraud prevention and AML screening services: receive transaction and device data to identify patterns consistent with fraudulent activity or money laundering.
• Cloud infrastructure and hosting providers: store encrypted Platform data in secure data centres.
• Customer support software providers: facilitate live chat and email communication between you and our support team.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other studios may receive a session token and anonymised player identifier to initialise game sessions. They do not receive your name, payment details, or contact information.

5.2 Legal Disclosures

kg998 may disclose personal data to law enforcement agencies, government authorities, or regulatory bodies where required by applicable law, or where we have a good-faith belief that disclosure is necessary to protect the rights, property, or safety of kg998, our users, or the public.

5.3 Business Transfers

In the event that kg998 undergoes a merger, acquisition, or sale of all or a portion of its assets, personal data held about our users may form part of the transferred assets. We will notify affected users by email prior to any such transfer and ensure that any acquiring entity is bound by privacy obligations at least equivalent to those in this Policy.

Data Retention

kg998 retains personal data only for as long as is necessary for the purposes set out in this Policy and to satisfy applicable legal, regulatory, accounting, or reporting requirements. The following retention periods apply as a general guide:

When the applicable retention period expires and no legal basis for continued storage exists, kg998 will securely delete or irreversibly anonymise the data in question in accordance with our internal data lifecycle procedures.

Cookies & Tracking Technologies

kg998 uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help us deliver a functional, secure, and personalised experience.

7.1 Types of Cookies We Use

• Strictly necessary cookies: Required for the Platform to function. They maintain your login session, remember items in your session, and ensure secure areas of the site remain accessible only to authenticated users. These cookies cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, display options, and responsible gaming limits you have configured. Disabling these cookies may affect the personalised functionality of the Platform.
• Analytics cookies: Collect anonymised data about how users interact with the Platform — which pages are visited most frequently, where users navigate next, and whether errors are encountered. This information is used exclusively to improve the Platform experience.
• Session security cookies: Generate and store CSRF tokens and session identifiers that protect your account from cross-site request forgery attacks and session hijacking.

7.2 Managing Cookies

You may manage or disable non-essential cookies through your browser settings. Most modern browsers allow you to review stored cookies, block cookies from specific sites, and clear all cookies on exit. Please note that disabling certain functional cookies may impair the usability of the Platform, including the ability to maintain a logged-in session.

kg998 does not use third-party advertising or retargeting cookies. No tracking pixel, ad network tag, or cross-site tracking script is deployed on the Platform.

Data Security

kg998 implements a layered security architecture designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key security measures include:

• Transport encryption: All data transmitted between your browser or app and kg998 servers is encrypted using TLS 1.2 or higher with 256-bit AES encryption.
• Encryption at rest: Sensitive data fields including identity documents, payment identifiers, and authentication credentials are encrypted at rest within our database infrastructure.
• Access controls: Access to personal data within kg998's internal systems is restricted on a strict need-to-know basis. Staff access is governed by role-based permissions, and all access events are logged and audited.
• Two-factor authentication (2FA): Available to all account holders and required for high-value withdrawal requests and account security changes.
• Intrusion detection: Our infrastructure is monitored around the clock for anomalous activity. Automated alerting triggers an immediate security review when suspicious patterns are detected.
• Regular security testing: kg998 conducts periodic vulnerability assessments and penetration testing of the Platform to identify and remediate security weaknesses before they can be exploited.

While kg998 takes all reasonable precautions to protect your data, no transmission over the internet or electronic storage system is entirely immune to risk. In the unlikely event of a data breach that poses a risk to your rights and freedoms, kg998 will notify affected users promptly and take all appropriate remediation measures.

Your Privacy Rights

As a kg998 account holder, you hold the following rights with respect to your personal data. To exercise any of these rights, submit a written request to our support team at [email protected]. We will acknowledge your request within 48 hours and respond in full within 30 calendar days.

Please note that certain rights are subject to limitations where kg998 has a legal obligation to retain or process data — for example, AML transaction records. In such cases, we will explain the limitation clearly in our response to your request.

Children & Minors

The kg998 Platform is intended exclusively for adults aged 21 and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. If we become aware that an account has been registered by a person under this age threshold, we will immediately close the account, securely delete the associated personal data (subject only to any retention obligations required by law), and void any associated balance in accordance with our Terms & Conditions.

If you believe a minor has registered an account on kg998 without authorisation, please notify us immediately at [email protected] and we will investigate and act without delay. We strongly encourage parents and guardians to use reputable parental control software to restrict access to online gambling platforms on shared or family devices.

Third-Party Links

The kg998 Platform may contain references to third-party payment providers and game studios as part of its operational content. kg998 is not responsible for the privacy practices of external organisations, including payment partners such as bKash, Nagad, Rocket, and Upay, or game studios such as Pragmatic Play, Evolution Gaming, NetEnt, and Microgaming.

When you interact with a third-party service — for example, when initiating a bKash payment — you are subject to that provider's own privacy policy and terms of service. We encourage you to review the privacy documentation of any third-party service you use in connection with your kg998 account.

Updates to This Privacy Policy

kg998 reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we offer. When material changes are made, we will notify registered account holders via the email address on file and display a prominent update notice on the Platform for a minimum of seven days prior to the changes taking effect.

The "Effective Date" shown at the top of this Policy reflects the date of the most recent revision. We recommend reviewing this page periodically. Your continued use of the Platform after the effective date of any amendment constitutes acceptance of the updated Policy. If you object to any change, you must cease using the Platform and contact our support team to request account closure.

Contact Us & Privacy Complaints

If you have a question about this Privacy Policy, wish to exercise any of the rights described in Section 9, or believe that kg998 has handled your personal data in a manner inconsistent with this Policy, please contact our dedicated privacy support team using the details below.

Email: [email protected]

Our privacy team operates in English and is available 24 hours a day, 7 days a week, including all Bangladeshi public holidays. We target an initial response to all privacy-related enquiries within 48 hours of receipt, and a full substantive response within 30 calendar days in line with the timeframes set out in Section 9.

When submitting a privacy request or complaint, please include your registered username, the email address associated with your account, and a clear description of your request or concern. This will allow us to locate your account records promptly and handle your enquiry as efficiently as possible.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter through any applicable dispute resolution mechanism available in your jurisdiction. kg998 commits to cooperating fully with any such process and to implementing any remediation measures identified as appropriate.