kd333 Privacy Policy

1. Introduction

kd333 ("kd333", "we", "us", "our") is committed to protecting the privacy and personal data of everyone who uses our platform. This Privacy Policy ("Policy") describes in detail how kd333 collects, uses, stores, shares, and protects personal data in connection with the operation of the kd333 online gaming platform at kd333.bid.

This Policy applies to all individuals who visit the kd333 website, register for an account, place bets, use the live casino, access the slots library, interact with our customer support team, or otherwise engage with any service that kd333 provides. By registering with kd333 or continuing to use the platform after this Policy has been published, you confirm that you have read this Policy and that you consent to the data practices described herein. If you do not agree to this Policy, you must not use the kd333 platform.

This Policy should be read alongside the kd333 Terms & Conditions and the Responsible Gaming policy, both of which form part of the overall agreement between you and kd333.

2. Data Controller

For the purposes of applicable data protection law, kd333 acts as the data controller in respect of the personal data it collects from players and website visitors. As data controller, kd333 determines the purposes for which personal data is processed and the means by which that processing is carried out.

If you have any questions about how kd333 handles your personal data, or if you wish to exercise any of your rights described in Section 11 of this Policy, you may contact our dedicated data privacy team at the email address provided in Section 14.

3. Data We Collect

kd333 collects the following categories of personal data from players and website visitors:

3.1 Identity Data

• Full legal name
• Date of birth
• Gender (where provided voluntarily)
• Government-issued identification number (National ID, passport number, or driving licence number)
• Photographic identity document images submitted during KYC verification

3.2 Contact Data

• Mobile phone number
• Email address
• Residential address (district, city, and division within Bangladesh)

3.3 Account Data

• Username and encrypted password hash
• Account registration date and time
• Account status (active, suspended, self-excluded, closed)
• Responsible gaming preferences and limit settings

3.4 Financial Data

• Deposit and withdrawal transaction records, including amounts, dates, and payment method identifiers (e.g., bKash wallet number, Nagad account reference, bank account last four digits)
• Bonus claims, wagering history, and balance movements
• Source of funds documentation where submitted for enhanced due diligence

3.5 Gaming Activity Data

• Betting history across all products (sports, live casino, slots, and other games)
• Session duration and login timestamps
• Game preferences and browsing behaviour within the platform
• Win/loss records and cumulative wagering totals

3.6 Technical Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Unique device identifiers
• Cookie identifiers and session tokens (see Section 8)

3.7 Communications Data

• Records of live chat conversations and support ticket exchanges with kd333's customer support team
• Email correspondence sent to or received from kd333
• Feedback, complaints, and dispute records

4. How We Collect Data

kd333 collects personal data through the following channels:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or update your account settings
• Automatically: Through cookies, session tracking technologies, server logs, and analytics tools as you browse and interact with the kd333 platform
• From third parties: From identity verification providers, payment processors (including bKash, Nagad, Rocket, and Upay), fraud detection services, and KYC document verification partners — solely for the purposes of verifying your identity and processing transactions securely

5. How We Use Your Data

kd333 uses the personal data it collects for the following purposes:

Purpose	Description
Account Management	Creating and maintaining your kd333 account, verifying your identity, processing login requests, and enabling account recovery
Service Delivery	Enabling you to place bets, play games, access the live casino and slots library, and use all other features of the kd333 platform
Payment Processing	Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported bank partners; reconciling transaction records; and investigating payment disputes
Identity Verification (KYC)	Verifying that you meet the eligibility criteria in our Terms & Conditions, including age verification (18+) and source of funds checks where required
Regulatory Compliance	Meeting our obligations under kd333's international gaming licence, including anti-money laundering screening, responsible gaming monitoring, and fraud prevention
Customer Support	Responding to your enquiries, resolving complaints, and maintaining records of interactions for quality assurance and dispute resolution
Platform Security	Detecting and preventing fraud, account takeovers, collusion, bonus abuse, and other prohibited conduct described in the Terms & Conditions
Responsible Gaming	Monitoring gaming patterns to identify potential problem gambling behaviour, enforcing self-exclusion requests, and delivering responsible gaming interventions
Platform Improvement	Analysing aggregated usage data to improve platform performance, game selection, and the overall user experience — this analysis uses anonymised or pseudonymised data wherever possible
Communications	Sending you service-essential notifications (e.g., transaction confirmations, account alerts, security notices) and, where you have opted in, promotional communications about offers and new games

6. Legal Basis for Processing

kd333 processes your personal data only where a valid legal basis exists. The primary legal bases applicable to kd333's processing activities are:

• Contractual necessity: Processing required to perform the contract between you and kd333 — including account creation, service delivery, and payment processing
• Legal obligation: Processing required to comply with kd333's obligations under its international gaming licence, including KYC verification, anti-money laundering checks, and regulatory reporting
• Legitimate interests: Processing carried out in kd333's legitimate interests, including fraud prevention, platform security, responsible gaming monitoring, and platform improvement — provided that these interests are not overridden by your own rights and interests
• Consent: Where kd333 relies on your consent — primarily for optional marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing that took place before withdrawal

7. Sharing Your Data

kd333 does not sell your personal data. We may share your data with the following categories of recipient, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

7.1 Payment Processors

Transaction data is shared with payment service providers including bKash, Nagad, Rocket, Upay, and partner banks solely for the purpose of processing deposits and withdrawals. These providers act as independent data controllers in relation to their own payment infrastructure.

7.2 Identity Verification Providers

Identity documents and biographical data submitted during KYC verification are shared with third-party identity verification providers. These providers process data under strict contractual obligations and may not use it for any purpose other than identity verification on kd333's behalf.

7.3 Fraud Prevention Services

Technical data, transaction patterns, and device identifiers may be shared with fraud prevention and risk management services to identify and prevent prohibited activity on the platform.

7.4 Regulatory and Legal Authorities

kd333 may disclose personal data to its licensing authority, law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by law, court order, or regulatory direction. kd333 will notify affected players of any such disclosure where it is legally permitted to do so.

7.5 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of substantially all of kd333's assets, personal data held by kd333 may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

8. Cookies & Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. kd333 uses cookies and similar tracking technologies (including session tokens, local storage, and pixel tags) to operate the platform, maintain your login session, and understand how players use our services.

8.2 Types of Cookies Used

• Strictly necessary cookies: Essential for the platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences such as language settings, responsible gaming limit configurations, and display preferences between sessions.
• Analytics cookies: Collect aggregated, anonymised data about how players navigate the platform, which games are most popular, and where technical issues occur. This data is used exclusively to improve the platform.
• Security cookies: Used by kd333's fraud detection systems to identify suspicious login patterns, detect bot activity, and protect against account takeovers.

8.3 Managing Cookies

You may configure your browser to refuse or delete cookies. Please note that disabling strictly necessary cookies will impair your ability to use the kd333 platform, as session management depends on cookie functionality. Disabling other categories of cookies will not prevent you from using the platform but may reduce the quality of certain features.

9. Data Retention

kd333 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention obligations:

• Account and transaction records: Retained for a minimum of five years from the date of the last transaction or account closure, in accordance with anti-money laundering record-keeping requirements under kd333's gaming licence
• KYC documentation: Retained for a minimum of five years from the date of submission or account closure, whichever is later
• Customer support communications: Retained for three years from the date of the final interaction, for dispute resolution and quality assurance purposes
• Gaming activity logs: Retained for five years from the date of activity, for regulatory reporting and responsible gaming monitoring purposes
• Technical and security logs: Retained for twelve months from the date of generation, then deleted unless required for an ongoing investigation

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data (from which no individual can reasonably be identified) may be retained indefinitely for statistical and platform improvement purposes.

10. Security Measures

kd333 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure:

• Encryption in transit: All data transferred between your device and kd333's servers is protected by 256-bit SSL/TLS encryption
• Encryption at rest: Sensitive data fields stored in kd333's databases are encrypted using industry-standard symmetric encryption algorithms
• Password hashing: Account passwords are never stored in plain text. kd333 uses a strong adaptive hashing algorithm (bcrypt) to store password credentials
• Access controls: Access to personal data by kd333 staff is governed by role-based access controls and granted strictly on a need-to-know basis. All access is logged and audited
• Infrastructure security: kd333's platform is hosted on hardened server infrastructure with network firewalls, intrusion detection systems, and regular vulnerability assessments
• Incident response: kd333 maintains a data breach response plan. In the event of a confirmed breach affecting your personal data, kd333 will notify affected players within 72 hours of becoming aware of the incident, in accordance with applicable requirements

While kd333 takes all reasonable precautions to protect your personal data, no transmission over the internet or electronic storage system can be guaranteed to be 100% secure. You also play an important role in protecting your own data — please ensure your kd333 password is strong and unique, and never share your login credentials with anyone.

11. Your Rights

Subject to applicable law, you have the following rights in relation to the personal data kd333 holds about you:

• Right of access: You may request a copy of all personal data that kd333 holds about you, along with information about how it is being used
• Right to rectification: You may request the correction of inaccurate or incomplete personal data. For certain data fields (such as your registered name and date of birth), updates may require KYC re-verification
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where processing is unlawful — subject to kd333's legal obligation to retain certain records as described in Section 9
• Right to restriction: You may request that kd333 restricts the processing of your personal data in certain circumstances, such as while a dispute about the accuracy of the data is resolved
• Right to object: You may object to processing based on kd333's legitimate interests, including profiling for responsible gaming monitoring purposes, where you believe your individual rights and interests override kd333's legitimate interests
• Right to withdraw consent: Where processing is based on your consent (primarily marketing communications), you may withdraw that consent at any time by updating your communication preferences within your account settings or by contacting support
• Right to data portability: Where processing is carried out by automated means on the basis of your consent or contractual necessity, you may request a copy of your personal data in a structured, commonly used, machine-readable format

To exercise any of these rights, please contact kd333 at the email address provided in Section 14. kd333 will respond to all data rights requests within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case kd333 will notify you of the extension and the reason for it.

12. Minors

The kd333 platform is strictly for adults aged 18 years and above. kd333 does not knowingly collect personal data from any person under the age of 18. If you believe that a minor has registered with kd333 or that kd333 has inadvertently collected personal data from a minor, please contact us immediately at the email address in Section 14. Upon confirmation, kd333 will close the relevant account, void any associated transactions, and delete all personal data collected in connection with that account as promptly as possible.

kd333 employs age verification checks at the point of registration and during the KYC process to minimise the risk of underage access to the platform. These checks include requiring a date of birth at sign-up and validating identity documents that confirm the player's age.

13. Policy Changes

kd333 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, kd333's business practices, or the services offered on the platform. The date at the top of this page will always reflect the most recent revision.

Where a proposed change is material — meaning it significantly alters the way kd333 collects, uses, or shares your personal data — kd333 will notify registered players via email or in-platform notification at least 14 days before the change takes effect. Your continued use of the kd333 platform after a revised Policy has come into effect constitutes your acceptance of the updated terms.

We encourage you to review this Policy periodically to stay informed about how kd333 is protecting your information. The version history is maintained internally and is available upon request.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way kd333 handles your personal data, please contact our data privacy team using the details below:

Please note that the email address above is displayed as plain text and is not a clickable link. To contact us, please copy the address manually into your email client.