1. Data We Collect
kbd66 collects personal data from you in several ways: directly when you register an account or interact with our services, automatically as you browse and play on the platform, and occasionally from trusted third-party sources as part of our identity verification and fraud prevention processes. We apply a data minimisation principle — we collect only what is genuinely necessary to deliver, secure, and improve our services.
1.1 Account Registration Data
When you create a kbd66 account, we collect the following information:
- Full legal name as it appears on your government-issued identity document
- Date of birth (used for mandatory age verification — 18+ only)
- Email address (used for account communications and security alerts)
- Mobile phone number (used for two-factor authentication and account recovery)
- Residential address, including district, city, and postal code
- Preferred currency (Bangladeshi Taka ৳ / BDT by default)
- Username and encrypted password
1.2 Identity Verification (KYC) Data
In compliance with our Know Your Customer (KYC) obligations, kbd66 may request copies of official identity documents at registration, before processing a withdrawal, or at any point where we need to confirm your identity. KYC documents may include:
- National Identity Card (NID), passport, or driving licence (front and back)
- Proof of address: utility bill, bank statement, or official government correspondence dated within 90 days
- Proof of payment method: screenshot or statement confirming ownership of the bKash, Nagad, or bank account used for deposits
- A selfie photograph or live identity check where enhanced verification is required
1.3 Financial Transaction Data
Every deposit and withdrawal made through kbd66 generates a transaction record. We retain the following financial data in connection with your account:
| Data Type |
Examples |
Purpose |
| Deposit records |
Amount (৳), method (bKash/Nagad/Rocket), timestamp, transaction reference |
Account balance, fraud detection, AML compliance |
| Withdrawal records |
Amount (৳), destination account, processing time, approval status |
Payment processing, dispute resolution, KYC verification |
| Bonus records |
Bonus type, wagering progress, expiry, outcome |
Promotion management, abuse prevention |
| Bet and game history |
Game title, stake, outcome, session duration |
Responsible gaming monitoring, dispute resolution |
1.4 Technical and Usage Data
When you access kbd66 — whether via a desktop browser or mobile device — our systems automatically collect certain technical data to ensure the platform operates correctly and securely:
- IP address and approximate geolocation (city/country level)
- Device type, operating system, and browser version
- Pages visited, features accessed, and time spent on each section
- Session start and end timestamps (Bangladesh Standard Time, UTC+6)
- Referring URL (the page you arrived from, if applicable)
- Crash reports and error logs generated during your session
Data Minimisation: kbd66 does not collect data that is not necessary for the purposes described in this policy. We do not collect your social media profile data, biometric data (other than where a live identity check is explicitly required for KYC), or any sensitive personal data categories beyond what is strictly needed for age and identity verification.
2. How We Use Your Data
kbd66 processes your personal data only for legitimate, clearly defined purposes. We do not use your data for purposes that are incompatible with those stated at the time of collection. Below is a comprehensive account of how your data is used across the platform.
2.1 Account Management and Service Delivery
The core purpose of collecting your registration data is to create and maintain your kbd66 account. This includes verifying your identity, processing deposits and withdrawals in Bangladeshi Taka (৳), delivering game access, crediting bonuses, and maintaining a complete record of your account activity. Without this processing, kbd66 cannot provide its services to you.
2.2 Security and Fraud Prevention
kbd66 uses your account data, device data, IP address, and transaction history to detect and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting, and any other form of misuse described in our Terms & Conditions. Our fraud detection systems operate in real time and may flag unusual patterns for manual review by our security team.
2.3 Responsible Gaming
Your gameplay history, session durations, deposit frequency, and wagering patterns are monitored by kbd66's responsible gaming systems. This data enables us to identify signs of problem gambling, enforce self-exclusion restrictions, apply deposit limits you have set, and send responsible gaming reminders where appropriate. This processing is in both your interest and our legal obligation as a responsible operator.
2.4 Customer Support
When you contact kbd66 support — via live chat or email at [email protected] — we retain a record of the interaction, including your account details, the nature of your query, and any documents shared during the conversation. This record is used to resolve your issue and to improve our support quality over time.
2.5 Legal and Regulatory Compliance
kbd66 may be required to retain, disclose, or report certain categories of personal data and transaction records to comply with applicable anti-money-laundering (AML) regulations, tax reporting obligations, or lawful requests from competent authorities. In such cases, data is shared only to the extent required by law, and we will notify you where legally permissible to do so.
2.6 Platform Improvement and Analytics
Aggregated and anonymised usage data — from which individual players cannot be identified — is used by kbd66's product and engineering teams to improve platform performance, optimise game loading speeds, identify and fix technical bugs, and develop new features. This analytics processing does not involve personally identifiable information.
2.7 Marketing Communications
Where you have given explicit consent at registration or through your account preferences, kbd66 may send you promotional emails and notifications about new games, bonuses, seasonal offers (such as Eid or Pohela Boishakh promotions), and platform updates. You may withdraw consent for marketing communications at any time by updating your account notification settings or by contacting support. Withdrawal of marketing consent does not affect the processing of your data for other purposes described in this policy.
No Data Selling: kbd66 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Your personal information is used solely to deliver, protect, and improve the kbd66 platform and its associated services.
3. Data Sharing & Disclosure
kbd66 treats your personal data with strict confidentiality. We do not disclose your information to third parties except in the limited circumstances described below. In all cases, data sharing is subject to appropriate confidentiality agreements or legal obligations.
3.1 Payment Processors
To process deposits and withdrawals, kbd66 shares the minimum necessary transaction and identity data with our payment processing partners. These include bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. Each payment partner operates under its own privacy policy and data protection obligations. kbd66 does not store full payment card numbers or mobile banking PINs on its own servers.
3.2 Identity Verification Providers
kbd66 may use third-party identity verification services to assist with KYC document checks and age verification. These providers process your identity documents in a secure environment and return a verification result to kbd66. They do not retain your documents beyond the period required to complete the verification, and they are contractually prohibited from using your data for any purpose other than the verification task.
3.3 Game Content Providers
Games on the kbd66 platform are delivered by licensed third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game provided by one of these studios, your session data (game ID, stake, outcome, and timestamp) is transmitted to the relevant provider for game-integrity and audit purposes. These providers do not receive your full identity data or payment information.
3.4 Law Enforcement and Regulatory Authorities
kbd66 will disclose personal data to law enforcement agencies, financial intelligence units, or other competent regulatory authorities when legally required to do so — for example, in response to a valid court order, subpoena, or regulatory investigation. We will not disclose data voluntarily without legal compulsion, and we will contest requests that we believe to be unlawful or disproportionate.
3.5 Business Transfers
In the event that kbd66's business or any substantial part of its assets is acquired by or merged with another entity, your personal data held by kbd66 may be transferred to the acquiring party as part of that transaction. You will be notified of any such transfer via your registered email address, and the acquiring entity will be required to honour the terms of this Privacy Policy.
No Cross-Border Data Sales: kbd66 does not transfer your personal data to countries with materially weaker data protection standards for commercial purposes. Any cross-border data transfers that occur in connection with the services described above (e.g., game providers based outside Bangladesh) are governed by contractual data protection clauses that require the recipient to maintain standards equivalent to those described in this policy.
4. Cookies & Tracking
kbd66 uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your session preferences, and to collect anonymous usage analytics. By continuing to use kbd66 after reviewing this policy, you acknowledge the use of cookies as described below.
4.1 What Are Cookies?
Cookies are small text files stored on your device by your web browser when you visit a website. They allow the website to recognise your device on subsequent visits, remember your preferences, and track how you navigate the site. Cookies do not contain executable code and cannot access other files on your device.
4.2 Types of Cookies Used by kbd66
| Cookie Type |
Purpose |
Duration |
| Essential / Session |
Maintain your login session, remember your account state, and ensure platform security. These cannot be disabled without breaking core functionality. |
Session (deleted on browser close) |
| Functional / Preference |
Remember your display preferences, language setting (English), and last-visited game category so you don't have to reconfigure on each visit. |
Up to 12 months |
| Analytics |
Collect anonymised data on page views, session duration, navigation paths, and error events. Used to improve platform performance. Data is aggregated and cannot identify individuals. |
Up to 24 months |
| Security / Fraud Detection |
Detect bot activity, credential stuffing, and suspicious login patterns. These are essential for protecting your account and cannot be disabled. |
Up to 30 days |
4.3 Managing Cookies
You can control and manage cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies at any time. Please note that disabling essential or security cookies will impair your ability to log in and use core kbd66 features. Disabling functional cookies means your preferences will not be saved between sessions. Disabling analytics cookies will not affect your ability to use the platform but will reduce kbd66's ability to identify and resolve performance issues.
Instructions for managing cookies in popular browsers are available from the browser provider's support documentation. Commonly used browsers in Bangladesh include Google Chrome, Mozilla Firefox, Microsoft Edge, and Samsung Internet.
4.4 Do Not Track
Some browsers transmit a "Do Not Track" (DNT) signal to websites. kbd66 acknowledges these signals; however, because there is no universally agreed standard for how websites should respond to DNT signals, our platform currently does not alter its behaviour in response to a DNT request. We will revisit this position as industry standards evolve.
5. Data Retention
kbd66 retains your personal data for as long as your account is active and for a defined period after account closure, as required by our legal and regulatory obligations. We do not retain data beyond the periods described below without a documented legal basis for doing so.
5.1 Active Account Data
While your kbd66 account remains active, we retain all registration data, KYC documents, transaction history, gameplay records, and support communications associated with your account. This data is necessary to deliver the platform services, comply with ongoing AML obligations, and respond to any disputes or regulatory inquiries that may arise.
5.2 Post-Closure Retention
Following the closure of your kbd66 account — whether voluntarily or due to a breach of our Terms & Conditions — we retain the following categories of data for the periods specified:
- Identity and KYC documents: Retained for a minimum of 5 years from the date of account closure, in compliance with standard AML record-keeping requirements.
- Financial transaction records: Retained for a minimum of 5 years from the date of each transaction.
- Account activity and gameplay logs: Retained for 3 years from account closure, used for dispute resolution and responsible gaming audit purposes.
- Support communications: Retained for 2 years from the date of each interaction.
- Marketing consent records: Retained for 3 years from the date consent was given or withdrawn, as evidence of compliance with consent obligations.
5.3 Dormant Account Data
Accounts with no login activity for 12 consecutive months are classified as dormant. kbd66 will contact the registered email address before initiating dormancy procedures. Dormant account data is retained for the same periods described in Section 5.2, measured from the date the account formally transitions to dormant or closed status.
Deletion Requests: You may request deletion of your personal data by contacting
[email protected]. Where deletion is legally permissible (i.e., where no statutory retention obligation applies), kbd66 will process your request within 30 days. Where a legal retention obligation prevents full deletion, kbd66 will inform you of the specific category of data that must be retained and the applicable retention period.
6. Data Security
kbd66 implements a multi-layered security architecture to protect your personal data from unauthorised access, accidental loss, alteration, and disclosure. Our security posture is informed by industry best practices for online financial services platforms and is reviewed and updated on a regular basis.
6.1 Encryption
All data transmitted between your device and the kbd66 platform is encrypted using 256-bit Transport Layer Security (TLS). This ensures that your login credentials, personal details, and financial transaction data cannot be intercepted in transit. Data stored in kbd66's databases — including passwords, which are hashed using a modern one-way algorithm — is protected by encryption at rest.
6.2 Access Controls
Access to personally identifiable player data within kbd66's internal systems is restricted on a strict need-to-know basis. Only authorised personnel whose role requires access to specific data categories are granted access, and all internal data access events are logged for audit purposes. Customer support staff can view your account status and transaction history but cannot view your full payment card details, mobile banking credentials, or KYC document images beyond what is necessary for their support function.
6.3 Infrastructure Security
kbd66's platform infrastructure is hosted in secure data centres with physical access controls, network firewalls, intrusion detection systems, and regular vulnerability assessments. Our development and operations teams follow secure coding practices, and all significant platform releases undergo security review before deployment.
6.4 Account Security — Your Responsibilities
While kbd66 takes every reasonable measure to secure your data on our side, the security of your account also depends on actions you take. You are responsible for:
- Choosing a strong, unique password for your kbd66 account and not reusing it elsewhere
- Enabling two-factor authentication (2FA) where available in your account settings
- Logging out of kbd66 when using a shared or public device
- Keeping the email address associated with your account secure and accessible only to you
- Notifying kbd66 support immediately if you suspect your account has been accessed without authorisation
6.5 Data Breach Response
In the unlikely event of a data breach that is reasonably likely to result in a risk to your rights and freedoms, kbd66 will notify affected players via their registered email address within 72 hours of becoming aware of the breach, where technically and legally feasible. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the measures kbd66 has taken or intends to take to address the breach.
7. Your Privacy Rights
kbd66 respects your rights over your personal data. The following rights are available to all registered players regardless of their location within Bangladesh or their account status.
7.1 Right of Access
You have the right to request a copy of the personal data kbd66 holds about you. This includes your registration details, KYC documents on file, transaction history, and gameplay records. Access requests can be submitted by contacting [email protected]. kbd66 will respond within 30 days of receiving a valid access request.
7.2 Right to Rectification
If any personal data kbd66 holds about you is inaccurate or incomplete, you have the right to request correction. Name changes, address updates, and contact detail amendments can be submitted via your account settings or through support. Where the correction relates to KYC documents, updated documentation will be required.
7.3 Right to Erasure
You may request that kbd66 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been processed unlawfully. As noted in Section 5, certain categories of data must be retained for statutory periods and cannot be deleted on request until those periods have elapsed.
7.4 Right to Restrict Processing
You may request that kbd66 restrict the processing of your data in certain circumstances — for example, while a rectification request is being assessed, or where you have objected to processing and kbd66 is considering whether its legitimate interests override your objection.
7.5 Right to Data Portability
Where kbd66 processes your data on the basis of your consent or to perform a contract with you, and where the processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format (such as JSON or CSV). You may also request that kbd66 transmit your data directly to another service provider where technically feasible.
7.6 Right to Object to Marketing
You have the right to object to the processing of your personal data for direct marketing purposes at any time. To stop receiving promotional communications from kbd66, update your notification preferences in your account settings or contact support. Your objection will be processed within 5 business days.
7.7 How to Exercise Your Rights
All privacy rights requests should be submitted in writing to [email protected] with the subject line "Privacy Rights Request". Please include your registered account email address and a description of the right you wish to exercise. kbd66 may ask you to complete a brief identity verification step before processing your request to ensure that we are responding to the genuine account holder and not a third party.
Response Timeline: kbd66 commits to acknowledging all privacy rights requests within 48 hours and providing a substantive response within 30 calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it within the initial 30-day window.
8. Policy Updates
kbd66 reviews this Privacy Policy on a regular basis to ensure it accurately reflects our data processing practices and remains aligned with applicable legal requirements. We reserve the right to update or modify this policy at any time.
8.1 Notification of Changes
When we make a material change to this Privacy Policy — such as adding a new category of data collection, introducing a new third-party processor, or altering our data retention periods — we will notify registered players via their registered email address at least 14 days before the change takes effect. The updated policy will also be published on this page with a revised effective date shown at the top of the document.
8.2 Continued Use as Acceptance
By continuing to use the kbd66 platform after the effective date of an updated Privacy Policy, you acknowledge that you have read and understood the revised terms. If you do not agree with any material change to this policy, you should discontinue your use of kbd66 and request account closure via [email protected] before the change takes effect.
8.3 Version History
Previous versions of this Privacy Policy are available upon request. If you wish to review an earlier version — for example, to understand what terms were in effect during a specific period of your account activity — please contact our support team with the date range you are interested in.
8.4 Contact Details
If you have any questions, concerns, or feedback about this Privacy Policy or about how kbd66 handles your personal data, please contact our support team at any time:
- Email: [email protected] (plain text — not a clickable link)
- Support availability: 24 hours a day, 7 days a week, 365 days a year
- Response time: Within 24 hours for general enquiries; within 48 hours for privacy-specific requests
- Time zone: Bangladesh Standard Time (BST, UTC+6)
This Privacy Policy was last reviewed and updated on 1 January 2026. It supersedes all previous versions published on this page.