kz99 Privacy
Policy

01 Introduction

kz99 is committed to protecting the privacy and personal data of every player who uses our platform. We understand that trust is the foundation of any long-term relationship between a gaming platform and its players, and that trust begins with complete transparency about how personal information is handled.

This Policy applies to all personal data collected through the kz99 website at kz99.bio, any associated mobile-optimised URLs, our customer support channels (including live chat and email), and any promotional communications we send to registered players. It governs data collected from players located in Bangladesh and processed in connection with the operation of the kz99 platform.

This Policy should be read in conjunction with the kz99 Terms & Conditions and the Responsible Gaming Policy, both of which are available on this website. Where any conflict exists between this Policy and those documents on a matter of data privacy, this Policy takes precedence.

If you have questions about any aspect of this Policy, or wish to exercise any of the rights described herein, you may contact our dedicated Privacy team at [email protected] with the subject line "Privacy Enquiry". We aim to respond to all privacy-related correspondence within 5 business days.

02 Data We Collect

kz99 collects personal data in several ways: directly from you when you register and use the platform, automatically through your device and browser as you interact with the site, and occasionally from trusted third-party identity and payment verification services. The categories of data we collect are as follows:

2.1 Registration & Identity Data

When you create a kz99 account, we collect the following information:

• Full legal name
• Date of birth (to verify you are 18 or older)
• Residential address (including city, district, and postcode)
• Mobile phone number
• Email address
• Username and encrypted password

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) compliance process, we may request copies of identity documents including:

• National Identity Card (NID)
• Passport or driving licence
• Proof of address (utility bill, bank statement)
• Proof of payment method ownership (screenshot of bKash/Nagad/Rocket/Upay account registered in your name)

2.3 Financial Transaction Data

We record the details of all financial transactions conducted on your kz99 account, including:

• Deposit and withdrawal amounts in BDT (৳)
• Payment method reference numbers
• Transaction timestamps
• Account balance history

2.4 Gaming Activity Data

kz99 maintains detailed records of all gaming activity associated with your account. This includes game titles played, wager amounts, win/loss results, session durations, bonus usage, and jackpot fishing participation. This data is used to deliver a personalised experience, to detect problem gambling patterns, and to fulfil regulatory reporting obligations.

2.5 Technical & Device Data

We automatically collect the following technical information each time you access kz99:

2.6 Communications Data

When you contact kz99 via live chat, email, or any other supported channel, we retain records of those communications, including the content of messages, timestamps, and the outcome of any support request. This data is used for quality assurance, dispute resolution, and staff training purposes.

03 How We Use Your Data

kz99 processes personal data only for specific, legitimate purposes. We do not sell your personal data to third parties, and we do not use your data for purposes incompatible with those listed below. The primary purposes for which we process your personal data are:

• Account Management: To create, maintain, and manage your kz99 player account, including processing login authentication, account settings updates, and password resets.
• Age & Identity Verification: To verify that you meet the 18+ age requirement and to confirm your identity as part of our KYC compliance obligations. This is a legal and operational necessity — accounts that cannot be verified will be restricted.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard in BDT. Transaction records are maintained for financial audit and dispute resolution purposes.
• Game Delivery & Personalisation: To deliver the games and services you access on kz99, and to personalise your experience based on your preferences, game history, and platform usage patterns.
• Bonuses & Promotions: To evaluate your eligibility for bonuses, track wagering requirements, and communicate relevant promotional offers to you based on your account status and gaming preferences.
• Responsible Gaming: To monitor gaming patterns for indicators of problem gambling, to enforce deposit limits and self-exclusion requests, and to provide appropriate support resources where needed.
• Fraud Prevention & Security: To detect and investigate fraudulent activity, money laundering, bonus abuse, multi-accounting, and other prohibited conduct as defined in our Terms & Conditions.
• Customer Support: To respond to enquiries, resolve disputes, and maintain records of our interactions with you for quality assurance and audit purposes.
• Legal Compliance: To fulfil obligations under applicable anti-money laundering (AML), know your customer (KYC), and data protection laws and regulations.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the kz99 platform, fix bugs, and enhance the overall player experience.

04 Data Sharing & Disclosure

kz99 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

4.1 Payment Service Providers

To process your deposits and withdrawals, kz99 shares the minimum necessary financial and identity data with our payment processing partners, including the operators of bKash, Nagad, Rocket, Upay, and the card-processing networks supporting Visa and Mastercard transactions. These providers are contractually bound to use your data solely for payment processing purposes.

4.2 Identity Verification Providers

kz99 may use authorised third-party KYC and identity verification services to assist in verifying the authenticity of documents you submit. These providers process your data strictly for verification purposes and are prohibited from retaining or using it for any other purpose.

4.3 Game Software Providers

Certain game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive anonymised session and gameplay data necessary to deliver their games within the kz99 platform. No directly identifiable personal information (name, NID, contact details) is shared with game studios.

4.4 Legal & Regulatory Disclosure

kz99 may disclose your personal data to law enforcement agencies, regulatory authorities, or courts when required to do so by a valid legal obligation, court order, or regulatory direction. We will notify you of any such disclosure where permitted by law.

4.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of kz99's business, player data may be transferred to the acquiring entity as part of that transaction. In such an event, we will provide you with advance notice and ensure that the receiving entity is bound by a privacy policy no less protective than this one.

05 Cookies & Tracking

kz99 uses cookies and similar tracking technologies (including local storage tokens and session identifiers) to operate the platform, remember your preferences, maintain your login session, and collect analytical data about platform usage. The categories of cookies we use are described below.

Essential cookies are strictly necessary for the platform to function and cannot be disabled. All other cookie categories are optional. You may manage your cookie preferences through your browser settings at any time. Note that disabling functional or analytical cookies may affect the quality of your experience on kz99.

kz99 does not use third-party advertising cookies for behavioural advertising directed at you on other websites. Any analytical data collected via cookies is anonymised and aggregated before being used for platform improvement decisions.

06 Data Security

kz99 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security framework includes the following safeguards:

• TLS Encryption: All data transmitted between your device and the kz99 platform is encrypted using Transport Layer Security (TLS 1.3). Look for the padlock icon in your browser's address bar as confirmation that your connection is secure.
• Password Hashing: Account passwords are never stored in plain text. We use industry-standard bcrypt hashing with per-user salts to ensure that even in the unlikely event of a data breach, your password cannot be recovered in its original form.
• Two-Factor Authentication (2FA): kz99 strongly recommends enabling SMS-based 2FA on your account. Once enabled, any login attempt requires both your password and a one-time code sent to your registered mobile number.
• Access Controls: Access to player personal data within kz99's internal systems is restricted on a strict need-to-know basis. Staff members access only the data required to perform their specific role, and all internal data access is logged and audited.
• Regular Security Audits: kz99's platform infrastructure undergoes regular vulnerability assessments and penetration testing by qualified security professionals.
• Incident Response: In the event of a data breach that poses a risk to your personal data, kz99 will notify affected players within 72 hours of becoming aware of the incident, consistent with best-practice data breach notification standards.

07 Data Retention

kz99 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or audit obligations. The following retention periods apply to the main categories of personal data we hold:

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents it from being reconstructed or linked back to you. Anonymised, aggregated data that cannot identify any individual may be retained indefinitely for statistical and platform improvement purposes.

08 Your Privacy Rights

As a player registered with kz99, you hold the following rights in respect of your personal data. These rights can be exercised at any time by contacting our Privacy team at [email protected] with the subject line "Privacy Rights Request".

• Right of Access: You have the right to request a copy of all personal data kz99 holds about you. We will respond to access requests within 10 business days and provide the data in a structured, machine-readable format where possible.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Many details (email address, phone number, address) can be updated directly through your account settings panel. For corrections to identity or KYC data, please contact our support team.
• Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your personal data. Please note that this right is subject to limitations — we are required to retain certain data categories (particularly financial and KYC records) for mandatory retention periods as outlined in Section 7. We will delete all data that is not subject to a legal retention requirement promptly upon receiving a valid erasure request.
• Right to Restrict Processing: You may request that we limit the processing of your personal data to storage only, pending the resolution of a dispute about its accuracy or our legal basis for processing it.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to kz99 in a structured, commonly used, machine-readable format (e.g., CSV or JSON), so that you can transfer it to another service if you choose.
• Right to Object to Marketing: You may object to the use of your personal data for direct marketing purposes at any time. Once you object, we will cease all marketing processing immediately. This does not affect our ability to send essential account communications.
• Right to Withdraw Consent: Where kz99 processes your data on the basis of your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before your withdrawal.

09 Third-Party Services

The kz99 platform integrates third-party services that are essential to delivering our gaming and payment offerings. Each third-party provider operates under its own privacy policy, and kz99 conducts due diligence on all providers to ensure they meet adequate data protection standards before integration.

Payment Partners

Mobile financial service providers (bKash, Nagad, Rocket, Upay) and international card networks (Visa, Mastercard) each handle payment data in accordance with their own privacy frameworks and financial regulatory obligations. kz99 shares only the transaction data strictly required to process your payment request with these providers.

Game Studios

Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi deliver their game titles to kz99 players via secure APIs. These studios may receive anonymised session identifiers for the purpose of game delivery, fairness verification, and jackpot pool management. They do not receive your name, NID, contact information, or payment details.

Analytics Services

kz99 uses privacy-respecting analytics tools to monitor platform performance and user experience metrics. Any data shared with analytics providers is anonymised and aggregated — individual player accounts are never identifiable in analytics reports. kz99 does not use Google Analytics or any other advertising-network analytics product in a way that would enable cross-site tracking of your behaviour.

10 Policy Updates

kz99 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, applicable law, or regulatory guidance. When material changes are made, we will notify registered players via on-platform notification and/or email to the address registered on your account at least 7 calendar days before the changes take effect.

The date of the most recent revision is displayed at the top of this page. We encourage you to review this Policy periodically to stay informed about how kz99 protects and uses your personal data. Your continued use of the kz99 platform after the effective date of any revision constitutes your acceptance of the updated Policy.

If you disagree with any material change to this Policy, you may request the closure of your kz99 account before the change takes effect. Your withdrawable account balance will be processed normally in accordance with our standard withdrawal procedures prior to closure.