kzx8 Privacy Policy

1 Who We Are

kzx8 operates the online casino and sports betting platform accessible at kzx8.io (the "Platform"). The Platform is operated for and primarily directed at users located in Bangladesh. In the context of this Privacy Policy, "kzx8", "we", "us", and "our" refer to the operators of the kzx8 platform.

kzx8 acts as the data controller in respect of all personal data collected directly from users through the Platform. Where kzx8 engages third-party service providers to process data on its behalf, those providers act as data processors under contractual arrangements that require them to uphold the same standards of data protection described in this Policy.

If you have any questions about this Privacy Policy or the way in which kzx8 handles your personal data, you may contact our Data Protection team at any time using the details provided in Clause 15.

2 Data We Collect

2.1 Identity and Registration Data. When you create a kzx8 account, we collect your full legal name, date of birth, gender, residential address, nationality, and government-issued identification number (National ID card, passport, or driving licence number). This data is required to verify your identity, confirm that you meet the minimum age requirement of 21 years, and comply with anti-money laundering (AML) obligations.

2.2 Contact Data. We collect your email address and mobile phone number at registration. These are used to send account notifications, security alerts, promotional communications (where you have consented), and support responses. Your mobile number may also be used for two-factor authentication (2FA) verification messages.

2.3 Financial and Transaction Data. When you make a deposit or request a withdrawal, kzx8 records the transaction amount, date and time (in BST), payment method used (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard), and a transaction reference number. We do not store complete payment account credentials — all payment processing is handled by our regulated payment partners.

2.4 Technical and Device Data. Each time you access the Platform, our servers automatically collect your IP address, device type (mobile, tablet, desktop), operating system, browser type and version, and session timestamps. This data is used to maintain platform security, detect suspicious login attempts, and diagnose technical issues.

2.5 Usage and Behavioural Data. We collect data about your activity on the Platform, including the games you play, bet amounts and frequency, session duration, pages visited, and features used. This data is used to personalise your experience, power responsible gaming monitoring tools, and guide platform development priorities.

2.6 Support and Communications Data. When you contact kzx8 via live chat or email, we retain a record of those communications, including the content of messages, the date and time of contact, and the outcome. This data is used for dispute resolution, quality assurance, and to improve our support service.

3 How We Collect Your Data

kzx8 collects personal data through the following channels:

• Direct collection: Data you provide actively when registering an account, completing identity verification, making a transaction, submitting a support request, or updating your account profile.
• Automated collection: Technical and usage data collected automatically by our servers and analytics systems as you navigate and interact with the Platform.
• Cookie-based collection: Data collected via cookies, pixel tags, and similar tracking technologies as described in Clause 5.
• Third-party sources: Identity verification data obtained from our KYC partners when you submit identity documents; fraud-screening data obtained from fraud prevention partners to cross-check account activity against known risk profiles.
• Payment processors: Transaction confirmation data received from payment processing partners (bKash, Nagad, Rocket, Upay, bank partners) confirming successful deposit or withdrawal events.

4 How We Use Your Data

kzx8 uses the personal data we collect for the following purposes:

• To register your account and verify your identity, including age verification to enforce the 21+ requirement.
• To process deposits and withdrawals and maintain accurate financial records.
• To detect, investigate, and prevent fraud, money laundering, collusion, and other prohibited activities.
• To personalise your gaming experience, including recommending games based on your play history.
• To operate responsible gaming tools such as deposit limit monitoring, session time tracking, and self-exclusion enforcement.
• To send transactional communications including deposit confirmations, withdrawal updates, account security alerts, and password reset instructions.
• To send promotional communications (bonuses, offers, tournament announcements) where you have opted in to receive them.
• To resolve disputes, investigate complaints, and enforce the kzx8 Terms and Conditions.
• To analyse platform usage patterns and improve the design, features, and performance of kzx8.
• To comply with legal and regulatory obligations applicable to online platform operators in Bangladesh.

5 Cookies and Tracking Technologies

5.1 What Are Cookies? Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device across multiple visits, remember your preferences, and collect information about how you use the site.

5.2 Cookies kzx8 Uses. kzx8 uses the following categories of cookies on the Platform:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during your visit and security cookies that protect against cross-site request forgery. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Used to remember your preferences such as language settings and display options. Disabling these may reduce your experience but will not prevent you from using the Platform.
• Analytics cookies: Used to collect aggregated, anonymised data about how users navigate the Platform — pages visited, time spent per page, entry and exit points. This data guides UX improvements. Analytics cookies do not identify you personally.
• Marketing and retargeting cookies: Placed only where you have given explicit consent. These may be used to deliver relevant promotional content related to kzx8 offers. You may withdraw consent at any time via account settings.

5.3 Managing Cookies. You can control cookies through your browser settings. Most browsers allow you to view, block, or delete cookies. Note that blocking strictly necessary cookies will prevent you from logging in to your kzx8 account. For detailed guidance on managing cookies in your specific browser, refer to the browser's official help documentation.

6 Sharing Your Data

kzx8 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your data with the following categories of recipients, solely to the extent necessary and under binding contractual protections:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard — solely to process your financial transactions.
• Identity verification (KYC) partners: Third-party KYC service providers who verify identity documents submitted during account verification. These providers process your data on our behalf under strict data processing agreements.
• Fraud prevention and AML partners: Services that screen account activity against fraud databases and assist kzx8 in meeting anti-money laundering compliance obligations.
• Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other game studios may receive anonymised session data necessary to run their games within the kzx8 environment. Game providers do not receive your full identity data.
• Customer support platforms: Third-party software used to power our live chat and email support system. Support agents access your account data solely to resolve your specific query.
• Legal and regulatory authorities: Where required by applicable law, court order, or regulatory direction, kzx8 may disclose personal data to law enforcement agencies, tax authorities, or other competent governmental bodies in Bangladesh or internationally.

7 International Data Transfers

7.1 Cross-Border Processing. Some of the third-party service providers kzx8 uses — particularly cloud infrastructure providers and fraud screening services — may process data on servers located outside Bangladesh. Where such transfers occur, kzx8 takes steps to ensure that an equivalent level of data protection is applied to your personal data.

7.2 Safeguards Applied. For any transfer of personal data outside Bangladesh, kzx8 relies on one or more of the following safeguards: binding contractual clauses that impose data protection obligations equivalent to those applicable in Bangladesh; transfers to countries or organisations that have been determined to provide an adequate level of protection; or transfers that are strictly necessary for the performance of a contract between you and kzx8 (for example, processing a withdrawal via an international card network).

7.3 Your Consent. By creating a kzx8 account and using the Platform, you acknowledge that your personal data may be transferred to, stored, and processed outside Bangladesh in accordance with the safeguards described in this Clause.

8 Data Security

8.1 Technical Measures. kzx8 implements industry-standard technical security measures to protect your personal data against unauthorised access, accidental loss, alteration, or destruction. These include 256-bit TLS/SSL encryption for all data in transit, AES-256 encryption for sensitive data at rest, role-based access controls limiting data access to authorised personnel only, continuous intrusion detection and monitoring, and regular third-party security audits.

8.2 Organisational Measures. Access to personal data within kzx8 is granted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and receive regular data protection and security training. Any suspected data breach triggers an internal incident response protocol.

8.3 Breach Notification. In the event of a personal data breach that poses a risk to your rights and freedoms, kzx8 will notify affected users without undue delay, providing a clear description of the nature of the breach, the categories of data affected, the likely consequences, and the measures taken or proposed to address it.

8.4 Your Role in Security. While kzx8 takes all reasonable technical and organisational measures to protect your data, the security of your account also depends on you. You are responsible for maintaining a strong, unique password and keeping your login credentials confidential. If you suspect unauthorised access to your account, contact kzx8 support immediately.

9 Data Retention

9.1 Active Account Data. Personal data associated with an active kzx8 account is retained for the entire duration of the account relationship. This includes identity data, contact data, financial transaction history, and usage data.

9.2 Post-Closure Retention. Following account closure — whether player-initiated or by kzx8 — we retain certain categories of personal data for a further period as required by applicable legal and regulatory obligations. Financial transaction records are typically retained for a period of at least 5 years to satisfy anti-money laundering record-keeping requirements. Identity verification documents are retained for the legally required period following account closure.

9.3 Marketing Data. If you opted in to receive marketing communications from kzx8, your marketing preferences and contact details are retained until you withdraw consent or request deletion. Opting out of marketing does not trigger deletion of your account data.

9.4 Anonymisation. Where data is no longer required for its original purpose and no legal retention obligation applies, kzx8 will either securely delete the data or permanently anonymise it so that it can no longer be associated with you as an individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

10 Your Rights

As a data subject, you hold the following rights in relation to your personal data held by kzx8. To exercise any of these rights, contact our Data Protection team at the email address in Clause 15. We will respond within 30 days of receiving a valid request.

• Right of Access: You may request a copy of all personal data kzx8 holds about you, along with information about how it is being used.
• Right to Rectification: If any personal data kzx8 holds about you is inaccurate or incomplete, you have the right to request its correction. You can update basic profile data directly through your account dashboard.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other lawful basis applies), or where processing is unlawful. This right is subject to overriding legal retention obligations.
• Right to Restrict Processing: You may request that kzx8 pause processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or contract performance and is carried out by automated means, you may request that kzx8 provide your personal data to you in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of kzx8's legitimate interest, including profiling for marketing purposes. Where you object to direct marketing, processing for that purpose will cease immediately.
• Rights Related to Automated Decision-Making: kzx8 does not make purely automated decisions that produce significant legal or similarly significant effects on users without human review. Where automated tools are used (e.g., fraud screening), a kzx8 staff member is involved in any decision that materially affects your account.

11 Children's Privacy

11.1 Minimum Age. The kzx8 platform is strictly for adults aged 21 years and older. We do not knowingly collect personal data from anyone under the age of 21. The registration process includes a date-of-birth declaration and is supported by identity verification checks designed to detect underage users.

11.2 Discovery of Underage Data. If kzx8 becomes aware that personal data has been collected from a user who is under 21 years of age, we will immediately close the associated account, delete all personal data collected from that user (subject only to any mandatory legal retention obligations), and refund any deposits made, in accordance with our Terms and Conditions.

11.3 Parental Notification. If you are a parent or guardian and believe that your child under 21 has created a kzx8 account, please contact us immediately at the address provided in Clause 15. We will investigate and act promptly.

12 Marketing Communications

12.1 Opt-In Consent. kzx8 sends promotional communications — including bonus offers, tournament announcements, and platform news — only to users who have expressly opted in to receive them. Opt-in consent is requested at registration and can be updated at any time through your account settings.

12.2 Channels Used. Where you have consented, kzx8 may send marketing communications via email and SMS. We do not make unsolicited marketing phone calls.

12.3 Withdrawing Consent. You may withdraw your consent to receive marketing communications at any time by updating your preferences in the account settings dashboard, clicking the unsubscribe link in any marketing email, or contacting kzx8 support. Withdrawal of marketing consent does not affect your ability to continue using the Platform or receiving transactional communications.

12.4 Transactional Communications. Certain communications — including deposit confirmations, withdrawal updates, security alerts, and account-related notices — are sent regardless of your marketing preferences because they are necessary for the delivery of the service. These are not promotional in nature and cannot be opted out of while your account is active.

13 Third-Party Links

The kzx8 platform may contain references to or links to content provided by third-party game studios and payment partners. This Privacy Policy applies solely to data collected by kzx8 through the kzx8.io Platform. kzx8 is not responsible for the privacy practices of third-party websites or services that may be accessed via the Platform.

We encourage you to review the privacy policies of any third-party services you interact with. In particular, payment providers such as bKash, Nagad, and Rocket operate their own independent privacy frameworks when you interact with their platforms directly to complete a transaction.

14 Changes to This Policy

14.1 Policy Updates. kzx8 reserves the right to update or modify this Privacy Policy at any time. Changes may be made to reflect updates in applicable law, new platform features, changes in data processing activities, or improvements to the clarity of existing provisions.

14.2 Notification of Changes. When we make material changes to this Privacy Policy, we will notify registered users via email or through a prominent notice on the Platform at least 14 days before the changes take effect. The "Effective Date" at the top of this document will be updated to reflect the date the revised Policy comes into force.

14.3 Continued Use. Your continued use of the kzx8 Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you should discontinue use of the Platform and may request account closure by contacting our support team.

14.4 Previous Versions. Previous versions of this Privacy Policy are archived and available on request by contacting our Data Protection team.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way kzx8 handles your personal data, please contact our Data Protection team using the details below. We are committed to responding to all privacy-related enquiries within 30 calendar days.

When submitting a data rights request, please include your registered email address, the nature of your request (e.g., access, deletion, correction), and any relevant details that will help us locate your account record promptly. We may need to verify your identity before processing the request to ensure your data is not disclosed to an unauthorised party.