kz666 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how kz666 ("kz666", "we", "us", or "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "the player", or "the user") who access or use the kz666 website at kz666.io, its mobile experience, and any related services offered under the kz666 brand (collectively, "the Platform").

kz666 is committed to handling your personal data with transparency, security, and respect. This Policy is designed to give you a clear and complete picture of how your information is managed from the moment you land on kz666.io through to the closure of your account. We do not use obscure language or hidden clauses — if you have a question about a specific section, please contact us at support [at] kz666.io.

This Policy applies to all registered players, prospective players who browse kz666.io without registering, and any individual who contacts the kz666 support team. It applies regardless of the device, browser, or network connection used to access the Platform.

This Policy should be read alongside the kz666 Terms & Conditions and the kz666 Responsible Gaming policy, both of which are published on kz666.io.

2 Data We Collect

kz666 collects personal data through several routes: directly from you when you register or interact with the Platform, automatically through your use of the Platform, and from third-party payment and identity verification providers. The categories of data we collect are described below.

2.1 Registration Data

When you create a kz666 account, we collect the following information:

• Full legal name
• Date of birth (required for 21+ age verification)
• Email address
• Mobile phone number
• Preferred payment method and associated account identifier (e.g., bKash number)
• Username and password (password stored as a hashed value — never in plain text)

2.2 Verification (KYC) Data

To comply with our Know Your Customer ("KYC") obligations and to verify that players are aged 21 or above, kz666 may request:

• A copy of a government-issued photo identification document (National ID Card, passport, or driving licence)
• Proof of address (utility bill, bank statement, or equivalent document dated within the last three months)
• Proof of payment method ownership (screenshot or confirmation from bKash, Nagad, Rocket, Upay, Visa, or Mastercard)

KYC documents are stored securely and accessed only by authorised kz666 compliance personnel. They are not shared with any third party except where required by law or by our licensed identity verification partner.

2.3 Transaction Data

For every deposit and withdrawal made through the Platform, kz666 records:

• Transaction amount and currency (BDT)
• Payment method used
• Transaction date, time (Bangladesh Standard Time, UTC+6), and reference number
• Account balance before and after the transaction

2.4 Betting & Gaming Activity Data

• All bets placed, including market, selection, stake, odds, and settlement outcome
• Casino game sessions: game title, provider, bet amounts, win/loss results, and session duration
• Bonus activations, wagering progress, and bonus settlement records

2.5 Technical & Usage Data

When you visit kz666.io, our servers and analytics systems automatically collect:

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser version
• Pages visited, features used, and time spent on the Platform
• Referring URL (the page or source that directed you to kz666.io)
• Session timestamps and click-path data

This technical data is used to maintain and improve the Platform, detect suspicious activity, and ensure compatibility across devices. It is not used to build personal advertising profiles.

2.6 Communications Data

If you contact the kz666 support team — whether by email or through the Platform's live chat feature — we retain records of your communications, including your message content, the date and time of contact, and our responses. This data is used to resolve your query, improve support quality, and maintain a record of interactions for compliance purposes.

3 How We Use Your Data

kz666 uses the personal data we collect for the following specific purposes. We do not use your data for any purpose not listed here without first obtaining your consent or having a separate legal basis to do so.

Where kz666 wishes to use your personal data for any purpose not listed above — such as sending you marketing communications about promotions — we will obtain your explicit, informed consent before doing so. You may withdraw your consent at any time by contacting support [at] kz666.io.

4 Legal Basis for Processing

kz666 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing is necessary to perform the contract between you and kz666 — specifically, to provide you with access to betting, gaming, and payment services.
• Legal obligation: Processing is required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, age verification requirements, and regulatory reporting duties.
• Legitimate interests: Processing is necessary for kz666's legitimate business interests, including Platform security, fraud prevention, responsible gaming monitoring, and service improvement, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: For specific, optional processing activities — such as receiving promotional communications — kz666 relies on your explicit, freely given consent, which you may withdraw at any time.

5 Cookies & Tracking Technologies

kz666.io uses cookies and similar tracking technologies to deliver a functional, personalised, and secure user experience. A cookie is a small text file placed on your device when you visit a website. Cookies do not contain executable code and cannot access other data on your device.

5.1 Types of Cookies Used by kz666

5.2 Managing Cookies

You can control and delete cookies through your browser settings at any time. Most modern browsers allow you to refuse all cookies, accept only certain types, or delete existing cookies. Please note that disabling strictly necessary cookies will prevent you from logging into your kz666 account and using core Platform features.

kz666 does not use cookies for third-party advertising, retargeting campaigns, or cross-site behavioural tracking. Analytics data derived from cookies is aggregated and anonymised before being used for any Platform improvement analysis.

6 Data Sharing & Third Parties

kz666 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your data only in the limited circumstances described below, and only with parties who are bound by appropriate data protection obligations.

6.1 Payment Processors

To process your deposits and withdrawals, kz666 shares transaction-specific data with your chosen payment provider: bKash, Nagad, Rocket, Upay, Visa, or Mastercard. The data shared is limited strictly to what is required to authorise and complete the transaction. Each payment provider operates under their own privacy policy and data protection framework. kz666 does not store full card or mobile banking credential details on its own servers.

6.2 Identity Verification Partners

kz666 may engage a third-party identity verification service to assist with KYC procedures, including age verification, document authentication, and fraud screening. Any such partner is contractually obligated to process your data only for the verification purpose specified by kz666 and to maintain appropriate security standards.

6.3 Game Providers

When you launch a game provided by a third-party studio — including Pragmatic Play, Evolution Gaming, Ezugi, Microgaming, Spribe, or NetEnt — a limited technical session identifier may be passed to that provider to initialise your game session. kz666 does not pass your full personal profile, payment data, or contact details to game providers. Game providers operate under their own privacy policies and security certifications.

6.4 Legal and Regulatory Disclosures

kz666 may be required to disclose your personal data to government authorities, law enforcement agencies, or regulators where compelled by applicable law, a valid court order, or a regulatory demand. In such cases, kz666 will disclose only the minimum data required to comply with the legal obligation and will, where legally permissible, notify you of the disclosure.

6.5 Business Transfers

In the event that kz666 undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. kz666 will provide advance notice of any such transfer and ensure that the acquiring entity is bound by privacy obligations no less protective than those set out in this Policy.

7 International Data Transfers

kz666 primarily serves players in Bangladesh and stores and processes data within secure infrastructure that is operated in compliance with applicable data protection standards. In some cases, personal data may be processed by service providers whose infrastructure is located outside Bangladesh — for example, certain cloud hosting or identity verification partners.

Wherever personal data is transferred internationally, kz666 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to this Policy. These safeguards may include contractual data processing agreements, encryption of data in transit and at rest, and access controls that restrict data handling to authorised personnel only.

If you have concerns about how your data is handled in the context of international transfers, please contact our support team at support [at] kz666.io. We will provide specific information about the transfer mechanism applicable to your data upon a verified written request.

8 Data Retention

kz666 retains your personal data for no longer than is necessary to fulfil the purpose for which it was collected, or to meet our applicable legal and regulatory obligations. The table below outlines our standard retention periods for the main categories of data we hold.

Once a retention period expires, the relevant data is securely deleted or irreversibly anonymised. Anonymised data — from which no individual can reasonably be identified — may be retained indefinitely for aggregated statistical and research purposes.

9 Your Rights

As a data subject whose personal data is held and processed by kz666, you have the following rights. kz666 will respond to all verified requests within 30 days of receipt. There is no charge for exercising your rights unless a request is manifestly unfounded or excessive.

• Right of Access: You may request a copy of the personal data that kz666 holds about you, along with information about how it is used and with whom it is shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account information directly through your kz666 profile settings, or contact support for more complex changes.
• Right to Erasure ("Right to be Forgotten"): You may request that kz666 delete your personal data. This right applies where the data is no longer necessary for the purpose for which it was collected, where consent has been withdrawn, or where you object to processing based on legitimate interests. Please note that erasure may not be possible where we are legally required to retain the data (e.g., AML transaction records).
• Right to Restrict Processing: In certain circumstances — for example, where you contest the accuracy of data we hold — you may request that kz666 temporarily restrict processing of your data while the matter is resolved.
• Right to Data Portability: You may request that kz666 provide you with a copy of your personal data in a structured, commonly used, machine-readable format (e.g., CSV or JSON) that you can transfer to another service provider.
• Right to Object: You have the right to object to processing based on kz666's legitimate interests. kz666 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time by contacting support [at] kz666.io. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

10 Children & Minors

The kz666 Platform is strictly intended for adults aged 21 years and above. kz666 does not knowingly collect, use, or store personal data belonging to individuals under the age of 21. Age verification is conducted as part of the account registration and KYC process to prevent underage access to gambling services.

If kz666 becomes aware that personal data belonging to a person under the age of 21 has been collected — whether through misrep resentation during registration or any other means — kz666 will immediately suspend the relevant account, delete all associated personal data, and reverse any transactions made from that account. If you believe that a minor has registered on the kz666 Platform, please report it immediately to support [at] kz666.io so that we can take prompt action.

Parents and guardians are encouraged to make use of parental control tools and internet filtering software to prevent minors from accessing online gambling platforms. kz666 supports the responsible gaming initiatives described in our Responsible Gaming policy.

11 Security Measures

kz666 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security programme includes, but is not limited to, the following controls:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and kz666.io is protected using 256-bit SSL/TLS encryption, preventing interception by third parties during transit.
• Password Hashing: Account passwords are never stored in plain text. kz666 uses a strong, industry-standard one-way hashing algorithm with per-user salting to store password credentials securely.
• Access Controls: Access to personal data within kz666's internal systems is restricted on a strict need-to-know basis. Only authorised personnel with a defined business reason may access identifiable player data, and all such access is logged and auditable.
• Infrastructure Security: kz666's servers and databases are hosted in secure data centres with physical access controls, network firewalls, intrusion detection systems, and regular security patching schedules.
• Data Minimisation at Rest: kz666 stores only the minimum personal data required for each operational function. Data that is no longer needed is deleted or anonymised in accordance with the retention schedule in Section 8.
• Incident Response: kz666 maintains a documented data breach response procedure. In the event of a breach that is likely to result in a risk to the rights and freedoms of players, affected individuals will be notified as soon as reasonably practicable, and the appropriate authorities will be informed where legally required.
• Vendor Security Assessments: All third-party service providers with access to personal data are subject to security assessments and are contractually required to maintain security standards consistent with industry best practices.

While kz666 takes all reasonable steps to protect your personal data, no system is completely immune to security risks. You also play an important role in keeping your account secure — please use a strong, unique password for your kz666 account, do not share your login credentials with anyone, and contact support [at] kz666.io immediately if you suspect unauthorised access to your account.

12 Changes to This Policy

kz666 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the features and services offered on the Platform. When a material change is made to this Policy, kz666 will take reasonable steps to notify registered players — for example, by displaying a prominent notice on kz666.io or by sending a notification to your registered email address.

The "Last Updated" date at the top of this Policy and in the Table of Contents sidebar will be revised whenever a new version is published. We encourage you to review this Policy periodically to stay informed about how kz666 manages your personal data. The most current version of this Privacy Policy will always be available at kz666.io/privacy-policy.

Your continued use of the kz666 Platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with the revised Policy, you should close your kz666 account and cease using the Platform. Requests to close your account can be submitted to support [at] kz666.io.

13 Contact & Data Requests

If you have any questions, concerns, or complaints regarding this Privacy Policy or how kz666 handles your personal data, or if you wish to exercise any of the data subject rights described in Section 9, please contact us using the details below. All communications must be in English to ensure they can be handled efficiently by our team.