kt99 Privacy Policy

1. Who We Are

1.1 kt99 is an online betting and casino platform accessible at kt99.io, providing sports betting, live casino, slots, and related services to players in Bangladesh and other eligible markets. Throughout this Privacy Policy, "kt99", "we", "us", and "our" refer to the operator of the kt99 platform.

1.2 kt99 acts as the data controller with respect to the personal data of registered players. This means we determine the purposes and means of processing your personal data in connection with your use of our platform.

1.3 If you have any questions about this Privacy Policy or about how kt99 handles your personal data, you can contact our support team at [email protected] at any time.

2. Personal Data We Collect

2.1 kt99 collects personal data in the following categories, depending on the features of the platform you use:

2.1 Identity & Registration Data

When you register a kt99 account, we collect your full legal name, date of birth, gender, nationality, residential address (including city — such as Dhaka, Chittagong, Sylhet, Khulna, or Rajshahi), mobile phone number, and email address. This information is necessary to create and verify your account.

2.2 Identity Verification (KYC) Data

To comply with Know Your Customer (KYC) obligations and prevent underage gambling, kt99 may collect copies of government-issued photo identification such as your National ID card, passport, or driving licence. We may also collect a selfie or facial photograph for identity matching purposes.

2.3 Financial & Transaction Data

When you make deposits or withdrawals on kt99, we collect your payment method details. For mobile financial services (bKash, Nagad, Rocket, Upay), we record the registered mobile wallet number and transaction reference IDs. For bank transfers, we collect the bank name and account reference. For card payments (Visa, Mastercard), we collect masked card numbers and transaction identifiers — we do not store full card numbers on our servers. All transaction amounts are recorded in Bangladeshi Taka (৳).

2.4 Betting & Gaming Activity Data

We record all betting and gaming activity associated with your account, including bet placement times (in Bangladesh Standard Time, UTC+6), markets selected, stakes placed, odds accepted, game sessions, and outcomes. This data is necessary for settling bets, resolving disputes, and detecting fraudulent activity.

2.5 Technical & Device Data

When you access kt99 via a web browser or mobile device, we automatically collect certain technical data, including your IP address, device type, operating system, browser type and version, screen resolution, referring URL, pages visited within the platform, and session duration. This data helps us detect unauthorised access, enforce single-account rules, and optimise platform performance.

2.6 Communications Data

When you contact kt99 support via email or WhatsApp, we retain records of those communications, including the content of messages, timestamps, and any attachments, for the purpose of resolving your query and maintaining a service record.

2.7 Responsible Gaming Data

If you use any of kt99's responsible gaming tools — such as deposit limits, session reminders, cooling-off periods, or self-exclusion — we record your preferences and the dates on which they were applied. This data is treated with the highest sensitivity and is used solely to enforce the restrictions you have requested.

3. How We Collect Your Data

3.1 kt99 collects personal data through the following means:

• Directly from you: through the account registration form, KYC document upload, deposit and withdrawal forms, support communications, and responsible gaming preference settings.
• Automatically: through server logs, session tracking technologies, and cookies when you browse or use the kt99 platform.
• From third parties: from identity verification service providers, payment processors (such as bKash, Nagad, and Rocket), fraud detection services, and data enrichment providers where applicable — solely to the extent necessary to deliver our services.

3.2 kt99 does not purchase personal data lists from third-party marketing databases. All data we hold is collected directly in connection with your use of the kt99 platform or from service providers acting on our instruction.

4. Why We Use Your Personal Data

4.1 The table below summarises the primary purposes for which kt99 processes your personal data:

Purpose	Data Used
Creating and managing your kt99 account	Identity & Registration Data
Verifying your age (21+) and identity	KYC Data, Identity & Registration Data
Processing deposits and withdrawals in ৳	Financial & Transaction Data
Settling bets and paying winnings	Betting & Gaming Activity Data, Financial Data
Detecting and preventing fraud and money laundering	All categories
Providing customer support	Communications Data, Identity Data
Enforcing responsible gaming tools and restrictions	Responsible Gaming Data, Identity Data
Sending service-related notifications (e.g., deposit confirmations)	Identity Data, Contact Data
Sending marketing communications (where you have opted in)	Identity Data, Betting Activity Data
Improving platform performance and user experience	Technical & Device Data
Complying with legal and regulatory obligations	All categories, as required

5. Legal Basis for Processing

5.1 kt99 processes your personal data on one or more of the following legal bases:

• Contract performance: Processing your registration data, transaction data, and betting activity data is necessary to fulfil our contractual obligations to you as a registered player under the kt99 Terms & Conditions.
• Legal obligation: Processing KYC data, anti-money-laundering records, and age-verification data is required to comply with applicable legal obligations in the markets where kt99 operates.
• Legitimate interests: Processing technical data for fraud detection, security monitoring, and platform improvement is based on kt99's legitimate interests in operating a safe, reliable, and commercially viable platform, balanced against your privacy rights.
• Consent: Where kt99 sends you optional marketing communications, we do so only on the basis of your freely given, specific, and informed consent at registration or via your account notification settings. You may withdraw consent at any time.

6. Sharing Your Personal Data

6.1 kt99 does not sell, rent, or trade your personal data to any third party. We share your data only in the following circumstances and only to the minimum extent necessary:

• Payment processors: Your mobile wallet number and transaction references are shared with bKash, Nagad, Rocket, Upay, and card payment processors solely to execute your deposit and withdrawal instructions.
• Identity verification providers: Your KYC documents and identity data may be shared with accredited third-party identity verification services to confirm your age and identity as part of our mandatory onboarding checks.
• Fraud prevention services: Aggregated technical data (including IP address, device fingerprint, and behavioural patterns) may be shared with specialist fraud detection providers operating under data processing agreements with kt99.
• Game software providers: When you play a casino game or slot, limited session data (such as player ID and stake amount) is shared with the relevant game provider (e.g., Evolution Gaming, Pragmatic Play, Spribe) to run the game and record outcomes.
• Legal and regulatory authorities: kt99 may disclose personal data to law enforcement, government agencies, or regulatory bodies where required to do so by applicable law or a valid legal order.
• Business transfers: In the event of a merger, acquisition, or sale of the kt99 business, your personal data may be transferred to the successor entity, subject to the same privacy protections as described in this policy.

6.2 All third-party service providers who receive your personal data are required to process it only in accordance with kt99's instructions and to maintain appropriate security standards under binding data processing agreements.

7. Cookies & Tracking Technologies

7.1 kt99 uses cookies and similar technologies (such as local storage and session tokens) to operate and improve the platform. The types of cookies we use are:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged into your kt99 account and security tokens that protect against cross-site request forgery (CSRF). These cookies cannot be disabled without breaking core platform functionality.
• Performance cookies: Used to collect anonymised data about how players use the kt99 platform (e.g., which pages are visited most, how long sessions last, and which features generate errors). This data is used solely to improve platform performance and reliability.
• Functionality cookies: Used to remember your preferences, such as your default language setting, last-used payment method, and responsible gaming configuration.
• Analytics cookies: kt99 may use privacy-respecting analytics tools to understand aggregate traffic patterns. These tools are configured to anonymise IP addresses and do not create individual profiles for advertising purposes.

7.2 kt99 does not use third-party advertising cookies or behavioural tracking cookies to serve targeted advertisements to you on other websites. We do not participate in cross-site advertising networks.

7.3 You can manage cookie preferences through your browser settings. Blocking strictly necessary cookies will prevent you from logging into your kt99 account and using core platform features.

8. Data Retention

8.1 kt99 retains your personal data for as long as your account is active and for a defined period thereafter, as set out below:

• Account and identity data: Retained for the lifetime of your account plus a minimum of 5 years after account closure, to comply with anti-money-laundering record-keeping obligations.
• Transaction and betting records: Retained for a minimum of 5 years from the date of the transaction, as required for financial audit and dispute resolution purposes.
• KYC documents: Retained for a minimum of 5 years from account closure or from the date of the last transaction, whichever is later.
• Support communications: Retained for 3 years from the date of the last communication, unless the subject matter of the communication relates to a dispute or legal claim, in which case they are retained until the matter is resolved.
• Technical and device data (logs): Retained for a rolling 12-month period for security monitoring purposes, then deleted or anonymised.
• Marketing preferences: Retained until you withdraw consent or close your account, plus 30 days for processing purposes.

8.2 When the applicable retention period expires, kt99 will securely delete or irreversibly anonymise your personal data so that it can no longer be associated with you as an individual.

9. Data Security

9.1 kt99 applies industry-standard technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS 1.3 encryption for all data transmitted between your browser or device and the kt99 platform.
• AES-256 encryption for sensitive personal data stored in kt99 databases.
• Role-based access controls ensuring that kt99 staff can only access personal data relevant to their specific job function.
• Multi-factor authentication (MFA) required for all kt99 internal systems containing personal data.
• Regular penetration testing and security audits conducted by independent third-party security specialists.
• Automated monitoring and alerting systems to detect unusual access patterns or potential data breach events in real time.

9.2 In the event of a personal data breach that poses a risk to your rights and freedoms, kt99 will notify affected players without undue delay and will take all reasonable steps to mitigate the impact of the breach.

9.3 While kt99 applies rigorous security standards, no digital system can guarantee absolute security. Players are also responsible for maintaining the security of their own account credentials and should never share their kt99 login password with anyone.

10. International Data Transfers

10.1 kt99 primarily stores and processes player data within secure data centre infrastructure. In some cases, third-party service providers (such as game software providers and fraud detection services) may process data in jurisdictions outside Bangladesh.

10.2 Where such international transfers occur, kt99 ensures that appropriate contractual safeguards are in place — including standard contractual clauses or equivalent data transfer agreements — to ensure your data receives the same level of protection as described in this Privacy Policy, regardless of where it is processed.

10.3 kt99 does not transfer personal data to jurisdictions that lack adequate data protection frameworks without implementing appropriate safeguards.

11. Children and Minors

11.1 The kt99 platform is strictly for adults aged 21 years and above. kt99 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory part of the kt99 registration and KYC process.

11.2 If kt99 becomes aware that personal data has been collected from a person under the age of 21, we will immediately suspend the associated account, delete the data, and return any deposited funds to the source payment method.

11.3 If you are a parent or guardian and believe that a person under 21 in your care has registered a kt99 account, please contact us immediately at [email protected] so we can take prompt action.

12. Marketing Communications

12.1 With your consent, kt99 may send you marketing communications about promotions, bonuses, new games, and seasonal offers relevant to your interests as a player on the platform. Marketing communications may be sent via email or WhatsApp message to your registered contact details.

12.2 You can opt out of marketing communications at any time by:

• Clicking the unsubscribe link in any marketing email from kt99.
• Updating your notification preferences in your kt99 account settings panel.
• Contacting support at [email protected] with the subject line "Marketing Opt-Out".

12.3 Opting out of marketing communications will not affect your receipt of essential transactional notifications, such as deposit confirmations, withdrawal status updates, and account security alerts. These service-related communications are sent regardless of your marketing preferences as they are necessary for the operation of your account.

12.4 kt99 will never send marketing communications to players who have self-excluded, applied deposit limits, or otherwise used kt99's responsible gaming tools in a manner that indicates potential gambling harm.

13. Exercising Your Data Rights

13.1 To exercise any of the data rights described in this Privacy Policy — including access, rectification, erasure, restriction, portability, or objection — please submit a written request to [email protected] with the subject line "Data Rights Request".

13.2 For security purposes, kt99 will verify your identity before processing any data rights request. You may be asked to confirm details matching your registered account information before your request is actioned.

13.3 kt99 will respond to all data rights requests within 30 calendar days of receipt. In cases of particular complexity or where multiple requests have been submitted, this period may be extended by up to a further 60 days, and we will notify you of any such extension within the initial 30-day period.

13.4 There is no charge for submitting a data rights request. However, if requests are manifestly unfounded, excessive, or repetitive in nature, kt99 reserves the right to charge a reasonable administrative fee or refuse to act, with explanation.

14. Changes to This Privacy Policy

14.1 kt99 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable legal requirements. The date of the most recent revision is always displayed at the top of this page and in the table of contents sidebar.

14.2 Where a material change is made to this Privacy Policy — for example, a new category of data being collected, a new third-party data sharing arrangement, or a change to retention periods — kt99 will notify registered players via email to their registered address and/or via an in-platform notification at least 7 days before the change takes effect, where practicable.

14.3 Your continued use of the kt99 platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with any change, you may close your account by contacting [email protected].

14.4 Previous versions of this Privacy Policy are available upon written request submitted to our support team. We maintain an internal version history for audit and transparency purposes.

15. Contact Us

15.1 If you have any questions, concerns, or complaints regarding this Privacy Policy or the way kt99 processes your personal data, please contact us using the details below. All contact methods are provided as plain text — they are not clickable links.

• Email: [email protected]
• WhatsApp: +880 1700 000000
• Subject line for privacy matters: Privacy Policy Enquiry
• Response time: Within 24 hours for general enquiries; within 30 days for formal data rights requests
• Operating hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)

15.2 kt99 takes all privacy complaints seriously. If you submit a formal complaint and are not satisfied with our response, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction.

15.3 For responsible gaming concerns specifically, please use the subject line "Responsible Gaming Request" so our dedicated team can prioritise your message. Additional guidance on responsible gaming tools, self-exclusion, and deposit limits is available on the Responsible Gaming page.