ky99 Privacy Policy

Overview

Introduction and Scope of This Policy

This Privacy Policy ("Policy") describes how ky99 ("Platform", "We", "Us", "Our") collects, processes, stores, and protects the personal data of individuals ("You", "User", "Player") who visit or use the ky99 website accessible at ky99.bio, including all services, features, and content offered through the platform. This Policy forms part of the ky99 Terms and Conditions and should be read together with those Terms.

By registering an account on ky99, making a deposit, or otherwise using the platform, you confirm that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must not use the ky99 platform. We may update this Policy from time to time — the date of the most recent revision will always appear at the top of this page.

Privacy at a Glance

Six Core Privacy Commitments

Data Collection

What Personal Data We Collect

ky99 collects personal data that is necessary to provide you with a safe, functional, and compliant gaming and betting platform. We collect data in three principal ways: directly from you when you register and use the platform, automatically through your use of the platform, and from third parties where this is permitted and necessary for compliance purposes.

Data You Provide Directly

• Registration data: full name, date of birth, residential address, email address, and mobile phone number. This data is collected at account creation and is mandatory for platform access.
• Identity verification documents (KYC): government-issued photo identification (National ID card, passport, or driving licence), proof of residential address (utility bill or bank statement dated within 90 days), and in some cases a selfie or video for live identity verification.
• Payment information: mobile financial service account details (bKash, Nagad, Rocket, Upay), bank account details, and card information where applicable. Note: ky99 does not store full card numbers — card data is handled by our PCI-compliant payment processing partners.
• Communications: the content of messages you send to ky99 support via email or any in-platform messaging tool, including support requests, dispute submissions, and feedback.

Data Collected Automatically

• Device and browser data: IP address, device type (mobile, tablet, desktop), operating system, browser type and version, screen resolution, and device identifiers.
• Session and usage data: pages visited, time spent on each page, game sessions played (game name, duration, bet amounts, outcomes), login timestamps, and platform navigation patterns.
• Transaction data: deposit amounts, withdrawal requests, bonus claims, wagering history, and payment method usage history. Transaction records are retained for a minimum of five years in accordance with anti-money laundering compliance requirements.
• Cookies and similar tracking technologies: session cookies (deleted on browser close), persistent cookies (retained for a set period), and analytics identifiers. See the Cookies section below for full details.

Data from Third Parties

• Identity verification agencies: where ky99 uses third-party KYC and identity verification services to confirm the accuracy of the information you have provided, those services may supply verification outcomes and risk scores to ky99.
• Payment processors: our payment processing partners (handling bKash, Nagad, Rocket, Upay, Visa, and Mastercard transactions) may share transaction status, fraud flags, and chargeback notifications with ky99 for account management and compliance purposes.
• Game providers: third-party game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may share game-session data (bets placed, outcomes, RTP statistics) with ky99 for operational, auditing, and responsible gaming monitoring purposes.

Data Use

How We Use Your Personal Data

ky99 uses personal data only for the purposes described in this Policy and only to the extent necessary for those purposes. The principal purposes for which we process your personal data are as follows:

• Account creation and management: to register your account, verify your identity, manage your account settings, and process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods.
• Platform operations and service delivery: to provide you with access to casino games, sports betting markets, live casino tables, and all other ky99 platform features; to process bets and settle outcomes; and to maintain the performance and security of the platform.
• Regulatory compliance and anti-money laundering: to fulfil our KYC obligations, conduct AML screening, report suspicious transactions to relevant authorities as required by applicable law, and comply with any other applicable legal or regulatory requirements.
• Responsible gaming monitoring: to identify patterns of gaming behaviour that may indicate problematic play and to proactively offer responsible gaming tools (deposit limits, cooling-off periods, self-exclusion) to players who may benefit from them.
• Customer support: to respond to your support requests, investigate and resolve disputes, and provide you with information about your account, transactions, and the platform's services.
• Marketing and promotional communications: to send you information about bonuses, promotions, and seasonal offers (such as BPL, Eid, and Pohela Boishakh campaigns) that we believe may be of interest to you, subject to your marketing preferences. You may opt out of marketing communications at any time by contacting [email protected].

ky99 will not use your personal data for any purpose incompatible with those listed above without first obtaining your explicit consent. We do not engage in automated decision-making that produces significant legal effects on players without human review.

Legal Basis

Legal Basis for Processing Your Data

ky99 processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual necessity: processing required to perform our contract with you — specifically, to register your account, process payments, settle bets, and provide platform services.
• Legal obligation: processing necessary to comply with applicable laws and regulations, including KYC identity verification, AML transaction monitoring, and the retention of financial records.
• Legitimate interests: processing carried out for purposes that are in ky99's legitimate operational interests — such as fraud detection, platform security, responsible gaming monitoring, and improving platform performance — where those interests are not overridden by your data protection rights.
• Consent: where we rely on your consent to send marketing communications or to process data for purposes beyond those strictly necessary for the contract — you may withdraw consent at any time without affecting the lawfulness of prior processing.

Data Sharing

When and With Whom We Share Your Data

ky99 does not sell your personal data. We share personal data only with the categories of third parties listed below, and only to the extent necessary for the specified purpose. All third-party partners who receive personal data from ky99 are contractually required to handle that data securely and only for the purpose for which it was shared.

Categories of Third-Party Recipients

• Payment processing partners: bKash, Nagad, Rocket, Upay, and card processing networks receive the transaction data necessary to process your deposits and withdrawals. These partners operate under their own privacy policies and security standards.
• Identity verification and KYC service providers: third-party identity verification platforms receive the identification documents and personal data you submit during the KYC process, for the sole purpose of verifying your identity.
• Game and software providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other game studios receive session identifiers and bet data necessary to operate the games you play on the ky99 platform.
• Regulatory and law enforcement authorities: where required or permitted by applicable law, ky99 will disclose personal data to government agencies, financial intelligence units, or law enforcement bodies — for example, in response to a lawful request, court order, or where we suspect money laundering or fraud.

Payments & KYC

Payment Data and Identity Verification

Handling payment data and conducting identity verification are among the most sensitive data processing activities on the ky99 platform. ky99 applies heightened security standards to all payment-related and KYC data, consistent with industry best practice for online financial platforms operating in Bangladesh.

When you submit payment details via bKash, Nagad, Rocket, or Upay, your mobile wallet credentials are never stored on ky99's servers — the transaction is processed directly through our payment partners' secure gateways. For card transactions, full card numbers are handled exclusively by our PCI-DSS compliant payment processors. ky99 retains only a tokenized reference to your payment method for withdrawal routing purposes.

• KYC documents (National ID, passport, utility bills) are stored in an encrypted document management system with access restricted to authorised compliance staff only. KYC documents are not visible to customer support agents or general operations staff.
• Transaction records, including deposit and withdrawal history, are retained for a minimum of five years to satisfy anti-money laundering record-keeping requirements. These records may be disclosed to relevant authorities where required by law.
• Where KYC verification is unsuccessful or where a player's account is flagged for suspicious activity, the associated data may be retained beyond standard retention periods and referred to relevant regulatory or law enforcement bodies.

Cookies

Cookies and Tracking Technologies

ky99 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your login session, and understand how players use the site so we can continue to improve the experience. A cookie is a small text file placed on your device when you access a website. The cookies we use fall into the following categories:

Types of Cookies We Use

• Strictly necessary cookies: these are essential for the platform to function. They maintain your login session, remember items in your account, and enable secure transaction processing. These cookies cannot be disabled without breaking platform functionality.
• Analytics cookies: these help us understand aggregate platform usage — such as which pages are most visited, average session durations, and device types. Analytics data is anonymised and used only to improve the platform experience for all players in Bangladesh.
• Preference cookies: these remember your settings and choices on the platform — such as language preference and display settings — so you do not need to re-enter them on each visit.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in and use the platform. Disabling analytics or preference cookies will not prevent platform access but may affect the quality of your experience.

Data Retention

How Long We Keep Your Data

ky99 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account data (registration details, KYC documents): retained for the duration of the active account relationship, and for a minimum of five years after account closure, in compliance with AML record-keeping obligations.
• Transaction records (deposits, withdrawals, bet history): retained for a minimum of five years from the date of each transaction, in line with financial record-keeping requirements.
• Support and communications records: retained for up to two years from the date of the last communication, unless a longer period is required to resolve an ongoing dispute or comply with a legal obligation.

Where your data is no longer required for the purposes for which it was collected and no legal retention obligation applies, ky99 will securely delete or anonymise the data so it can no longer be associated with you as an individual. Deletion requests submitted by you via [email protected] will be processed within 30 days, subject to any applicable legal retention obligations.

Data Security

How We Protect Your Personal Data

ky99 takes data security seriously. We implement a range of technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, or destruction. These measures include:

• SSL/TLS encryption on all data transmissions between your browser or app and ky99's servers, ensuring your login credentials, payment details, and personal data cannot be intercepted in transit.
• Access controls and role-based permissions ensuring that only authorised ky99 personnel with a legitimate operational need can access personal data, and only to the minimum extent required for their role.
• Encrypted storage for sensitive data including KYC documents, payment tokens, and account credentials. Sensitive data at rest is stored using industry-standard encryption.
• Fraud detection and anomaly monitoring systems that continuously analyse account activity for signs of unauthorised access, suspicious transaction patterns, or account compromise, triggering alerts and temporary account locks where appropriate.

Despite these safeguards, no online platform can guarantee absolute security. In the event of a data breach that is likely to affect your rights, ky99 will notify affected players without undue delay and will take immediate steps to contain and remediate the breach.

Your Rights

Your Data Protection Rights

ky99 respects your rights in relation to your personal data. Subject to applicable law and to any overriding legal obligations (such as AML record-keeping requirements), you have the following rights in relation to the personal data ky99 holds about you:

• Right of access: you may request a copy of the personal data ky99 holds about you, together with information about how that data is used and with whom it has been shared. We will respond to access requests within 30 days.
• Right to rectification: you may request that we correct any inaccurate personal data we hold about you, or complete any incomplete data. Corrections to account registration data (name, address, date of birth) may require supporting documentation.
• Right to erasure: you may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the data has been unlawfully processed — subject to any applicable legal retention obligations that require us to retain the data.
• Right to restrict processing: you may request that we temporarily restrict processing of your personal data — for example, while you contest the accuracy of the data or while a complaint is being investigated.
• Right to object: you may object to processing of your personal data where we rely on legitimate interests as our legal basis, including objecting to direct marketing. If you object to marketing, we will stop sending marketing communications immediately.
• Right to data portability: where processing is based on your consent or on a contract, and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, and machine-readable format.

To exercise any of these rights, please contact the ky99 data team at [email protected] with your full name, registered email address, and a clear description of your request. We will verify your identity before processing any data rights request and will respond within 30 days.

Children's Privacy

Our Platform Is Not for Minors

ky99 is an online gambling and sports betting platform. It is strictly for adults aged 21 and above (21+ only). ky99 does not knowingly collect, process, or store personal data from individuals under the age of 21. Access to the platform by persons under 21 is prohibited, and ky99 implements age verification checks as part of the KYC process to enforce this restriction.

Third-Party Links

Links to External Websites

The ky99 platform may contain references to third-party websites, payment platforms, or service providers. Where such references appear, they are provided for informational convenience only. ky99 does not control the content, privacy practices, or data handling of any third-party website and is not responsible for the privacy practices of those sites.

We recommend that you review the privacy policy of any third-party site you visit, including those of our payment partners (bKash, Nagad, Rocket, Upay) and game providers. Your interactions with those platforms are governed solely by their own privacy policies and terms of service, not by this Policy.

Policy Updates

Changes to This Privacy Policy

ky99 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we provide. When we make material changes, we will post the updated Policy on this page with a revised "Last Updated" date and, where the changes are significant, we will make reasonable efforts to notify registered players by email or via a prominent notice on the platform.

Your continued use of the ky99 platform after an updated Privacy Policy has been posted constitutes your acceptance of the revised Policy. If you do not agree with the updated Policy, you should stop using the platform and contact [email protected] to request account closure. The most current version of this Policy is always available on this page.

Contact

Privacy Questions and Data Rights Requests

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or want to raise a concern about how ky99 handles your personal data, please contact the ky99 data team. Players from across Bangladesh — including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar — can reach us at any time.