kc33 Privacy Policy

Section 1

Introduction

This Privacy Policy ("Policy") is issued by kc33 ("kc33", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at kc33.bio and all associated pages and services thereof (the "Platform"). This Policy describes how kc33 collects, uses, stores, discloses, and otherwise processes personal data relating to individuals who access or use the Platform ("Players", "Users", "you").

By registering an account on, depositing funds into, or otherwise using the kc33 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the Platform.

This Policy should be read alongside the kc33 Terms and Conditions, which govern your use of the Platform as a whole. In the event of any conflict between the Terms and Conditions and this Policy with respect to data handling, this Policy shall prevail.

Section 2

Personal Data We Collect

kc33 collects personal data through a number of channels and in a number of categories, depending on how you interact with the Platform. The categories of personal data we may collect include:

kc33 does not knowingly collect sensitive personal data such as biometric data, health records, racial or ethnic origin, political opinions, or religious beliefs. If any such data is inadvertently submitted through a support channel, it will be deleted as promptly as practicable.

Section 3

How We Use Your Personal Data

kc33 processes personal data only for defined, documented purposes. The primary purposes for which your data is used are set out below:

• Account Management: To register and maintain your player account, verify your identity and age, and administer your profile settings and preferences.
• Service Delivery: To provide access to all games, betting markets, promotions, and other features of the kc33 Platform that you have requested or are entitled to use.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported bank transfer channels, and to reconcile transaction records.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, underage gambling, unauthorised account access, and other prohibited conduct as defined in the Terms and Conditions.
• Regulatory Compliance: To comply with applicable anti-money laundering (AML) obligations, know-your-customer (KYC) requirements, and any other legal or regulatory duties to which kc33 is subject.
• Customer Support: To respond to your enquiries, resolve disputes, and manage formal complaints submitted through any kc33 support channel.
• Responsible Gaming: To monitor gameplay patterns and, where appropriate, apply responsible gaming tools or restrictions in accordance with kc33's duty of care to players.
• Marketing Communications: Where you have given explicit consent, to send you promotional offers, bonus notifications, and platform updates via email or in-platform messaging. You may withdraw this consent at any time.
• Platform Improvement: To analyse aggregated and anonymised usage data in order to improve the performance, design, and content of the kc33 Platform.

Section 4

Legal Basis for Processing

kc33 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing that is necessary to perform the contract between you and kc33 — specifically, to operate your player account, process transactions, and deliver gaming services. Without this processing, kc33 cannot provide the Platform to you.
• Legal Obligation: Processing required to comply with applicable law, including AML regulations, KYC identity verification requirements, and any lawful request from a competent authority.
• Legitimate Interests: Processing that is necessary for kc33's legitimate business interests, provided those interests are not overridden by your privacy rights. This includes fraud detection, security monitoring, platform analytics, and customer service improvement.
• Consent: Where required by applicable law — for example, for the use of non-essential cookies or the sending of direct marketing communications — kc33 will obtain your explicit consent before processing. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Section 5

Data Sharing & Disclosure

kc33 does not sell, rent, or trade your personal data to any third party. kc33 may, however, share your personal data with the following categories of recipient where doing so is necessary for the purposes described in this Policy:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, and any other payment partner required to process your financial transactions. These providers receive only the minimum data necessary to execute and verify the relevant transaction.
• Identity Verification Partners: Third-party KYC and age-verification service providers engaged by kc33 to confirm player identity and eligibility. These partners operate under strict data processing agreements with kc33.
• Game Software Providers: Technology partners including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi, to the extent that technical data or anonymised usage data is shared to facilitate the delivery of their games on the kc33 Platform.
• Analytics & Security Providers: Service providers engaged by kc33 to monitor platform performance, detect fraudulent activity, and analyse aggregated usage patterns for improvement purposes.
• Legal & Regulatory Authorities: Competent courts, law enforcement agencies, financial intelligence units, or regulatory bodies, where kc33 is required by applicable law or a lawful order to disclose personal data.
• Business Successors: In the event of a merger, acquisition, restructuring, or sale of all or part of kc33's business, personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection commitments.

All third-party recipients of personal data are required to handle such data in a manner consistent with this Policy and applicable data protection law. kc33 does not authorise any recipient to use your personal data for their own independent marketing or commercial purposes.

Section 6

Cookies & Tracking Technologies

kc33 uses cookies and similar tracking technologies (collectively, "Cookies") on the Platform to enable core functionality, improve user experience, and gather analytical data. A cookie is a small text file stored on your device by your web browser when you visit a website.

The types of Cookies used by kc33 are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication cookies, security tokens, and load-balancing identifiers. These Cookies cannot be disabled without impairing core functionality.
• Functional Cookies: Used to remember your preferences, such as language settings, display preferences, and responsible gaming configurations. These Cookies enhance your experience but are not strictly required for the Platform to operate.
• Analytics Cookies: Used to collect anonymised data about how players interact with the Platform, including pages visited, session duration, and navigation paths. This data is used solely to improve Platform performance and content.
• Security Cookies: Used to authenticate users, prevent fraud, and support kc33's account security measures, including the detection of unusual login behaviour or suspected account compromise.

You may configure your browser to block or delete Cookies. Please note that disabling strictly necessary Cookies may prevent you from accessing certain features of the Platform, including the ability to log in or maintain an authenticated session. kc33 does not use Cookies to serve third-party advertising.

Section 7

Data Retention

kc33 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Active Account Data: Retained for the duration of your account's active status plus a minimum of five (5) years following account closure, to comply with AML record-keeping obligations.
• Transaction Records: Retained for a minimum of five (5) years from the date of the relevant transaction, in accordance with financial record-keeping requirements.
• Identity Verification Documents: Retained for the duration of the account relationship and for five (5) years after account closure, or such longer period as may be required by applicable AML or KYC regulations.
• Customer Support Communications: Retained for three (3) years from the date of the relevant interaction, or until any related dispute is fully resolved, whichever is later.
• Marketing Consent Records: Retained for the period during which consent is active, plus three (3) years thereafter to demonstrate compliance with consent obligations.
• Technical & Usage Data: Aggregated and anonymised analytics data may be retained indefinitely. Non-anonymised technical data (e.g., raw access logs) is retained for a maximum of twelve (12) months.

Upon expiry of the relevant retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is not technically feasible within a retention cycle (for example, data held in secure backup archives), kc33 will ensure the data is isolated from further active processing until deletion becomes practicable.

Section 8

Data Security

kc33 implements a layered security architecture to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include, but are not limited to, the following:

• Transport Encryption: All data transmitted between your device and the kc33 Platform is protected by 256-bit SSL/TLS encryption. You can verify this by checking for the padlock icon and "https://" prefix in your browser address bar.
• Credential Security: Passwords and authentication tokens are stored in hashed, salted form using industry-standard algorithms. kc33 staff do not have access to your plain-text password at any time.
• Access Controls: Access to personal data within kc33's systems is restricted to authorised personnel who require it to perform their specific job functions. Role-based access controls and audit logging are in place across all data processing systems.
• Intrusion Detection: kc33 operates continuous intrusion detection and anomaly monitoring systems across its infrastructure. Suspicious activity triggers automated alerts and escalation procedures.
• Third-Party Security Assessments: kc33 periodically engages independent security professionals to conduct vulnerability assessments and penetration testing of the Platform and supporting infrastructure.
• Data Breach Response: In the event of a personal data breach that poses a risk to player rights, kc33 will notify affected players without undue delay and will take immediate steps to contain and remediate the breach.

Section 9

Your Data Rights

As a data subject whose personal data is processed by kc33, you hold the following rights with respect to that data. To exercise any of these rights, please contact kc33 in writing at [email protected] with the subject line "Data Rights Request — [Your Username]".

• Right of Access: You have the right to request a copy of the personal data kc33 holds about you, together with information about how it is processed. kc33 will respond to access requests within 30 days of receipt.
• Right to Rectification: You have the right to request correction of any personal data that is inaccurate or incomplete. Many data fields can be updated directly within your account settings; for others, please contact support.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent (where consent is the basis for processing). This right is subject to kc33's legal obligation to retain certain records — for example, financial transaction history for AML compliance — which may override an erasure request.
• Right to Restrict Processing: You have the right to request that kc33 temporarily suspends the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or have objected to processing pending verification of legitimate grounds.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including any profiling conducted for responsible gaming or fraud prevention purposes. kc33 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing that took place before withdrawal.

kc33 will respond to all data rights requests within 30 calendar days of receipt. Where a request is complex or numerous, kc33 may extend this period by a further 60 days, in which case you will be notified of the extension and the reason for it within the initial 30-day window.

Section 10

Children's Privacy

The kc33 Platform is strictly intended for adults aged 18 years and above. kc33 does not knowingly collect, process, or retain personal data from any individual under the age of 18. If we become aware or have reason to believe that personal data has been submitted by a person under the age of 18, that data will be immediately and permanently deleted and the associated account will be closed without reimbursement.

Parents and guardians who believe that a minor may have accessed or registered on the kc33 Platform are encouraged to contact us without delay at [email protected]. kc33 takes underage gambling extremely seriously and cooperates fully with any legitimate parental or guardian inquiry concerning a minor's potential use of the Platform.

Section 11

Third-Party Links

The kc33 Platform may, from time to time, display informational references to third-party services such as payment providers (bKash, Nagad, Rocket, Upay) or game studios. Where any such reference includes a navigable link to an external website, kc33 has no control over the content, privacy practices, or data handling of those third-party sites. This Privacy Policy applies solely to the kc33 Platform. kc33 accepts no responsibility for the privacy policies or data practices of any external website.

We encourage you to review the privacy policy of any external website you navigate to from the kc33 Platform before submitting any personal data to that site.

Section 12

Updates to This Privacy Policy

kc33 reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. The most current version of this Policy will always be published at kc33.bio/privacy-policy, together with the effective date of that version.

Where a change to this Policy is material — meaning it significantly alters the way kc33 collects, uses, or shares your personal data — kc33 will make reasonable efforts to notify registered players via the email address held on file or through a prominent in-platform notice, at least seven (7) days before the revised Policy takes effect.

Your continued use of the kc33 Platform following the publication of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept a revised Policy, you should close your account and cease using the Platform prior to the effective date of the revision.

Section 13

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way kc33 processes your personal data, please contact our Data Support team using the details below. All correspondence should be in English.

• Email: [email protected] — Please use the subject line "Privacy Enquiry — [Your Username]" for data-related queries.
• Live Chat: Available 24 hours a day, 7 days a week through the kc33 Platform. Live chat agents can escalate data rights requests on your behalf.
• Response Target: Data rights requests and formal privacy complaints will be acknowledged within 5 business days and substantively addressed within 30 calendar days (Bangladesh Standard Time, UTC+6).