k09 Privacy Policy

1 Information We Collect

k09 collects personal information from players and site visitors through several channels: during account registration, during the deposit and withdrawal process, through your ongoing use of the platform, and automatically via cookies and technical tracking mechanisms. The categories of data we collect are described below.

Account Registration Data

When you create a k09 account, we collect the following information:

• Mobile phone number (used as your primary account identifier).
• Date of birth (used to verify you are 18 years of age or older).
• Password (stored in hashed, encrypted form — never in plain text).
• Confirmation of agreement to these Terms & Conditions and this Privacy Policy at the point of registration.

Identity Verification (KYC) Data

To comply with anti-money laundering (AML) obligations and to confirm player eligibility, k09 may request the following at account milestones such as first withdrawal or upon internal risk review:

• National ID card (NID) number and a copy of the NID document.
• Passport number and a copy of the photo page.
• Proof of residential address (utility bill, bank statement, or similar document issued within the last 90 days).
• Confirmation of mobile financial service account ownership (bKash, Nagad, or Rocket account linked to the registered phone number).

Financial Transaction Data

When you deposit or withdraw funds through k09, we record:

• Transaction reference numbers provided by the payment provider.
• Deposit and withdrawal amounts in BDT (৳).
• Dates, times (Bangladesh Standard Time, UTC+6), and statuses of all transactions associated with your account.
• The payment method used (e.g., bKash, Nagad, Rocket, Upay, bank card).

Gameplay & Betting Activity Data

To operate the platform, settle wagers, calculate bonuses, and prevent fraud, k09 records:

• All bets placed, including game type, market, stake, odds, and outcome.
• Session start and end times, duration, and frequency of play.
• Bonus claims, wagering progress, and promotion participation history.
• Self-exclusion elections, deposit limit settings, and responsible gaming tool usage.

Technical & Device Data

When you access k09 via browser or mobile device, our servers and analytics systems automatically log:

• IP address and approximate geographic location derived from IP.
• Device type, operating system, and browser version.
• Referring URL and pages visited within the k09 platform.
• Date and time of access (BST, UTC+6).
• Cookie identifiers and session tokens (see Section 4).

Communications Data

If you contact k09 support — by email, live chat, or any other channel — we retain records of those communications, including the content of your messages and our responses, for a minimum period of 24 months. This retention supports dispute resolution, quality assurance, and regulatory compliance.

2 How We Use Your Data

k09 processes your personal data only for legitimate, specified purposes. The table below summarises the primary purposes for which your data is used and the legal basis that justifies each use.

Marketing Communications

k09 may send you promotional messages about new games, seasonal offers (for example during Eid, Pohela Boishakh, or BPL season), deposit bonuses, and platform updates — but only if you have given explicit consent at registration or through your account dashboard settings. You may withdraw marketing consent at any time by updating your notification preferences in your account or by contacting [email protected]. Withdrawal of marketing consent does not affect your ability to use the platform or receive service-related notifications.

Automated Decision-Making

k09 uses automated systems to flag accounts for fraud review, bonus abuse detection, and AML monitoring. Where an automated process results in account suspension or restriction, you have the right to request a manual review by a k09 staff member. To request a manual review, contact [email protected] with a clear description of the decision you are disputing.

3 Data Sharing & Third Parties

k09 does not sell your personal data to any third party. We share data only in the limited circumstances described below, and only to the extent necessary to fulfil the relevant purpose.

Payment Processors

To process deposits and withdrawals, k09 shares transaction data with payment providers including bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank. Each of these providers operates under its own privacy policy and security standards. k09 shares only the minimum information required to complete the relevant transaction.

Game Software Providers

k09's game library is powered by third-party software providers including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi. These providers may receive technical session data (such as a pseudonymous session token and stake amounts) to deliver game content and settle outcomes. They do not receive your name, NID number, or full contact details.

Identity Verification Services

k09 may use accredited third-party identity verification services to cross- check KYC documents. These services are bound by strict confidentiality agreements and are prohibited from using your data for any purpose beyond the specific verification task.

Legal & Regulatory Disclosure

k09 will disclose personal data to law enforcement agencies, regulatory authorities, or courts when required to do so by a valid legal order or when k09 believes in good faith that disclosure is necessary to:

• Comply with a legal obligation applicable to k09.
• Protect the rights, property, or safety of k09, its players, or the general public.
• Investigate, prevent, or take action regarding suspected illegal activity, fraud, or breach of this Agreement.

4 Cookies & Tracking Technologies

k09 uses cookies and similar browser-based technologies to operate the platform, remember your session, analyse site usage, and protect against fraud. By using the k09 website, you consent to the use of cookies as described in this section.

Types of Cookies We Use

Managing Cookies

You may adjust your browser settings to block or delete cookies at any time. Please note that disabling strictly necessary cookies will prevent you from logging into your k09 account. Instructions for managing cookies are available in the help documentation of your browser (Chrome, Firefox, Safari, Edge, etc.). Blocking analytics or functional cookies will not prevent you from using the core platform features.

5 Data Retention

k09 retains personal data for as long as necessary to fulfil the purpose for which it was collected, to comply with legal obligations, and to resolve any outstanding disputes. The retention periods below apply to active and closed accounts.

When a retention period expires, k09 will securely delete or anonymise the relevant data so that it can no longer be attributed to an individual. Anonymised, aggregated data (for example, total monthly deposit volumes across all players) may be retained indefinitely for business analytics purposes, as it does not identify any individual.

6 Data Security Measures

k09 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption on all data transmitted between your device and k09 servers.
• Password hashing using a modern one-way cryptographic algorithm — your plain-text password is never stored.
• Access controls — only authorised k09 personnel with a legitimate operational need may access personal data, and all such access is logged and audited.
• Firewall and intrusion detection systems monitoring k09 infrastructure around the clock.
• Regular security reviews of platform code, third-party integrations, and server configuration.
• Data segregation — player financial data, KYC documents, and gameplay records are stored in separate, access-controlled environments.

Security Incidents

In the event of a data security incident that is likely to result in a high risk to the rights and freedoms of affected players, k09 will notify affected individuals without undue delay via the contact details registered on their account. k09 will provide details of what data was affected, what steps k09 has taken in response, and what steps players can take to protect themselves.

7 Your Privacy Rights

As a k09 player, you hold the following rights in respect of your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Privacy Rights Request" and a clear description of your request. k09 will respond within 30 calendar days.

• Right of Access: You may request a copy of all personal data k09 holds about you, including the categories of data, the purposes for which it is processed, and any third parties with whom it has been shared.
• Right to Rectification: If any of your personal data held by k09 is inaccurate or incomplete, you have the right to request that it be corrected. For account details you can update yourself (such as contact preferences), please use the account dashboard directly.
• Right to Erasure: You may request the deletion of your personal data where k09 no longer has a legitimate basis to retain it. Please note that k09 is required by AML law to retain certain financial records for up to 7 years; such records cannot be deleted early even upon request.
• Right to Restrict Processing: You may request that k09 temporarily suspend processing of your data while a dispute about its accuracy or the lawfulness of processing is under review.
• Right to Object: Where k09 processes your data on the basis of legitimate interest (for example, for fraud analytics), you may object to that processing. k09 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Data Portability: For data you provided directly to k09 and which is processed on the basis of consent or contract, you may request a copy in a structured, machine-readable format (CSV or JSON).
• Right to Withdraw Consent: Where k09 relies on your consent to process data (for example, for marketing messages), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

8 Updates to This Policy

k09 reserves the right to update or revise this Privacy Policy at any time. When changes are made, the revised policy will be published on this page with an updated effective date at the top of the document. For material changes — that is, changes that significantly affect how your personal data is processed — k09 will provide advance notice to registered players via the platform dashboard or by direct message to your registered contact, at least 14 days before the change takes effect.

Your continued use of the k09 platform after a revised Privacy Policy has been published constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you should close your account and cease using the platform before the effective date of the change.

Contact & Privacy Enquiries

For any question, concern, or request related to this Privacy Policy or to the way k09 handles your personal data, please contact the k09 data team at [email protected]. Please write in English and include your registered mobile number and the nature of your enquiry in the message. k09 will acknowledge all privacy enquiries within 5 business days and provide a substantive response within 30 calendar days.

This Privacy Policy is written in English, which is the governing language for all interpretations. Any translated version provided for convenience shall not override the English-language version of this document.