kb333 Privacy Policy

1. Data Controller

kb333 operates the Platform at kb333.bio and acts as the data controller in respect of all personal data collected through the Platform. As data controller, kb333 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

If you have any questions about how your personal data is handled, or if you wish to exercise any of your data rights described in Section 9 of this Policy, please contact our Data Protection team using the details provided in Section 13.

2. Data We Collect

kb333 collects the following categories of personal data in the course of operating the Platform and delivering services to players in Bangladesh:

2.1 Identity Data

• Full legal name as it appears on official identification documents
• Date of birth (for age verification purposes)
• National ID number, passport number, or driving licence number (where submitted for KYC verification)
• Photographs or scanned copies of identity documents

2.2 Contact Data

• Email address registered to your kb333 Account
• Mobile phone number (used for account security and support communications)
• Residential address in Bangladesh (where provided for KYC or withdrawal purposes)

2.3 Financial Data

• bKash, Nagad, Rocket, or Upay mobile wallet numbers associated with your transactions
• Visa or Mastercard last-four digits and billing postcode (card details beyond this are handled exclusively by the payment processor and are never stored on kb333 servers)
• Transaction history — deposit amounts, withdrawal amounts, dates, and reference codes
• Account Balance and Bonus Fund balances at each point in time

2.4 Technical & Usage Data

• IP address at the time of login and at the time of each transaction
• Device type, operating system, browser type and version
• Pages visited on the Platform, time spent on each page, click-path data
• Session duration and frequency of visits
• Game history — games played, stakes placed, outcomes, and timestamps

2.5 Communications Data

• Records of live chat conversations with our support team
• Email correspondence sent to or received from [email protected]
• Records of responsible gaming tool activations (deposit limit changes, self-exclusion requests, cooling-off periods)

3. How We Collect Data

kb333 collects personal data through the following channels:

• Direct submission: When you register an Account, complete KYC verification, make a deposit or withdrawal request, contact our support team, or update your account settings, you provide data directly to us.
• Automated collection: When you browse or interact with the Platform, our servers automatically record technical and usage data including IP address, device identifiers, and session data via server logs and first-party cookies.
• Payment processors: When a transaction is initiated, the relevant payment provider (bKash, Nagad, Rocket, Upay, Visa, Mastercard) may share transaction confirmation data and a partial account identifier with kb333 for reconciliation purposes.
• Game providers: Third-party game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may share game-session metadata — such as round IDs, stake amounts, and outcomes — with kb333 to enable accurate account crediting and dispute resolution.
• Identity verification services: Where we use a third-party KYC provider to verify identity documents, that provider will return a verification decision and data quality flags to kb333. The raw document images may be processed by the KYC provider subject to their own privacy policies.

4. Purpose & Legal Basis for Processing

The table below sets out the primary purposes for which kb333 processes personal data and the legal basis relied upon for each purpose:

kb333 does not use automated decision-making processes that produce legal or similarly significant effects on players without human review. Where automated systems flag an account for investigation (for example, suspected fraud or duplicate account detection), a member of the kb333 team reviews the case before any account action is taken.

5. Data Sharing & Disclosure

kb333 does not sell or rent your personal data to any third party. We may share your data with the following categories of recipients solely to the extent necessary for the stated purpose:

5.1 Payment Processors

bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive transaction-related data necessary to process your deposits and withdrawals. These providers act as independent data controllers in respect of their own processing and are governed by their own privacy policies.

5.2 Game Providers

Third-party game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others) receive a pseudonymous player identifier and session parameters necessary to launch and manage game rounds. These providers do not receive your full name, email address, or payment details.

5.3 Identity Verification Providers

Where a third-party KYC service is used to verify identity documents, that provider receives identity data you submit for verification. The provider returns only a pass/fail decision and document quality indicators to kb333.

5.4 Legal and Regulatory Disclosure

kb333 may disclose personal data to law enforcement authorities, regulatory bodies, or courts where we are required to do so by applicable law, court order, or where we believe in good faith that disclosure is necessary to protect the legal rights of kb333 or to prevent fraud or illegal activity.

5.5 Corporate Transactions

In the event of a merger, acquisition, or sale of all or part of kb333's business assets, player data may be transferred to the acquiring entity as part of the transaction. Players will be notified of any such transfer by email in advance, and the acquiring entity will be required to honour this Privacy Policy.

6. International Data Transfers

kb333's servers and primary data storage are located in secure data centre facilities. Some of our third-party service providers — including certain game studios and technical infrastructure partners — may process data in jurisdictions outside Bangladesh. Where such transfers occur, kb333 ensures that appropriate contractual safeguards are in place to protect your personal data to a standard equivalent to this Policy. By using the kb333 Platform you acknowledge that your data may be transferred to and processed in countries outside Bangladesh in connection with the delivery of our services.

7. Cookies & Tracking Technologies

kb333 uses cookies and similar local storage technologies on the Platform. We do not use third-party advertising cookies or cross-site tracking pixels. The cookies we deploy fall into the following categories:

You may manage or delete cookies at any time through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in to your kb333 Account. Disabling functional or analytics cookies will not affect your ability to bet or play but may reduce the quality of your experience on the Platform.

8. Data Retention

kb333 retains personal data only for as long as is necessary to fulfil the purposes described in this Policy or to comply with applicable legal and regulatory obligations. Our standard retention periods are as follows:

• Active account data: Retained for the lifetime of your kb333 Account and for five (5) years following account closure, to meet anti-money laundering record-keeping requirements.
• KYC and identity documents: Retained for five (5) years from the date of verification or account closure, whichever is later.
• Transaction records: Retained for five (5) years from the date of each transaction in line with financial record-keeping obligations.
• Support communications: Retained for two (2) years from the date of the last communication in a support thread.
• Technical and usage logs: Retained for twelve (12) months from the date of collection, then deleted or anonymised.
• Marketing consent records: Retained for the duration of your consent plus three (3) years, to provide evidence of consent in the event of a query.

At the end of each applicable retention period, personal data is either securely deleted from our systems or irreversibly anonymised so that it can no longer be associated with any individual player.

9. Your Data Rights

As a player whose personal data is processed by kb333, you have the following rights in respect of your data. To exercise any of these rights, please contact us using the details in Section 13. We will respond to all valid requests within thirty (30) days.

• Right of Access: You may request a copy of all personal data kb333 holds about you, along with information about how it is processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected or updated.
• Right to Erasure: You may request that kb333 delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Note that data required for anti-money laundering or fraud prevention purposes cannot be deleted before the applicable retention period has expired.
• Right to Restriction: You may request that kb333 restrict the processing of your personal data while a complaint or rectification request is being investigated.
• Right to Portability: You may request a machine-readable copy of the personal data you have provided to kb333 so that it can be transferred to another service provider.
• Right to Object: You may object to processing carried out on the basis of legitimate interests. kb333 will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (for example, receiving promotional emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

10. Security Measures

kb333 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• TLS/SSL encryption on all data in transit between your browser or app and kb333's servers.
• Encryption at rest for sensitive data categories including identity documents and financial records stored in our databases.
• Role-based access controls ensuring that kb333 staff can only access the personal data necessary for their specific job function.
• Multi-factor authentication required for all internal systems that contain personal data.
• Regular security audits and penetration testing conducted by independent security professionals to identify and remediate vulnerabilities.
• Incident response procedures that are activated in the event of a suspected data breach, including player notification where required.

While kb333 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security against all possible threats. You also play a role in keeping your data safe — please use a strong, unique password for your kb333 Account and never share your login credentials with any third party.

11. Minors & Age Policy

The kb333 Platform is strictly for individuals aged 18 years and over. kb333 does not knowingly collect or process the personal data of anyone under the age of 18. If we become aware that personal data has been submitted by or on behalf of a person under 18, we will immediately suspend the associated Account, delete all personal data associated with that Account, and void any balances or winnings. If you believe that a minor has registered on kb333, please notify us immediately at [email protected] so that we can take swift action.

Parents and guardians who are concerned about a young person accessing online gambling platforms are encouraged to use parental control software and to visit our Responsible Gaming page for further guidance.

12. Changes to This Privacy Policy

kb333 reserves the right to update or revise this Privacy Policy at any time in response to changes in applicable law, our data processing practices, or the services we offer. When material changes are made — meaning changes that significantly affect your rights or the way your data is used — we will notify you by email to the address registered on your Account and by displaying a prominent notice on the Platform at least seven (7) days before the changes take effect. The date of the most recent revision is always displayed at the top of this page. We encourage you to review this Policy periodically to stay informed about how kb333 is protecting your data. Your continued use of the Platform after a revised Policy takes effect constitutes your acceptance of the updated terms.

13. Contact & Data Requests

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how your personal data has been handled, please contact the kb333 Data Protection team using the following details:

• Email: [email protected] — please include "Privacy Request" in the subject line
• Live Chat: Available 24/7 BST from within your Account dashboard — ask to speak with the Data Protection team
• Response Time: We aim to acknowledge all data rights requests within three (3) business days and to provide a full response within thirty (30) calendar days of receipt