kk5 Privacy Policy — Your Data, Protected

1Introduction and Scope

This Privacy Policy applies to all personal data collected, processed and stored by kk5 in connection with the operation of the kk5 online casino and sports betting platform accessible at kk5.today. It applies to all registered players, visitors and any individual whose personal data kk5 processes.

By registering with or using the kk5 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Privacy Policy, you must not use the kk5 platform. kk5 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players via their account mobile number or email address.

2How We Use Your Personal Data

kk5 uses the personal data it collects for the following specific purposes. We process only the minimum data necessary for each purpose.

• Account creation and management — to register your account, verify your identity, maintain your account settings and enable you to log in securely from your device in Bangladesh.
• Payment processing — to process deposits via bKash, Nagad, Rocket and Upay and to process withdrawal requests back to your registered payment account. Transaction records are retained for a minimum of 5 years for financial compliance purposes.
• Fraud prevention and security — to detect and prevent unauthorised account access, money laundering, bonus abuse and other fraudulent activity. This includes sharing limited data with payment processors and fraud detection services under confidentiality agreements.
• Customer support — to respond to your support enquiries, process complaints and provide account assistance. Support interactions are logged for quality assurance and dispute resolution purposes.
• Platform improvement and personalisation — to analyse aggregated usage patterns, improve game recommendations and optimise the kk5 platform for players using mobile devices and 4G networks in Bangladesh. Individual player data is never sold for this purpose.

3Legal Basis for Processing

kk5 processes personal data on the following legal bases:

• Contractual necessity — processing required to fulfil our obligations to you under the kk5 Terms and Conditions, including account management, payment processing and game operation.
• Legitimate interests — processing necessary to protect the security and integrity of the kk5 platform, prevent fraud, resolve disputes and improve the service, where these interests are not overridden by your data protection rights.
• Legal obligation — processing required to comply with applicable anti-money-laundering regulations, KYC obligations and any lawful requests from competent authorities.
• Consent — where kk5 sends you promotional communications about bonuses, tournaments or platform news, this is based on your explicit opt-in consent. You may withdraw this consent at any time via your account settings or by contacting kk5 support.

Where kk5 relies on consent as the legal basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.

4Data Sharing and Third Parties

kk5 does not sell your personal data. kk5 shares personal data with third parties only in the following limited circumstances, and only to the minimum extent required:

• Payment processors — kk5 shares transaction reference data with bKash, Nagad, Rocket, Upay and bank payment partners solely to process deposit and withdrawal transactions. These providers are bound by their own privacy and security obligations.
• Game providers — Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi and other licensed providers receive session tokens and game history data necessary to deliver their games on the kk5 platform. No identifiable personal data beyond what is technically required is shared.
• Fraud and identity verification services — kk5 uses reputable third-party services to assist with KYC document verification and fraud screening. These services process data under strict confidentiality agreements and are permitted to use data only for the purpose of providing their service to kk5.

kk5 does not transfer personal data to countries outside of Bangladesh's data protection framework unless adequate safeguards are in place. All third-party data processors used by kk5 are contractually required to maintain data security standards equivalent to those applied by kk5 itself.

5Data Retention

kk5 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods: active account data is retained for the lifetime of the account; financial transaction records are retained for a minimum of 5 years following the date of the transaction; KYC documents are retained for a minimum of 5 years following account closure; support interaction logs are retained for a minimum of 2 years.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked to an individual. Players who close their accounts may request confirmation of data deletion via kk5 support, subject to the mandatory retention periods described above.

6Cookies and Tracking Technologies

kk5 uses the following types of cookies and similar tracking technologies on the kk5 platform:

• Essential session cookies — required for the kk5 platform to function correctly. These cookies maintain your logged-in state and preserve your session preferences. They cannot be disabled without breaking core platform functionality.
• Security cookies — used to detect unusual login patterns, prevent account takeover attacks and flag suspicious activity for the kk5 fraud prevention team.
• Preference cookies — used to remember your language setting, responsible gaming tool preferences and display customisations. These may be disabled via your browser settings without affecting core platform access.
• Analytics cookies — kk5 uses anonymised analytics to understand how players navigate the platform, which games are most popular and where technical issues occur. No individually identifiable data is included in analytics reports.
• You may manage or disable non-essential cookies via your mobile browser settings. Please note that disabling certain cookies may affect your experience on the kk5 platform, including session continuity and personalised game recommendations.

7Data Security

kk5 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration or destruction. These measures include 256-bit SSL/TLS encryption for all data in transit, encrypted storage for sensitive personal and financial data at rest, multi-factor authentication for internal system access, regular security audits and penetration testing, and access controls limiting employee data access to only what is required for their role.

In the unlikely event of a data breach that poses a risk to your rights and freedoms, kk5 will notify affected players as promptly as practicable and will take all reasonable steps to contain the breach and mitigate its impact. Players are encouraged to contact kk5 support immediately if they suspect their account has been compromised.

8Your Rights Over Your Personal Data

As a kk5 player, you have the following rights in relation to the personal data kk5 holds about you. To exercise any of these rights, contact kk5 support with your account mobile number and a description of your request. kk5 will respond within 30 days.

• Right of access — you may request a copy of all personal data kk5 holds about you, free of charge, once per calendar year. Additional requests within the same year may be subject to a reasonable administrative fee.
• Right to rectification — you may request correction of any inaccurate personal data kk5 holds about you. Corrections to name, date of birth or other identity data may require re-submission of KYC documentation.
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to mandatory retention obligations under applicable law. kk5 will confirm which data can be deleted immediately and which is subject to retention requirements.
• Right to restrict processing — you may request that kk5 restricts its processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or object to its processing.
• Right to data portability — where processing is based on your consent or contractual necessity, you may request that kk5 provides your personal data in a structured, commonly used, machine-readable format so that you may transfer it to another service.

kk5 will acknowledge all data rights requests within 5 business days and will action them within 30 calendar days of receipt. Where a request cannot be fulfilled in full — for example because mandatory retention requirements apply — kk5 will explain why and describe what action has been taken.

9Children and Minors

The kk5 platform is strictly for adults aged 21 and above. kk5 does not knowingly collect, process or retain personal data from any individual under the age of 21. If kk5 discovers that personal data from a person under 21 has been collected, that data will be deleted immediately and the associated account will be permanently closed.

If you are a parent or guardian and believe that a person under 21 in your care has registered with or used the kk5 platform, please contact kk5 support immediately. kk5 will investigate and, if confirmed, will delete all associated data and close the account within 48 hours of the report being verified.

10Changes to This Privacy Policy

kk5 reserves the right to update this Privacy Policy at any time to reflect changes in data processing practices, legal requirements or the features of the kk5 platform. The current version of this Privacy Policy, with its effective date, is always available at kk5.today/privacy-policy.

Where changes are material — for example where kk5 introduces a new data processing purpose, shares data with new categories of third parties or changes its data retention periods — registered players will be notified via their account mobile number or email address at least 14 days before the change takes effect.

11Contact Us About Privacy

If you have any questions about this Privacy Policy, wish to exercise your data rights or wish to raise a privacy concern, please contact the kk5 support team using the contact details published on the kk5 platform. kk5 aims to acknowledge all privacy enquiries within 24 hours and to resolve them within 30 calendar days. The kk5 support team is available 24 hours a day, 7 days a week, including during Eid, Pohela Boishakh and other public holidays observed in Bangladesh.

12Governing Law

This Privacy Policy is governed by the laws applicable to the operation of the kk5 platform. Any disputes arising from this Privacy Policy or from kk5's processing of your personal data shall be subject to the jurisdiction described in the kk5 Terms and Conditions.

Players in Bangladesh who are dissatisfied with how kk5 has handled a privacy concern are encouraged to first exhaust kk5's internal complaint process before seeking any external remedy. kk5 is committed to resolving all privacy complaints fairly and promptly in line with the principles set out in this Privacy Policy.