Privacy Policy
How kk22 Protects Your Data

This Privacy Policy describes how kk22 ("we", "us", "our") collects, uses, stores, and protects the personal information of individuals ("you", "your", "the player") who access or use the kk22 online casino and sports betting platform at kk22.io, including all associated services, mobile interfaces, and customer support channels.

This policy applies to all registered players, prospective players who browse the kk22 website without registering, and any individual who contacts kk22 through any of our support channels. By accessing the kk22 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

kk22 is committed to protecting the personal data of players across Bangladesh — including those in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar — in accordance with applicable data protection principles and best practices for responsible online gaming operations.

kk22 collects personal data through several channels: directly from you during registration and account operation, automatically through your use of the platform, and in some cases from regulated third-party verification services. The categories of data we collect are as follows:

Registration and Identity Data

• Full legal name
• Date of birth (to verify the 21+ age requirement)
• Email address
• Mobile phone number
• Residential address
• Username and encrypted password

Identity Verification (KYC) Data

• Government-issued photo identification (National ID, passport, or driving licence)
• Proof of address documentation (utility bill, bank statement)
• Proof of payment method ownership (screenshot or statement showing your name on the bKash, Nagad, or Rocket account)
• Source of funds documentation (where required by AML policy for high-value transactions)

Financial and Transaction Data

• Deposit and withdrawal transaction records
• Payment method identifiers (e.g., last 4 digits of mobile wallet number)
• Account balance history
• Bonus and promotional credit records

Gaming Activity Data

• Game session logs (games played, bet amounts, outcomes, session duration)
• Sports betting market selections and wager history
• Responsible gaming tool usage (deposit limits set, cooling-off periods activated)

Technical and Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Session timestamps and navigation behaviour on the kk22 platform
• Cookie identifiers and session tokens

Communications Data

• Records of Live Chat conversations with kk22 support agents
• Emails sent to or received from [email protected]
• Feedback and survey responses

The following table summarises the primary data categories and their collection source:

kk22 uses the personal data we collect for the following clearly defined purposes. We do not use your data for any purpose beyond those listed below without first obtaining your explicit consent or being required to do so by law.

• Account Creation and Management: To register your kk22 account, verify your identity, maintain your account profile, and enable you to access all platform features.
• Age and Eligibility Verification: To confirm that you meet the 21+ age requirement and are eligible to participate in real-money gaming on the kk22 platform.
• Payment Processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and to maintain accurate transaction records in Bangladeshi Taka (৳).
• AML and Fraud Prevention: To monitor transactions and gaming activity for signs of money laundering, fraudulent behaviour, or account compromise, and to take appropriate action where risks are identified.
• Responsible Gaming Monitoring: To identify patterns of gaming behaviour that may indicate problem gambling and to proactively offer responsible gaming tools where appropriate.
• Customer Support: To respond to your enquiries, resolve disputes, and provide assistance through Live Chat and email support channels.
• Platform Improvement: To analyse aggregate usage data, identify technical issues, and improve the performance, functionality, and user experience of the kk22 platform.
• Legal Compliance: To comply with applicable legal obligations, including record-keeping requirements and responses to lawful requests from competent authorities.
• Promotional Communications: Where you have opted in, to send you information about kk22 promotions, bonuses, seasonal offers (e.g., Eid, Pohela Boishakh specials), and platform updates. You may withdraw consent for marketing communications at any time.

kk22 processes your personal data on one or more of the following legal bases, depending on the specific data and purpose involved:

• Contractual Necessity: Processing required to fulfil our obligations to you under the kk22 Terms & Conditions — including account management, payment processing, and customer support.
• Legal Obligation: Processing required to comply with applicable law — including KYC verification, AML record-keeping, and cooperation with lawful authority requests.
• Legitimate Interests: Processing necessary for kk22's legitimate business interests — including fraud detection, platform security, responsible gaming monitoring, and platform analytics — provided those interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — principally for marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

kk22 does not sell your personal data. We share personal data only in the following limited and controlled circumstances:

• Payment Service Providers: bKash, Nagad, Rocket, and Upay receive transaction data strictly as necessary to process your deposits and withdrawals. These providers are bound by their own regulatory obligations and privacy frameworks.
• Identity Verification Services: Third-party KYC and AML compliance providers may receive identity documents and personal details for the purpose of verifying your identity and screening against sanctions or watchlists.
• Game Technology Providers: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session data relevant to the delivery of their games. These providers do not receive your financial or identity data.
• IT and Security Infrastructure Providers: Cloud hosting, cybersecurity, and platform monitoring vendors may process technical data as part of their service delivery. All such vendors are bound by strict data processing agreements.
• Legal and Regulatory Authorities: kk22 will disclose personal data to competent authorities where required by law, court order, or in response to a lawful regulatory request. We will notify you of such disclosure where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and of any changes to this Privacy Policy that result from it.

kk22 uses cookies and similar tracking technologies (including local storage and session tokens) to operate and improve the platform. The following types of cookies are deployed:

kk22 does not use advertising cookies, cross-site tracking cookies, or any technology that tracks your behaviour outside of the kk22 platform. Strictly necessary cookies cannot be disabled as they are essential for the platform to function. Functional and analytics cookies may be managed through your browser settings; however, disabling them may affect your experience on the kk22 platform.

kk22 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention guidelines apply:

• Account Data: Retained for the lifetime of your active account plus a minimum of five (5) years following account closure, as required by AML record-keeping obligations.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with financial record-keeping requirements.
• KYC Documents: Retained for the duration of your account plus five (5) years post-closure. Original document images are stored in encrypted form with access restricted to compliance personnel only.
• Gaming Activity Logs: Retained for a minimum of three (3) years from the date of each session for responsible gaming monitoring, dispute resolution, and audit purposes.
• Support Communications: Retained for two (2) years from the date of each interaction for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Retained for the duration of your consent plus three (3) years as evidence of the consent provided.
• Technical and Device Data: Retained for up to twelve (12) months in aggregate form for platform analytics purposes. Raw session logs are purged after ninety (90) days.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual.

kk22 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security framework includes:

• 256-bit SSL/TLS Encryption: All data in transit between your device and kk22 servers is encrypted using industry-standard TLS protocols.
• Encrypted Data at Rest: Personal data stored on kk22 servers — including KYC documents and financial records — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorised kk22 personnel on a strictly need-to-know basis, enforced through role-based access control (RBAC) systems.
• Two-Factor Authentication (2FA): Internal system access for kk22 staff requires multi-factor authentication. 2FA is also available to players for account login.
• Automated Fraud Detection: kk22 operates real-time automated systems that monitor account activity for signs of unauthorised access, suspicious transactions, and fraudulent behaviour patterns.
• Regular Security Audits: The kk22 platform undergoes periodic security assessments and vulnerability testing conducted by qualified information security professionals.
• Incident Response: In the event of a data breach that poses a risk to your rights and freedoms, kk22 will notify affected individuals and relevant authorities without undue delay in accordance with applicable obligations.

While kk22 takes every reasonable measure to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials. If you suspect your kk22 account has been compromised, contact our support team immediately at [email protected].

As a kk22 player, you hold the following rights in respect of your personal data. kk22 is committed to honouring these rights promptly and without undue administrative burden:

• Right of Access: You may request a copy of all personal data kk22 holds about you. We will provide this in a structured, commonly used, machine-readable format within a reasonable timeframe.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. You may update most profile information directly from within your kk22 account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer required for the purposes for which it was collected, subject to any overriding legal retention obligations (such as AML record-keeping requirements).
• Right to Restriction of Processing: You may request that kk22 temporarily halt the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested.
• Right to Data Portability: You may request that personal data you have provided to kk22 be transferred to you or to another service provider in a structured digital format, where technically feasible.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
• Right to Object: You may object to the processing of your personal data where kk22 relies on legitimate interests as its legal basis, including profiling for responsible gaming monitoring purposes.

To exercise any of the above rights, please contact the kk22 Data Protection team at [email protected] with the subject line "Data Privacy Request". We will acknowledge your request within 3 business days and aim to fulfil it within 30 calendar days. In complex cases, this period may be extended, and you will be informed accordingly.

kk22 is strictly an adult platform. No person under the age of 21 is permitted to register for or use the kk22 platform. kk22 does not knowingly collect personal data from individuals under the age of 21.

If kk22 becomes aware that personal data has been collected from a person under 21, we will immediately suspend the associated account, delete all personal data collected from that individual, reverse any deposits made, and forgo any winnings accumulated during the period of underage use.

The kk22 platform may contain references to third-party services — such as payment providers bKash, Nagad, Rocket, and Upay — whose privacy practices are governed by their own separate privacy notices. kk22 is not responsible for the data handling practices of any third-party service provider and recommends that you review the privacy policy of any third-party service you interact with in connection with your kk22 account.

kk22 does not endorse, and accepts no liability for, the privacy or security practices of any external website, application, or service referenced in connection with the kk22 platform.

kk22 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform services. Material changes will be communicated to registered players via the email address on file or through a prominent notice on the kk22 platform, with a minimum of seven (7) days' advance notice where practicable.

The "Last Updated" date at the top of this document reflects the most recent revision. Your continued use of the kk22 platform following the effective date of any amendment constitutes your acknowledgement of the revised policy. If you do not accept the revised policy, you must cease using the platform and may request closure of your account.

We encourage you to review this Privacy Policy periodically to stay informed about how kk22 protects your personal information.

For all privacy-related enquiries, data subject access requests, consent withdrawals, or complaints regarding kk22's data practices, please use the following contact details. Our Data Protection team is available 24 hours a day, 7 days a week, including Bangladesh public holidays.

• Email: [email protected] — use subject line "Data Privacy Request" for all privacy-related matters
• Live Chat: Available directly on the kk22 platform at all hours
• Response Time Target: Acknowledgement within 3 business days; full response within 30 calendar days
• Support Hours: Peak staffing 9 AM – 11 PM BST (UTC+6)

kk22 is committed to resolving all privacy concerns promptly and transparently. If you are not satisfied with kk22's response to your privacy enquiry, you may escalate the matter through the dispute resolution process described in our Terms & Conditions.