Privacy Policy — How kfbd Protects Your Data

1 Who We Are

kfbd ("kfbd", "we", "us", "our") is the operator of the online sports betting and casino gaming platform accessible at kfbd.io. We are committed to protecting the privacy and personal data of every player who registers with or visits our platform. For the purposes of this Privacy Policy, kfbd is the data controller responsible for the collection and processing of personal information as described herein.

This Privacy Policy is written in English and governs the personal data of players in Bangladesh and any other jurisdiction from which access to kfbd.io is permitted. If you have any questions or concerns about how your data is handled, you may contact our Data Protection team at [email protected]. All enquiries will be acknowledged within two business days (BST, UTC+6).

2 Data We Collect

kfbd collects several categories of personal data depending on how you interact with our platform. The categories of data we collect are as follows:

Identity & Contact Data

• Full legal name — collected at registration for account identification.
• Date of birth — collected to verify that you meet the 21+ age requirement.
• Residential address — collected for identity verification and KYC compliance.
• Email address — used for account communications, support responses, and security alerts.
• Mobile phone number — used for account security verification and support contact.

Verification & KYC Data

• National Identity Card (NID) number and scan — required for identity verification under our KYC process.
• Passport or driving licence copy — accepted as an alternative identity document where NID is unavailable.
• Proof of address documents — such as a utility bill or bank statement dated within three months.
• Selfie or biometric photograph — may be requested to match against submitted identity documents during enhanced verification checks.

Financial Data

• Payment method identifiers — such as your registered bKash number, Nagad number, Rocket number, Upay account reference, or masked bank account number. We do not store full card numbers or mobile banking PINs.
• Transaction history — including deposit amounts, withdrawal requests, dates, and processing status. This data is retained for financial audit and AML compliance purposes.

Behavioural & Technical Data

• IP address and approximate geolocation — used for fraud detection, responsible gaming checks, and regulatory compliance.
• Device identifiers — including browser type, operating system, and device model.
• Session logs — page views, game launches, session duration, and betting history recorded for platform improvement and responsible gaming monitoring.
• Cookies and tracking data — as described in Section 7 of this Policy.

Communications Data

• Support correspondence — records of live chat conversations, emails, and any other communications exchanged with the kfbd support team.
• Marketing preferences — your opt-in or opt-out status for promotional communications from kfbd.

3 How We Collect Your Data

kfbd collects personal data through the following channels:

• Registration form: When you create a kfbd account, you voluntarily provide identity, contact, and date-of-birth data.
• KYC submission: When you upload verification documents to satisfy our identity verification requirements prior to your first withdrawal or upon reaching deposit thresholds.
• Deposits and withdrawals: Financial data is captured when you initiate transactions through bKash, Nagad, Rocket, Upay, bank transfer, or card payment channels.
• Platform usage: Behavioural and technical data is collected automatically as you navigate the kfbd website, launch games, and place bets. This collection occurs via server logs and cookies.
• Support interactions: When you contact kfbd via live chat or email at [email protected], we record the content of those communications to resolve your query and improve our service.
• Third-party sources: In limited circumstances, kfbd may receive data about you from third-party identity verification providers or fraud prevention agencies as part of enhanced KYC or AML screening.

4 How We Use Your Data

kfbd uses your personal data only for clearly defined, legitimate purposes. The following table summarises our primary processing activities:

kfbd does not use your personal data for automated decision-making that produces significant legal effects without a human review step. Responsible gaming interventions triggered by betting pattern analysis are always reviewed by a qualified member of the kfbd team before any account restriction is applied.

5 Legal Basis for Processing

kfbd processes personal data under the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations to you under the kfbd Terms & Conditions — including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable anti-money laundering (AML) obligations, age verification requirements, and any other legal duties imposed on kfbd as a platform operator.
• Legitimate interests: Processing carried out for purposes that are in kfbd's legitimate business interests and that do not override your privacy rights — including fraud detection, platform security, and aggregate analytics for platform improvement.
• Consent: Processing based on your freely given, specific, and informed consent — principally for marketing communications. You may withdraw consent for marketing at any time by updating your account preferences or by contacting us at [email protected].

6 Data Sharing & Third Parties

kfbd does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the following strictly limited circumstances:

Game Providers

Third-party game studios — including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe — may receive limited technical session data (such as player session tokens and stake values) necessary to deliver the game experience. These providers are contractually prohibited from using your data for any purpose other than game delivery.

Payment Processors

When you make a deposit or request a withdrawal, the relevant payment processor (bKash, Nagad, Rocket, Upay, or your bank) receives the transaction data required to complete the transfer. kfbd does not store your full mobile banking credentials. All payment transmissions are protected by SSL encryption.

Identity Verification & KYC Providers

kfbd may engage third-party KYC and AML screening providers to verify the authenticity of your submitted identity documents. These providers operate under strict data processing agreements and are permitted to use your data solely for the verification purpose for which it was shared.

Legal and Regulatory Disclosures

kfbd may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by applicable law, court order, or regulatory obligation. kfbd will notify you of such disclosures where legally permissible.

Business Transfers

In the event of a merger, acquisition, or sale of kfbd's business or assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy implications before it takes effect.

7 Cookies & Tracking

kfbd uses cookies and similar tracking technologies on the kfbd.io platform to ensure the website functions correctly, to analyse usage patterns, and to deliver a personalised player experience. By continuing to use the kfbd platform, you consent to our use of cookies as described in this section.

Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the kfbd platform to function. They enable core features such as session management, secure login, and navigation. These cookies cannot be disabled without impairing platform functionality.
• Performance & Analytics Cookies: These cookies collect aggregated, anonymised information about how players interact with kfbd — including which pages are visited most frequently and whether error messages are encountered. This data helps kfbd improve the platform experience.
• Functionality Cookies: These cookies remember your preferences — such as your chosen language or display settings — so that we can provide a more personalised experience during subsequent visits.
• Responsible Gaming Cookies: These cookies track session duration and betting activity to support the responsible gaming tools available in your kfbd account settings, such as session time reminders and reality checks.

Managing Cookies

You may manage or disable cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies may prevent some features of the kfbd platform from functioning correctly. For more information on managing cookies in your browser, consult your browser's help documentation.

8 Data Retention

kfbd retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. Our standard retention periods are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

9 Your Rights

As a kfbd player, you hold a number of rights in relation to the personal data we hold about you. kfbd is committed to facilitating the exercise of these rights promptly and transparently.

• Right of Access: You have the right to request a copy of the personal data kfbd holds about you. We will respond to verified access requests within 30 days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic account details directly via your account profile page.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. kfbd may retain certain data beyond an erasure request where required by applicable AML or financial regulations.
• Right to Restriction of Processing: You may request that kfbd restricts the processing of your data in certain circumstances — for example, while a dispute about its accuracy is resolved.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request a structured, machine-readable copy of your personal data to transfer to another service provider.
• Right to Object: You may object to processing carried out under kfbd's legitimate interests, including direct marketing. kfbd will cease the relevant processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (principally marketing), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

10 Data Security

kfbd takes the security of your personal data seriously and implements appropriate technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, or disclosure. Our security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the kfbd platform is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Encrypted Data Storage: Sensitive personal data — including KYC documents and financial records — is stored in encrypted form on secured servers with access restricted to authorised kfbd personnel only.
• Access Controls: kfbd operates strict role-based access controls. Only staff members with a documented business need may access player personal data, and all access events are logged for audit purposes.
• Fraud Monitoring Systems: Automated systems monitor for unusual account activity, multiple account creation, and suspicious transaction patterns in real time, with alerts escalated to the kfbd security team for review.
• Regular Security Reviews: kfbd conducts periodic internal security reviews and engages qualified third-party assessors to evaluate our data security posture and address any identified vulnerabilities.

Notwithstanding these measures, no internet-based platform can guarantee absolute security. kfbd encourages all players to use a strong, unique password for their kfbd account, to enable any available two-factor authentication options, and to notify us immediately at [email protected] if they suspect any unauthorised access to their account.

11 Children's Privacy

The kfbd platform is strictly intended for adults aged 21 years and above. kfbd does not knowingly collect, process, or store personal data from individuals under the age of 21. Age verification is enforced at the point of registration and is a prerequisite for any withdrawal request.

If kfbd becomes aware that personal data has been collected from a person under the age of 21, that account will be immediately suspended, all funds will be held pending parental or guardian contact, and the data will be deleted in accordance with applicable legal requirements. If you are a parent or guardian and believe that a minor has registered with kfbd, please contact us immediately at [email protected].

12 Policy Updates

kfbd reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable legal requirements, or platform features. The most current version of this Privacy Policy will always be available on this page at kfbd.io/privacy-policy.

Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — kfbd will notify registered players via email or a prominent on-platform notification at least seven (7) days before the updated policy takes effect. Continued use of the kfbd platform following the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms.

The effective date at the top of this document reflects the date on which the current version of this Privacy Policy came into force. If you have any questions about our data practices or this Privacy Policy, you are always welcome to contact us at [email protected].