kc22 Privacy Policy — Your Data, Protected

kc22 ("we", "us", "our") operates the online casino and sports betting platform accessible at kc22.io and all associated subdomains and interfaces. We are committed to protecting the privacy of all individuals who interact with our platform, including visitors who browse without registering and registered players who hold an active kc22 account.

This Privacy Policy describes in full how kc22 collects, uses, stores, shares, and protects personal information in connection with the provision of our services to players in Bangladesh and elsewhere. It also explains the rights you have in relation to the personal data we hold about you and how you can exercise those rights.

This Privacy Policy forms part of the kc22 Terms & Conditions. By registering a kc22 account or otherwise using our platform, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

kc22 may collect and process the following categories of personal information in connection with your use of our platform:

kc22 does not knowingly collect sensitive personal data (such as racial or ethnic origin, religious beliefs, or health data) unless specifically required for responsible gaming or legal compliance purposes, in which case the collection is limited strictly to what is necessary and is handled with heightened care.

kc22 collects personal information through the following means:

• Direct interactions: Information you provide when you register a kc22 account, complete identity verification (KYC), make a deposit or withdrawal, contact the support team via live chat or email, or respond to any survey or promotion.
• Automated technologies: Technical and behavioural data collected automatically when you visit or use the kc22 platform, including through cookies, server logs, and similar tracking technologies. See Section 7 (Cookies & Tracking) for full details.
• Third-party sources: Data received from payment service providers (bKash, Nagad, Rocket, Upay) to confirm transaction details; data from identity verification providers used to conduct KYC checks; and data from fraud prevention and anti-money-laundering screening services.
• Publicly available sources: In limited circumstances, kc22 may cross-reference information from publicly available databases to verify the accuracy of information you have provided or to comply with legal obligations.

kc22 uses the personal data we collect for the following purposes:

• Account creation and management: To register and maintain your kc22 player account, including authentication, account security, and communication of important account notices.
• Service delivery: To provide access to casino games, sports betting, crash games, money wheel, and all other kc22 platform features, and to ensure those features function correctly on your device.
• Payment processing: To process deposit and withdrawal transactions via bKash, Nagad, Rocket, and Upay, and to maintain accurate financial records for your account.
• Identity verification (KYC): To verify your identity, age (21+), and financial information as required to comply with our anti-money-laundering obligations and responsible gaming commitments.
• Responsible gaming: To monitor gaming activity for signs of problem gambling, to administer self-exclusion and deposit limit requests, and to deliver responsible gaming communications where appropriate.
• Fraud prevention and security: To detect, investigate, and prevent fraud, money laundering, cheating, bonus abuse, and other prohibited activities on the kc22 platform.
• Customer support: To respond to your queries, complaints, and support requests submitted via live chat or email.
• Platform improvement: To analyse usage patterns, diagnose technical issues, and develop new features that improve the kc22 player experience for users across Bangladesh.
• Legal compliance: To comply with applicable laws, regulations, court orders, and legal processes, and to establish, exercise, or defend legal claims.
• Marketing communications (where consented): To send you promotional offers, bonus notifications, and news about kc22 games and events — but only where you have explicitly opted in to receive such communications. You may withdraw consent at any time.

kc22 processes your personal data only where we have a valid legal basis to do so. The legal bases we rely on are as follows:

• Contractual necessity: Processing that is necessary to perform our contract with you — i.e., to provide the kc22 platform services you have registered to use, including account management, payment processing, and game delivery.
• Legal obligation: Processing that is required for kc22 to comply with applicable legal obligations, including identity verification, anti-money-laundering checks, and record-keeping requirements.
• Legitimate interests: Processing that is necessary for kc22's legitimate business interests, including fraud prevention, platform security, abuse detection, and service improvement — provided those interests are not overridden by your privacy rights.
• Consent: Where kc22 processes your data for purposes that are not strictly necessary (such as sending marketing communications or using non-essential cookies), we do so only on the basis of your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

kc22 does not sell, rent, or trade your personal information to any third party for commercial gain. We may share your data with the following categories of third party, strictly to the extent necessary to deliver our services or fulfil our legal obligations:

• Payment service providers: bKash, Nagad, Rocket, and Upay receive the financial information necessary to process your deposit and withdrawal transactions. Each of these providers operates under its own privacy policy and is subject to applicable regulations.
• Identity verification providers: Third-party KYC and anti-money-laundering screening services receive the identity documents and personal details required to verify your account in accordance with our compliance obligations.
• Game software providers: Game providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive technical session data necessary for the delivery of their games on the kc22 platform. These providers do not receive personal account data beyond what is technically required.
• IT and infrastructure providers: Cloud hosting, server management, cybersecurity, and platform analytics providers who process data on kc22's behalf under strict data processing agreements.
• Legal and regulatory authorities: Where required by applicable law, court order, or the direction of a competent authority, kc22 may disclose personal data to law enforcement agencies, regulators, or other government bodies.
• Professional advisers: Legal, financial, and auditing professionals who require access to limited personal data in connection with services they provide to kc22, under obligations of confidentiality.

All third parties with whom kc22 shares personal data are required to handle that data in a manner consistent with this Privacy Policy and applicable data protection standards. kc22 does not permit third parties to use your data for their own marketing purposes.

kc22 uses cookies and similar tracking technologies to operate the platform, improve user experience, and analyse how players interact with our services. The following types of cookies may be set when you visit kc22.io:

• Strictly necessary cookies: These cookies are essential for the kc22 platform to function. They enable core features such as login session management, security token validation, and payment flow continuity. These cookies cannot be disabled without significantly impairing your ability to use kc22.
• Functional cookies: These cookies remember your preferences (such as your preferred language, display settings, and responsible gaming configurations) so that you do not have to re-enter them on each visit.
• Analytics cookies: kc22 uses privacy-conscious analytics tools to understand how players navigate the platform, which pages are most popular, and where technical issues arise. This data is aggregated and does not identify individual users.
• Marketing cookies (consent required): Where you have consented, kc22 may use cookies to track which promotions and game categories you engage with, so that we can deliver more relevant offers. You may withdraw consent for marketing cookies at any time.

kc22 retains personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention principles apply:

• Active accounts: Personal data associated with an active kc22 player account is retained for the duration of the account's existence and for a minimum period of five years following account closure, to satisfy anti-money-laundering record-keeping requirements.
• Financial transaction records: Records of all deposits, withdrawals, and in-game transactions are retained for a minimum of seven years from the date of the transaction, in accordance with financial record-keeping obligations.
• KYC documents: Identity verification documents are retained for a minimum of five years following account closure, or longer where required by applicable law or ongoing legal proceedings.
• Support communications: Customer support chat transcripts and email correspondence are retained for three years from the date of the interaction, or longer where the communication relates to an unresolved complaint or legal matter.
• Technical and behavioural data: Anonymised or aggregated analytics data (from which individual users cannot be identified) may be retained indefinitely for platform improvement purposes.
• Marketing consent records: Records of your consent to receive marketing communications are retained for as long as you hold a kc22 account, and for one year following account closure, to demonstrate compliance.

Once the applicable retention period has expired, kc22 will securely delete or anonymise your personal data in a manner that prevents recovery or reconstruction.

kc22 implements a comprehensive set of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the kc22 platform is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Encrypted data storage: Sensitive personal data (including financial information and identity documents) is stored in encrypted form on secured servers with restricted access.
• Access controls: Access to personal data within kc22's systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data necessary for their specific role, and all access is logged and audited.
• Password security: kc22 stores account passwords using strong one-way hashing algorithms. Plain-text passwords are never stored or transmitted by kc22.
• Network security: kc22's infrastructure is protected by enterprise-grade firewalls, intrusion detection systems, and continuous security monitoring.
• Regular security assessments: kc22 conducts regular security reviews and vulnerability assessments to identify and address potential weaknesses in our systems before they can be exploited.

As a kc22 player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact the kc22 support team via live chat or by email at [email protected]:

• Right of access: You have the right to request a copy of the personal data kc22 holds about you, along with information about how it is being used.
• Right to rectification: If any personal data kc22 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure: In certain circumstances, you have the right to request that kc22 delete the personal data we hold about you. This right is subject to limitations where kc22 is legally required to retain certain data (for example, for anti-money-laundering compliance).
• Right to restrict processing: You may request that kc22 restrict the processing of your personal data in certain circumstances — for example, while a query about the accuracy of your data is being resolved.
• Right to data portability: Where technically feasible and legally applicable, you may request that kc22 provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to withdraw consent: Where kc22 processes your data on the basis of your consent (for example, for marketing communications or non-essential cookies), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.
• Right to object: You have the right to object to kc22 processing your personal data on the basis of legitimate interests, where you believe your privacy rights outweigh those interests.

kc22 will respond to all valid data rights requests within 30 days of receipt. Where a request is complex or involves a large volume of data, kc22 may extend this period by a further 60 days, with notice provided to you within the initial 30-day window.

kc22 is strictly an adult platform. Access to all kc22 services is limited to individuals who are 21 years of age or older. kc22 does not knowingly collect personal data from anyone under the age of 21.

If kc22 discovers that it has inadvertently collected personal data from an individual under 21, that account will be closed immediately, any funds held will be dealt with in accordance with our Terms & Conditions, and all associated personal data will be deleted from our systems as quickly as technically possible.

If you are a parent or guardian and believe that your child has registered a kc22 account or provided personal information to kc22 without your knowledge, please contact us immediately via live chat or at [email protected] so that we can take appropriate action.

The kc22 platform does not contain links to third-party websites or services other than those strictly necessary for the delivery of payment processing and game software. However, should any third-party links appear in any context on the kc22 platform, please be aware that:

• kc22 has no control over the content, privacy practices, or data handling of any third-party website or service.
• This Privacy Policy applies solely to the kc22 platform (kc22.io) and does not extend to any third-party websites, even those accessible via links from our platform.
• kc22 accepts no responsibility or liability for the privacy practices of third-party websites. We encourage you to read the privacy policy of any third-party website you visit.

kc22 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform services. When material changes are made, kc22 will:

• Update the effective date shown at the top of this Privacy Policy.
• Display a prominent notice on the kc22 platform informing players that the Privacy Policy has been updated.
• Where the changes significantly affect how we process your personal data, notify you directly via the contact details associated with your kc22 account.

Your continued use of the kc22 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you should cease using kc22 and may request account closure by contacting the support team. kc22 recommends reviewing this Privacy Policy periodically to stay informed of how your data is being handled.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way kc22 handles your personal data, please contact the kc22 data support team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly on the kc22 platform. Live chat is the fastest channel for privacy-related queries and data rights requests.
• Email: [email protected] (plain text — not a clickable link). Please mark your message clearly as a "Privacy / Data Rights Request". kc22 aims to respond to all privacy-related email queries within 4 hours during Bangladesh Standard Time (UTC+6) business hours.

kc22 is committed to handling all privacy queries and data rights requests promptly, professionally, and in full compliance with applicable data protection standards. If you are not satisfied with how kc22 has handled a privacy concern, you may escalate the matter in writing to the kc22 complaints team at the same email address, clearly marked as a formal privacy complaint.