kxr8 Privacy Policy

1 Definitions

In this Privacy Policy, the following definitions apply unless the context expressly indicates otherwise:

• "kxr8", "we", "us", "our" — the kxr8 online betting and casino platform accessible at kxr8.io and all associated subdomains and mobile interfaces.
• "Platform" — the kxr8 website, mobile web interface, and all products and services offered thereon, including the sportsbook, live casino, slots, and any other gaming verticals.
• "User", "you", "your" — any individual who accesses, browses, registers on, or uses the kxr8 Platform in any capacity.
• "Personal Data" — any information relating to an identified or identifiable natural person, including name, date of birth, address, email address, phone number, national identity number, payment details, IP address, device identifiers, and betting or gaming history.
• "Processing" — any operation or set of operations performed on Personal Data, including collection, recording, storage, alteration, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data. For users of the kxr8 Platform, kxr8 acts as the Data Controller.
• "Data Processor" — a third party that processes Personal Data on behalf of and under the instructions of the Data Controller.
• "KYC" — Know Your Customer identity and age verification procedures required to activate and maintain a real-money kxr8 Account.
• "Cookies" — small text files placed on your device by the kxr8 Platform to support site functionality, session management, analytics, and personalisation.
• "Bangladesh Standard Time (BST)" — UTC+6, the time zone used for all operational and record-keeping references on the Platform.

2 Data Controller

kxr8 acts as the Data Controller in respect of all Personal Data collected from users of the kxr8 Platform. As Data Controller, kxr8 determines the purposes for which Personal Data is processed and the means by which that processing is carried out. kxr8 takes its responsibilities as Data Controller seriously and has implemented appropriate technical and organisational measures to ensure that Personal Data is processed lawfully, fairly, and transparently.

Where kxr8 engages third-party service providers to process Personal Data on its behalf — for example, payment processors, KYC verification partners, or cloud hosting providers — those third parties operate as Data Processors under written agreements that restrict their use of your data to the specific purposes authorised by kxr8.

3 Data We Collect

3.1 Identity and Contact Data

When you register a kxr8 Account, we collect your full legal name, date of birth, gender, residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or other Bangladesh locations), email address, and mobile phone number. This information is required to create your account and to perform KYC identity verification.

3.2 Identity Verification Documents

As part of the mandatory KYC process, we collect copies of government-issued identity documents including your Bangladesh National Identity Card (NID), passport, or driving licence, as well as supporting documents such as utility bills or bank statements as proof of address. We may also collect a photograph of you holding your identity document for enhanced verification purposes.

3.3 Financial Data

We collect information relating to your deposit and withdrawal transactions, including the payment method used (bKash, Nagad, Rocket, Upay, or bank transfer), transaction amounts in Bangladesh Taka (৳), transaction dates and reference numbers, and your mobile financial service account identifier or bank account details. We do not store full debit or credit card numbers; payment card processing is handled entirely by our PCI-DSS certified payment partners.

3.4 Account Activity Data

We collect a record of all betting and gaming activity conducted through your kxr8 Account, including sports wagers placed on cricket (BPL, T20, IPL, Bangladesh Tigers), football, and other markets; casino game sessions; slot play history; bonus credits and wagering progress; and login history including timestamps and device information.

3.5 Technical and Device Data

When you access the kxr8 Platform, we automatically collect certain technical data including your IP address, browser type and version, operating system, device type and model, screen resolution, referring URL, pages visited within the Platform, session duration, and general geographic location derived from your IP address. This data is used for security, fraud prevention, and Platform performance optimisation purposes.

3.6 Communications Data

We retain records of communications between you and the kxr8 support team, including live chat transcripts, email correspondence, and any feedback or complaint submissions. These records are used for quality assurance, dispute resolution, and regulatory compliance purposes.

4 How We Collect Data

4.1 Directly From You

The majority of Personal Data kxr8 processes is provided directly by you during Account registration, KYC submission, payment transactions, promotional claims, and support interactions. You are responsible for ensuring that all personal data you provide to kxr8 is accurate, complete, and current.

4.2 Automatically Through Platform Use

kxr8 collects technical and device data automatically when you access or use the Platform, through server logs, session tracking technology, and browser cookies. This automatic collection begins from the moment you first visit the kxr8 website and continues throughout each session.

4.3 From Third-Party Verification Partners

Where kxr8 uses third-party KYC and identity verification service providers to cross-check the documents you submit, those providers may return verification status results and risk signals to kxr8. kxr8 does not receive raw personal data from such providers beyond what is necessary to confirm the outcome of the verification check.

4.4 From Payment Processors

When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a Bangladesh bank transfer, our payment processing partners confirm the transaction status, transaction reference, and the payment account identifier to kxr8 for reconciliation and fraud prevention purposes.

5 Legal Basis for Processing

kxr8 processes Personal Data on the following legal bases, depending on the specific purpose of the processing activity:

• Contractual Necessity: Processing is necessary to perform the contract between kxr8 and you — specifically, to operate your Account, accept wagers, process deposits and withdrawals, and deliver casino game sessions.
• Legal Obligation: Processing is required to comply with applicable legal obligations, including KYC identity verification, anti-money laundering (AML) record-keeping, responsible gaming monitoring, and responses to lawful requests from relevant authorities.
• Legitimate Interests: Processing is necessary for kxr8's legitimate interests in operating a safe, secure, and commercially viable platform — including fraud prevention, security monitoring, Platform analytics, and quality assurance of customer support interactions — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where kxr8 sends you direct marketing communications, personalised promotional offers, or non-essential analytical cookies, we rely on your prior consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6 How We Use Your Data

kxr8 uses the Personal Data it collects for the following specific purposes:

• Creating and managing your kxr8 Account and verifying your identity through the KYC process
• Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and Bangladesh bank transfer
• Delivering the betting and casino gaming service, including settling wagers, crediting winnings, and awarding bonuses
• Sending transactional communications such as deposit confirmations, withdrawal notifications, and account security alerts
• Monitoring account activity for responsible gaming purposes, including detecting patterns that may indicate problem gambling behaviour among Bangladesh account holders
• Preventing, detecting, and investigating fraud, money laundering, multi-accounting, and other forms of Platform abuse
• Maintaining the security and technical integrity of the Platform, including access log monitoring and intrusion detection
• Analysing aggregated, anonymised usage data to improve the Platform experience and optimise game offerings
• Sending promotional communications and personalised bonus offers where you have given consent to receive such communications
• Responding to support enquiries, resolving complaints, and maintaining records of dispute outcomes
• Complying with applicable legal and regulatory obligations

7 Data Sharing and Disclosure

7.1 Service Providers and Data Processors

kxr8 shares Personal Data with a limited number of carefully selected third-party service providers who process data on our behalf and under our written instructions. These include KYC and identity verification partners, payment processing partners (including mobile financial service providers operating in Bangladesh), cloud infrastructure and hosting providers, certified game studio partners (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi), customer support platform providers, and fraud and security analytics providers. All such third parties are contractually required to handle your Personal Data in accordance with applicable data protection law and to implement appropriate security measures.

7.2 Legal Disclosures

kxr8 may disclose Personal Data to relevant authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or legal process. kxr8 will endeavour to notify you of any such compelled disclosure where legally permitted to do so. kxr8 also cooperates with Bangladesh authorities investigating match-fixing, fraud, or other criminal activity where a kxr8 account may be implicated.

7.3 Business Transfers

In the event of a merger, acquisition, asset sale, or corporate restructuring involving kxr8, Personal Data held about account holders may be transferred to the acquiring or successor entity as part of that transaction. kxr8 will notify affected users of any such transfer via the email address registered to their Account prior to the transfer taking effect, and will ensure that the receiving entity is bound by obligations no less protective than those in this Privacy Policy.

8 International Data Transfers

The kxr8 Platform serves users located in Bangladesh. Some of the third-party service providers engaged by kxr8 — including cloud infrastructure providers and certain game studio partners — may process or store data in jurisdictions outside Bangladesh. Where such international transfers occur, kxr8 ensures that appropriate safeguards are in place to protect your Personal Data to a standard equivalent to that required under applicable Bangladesh data protection principles.

Safeguards used by kxr8 for international data transfers include contractual data processing agreements incorporating standard data protection clauses, transfers only to jurisdictions that maintain recognised data protection standards, and technical measures such as encryption in transit and at rest to protect data regardless of where it is stored or processed.

9 Data Retention

kxr8 retains Personal Data only for as long as it is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

At the expiry of applicable retention periods, Personal Data is securely deleted or anonymised in a manner that prevents reconstruction of the original data. Anonymised and aggregated data — which cannot be used to identify any individual — may be retained indefinitely for statistical and Platform improvement purposes.

10 Cookies and Tracking

10.1 What Cookies We Use

The kxr8 Platform uses cookies and similar tracking technologies to operate core Platform functionality, maintain your login session, remember your language and display preferences, analyse how users navigate the Platform, and — where you have consented — to personalise promotional content displayed to you during your session. The following categories of cookies are in use on the kxr8 Platform:

• Strictly Necessary Cookies: Required for the Platform to function correctly, including session authentication and security tokens. These cannot be disabled without breaking core functionality.
• Functional Cookies: Retain your account preferences and session settings between visits, such as your most recently viewed game category or preferred payment method.
• Analytics Cookies: Collect aggregated, anonymised data about how users interact with the Platform to help kxr8 improve navigation, performance, and content placement. Used only where you have provided consent.
• Marketing and Personalisation Cookies: Used to deliver personalised promotional offers relevant to your betting and gaming history on the Platform. Used only where you have provided explicit consent.

10.2 Managing Your Cookie Preferences

You may manage your cookie preferences at any time through the cookie settings panel accessible from the Platform. Disabling non-essential cookies will not prevent you from using the Platform but may affect the personalisation and promotional features available to you. You may also manage cookies through your browser settings, though browser-level changes apply globally and are not specific to the kxr8 Platform.

11 Your Rights

As a kxr8 account holder, you hold the following rights in relation to your Personal Data. To exercise any of these rights, please contact the kxr8 Data Protection team via the support email address shown in the footer of this page. kxr8 will respond to all rights requests within 30 days of receipt.

• Right of Access: You have the right to request confirmation of whether kxr8 processes Personal Data about you, and if so, to receive a copy of that data along with information about how it is processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete Personal Data held about you. For account details, many fields can be updated directly within Account Settings.
• Right to Erasure: You have the right to request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis for processing applies. This right is subject to kxr8's legal retention obligations.
• Right to Restriction of Processing: You have the right to request that kxr8 restricts the processing of your Personal Data in certain circumstances — for example, while the accuracy of data is under dispute, or where you have objected to processing based on legitimate interests.
• Right to Data Portability: You have the right to receive Personal Data that you provided to kxr8 in a structured, commonly used, machine-readable format, and to transmit that data to another controller, where the processing is based on consent or contractual necessity.
• Right to Object: You have the right to object at any time to processing of your Personal Data based on kxr8's legitimate interests. kxr8 will cease the relevant processing unless it can demonstrate compelling legitimate grounds that override your interests. You have an absolute right to object to processing of your data for direct marketing purposes, which will take effect immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

12 Children and Minors

If kxr8 discovers or reasonably suspects that Personal Data has been collected from a person under the age of 21, kxr8 will immediately suspend the relevant Account, delete the data concerned, and handle any funds held in that Account in accordance with its responsible gaming obligations. Parents and guardians who believe a minor may have accessed the kxr8 Platform are encouraged to contact kxr8 support immediately via live chat or the support email address shown in the footer of this page.

13 Security Measures

kxr8 has implemented a comprehensive set of technical and organisational security measures designed to protect Personal Data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between user devices and kxr8 servers
• Encryption at rest for all Personal Data stored on kxr8 infrastructure, including identity documents and financial records
• Role-based access controls ensuring that kxr8 employees can only access Personal Data that is necessary for their specific job function
• Regular independent penetration testing and security audits of the kxr8 Platform and its underlying infrastructure
• Two-factor authentication (2FA) availability for all kxr8 account holders via SMS to registered Bangladesh mobile numbers
• Continuous monitoring of server and application logs for anomalous access patterns or security events
• Incident response procedures with defined escalation timelines for data breach events, including notification to affected users without undue delay

Notwithstanding the above, no internet-based platform can guarantee absolute security. kxr8 strongly recommends that all users enable 2FA on their accounts, use a unique strong password for their kxr8 account, and contact support immediately if they suspect any unauthorised access to their account.

14 Third-Party Links

The kxr8 Platform does not contain links to external third-party websites. All navigation within the Platform is confined to the kxr8 domain and its authorised subdomains. In the event that any third-party content is displayed within the Platform — for example, game interfaces provided by certified studio partners such as Pragmatic Play, Evolution Gaming, or NetEnt — those game environments are governed by the privacy practices of the respective studio. kxr8 recommends that users review the privacy policies of any third-party game providers whose content they access through the Platform. kxr8 accepts no responsibility for the data practices of third-party game studios operating within their own sandboxed game environments.

15 Amendments to This Policy

kxr8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, Platform functionality, or our data processing practices. When material changes are made to this Privacy Policy, kxr8 will notify registered account holders by email to the address associated with their Account, and will update the "Last Updated" date displayed at the top of this document. The revised Privacy Policy will take effect 14 days after the notification email is sent, unless a shorter notice period is required by law.

Your continued use of the kxr8 Platform after the effective date of any amended Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any amendment, you should cease using the Platform and may request closure of your Account by contacting kxr8 support. All Personal Data retained after account closure will continue to be handled in accordance with the version of this Privacy Policy that was in effect at the time of collection, subject to any mandatory legal requirements.

16 Contact and Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the way kxr8 handles your Personal Data, please contact the kxr8 Data Protection team. Our support team is available to assist account holders across Bangladesh including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.

Contact details for data protection enquiries:

• Email: [email protected] (plain text — not a clickable link)
• Response time: kxr8 aims to respond to all data protection enquiries within 5 business days, and to rights requests within 30 calendar days, in both cases measured in Bangladesh Standard Time (BST, UTC+6).

If you are not satisfied with kxr8's response to a data protection concern, you have the right to escalate your complaint to the relevant supervisory or consumer protection authority in your jurisdiction. kxr8 will cooperate fully with any such authority in the investigation of a complaint.