Privacy Policy — How kl666 Protects Your Personal Data

kl666 collects personal information from players in order to provide a safe, reliable, and personalised online casino and sports betting experience. We collect information through several channels: directly from you when you register or interact with the platform, automatically through your use of the site, and from third-party service providers where necessary for identity verification and payment processing.

Information you provide directly. When you create a kl666 account, use platform features, or contact support, we may collect the following categories of personal data:

Information collected automatically. When you visit kl666, our systems automatically collect certain technical information about your device and browsing behaviour. This includes your IP address, browser type and version, operating system, referring URL, pages viewed, time spent on pages, and clickstream data. This information is collected using cookies and similar technologies described in Section 4 of this Policy.

Information from third parties. kl666 may receive information about you from third-party service providers, including payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard), identity verification services used during KYC checks, fraud detection and anti-money-laundering screening services, and game providers such as Pragmatic Play, Evolution Gaming, and Spribe. Information received from these sources is used only for the purposes described in this Privacy Policy and is handled with the same level of care as information you provide directly.

kl666 uses the personal data we collect for specific, legitimate purposes directly connected to the operation of our platform. We do not use your data in ways that are incompatible with the purposes disclosed at the time of collection. The following table summarises the purposes for which we process your personal information and the legal basis for each.

Automated decision-making. kl666 uses automated systems to screen new accounts and ongoing transactions for fraud indicators, responsible gaming risk signals, and anti-money-laundering red flags. Where an automated decision significantly affects your account (for example, an account suspension based on fraud scoring), you have the right to request a manual review by a kl666 compliance team member. To request a manual review, contact [email protected] with your account username and a brief description of the decision you wish to contest.

Marketing opt-out. If you have previously consented to receive marketing communications from kl666 and wish to withdraw that consent, you may do so at any time by emailing [email protected] with the subject line "Marketing Opt-Out". We will action your request within 5 business days. Opting out of marketing communications does not affect transactional notifications such as deposit confirmations and withdrawal updates, which are part of our contractual obligation to you.

kl666 does not sell, rent, or trade your personal information to third parties for their own commercial purposes. We share your personal data only in the limited circumstances described in this section, and always with appropriate safeguards in place.

Service providers and data processors. kl666 works with a number of trusted third-party service providers who process personal data on our behalf in order to deliver our platform. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive transaction data necessary to process your deposits and withdrawals. Each of these providers operates under their own privacy policies and regulatory frameworks.
• Identity verification services: Third-party KYC providers receive copies of identity documents and personal data necessary to verify your age and identity as required by our compliance procedures.
• Game software providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive game session data (player ID, bet amounts, game outcomes) to deliver their games on the kl666 platform and to ensure fair play.
• Fraud and security analytics: Security and fraud-screening platforms receive behavioural and transactional data to identify and prevent fraudulent activity.
• Customer support tools: Our support ticketing and live chat systems process the content of your communications with the kl666 support team.

All third-party service providers are contractually required to process personal data only on kl666's documented instructions, to maintain appropriate security measures, and not to use your data for their own independent purposes.

Legal disclosure. kl666 may disclose personal data to law enforcement agencies, regulators, or other public authorities where required to do so by applicable law, court order, or lawful regulatory request. We will, where legally permitted, notify affected players of any such disclosure request before complying with it.

Business transfers. In the event that kl666 undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you via email and a prominent notice on the kl666 platform before your personal data becomes subject to a materially different privacy policy as a result of any such transfer.

kl666 uses cookies and similar tracking technologies on our website to deliver a functional, personalised, and secure platform experience. This section explains what cookies we use, why we use them, and how you can manage your cookie preferences.

What are cookies? Cookies are small text files placed on your device (computer, tablet, or smartphone) when you visit a website. They allow the website to remember your actions and preferences — such as your login session and language settings — over a period of time, so you do not have to re-enter these details every time you visit the site or navigate between pages.

Types of cookies kl666 uses.

Managing your cookie preferences. You can control and manage cookies in your web browser settings. Most modern browsers allow you to view, delete, and block cookies from specific websites. Please note that disabling strictly necessary cookies will impair the functionality of the kl666 platform — for example, you will not be able to maintain a login session without session cookies enabled.

For guidance on managing cookies in the most widely used browsers, refer to the help documentation for your browser (for example, Google Chrome, Mozilla Firefox, Safari, or Microsoft Edge). Instructions vary by browser version.

Third-party cookies. Some of kl666's game providers and analytics partners may place their own cookies on your device when you access their games or features within the kl666 platform. These third-party cookies are subject to the respective privacy policies of those providers. kl666 does not control third-party cookies and is not responsible for their content or behaviour.

kl666 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including meeting legal, accounting, and reporting obligations. The following outlines our standard data retention periods by category.

• Account and identity data: Retained for the lifetime of your active kl666 account, and for a minimum of 5 years following account closure. This retention period is required to comply with anti-money-laundering obligations and to resolve any post-closure disputes.
• KYC documents: Retained for a minimum of 5 years from the date of verification or from the date of account closure, whichever is later. Documents are stored in encrypted form with access restricted to the compliance team.
• Financial transaction records: Retained for a minimum of 5 years from the transaction date to satisfy financial record-keeping requirements.
• Gaming activity logs: Retained for a minimum of 3 years following the date of the gaming session to support dispute resolution, responsible gaming monitoring, and fair play auditing.
• Customer support communications: Retained for 2 years from the date of the last interaction on a support ticket. Correspondence related to disputes or compliance matters may be retained longer.
• Analytics and usage data: Aggregated and anonymised after 12 months, at which point it can no longer be linked to any individual player account.

Data stored in Bangladesh Standard Time (BST, UTC+6). All timestamps on kl666 — including account creation dates, transaction timestamps, and session logs — are recorded in Bangladesh Standard Time (UTC+6) to ensure consistency for our Bangladeshi player base.

Account closure and data deletion. If you request closure of your kl666 account, your actively accessible account data will be deactivated immediately. However, kl666 is required by its compliance obligations to retain certain categories of data (identity data, KYC documents, financial records) for the minimum retention periods described above, even after account closure. Following the expiry of the applicable retention period, your data will be securely deleted or permanently anonymised.

kl666 respects your rights over your personal data. The following rights are available to all kl666 players in relation to the personal data we hold about them. To exercise any of these rights, contact our support team at [email protected] with the subject line "Privacy Rights Request" and your registered kl666 username.

• Right of access: You have the right to request a copy of the personal data kl666 holds about you. We will provide this information in a structured, commonly used, and machine-readable format within 30 days of a valid request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You can update basic account details (email address, phone number) directly in your kl666 account settings; for other corrections, contact our support team.
• Right to erasure ("right to be forgotten"): You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (for consent-based processing), or where the data has been unlawfully processed. Please note that this right is subject to our legal retention obligations — kl666 cannot delete data that we are required by law to retain.
• Right to restrict processing: You have the right to request that kl666 restricts the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or object to processing based on legitimate interests, pending our response to that objection.
• Right to data portability: Where processing is based on your consent or the performance of a contract, you have the right to receive your personal data in a structured, machine-readable format and to request that it be transmitted to another service provider where technically feasible.
• Right to object: You have the right to object at any time to the processing of your personal data for direct marketing purposes, including profiling related to direct marketing. You also have the right to object to processing based on legitimate interests, though kl666 may continue such processing if we can demonstrate compelling legitimate grounds that override your interests.
• Rights related to automated decision-making: Where kl666 makes a decision about you based solely on automated processing (including profiling) that has a significant effect on your account, you have the right to request human review of that decision. See Section 2 for details on how to request a manual review.

kl666 will respond to all valid privacy rights requests within 30 days. In complex cases we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day window. We will not charge a fee for handling privacy rights requests unless a request is manifestly unfounded or excessive, in which case we may charge a reasonable administrative fee.

kl666 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect your information against unauthorised access, accidental loss, alteration, disclosure, or destruction.

Technical security measures. Our platform employs the following security controls at all times:

• SSL/TLS encryption: All data transmitted between your browser and kl666 is encrypted using industry-standard SSL/TLS protocols. Look for the padlock icon in your browser's address bar when using kl666.
• Password hashing: Player passwords are never stored in plain text. They are processed using a strong one-way cryptographic hashing algorithm before storage, meaning that even internal kl666 staff cannot read your password.
• Access controls: Access to personal data within kl666's systems is restricted on a need-to-know basis. Only authorised personnel whose job roles require access to specific data categories are granted it, and all access is logged and audited.
• KYC document encryption: Identity documents submitted during KYC verification are stored in encrypted form on secured servers with restricted access limited to the compliance team.
• Fraud monitoring: kl666 operates real-time transaction monitoring and account behaviour analysis to detect and respond to suspicious activity promptly.

Organisational security measures. All kl666 staff and contractors who handle personal data are subject to confidentiality obligations and receive regular training on data protection responsibilities. Access to production systems containing personal data requires multi-factor authentication.

Data breach response. In the event of a personal data breach that poses a risk to your rights and freedoms, kl666 will notify affected players without undue delay — and in any case within 72 hours of becoming aware of the breach — providing details of the nature of the breach, the categories of data affected, the likely consequences, and the measures taken to address the breach and mitigate its effects. Notification will be sent to the email address registered on your kl666 account.

Your role in security. The security of your kl666 account is a shared responsibility. You are required to keep your login credentials confidential, use a strong and unique password, and notify kl666 immediately if you suspect unauthorised access to your account. kl666 will never ask you to disclose your password in an email, live chat, or phone call.

kl666 may update this Privacy Policy from time to time to reflect changes in our data processing practices, new platform features, changes in applicable law, or feedback from our players. The most current version of this Privacy Policy will always be available at kl666.bet/privacy-policy.

When we make material changes to this Privacy Policy — changes that significantly affect how we collect, use, or share your personal data — we will notify you by email to your registered kl666 address and by displaying a prominent notice on the kl666 platform at least 14 days before the changes take effect. For minor or clarificatory changes that do not materially affect your rights, we may update this Policy without advance notice, although the "Effective Date" at the top of this document will always reflect the date of the most recent revision.

Your continued use of the kl666 platform after any revised Privacy Policy takes effect constitutes your acceptance of the updated Policy. If you do not agree with any material change to this Privacy Policy, you should cease using the kl666 platform and contact [email protected] to request account closure and to exercise your data rights under Section 6 of this Policy.

Version history. kl666 maintains an internal version log of all previous Privacy Policy documents. If you require a copy of a previous version of this Privacy Policy — for example, for the purpose of a legal dispute or regulatory enquiry — please contact [email protected] with your request, and we will provide the relevant version to the extent permitted by our retention schedules.