kg990 Privacy Policy — How We Handle Your Data

kg990 is committed to protecting the privacy and security of every player who uses our platform. We understand that personal data is sensitive, and we treat it with the care and discretion it deserves. This Policy has been written to be clear and accessible so that players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and all other regions of Bangladesh can understand exactly how their information is managed.

This Policy applies to all personal data processed through the kg990 platform, including data collected during account registration, KYC (Know Your Customer) verification, deposits and withdrawals, gameplay, customer support interactions, and any marketing communications you have opted into receiving.

kg990 collects personal data through a number of channels during the course of providing our services. The categories of data we collect are as follows:

We do not collect any special-category sensitive data (such as biometric data, health information, religious beliefs, or political opinions) as part of our standard player onboarding or account management processes.

kg990 uses the personal data we collect for the following specific purposes, each of which is tied to a clear and legitimate operational need:

• Account Management: To create, verify, and maintain your kg990 player account, including processing your initial registration, enabling login, and managing account settings and preferences.
• Identity Verification (KYC): To confirm that you meet our eligibility requirements — including the 21+ age requirement — and to comply with anti-money-laundering (AML) obligations by verifying the authenticity of the documents you provide.
• Payment Processing: To process deposits made via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to execute withdrawal requests back to your registered payment method.
• Fraud Prevention & Security: To monitor account activity for signs of fraud, abuse, multi-accounting, money laundering, or any conduct prohibited under our Terms & Conditions. Our automated systems may flag suspicious patterns for human review.
• Customer Support: To respond to your enquiries, process complaints, and provide assistance through our 24/7 support team (BST, UTC+6).
• Responsible Gaming: To administer deposit limits, cooling-off periods, self-exclusion requests, and session reminders that you configure within your account dashboard.
• Promotional Communications: To send you information about kg990 promotions, daily bonuses, BPL and IPL-related offers, and seasonal campaigns — but only if you have explicitly opted in to receive marketing communications.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the kg990 platform, optimise game performance, and enhance the overall player experience.
• Legal Compliance: To fulfil obligations imposed on kg990 under applicable laws, including record-keeping requirements and obligations to respond to lawful requests from competent authorities.

kg990 processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing is required to perform the contract between you and kg990 — specifically, to operate your account, process deposits and withdrawals, and make games available to you as a registered player.
• Legal Obligation: Processing is required to comply with applicable legal requirements, including KYC and AML obligations, age verification, and record-keeping requirements mandated by law.
• Legitimate Interests: Processing is carried out for kg990's legitimate business interests — such as fraud prevention, platform security, and aggregate analytics — provided those interests are not overridden by your own privacy rights.
• Consent: Processing is based on your freely given, specific, and informed consent — for example, where you have opted in to receive marketing emails or push notifications from kg990. You may withdraw consent at any time by contacting [email protected].

kg990 does not sell, rent, or transfer your personal data to third parties for their own commercial purposes. We share data only in the following limited circumstances, each of which is necessary to deliver our services or to comply with legal obligations:

• Payment Processors: We share the minimum necessary financial data with bKash, Nagad, Rocket, Upay, Visa, and Mastercard to process your deposit and withdrawal transactions. These processors are bound by their own data protection obligations.
• Game Providers: We share a session token and limited technical identifiers with our Game Providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) to launch games within your authenticated session. No full identity data is passed to game providers.
• KYC & Identity Verification Partners: We may use a third-party identity verification service to assist with document review during KYC checks. Any such partner is contractually required to process data only for the purpose of verification and to delete documents once the check is complete.
• Fraud Detection Services: Aggregated technical data (IP addresses, device fingerprints) may be shared with fraud detection partners to identify patterns of abuse. No full personal profiles are transferred for this purpose.
• Legal and Regulatory Authorities: We will disclose personal data to competent authorities if required to do so by a lawful court order, regulatory instruction, or equivalent legal process. We will notify you of such a request to the extent permitted by law.
• Business Successors: In the event of a merger, acquisition, or sale of substantially all of kg990's assets, player data may be transferred to the successor entity, subject to the same or stronger privacy protections as set out in this Policy.

kg990 uses cookies and similar tracking technologies to operate the platform, maintain your login session, detect fraud, and gather aggregate analytics data. The following cookie categories are used on the kg990 platform:

kg990 does not deploy advertising cookies, retargeting pixels, or cross-site tracking technologies. You may disable non-essential cookies through your browser settings; however, disabling strictly necessary cookies will prevent you from logging in to your kg990 account.

kg990 retains personal data only for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable law. Our standard retention schedule is as follows:

• Active Account Data: Retained for the full duration of the account relationship and for a minimum of five years following account closure, in order to meet anti-money-laundering record-keeping obligations.
• KYC Documents: Retained for five years following the completion of the verification check, or for the duration of the account relationship if longer. Documents are stored in encrypted form and access is restricted to authorised compliance personnel.
• Transaction Records: Retained for a minimum of five years following the date of each transaction, in accordance with standard financial record-keeping requirements.
• Customer Support Records: Retained for three years from the date of the most recent support interaction, to allow for complaint review and dispute resolution.
• Marketing Consent Records: Retained from the date of opt-in until the date of opt-out plus one year, to maintain an audit trail of consent.
• Technical / Log Data: Retained for up to 12 months for security monitoring purposes, then deleted or anonymised.

When personal data is no longer required, it is securely deleted or irreversibly anonymised in accordance with industry-standard data destruction procedures.

kg990 implements a layered security architecture to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Our technical and organisational security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and kg990 servers.
• AES-256 encryption for sensitive data stored at rest, including identity documents and financial records.
• Role-based access controls ensuring that only authorised kg990 personnel can access player personal data, and only to the extent required for their specific job function.
• Multi-factor authentication requirements for all kg990 internal systems that handle player data.
• Continuous server-side monitoring for intrusion attempts, anomalous access patterns, and data exfiltration signals.
• Regular penetration testing and vulnerability assessments of the kg990 platform by qualified third-party security professionals.
• Documented incident response procedures that require notification of affected players in the event of a data breach that poses a risk to their rights or interests.

As a player on the kg990 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please submit a written request to [email protected] from the email address registered to your kg990 account:

• Right of Access: You have the right to request a copy of all personal data that kg990 holds about you. We will provide this in a structured, commonly used, machine-readable format within a reasonable timeframe.
• Right to Rectification: You have the right to request correction of any personal data we hold that is inaccurate or incomplete. For account details, many fields can be updated directly from your account settings dashboard.
• Right to Erasure ("Right to be Forgotten"): You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected. Note that this right is subject to overriding legal retention obligations (see Section 7).
• Right to Restrict Processing: You have the right to request that we pause the processing of your personal data in certain circumstances, for example while a rectification request is being reviewed.
• Right to Data Portability: You have the right to receive the personal data you provided to kg990 in a structured, machine-readable format, and to have that data transferred to another data controller where technically feasible.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without penalty.
• Right to Object: You have the right to object to processing of your personal data that is carried out on the basis of kg990's legitimate interests, where you have grounds relating to your particular situation.

The kg990 platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from any individual under the age of 21. Our registration process includes an age declaration step, and kg990 reserves the right to request government-issued proof of age from any player at any time.

If kg990 becomes aware that personal data has been collected from a player who is under 21 years of age, we will immediately suspend the relevant account, void any associated transactions, and permanently delete all personal data relating to that individual from our systems. Any funds deposited by an underage player will be returned to the original payment source.

If you believe that kg990 has inadvertently collected data from a minor, please contact us immediately at [email protected] so that we can take appropriate action without delay.

kg990 primarily serves players located in Bangladesh and processes the majority of player data within our core server infrastructure. In certain operational contexts — for example, where a Game Provider's platform servers are located outside Bangladesh — limited technical data (such as session tokens) may be transferred internationally.

Where any international transfer of personal data occurs, kg990 ensures that appropriate safeguards are in place to maintain a level of data protection equivalent to the protections provided under this Policy. These safeguards may include contractual clauses in our agreements with Game Providers and payment partners that require them to handle data in accordance with applicable privacy standards.

kg990 does not transfer full personal identity data or financial data to servers located outside our primary operational jurisdiction except where strictly required to process a transaction requested by the player (e.g., processing a Visa card payment through an international card network).

The kg990 website does not contain links to third-party websites for commercial or advertising purposes. All navigation links on the platform point to internal kg990 pages. This Privacy Policy applies solely to data processed by kg990 in connection with the kg990 platform and services.

In the event that any game launched from within the kg990 platform opens a separate interface operated by a Game Provider, please be aware that the Game Provider's own privacy policy will govern the processing of any data collected directly within that interface. kg990 is not responsible for the data practices of third-party Game Providers beyond the data-sharing safeguards described in Section 5 of this Policy.

kg990 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. The "Last Updated" date at the top of this document will be revised whenever the Policy is modified.

Where changes are material — for example, a change in the categories of data we collect, a new type of data sharing, or a change in retention periods — kg990 will notify registered players via email to their registered address, or via an in-platform notification, prior to the updated Policy taking effect.

Your continued use of the kg990 platform following the publication of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to any material change, you must cease using the platform and contact [email protected] to close your account and request deletion of your data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the kg990 privacy team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Response Time: Our support team is available 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6). We aim to acknowledge all privacy-related enquiries within 24 hours and to provide a full response within 30 calendar days.
• Subject Line: Please include "Privacy Request" in the subject line of your email so that our team can route your enquiry to the appropriate personnel without delay.
• Verification: To protect your privacy, we may ask you to verify your identity before processing any request relating to your personal data. This typically involves confirming details associated with your registered kg990 account.

This Privacy Policy was last reviewed and approved on 1 January 2026 and supersedes all previous versions. The English-language version of this Policy is the sole authoritative version. kg990 thanks you for taking the time to read and understand how we handle your personal data.