kzx8 Privacy Policy

kzx8 collects personal data from you through several channels: directly when you register an account or make a transaction, automatically when you interact with our platform, and occasionally from third-party sources such as payment processors and identity verification partners. The categories of data we collect are described in detail below.

1.1 Registration Data

When you create a kzx8 account, we collect the following information:

• Full legal name as it appears on your government-issued identification document;
• Date of birth (used to verify that you are 18 years of age or older);
• Email address (used for account communications, transaction notifications, and promotional messages where consented);
• Mobile phone number (used for two-step verification and support communications);
• Residential address, including city, district, and postal code (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and all other Bangladesh districts are supported);
• Username and hashed password (we never store your password in plain text).

1.2 Identity Verification (KYC) Data

To comply with anti-money laundering obligations and confirm your age, kzx8 may request the following documents during the KYC process:

• A copy of a valid government-issued photo ID — National Identity Card (NID), passport, or driving licence;
• A recent utility bill, bank statement, or official correspondence as proof of residential address (issued within the previous three months);
• A selfie or live photograph taken during the verification process, used solely for identity matching against the submitted ID document.

KYC documents are stored securely and are accessible only to authorised kzx8 compliance personnel. They are retained for the period required by applicable legal obligations and then securely destroyed.

1.3 Financial Transaction Data

When you deposit or withdraw funds via bKash, Nagad, Rocket, Upay, or a partner bank, kzx8 records the following transaction data:

• Transaction reference numbers provided by the payment gateway;
• Transaction amounts in BDT (৳);
• Transaction timestamps (Bangladesh Standard Time, UTC+6);
• The mobile wallet number or bank account identifier used (stored in masked format — e.g., 01XXXXXXXX78);
• Deposit and withdrawal status (pending, completed, failed, reversed).

kzx8 does not store full payment card numbers. Where card payments are processed, card data is handled exclusively by PCI-DSS-certified payment processors and is not retained on kzx8 servers.

1.4 Gaming & Betting Activity Data

kzx8 automatically records data about your activity on the platform, including:

• Game sessions, wager amounts, game outcomes, and round identifiers for all RNG games, live casino games, and sports betting markets;
• Session start and end times;
• Bonus claims, wagering progress, and promotional participation history;
• Self-exclusion requests, deposit limits, and responsible gaming tool activations.

This data is used to resolve disputes, provide customer support, detect fraud, and generate the account history available to you in your kzx8 dashboard.

1.5 Technical & Device Data

When you access kzx8.app, our servers automatically log certain technical information:

• IP address (used for fraud detection, geolocation, and security monitoring);
• Browser type and version, operating system, and device type;
• Referring URL (the website or link you followed to arrive at kzx8.app);
• Pages visited, time spent per page, and clickstream data within the kzx8 platform;
• Cookie identifiers (see Section 3 for full cookie details).

kzx8 processes your personal data on the basis of one or more of the following lawful grounds: performance of the contract between you and kzx8 (i.e., providing the gaming and betting service you have registered for), compliance with legal obligations, legitimate interests pursued by kzx8, and — where required — your explicit consent. The table below sets out the primary purposes for which we use your data and the lawful basis for each.

Purpose	Data Used	Lawful Basis
Account creation & management	Registration data, device data	Contract performance
Age verification (18+ compliance)	Date of birth, KYC documents	Legal obligation
Identity verification (KYC/AML)	KYC documents, financial data	Legal obligation
Processing deposits & withdrawals	Financial transaction data	Contract performance
Delivering game & betting services	Gaming activity data, device data	Contract performance
Fraud detection & prevention	IP address, device data, transaction data	Legitimate interest
Responsible gaming monitoring	Gaming activity, self-exclusion records	Legal obligation + legitimate interest
Customer support	All account data, communications	Contract performance
Marketing communications (optional)	Email, phone number	Consent (withdrawable at any time)
Platform analytics & improvement	Anonymised/aggregated technical data	Legitimate interest
Legal compliance & dispute resolution	All relevant account records	Legal obligation

2.1 Marketing Communications

kzx8 will send you promotional emails and SMS notifications about bonuses, new games, BPL cricket betting promotions, Eid and Pohela Boishakh special offers, and other relevant updates only if you have explicitly opted in to receive marketing communications during registration or via your account settings. You may withdraw this consent at any time by clicking the unsubscribe link in any marketing email or by contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before withdrawal.

2.2 Automated Decision-Making

kzx8 uses automated systems to detect fraudulent activity, identify responsible gaming risk indicators, and enforce account restrictions such as deposit limits. Where an automated decision has a significant effect on your account (for example, triggering a temporary suspension), you have the right to request a manual review by a kzx8 compliance officer. To exercise this right, contact [email protected].

kzx8 uses cookies and similar tracking technologies on kzx8.app. A cookie is a small text file stored on your device by your browser when you visit a website. Cookies allow us to recognise your device on return visits, remember your preferences, maintain your login session, and gather analytical data about platform usage.

3.1 Categories of Cookies Used by kzx8

Cookie Type	Purpose	Duration
Strictly Necessary	Maintain your login session, load balancing, security tokens, CSRF protection. These cannot be disabled without breaking core site functionality.	Session
Functional	Remember your language and display preferences, restore game state after page reload, store responsible gaming tool settings.	Up to 12 months
Analytics	Collect anonymised data on page views, session durations, and navigation paths to help kzx8 improve the platform experience. No personally identifiable data is included in analytics cookies.	Up to 24 months
Affiliate Tracking	Record the affiliate or referral source that directed you to kzx8.app, used to calculate referral commissions. Contains no personal data beyond a random identifier.	30 days

3.2 Third-Party Cookies

Certain kzx8 features rely on third-party services that may set their own cookies. These include game providers such as Evolution Gaming, Pragmatic Play, Spribe, Ezugi, NetEnt, and Microgaming, whose game iframes may set session cookies for the duration of your game session. kzx8 does not control the cookie practices of these providers. Their cookies are governed by each provider's own privacy policy.

3.3 Managing Cookies

You may disable non-essential cookies via your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging in to kzx8 and accessing any account functionality. Instructions for managing cookies in the most widely used browsers are available on the respective browser's help portal. Accessing kzx8.app after reviewing this Privacy Policy constitutes your acknowledgement of our cookie practices.

kzx8 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the limited circumstances described in this section, and only to the minimum extent necessary to fulfil the relevant purpose.

4.1 Payment Processing Partners

To process your deposits and withdrawals, kzx8 shares your payment transaction data with the relevant payment service providers: bKash, Nagad, Rocket, Upay, and partner banks including Dutch-Bangla Bank, City Bank, BRAC Bank, Sonali Bank, and Islami Bank. These providers receive only the transaction information required to execute and reconcile your payment. They are contractually bound to use your data solely for payment processing purposes and may not use it for any other purpose.

4.2 Identity Verification Providers

kzx8 may share your KYC documents with licensed third-party identity verification services to assist in confirming your identity and age. These providers operate under strict data processing agreements and are required to process your data only on kzx8's instructions.

4.3 Game & Software Providers

kzx8's game content is supplied by third-party studios and technology providers including Evolution Gaming, Pragmatic Play, Spribe, Ezugi, NetEnt, and Microgaming. These providers may receive limited technical data (such as a pseudonymous session token) to facilitate your participation in their games. No personally identifiable data beyond what is required for game operation is shared with game providers.

4.4 Legal & Regulatory Disclosure

kzx8 may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other authorised public authorities where required to do so by applicable law, pursuant to a valid legal order, or where kzx8 reasonably believes disclosure is necessary to prevent serious harm, detect or prosecute criminal activity (including fraud and money laundering), or protect the legal rights of kzx8 or other players.

4.5 Business Transfers

In the event that kzx8 undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. kzx8 will notify registered account holders via email in advance of any such transfer that materially affects how their personal data is processed.

kzx8 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, to provide you with an active account, and to comply with our legal obligations. The retention periods below reflect both operational necessity and applicable regulatory requirements for offshore-licensed gambling platforms.

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years post-closure	AML legal obligation
KYC / identity documents	Duration of account + 5 years post-closure	AML / age verification legal obligation
Financial transaction records	7 years from transaction date	Financial record-keeping obligations
Gaming / betting activity logs	Duration of account + 3 years post-closure	Dispute resolution, responsible gaming
Customer support communications	3 years from date of communication	Dispute resolution
Marketing consent records	Duration of consent + 3 years	Legal proof of consent
Technical / server logs	12 months	Security monitoring
Self-exclusion records	Duration of exclusion + 5 years	Responsible gaming compliance

After the applicable retention period has expired, kzx8 will securely delete or anonymise your personal data so that it can no longer be associated with you as an identifiable individual. Anonymised, aggregated data derived from your activity may be retained indefinitely for statistical and analytical purposes, as it no longer constitutes personal data.

5.1 Early Deletion Requests

You may request deletion of your personal data before the end of the applicable retention period (see Section 7 — Your Privacy Rights). However, kzx8 may be unable to fully comply with such requests where retention is required by law, where the data is necessary to defend a legal claim, or where deleting the data would prevent kzx8 from fulfilling obligations it owes you (for example, processing a pending withdrawal).

kzx8 implements a layered security architecture designed to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. Our security measures include both technical controls and organisational policies, and are reviewed and updated on a regular basis.

6.1 Technical Security Measures

• TLS / SSL encryption: All data transmitted between your device and kzx8.app is encrypted using TLS 1.2 or TLS 1.3 (256-bit AES) to prevent interception during transit;
• Password hashing: User passwords are never stored in plain text. They are hashed using bcrypt with a per-user salt before storage;
• Two-step verification: kzx8 offers optional two-step verification (2SV) via SMS or authenticator app, which we strongly encourage all players to enable from their account security settings;
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. All access is logged and subject to audit;
• Firewall and intrusion detection: kzx8's infrastructure is protected by web application firewalls (WAF) and automated intrusion detection systems that monitor for suspicious activity 24/7;
• Database encryption at rest: Personal data stored in kzx8 databases is encrypted at rest using AES-256.

6.2 Organisational Security Measures

• All kzx8 staff and contractors with access to personal data are subject to confidentiality agreements and receive data protection training;
• kzx8 conducts periodic internal security audits and vulnerability assessments of its platform infrastructure;
• Third-party data processors used by kzx8 are required to demonstrate adequate security standards as a condition of their engagement.

6.3 Data Breach Response

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, kzx8 will notify affected account holders via their registered email address within 72 hours of becoming aware of the breach, where technically feasible. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the measures kzx8 has taken or intends to take to address it.

As a kzx8 player, you have a number of rights in respect of the personal data we hold about you. These rights are described below. To exercise any of these rights, please contact our Data Protection Officer at [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within 48 hours and respond substantively within 30 calendar days.

7.1 Identity Verification for Rights Requests

To protect your privacy and prevent unauthorised disclosure of personal data, kzx8 requires that all rights requests be verified before they are processed. You will be asked to confirm your identity by providing your registered email address, account username, and in some cases a piece of account-specific information (such as your last deposit amount or registered mobile number). kzx8 will not charge a fee for processing rights requests unless the request is manifestly unfounded or excessive in nature.

7.2 Response Timeframes

kzx8 will respond to all privacy rights requests within 30 calendar days of receiving a verified request. In the case of complex or high-volume requests, this period may be extended by a further 30 days, in which case kzx8 will notify you of the extension and the reason for it within the original 30-day window.

kzx8 has appointed a Data Protection Officer (DPO) to oversee compliance with this Privacy Policy and to serve as the primary point of contact for all data protection queries and requests. The DPO can be reached via the contact details below.

8.1 Data Controller

The data controller for personal data processed in connection with the kzx8 platform is the entity operating kzx8 under its offshore gaming licence. For all data protection correspondence, please direct your enquiry to:

• Email: [email protected] (subject line: "Data Protection Enquiry")
• Response time: Within 48 hours for general queries; within 30 calendar days for formal rights requests
• Support hours: 24 hours a day, 7 days a week, including all Bangladeshi public holidays

8.2 Policy Updates

kzx8 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the structure of our platform. Material changes — meaning changes that affect your rights or the way we process your data in a significant way — will be communicated to you via your registered email address at least 14 calendar days before the change takes effect. The "Last updated" date at the top of this policy will always reflect the date of the most recent revision.

Your continued use of kzx8.app after a Privacy Policy update has been communicated constitutes your acknowledgement of the revised policy. If you do not agree with the updated policy, you should cease using the platform and may request account closure in accordance with the procedure described in our Terms & Conditions.

8.3 Links to Other Pages

For a complete picture of your rights and obligations as a kzx8 player, we encourage you to read our related policy documents:

• Terms & Conditions — governing the contractual relationship between you and kzx8;
• Responsible Gaming — tools and resources for safe, controlled play, including self-exclusion, deposit limits, and support contacts;
• FAQ — answers to common questions about accounts, payments, and platform rules;
• About Us — background on kzx8's mission, values, and service offering.