kxu8 Privacy Policy

1 Information We Collect

kxu8 collects personal information from players in order to operate the Platform securely, process financial transactions, comply with applicable legal obligations, and deliver a personalised gaming experience. The categories of information we collect are described below.

Information You Provide Directly

When you register an account, complete identity verification (KYC), make a deposit or withdrawal, or contact our support team, you provide us with personal data that may include:

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify that you meet the 18+ age requirement).
• Residential address, city, and postal code within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi).
• Mobile phone number associated with your bKash, Nagad, Rocket, or Upay account.
• Email address used for account communications and security alerts.
• Copies of identity documents submitted for KYC verification (National Identity Card, passport, or driving licence).
• Payment account identifiers (e.g., bKash or Nagad mobile wallet numbers) used for deposits and withdrawals.
• Any communications you send us via email, live chat, or support tickets, including the content of those messages.

Information Collected Automatically

When you access and use kxu8.app, certain technical information is collected automatically by our systems. This includes:

• IP address and approximate geolocation derived from it.
• Device type, operating system version, and browser type and version.
• Pages visited on kxu8.app, time and duration of visits, and click-path data.
• Game sessions initiated, bets placed, and wager amounts (in BDT).
• Session start and end timestamps, including idle time and session duration.
• Referral source (the URL or channel through which you arrived at kxu8.app).

Information from Third Parties

In limited circumstances, kxu8 may receive information about you from third-party sources. This includes identity verification data returned by our KYC service providers, fraud and AML risk signals from payment processors, and aggregated analytics data from platform performance tools. kxu8 does not purchase personal data from data brokers or list providers.

2 How We Use Your Information

kxu8 uses the personal data it collects for clearly defined purposes. We do not use your data for purposes that are incompatible with the reasons for which it was originally collected. The principal purposes for which kxu8 processes personal data are as follows:

kxu8 will not use your personal data for automated decision-making that produces legally significant effects without providing you with an opportunity to seek human review of that decision. Where automated risk-scoring tools are used in fraud or AML contexts, a human review process is available upon request.

3 Data Sharing and Disclosure

kxu8 does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes. We share your data only in the limited circumstances described below, and only to the extent necessary for the specific purpose.

Service Providers and Data Processors

kxu8 works with a small number of trusted third-party service providers who process personal data on our behalf under strict contractual data-processing agreements. These include:

• KYC and identity verification providers — who validate identity documents and confirm age eligibility on our behalf.
• Payment processing partners — including bKash, Nagad, Rocket, Upay, and card payment processors, who handle the technical routing of deposit and withdrawal transactions.
• Game content providers — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe, who may receive anonymised session data for game delivery and fair-play auditing purposes.
• Fraud prevention and AML screening tools — which cross-reference transaction data against risk databases to protect the Platform and its players.
• Infrastructure and hosting providers — who store Platform data on secure servers. All hosting partners are required to maintain appropriate technical and organisational security measures.

Legal and Regulatory Disclosures

kxu8 may disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, a valid court order, or in response to a lawful investigation. kxu8 will notify affected players of such disclosures where permitted to do so by law.

Business Transfers

In the event that kxu8 undergoes a merger, acquisition, or transfer of all or part of its business assets, player data may be transferred as part of that transaction. Players will be notified in advance of any such transfer, and their data will continue to be protected in accordance with this Privacy Policy or a successor policy of equivalent standard.

4 Cookies and Tracking Technologies

kxu8 uses cookies and similar tracking technologies (including local storage and session storage) to operate the Platform effectively, remember your preferences, maintain your session while you are logged in, and gather anonymised analytics data to improve our service.

Types of Cookies We Use

• Strictly Necessary Cookies: These are required for the Platform to function. They enable you to log in, maintain your session, navigate between pages, and use core features. These cookies cannot be disabled without affecting your ability to use kxu8.
• Functional Cookies: These remember your preferences such as your preferred language, notification settings, and responsible gaming limits, so that you do not need to re-enter them on each visit.
• Analytics Cookies: These collect anonymised data about how players use kxu8.app — including which pages are visited most frequently and where users encounter navigation difficulties. This data is used to improve Platform design and performance.
• Security Cookies: These support our fraud detection and account security systems by helping us identify unusual access patterns or unauthorised login attempts.

Managing Your Cookie Preferences

You can manage non-essential cookies through your browser settings at any time. Most modern browsers allow you to block, delete, or restrict cookies on a per-site or global basis. Please note that disabling functional or analytics cookies will not prevent you from using kxu8, but may affect certain personalisation features and the accuracy of session continuity.

kxu8 does not use third-party advertising cookies or cross-site tracking technologies that follow your activity on websites other than kxu8.app.

5 Data Security and Retention

kxu8 takes the security of your personal data seriously and maintains a range of technical and organisational measures designed to protect your information against unauthorised access, disclosure, alteration, or destruction.

Security Measures

• All data transmitted between your device and kxu8.app is encrypted using industry-standard Transport Layer Security (TLS/SSL) protocols.
• Sensitive data at rest — including identity documents and payment identifiers — is stored in encrypted form using AES-256 encryption or equivalent.
• Access to player data within kxu8 is restricted to authorised personnel on a strict need-to-know basis. Staff with access to personal data are trained in data handling best practices and bound by confidentiality obligations.
• kxu8 systems are subject to regular security reviews, penetration testing, and vulnerability assessments to identify and address potential weaknesses before they can be exploited.
• Multi-factor authentication (MFA) is enforced for all internal administrative access to systems that process personal player data.

Data Retention

kxu8 retains personal data only for as long as it is necessary for the purpose for which it was collected, or as required by applicable law. The following general retention principles apply:

• Account data and transaction records for active accounts are retained for the duration of the account relationship plus a minimum of five years thereafter, to satisfy financial record-keeping and AML obligations.
• KYC documents (identity verification materials) are retained for a minimum of five years following account closure, in accordance with standard financial compliance requirements.
• Support communications are retained for a period of two years from the date of the last interaction, unless they form part of an ongoing dispute or investigation.
• Analytics data that is fully anonymised and cannot be linked back to an individual player is not subject to a retention limit and may be kept indefinitely for Platform improvement purposes.

6 Your Rights Over Your Data

As a player on kxu8, you hold a number of rights in relation to the personal data we hold about you. kxu8 is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact us at [email protected] with the subject line "Data Rights Request".

Right of Access

You have the right to request a copy of the personal data kxu8 holds about you, along with information about how that data is processed. We will respond to access requests within 30 days of receipt. In cases of complexity or high volume, this period may be extended by a further 30 days, and you will be notified accordingly.

Right to Rectification

If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update many of your account details directly through your account dashboard; for data that cannot be self-corrected (such as identity documents), please contact our support team.

Right to Erasure

In certain circumstances, you may request the deletion of your personal data. kxu8 will assess erasure requests on a case-by-case basis. Please note that we are legally required to retain certain categories of data (including KYC and transaction records) for a minimum period even following account closure; in such cases, erasure of that specific data will not be possible until the mandatory retention period has elapsed.

Right to Restriction of Processing

You may request that kxu8 restrict the processing of your personal data in specific circumstances — for example, while the accuracy of data is being contested, or where you have objected to processing based on legitimate interests. During a restriction period, kxu8 will retain the data but will not actively process it for any purpose other than storage.

Right to Data Portability

Where your data is processed on the basis of your consent or for contractual purposes, and that processing is carried out by automated means, you may request that kxu8 provide you with a structured, machine-readable copy of your data for transfer to another controller.

Right to Withdraw Consent

Where kxu8 processes your data on the basis of your consent (primarily for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal, nor does it affect processing that is carried out on a different legal basis.

7 Third-Party Services and Links

The kxu8 platform integrates with a number of third-party services that are necessary for the operation of the casino and sportsbook. When you interact with these services — for example, by launching a game from a certified provider or initiating a payment via bKash or Nagad — your data may be processed directly by those third parties in accordance with their own privacy policies.

kxu8 exercises due diligence in selecting third-party partners and requires all data processors to implement privacy and security standards that are consistent with those described in this Privacy Policy. However, kxu8 cannot be held responsible for the independent data practices of third-party services once data leaves our systems. We strongly encourage players to review the privacy policies of any third-party service with which they interact.

Game providers integrated into kxu8 — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe — operate independently certified platforms. Session data shared with these providers is limited to what is technically necessary for game delivery (such as player session tokens, wager amounts in BDT, and game outcome records). No directly identifying information beyond what is operationally required is shared with game providers.

kxu8.app does not contain links to external third-party websites that are not affiliated with the kxu8 platform. Any such links, if present in promotional communications, are clearly identified and are subject to separate privacy notices maintained by the respective third parties.

8 Updates to This Privacy Policy

kxu8 reserves the right to update, revise, or replace this Privacy Policy at any time in response to changes in applicable law, regulatory guidance, Platform functionality, or our internal data processing practices. The effective date at the top of this document will be updated each time a substantive change is made.

Where changes to this Privacy Policy are material — meaning they affect your rights, the categories of data we collect, the purposes for which we use it, or the third parties with whom it is shared — kxu8 will notify registered players via the email address on file at least 14 days prior to the changes taking effect. For non-material clarifications or corrections, the updated Policy will be published on kxu8.app without individual notification.

Continued use of the kxu8 platform following the effective date of an updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with any update to this Privacy Policy, you should cease using the Platform and contact [email protected] to request account closure and data handling in accordance with the applicable retention obligations.