kv66 Privacy Policy
At kv66, your personal data is treated with the same level of care and rigour we apply to platform security. This Privacy Policy explains precisely what information we collect, why we collect it, how it is stored and protected, and what rights you hold over your own data as a kv66 player in Bangladesh.
How kv66 Protects Your Information
Six core principles guide how kv66 handles personal data for every player on the platform.
End-to-End Encryption
All data transmitted between your device and kv66 is encrypted using TLS 1.3. Data stored on kv66 servers is encrypted at rest using AES-256. Your payment details and personal records are never exposed in plain text at any point in the data pipeline.
Strict Access Controls
Access to player personal data within the kv66 organisation is governed by a role-based access control (RBAC) framework. Only personnel with a verified operational need are permitted to view identifiable player records, and all access events are logged and audited.
No Data Sales
kv66 does not sell, rent, or trade your personal data to third-party marketing organisations under any circumstances. Data shared with third parties is limited to service providers who support the operation of the platform and are contractually bound to confidentiality obligations.
Transparent Collection
kv66 only collects data that is genuinely necessary for operating the platform, verifying player identity, processing transactions, and fulfilling responsible gaming obligations. We do not collect speculative or excessive data. Every data field collected has a defined and documented purpose.
Your Rights Are Real
kv66 players have the right to access, correct, export, and request deletion of their personal data. Requests are actioned within ten (10) business days. The process is straightforward — contact support at the email address provided in this policy to exercise your data rights at any time.
Regular Policy Reviews
This Privacy Policy is reviewed and updated at minimum once per calendar year and whenever material changes to data processing practices occur. The effective date at the top of this document reflects the most recent revision. Active players are notified of material changes via account notifications.
Your privacy matters to kv66. This Privacy Policy sets out in plain, formal English exactly what data kv66 collects from players in Bangladesh, why it is collected, how it is protected, and what choices you have. By registering an account or using any kv66 service, you confirm that you have read and accepted this Privacy Policy in full.
1. Introduction
kv66 ("we", "us", "our") operates the online gaming and sports betting platform accessible at kv66.io. This Privacy Policy applies to all personal data collected from individuals ("you", "the player", "the user") who register an account on kv66, make deposits, place bets, interact with customer support, or otherwise use any feature of the kv66 platform.
This Privacy Policy is written in accordance with internationally recognised data protection principles, including the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality. kv66 is committed to upholding these principles in every aspect of its data processing activities.
This Privacy Policy should be read alongside the kv66 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference into this document. Where any conflict arises between this Privacy Policy and another kv66 document on matters of data protection, this Privacy Policy shall prevail.
If you have questions about any aspect of this policy, the kv66 Data Protection contact is available at [email protected]. We aim to respond to all privacy-related enquiries within five (5) business days.
2. Data We Collect
kv66 collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with the platform, and occasionally from third-party service providers who assist with identity verification and fraud prevention. The categories of data collected are described below.
2.1 Registration Data
When you create a kv66 account, we collect the following information:
- Full legal name
- Date of birth (to verify you are aged 21 or above)
- Mobile number (used as primary contact and for MFS payment linking)
- Email address (used for account notifications and support communications)
- Preferred username and encrypted password
- Residency — players confirm Bangladesh residency at registration
2.2 Identity Verification (KYC) Data
To comply with anti-fraud and responsible gaming obligations, kv66 may request the following documents when processing high-value withdrawals or when identity verification is triggered:
- National Identity Card (NID) number and image — issued by the Bangladesh Election Commission
- Valid Bangladesh passport scan
- Bangladesh driving licence (as supplementary identification where accepted)
- bKash, Nagad, Rocket, or Upay account holder name and transaction screenshot (for payment method verification)
2.3 Transaction Data
All deposits and withdrawals made via bKash, Nagad, Rocket, or Upay are logged with the following details:
- Transaction reference number
- Transaction amount in BDT (৳)
- Timestamp in Bangladesh Standard Time (BST, UTC+6)
- MFS provider used
- Transaction status (pending / completed / reversed)
2.4 Gameplay Data
kv66 logs all gaming and betting activity associated with your account, including:
- Game sessions: game title, provider, start time, end time, stake amounts, outcomes
- Sports bets: market, event, odds, stake, settlement result
- Bonus redemption history: which promotions were claimed, wagering progress, expiry
- Session duration and session count data (used for responsible gaming monitoring)
2.5 Technical and Device Data
When you access kv66, our servers automatically collect a limited set of technical data to support platform security, fraud detection, and performance optimisation:
- IP address (used for geolocation checks and fraud flagging)
- Browser type and version
- Operating system
- Device type (desktop, mobile, tablet)
- Referring URL (the page from which you navigated to kv66)
- Pages visited within kv66 and time spent on each page
2.6 Communications Data
If you contact kv66 customer support — whether via live chat, email, or any other support channel — a record of the interaction including your messages, the support agent's responses, and the resolution outcome is retained. This data is used for quality assurance, dispute resolution, and staff training purposes.
3. How We Use Your Data
kv66 uses the personal data it collects only for the purposes described below. We do not use your data for any purpose that has not been disclosed in this Privacy Policy.
| Purpose | Data Categories Used |
|---|---|
| Account creation and authentication | Registration data, device data |
| Age and identity verification (KYC) | Registration data, KYC documents |
| Processing deposits and withdrawals | Transaction data, registration data |
| Delivering games and betting markets | Gameplay data, account data |
| Fraud detection and prevention | Transaction data, device data, IP address |
| Responsible gaming monitoring | Gameplay data, session duration data |
| Customer support and dispute resolution | Communications data, transaction data |
| Promotional offers and bonus administration | Registration data, gameplay data |
| Platform performance and security monitoring | Technical and device data |
| Legal and regulatory compliance | All categories as required |
kv66 does not use player data for automated profiling that produces legal or similarly significant effects on you as an individual. Session monitoring and responsible gaming alerts are generated at the account level and are reviewed by human agents before any account-level action is taken.
4. Legal Basis for Processing
kv66 processes personal data on the basis of one or more of the following legal grounds, depending on the nature of the processing activity:
- Contractual necessity: Processing required to fulfil the player account agreement — including account creation, transaction processing, game delivery, and customer support.
- Legitimate interests: Processing carried out to pursue kv66's legitimate operational interests where those interests are not overridden by your data protection rights — including fraud prevention, platform security, and abuse detection.
- Legal obligation: Processing required by applicable law — including retention of financial records and cooperation with lawful requests from law enforcement or regulatory authorities.
- Consent: Where processing is based on consent — specifically, the sending of optional promotional communications — you have the right to withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
kv66 does not rely on consent as the legal basis for processing that is operationally necessary for the delivery of its services. Refusing consent for necessary data collection will result in the inability to create or maintain a kv66 account.
5. Data Sharing and Third Parties
kv66 does not sell or rent your personal data to any third party. Data is shared only in the circumstances described below, and only to the minimum extent necessary for each purpose.
5.1 Game Providers
kv66 integrates games from certified third-party providers including Pragmatic Play, NetEnt, Microgaming, Evolution Gaming, Spribe, and Ezugi. These providers receive a session token and anonymised player ID sufficient to deliver the game. They do not receive your full name, NID number, or financial transaction data.
5.2 Payment Processors
Deposits and withdrawals via bKash, Nagad, Rocket, and Upay are processed through MFS infrastructure. kv66 passes the transaction amount and your registered mobile number to the MFS provider to initiate the payment. kv66 does not store your bKash PIN, mobile banking password, or full account credentials at any point.
5.3 Identity Verification Partners
Where automated KYC tools are used to verify the authenticity of identity documents, KYC data is transmitted to the verification partner via an encrypted API. Verification partners are contractually prohibited from retaining copies of documents beyond the time required to process the verification request.
5.4 Law Enforcement and Regulatory Bodies
kv66 will disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where required to do so by a lawful order, court order, or other legally binding obligation. kv66 will, where permitted by law, notify the affected player before such disclosure is made.
kv66 is legally obligated to report transactions and account activity that raise reasonable suspicion of money laundering or terrorist financing to the relevant authorities. This obligation supersedes any duty of confidentiality owed to the account holder and cannot be waived.
5.5 Business Transfers
In the event that kv66 undergoes a merger, acquisition, restructuring, or sale of assets, player data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any material changes to this Privacy Policy that result from it, prior to the transfer taking effect.
6. Cookies and Tracking Technologies
kv66 uses cookies and similar tracking technologies to maintain session continuity, prevent fraud, analyse platform performance, and deliver a personalised experience. By continuing to use kv66 after being presented with this Privacy Policy, you acknowledge the use of cookies as described below.
6.1 Essential Cookies
These cookies are strictly necessary for the kv66 platform to function. They manage your login session, maintain your game state across page loads, and protect against cross-site request forgery (CSRF). Essential cookies cannot be disabled without breaking platform functionality.
6.2 Analytics Cookies
kv66 uses first-party analytics to understand how players navigate the platform — which pages are visited most frequently, where users encounter errors, and how long sessions last. This data is aggregated and anonymised before analysis. No individual player is identified in analytics reports.
6.3 Fraud Prevention Cookies
kv66's fraud detection system uses persistent identifiers stored in cookies to recognise devices associated with previously flagged accounts. This is a core security measure used to prevent duplicate account creation and to detect patterns consistent with automated bot activity.
6.4 Cookie Retention
Session cookies expire when you close your browser. Persistent cookies used for fraud prevention and analytics are retained for a maximum of twelve (12) months from the date of their last update. You may clear cookies from your browser at any time, though doing so may require you to re-authenticate your kv66 session.
7. Data Retention
kv66 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal obligations. The following retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Registration data | Duration of account + 5 years post-closure | Contractual obligation and fraud prevention |
| KYC documents | 5 years from submission date | Anti-money laundering compliance |
| Transaction records | 7 years from transaction date | Financial record-keeping requirements |
| Gameplay records | 5 years from session date | Dispute resolution and responsible gaming audit |
| Support communications | 3 years from last interaction | Quality assurance and dispute resolution |
| Device and IP logs | 12 months from log date | Platform security and fraud detection |
| Analytics data (anonymised) | 24 months | Platform performance analysis |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any identifiable individual. Where deletion is technically complex due to system architecture, data is placed under access restriction pending secure deletion at the next scheduled purge cycle.
8. Data Security
kv66 implements a multi-layered security architecture to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. The primary technical and organisational measures in place include:
- Transport security: All data in transit between your device and kv66 servers is protected by TLS 1.3 with forward secrecy. kv66 does not support TLS 1.0 or TLS 1.1.
- Data at rest: All databases containing personal data are encrypted using AES-256. Encryption keys are stored separately from the encrypted data and are rotated on a quarterly schedule.
- Password security: Player passwords are stored as bcrypt hashes with an appropriate cost factor. kv66 never stores passwords in plain text or using reversible encryption.
- Access controls: Role-based access control (RBAC) governs all internal access to player data. Access is granted on a least-privilege basis and is reviewed quarterly.
- Intrusion detection: kv66's infrastructure is monitored 24/7 by automated intrusion detection systems. Anomalous access patterns trigger immediate alerts to the security team.
- Penetration testing: The kv66 platform undergoes independent penetration testing on a scheduled basis. Critical findings are remediated within 72 hours of disclosure.
kv66 maintains SSL certification and operates under a fair play certification framework. While no online platform can guarantee absolute immunity from all cybersecurity threats, kv66's security posture is designed to meet and exceed the standards expected of a financial-grade gaming platform serving Bangladesh players.
8.1 Data Breach Response
In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, kv66 will notify impacted account holders without undue delay — and in any case within seventy-two (72) hours of becoming aware of the breach. The notification will describe the nature of the breach, the categories and approximate number of players affected, the likely consequences, and the measures kv66 has taken or proposes to take to address the breach.
9. Your Data Rights
As a kv66 player whose personal data is processed under this Privacy Policy, you hold the following rights in relation to your personal data. All rights may be exercised by contacting kv66 at [email protected] with the subject line "Data Rights Request".
9.1 Right of Access
You have the right to request a copy of all personal data kv66 holds about you. kv66 will provide a structured, machine-readable data export within ten (10) business days of a verified access request. Identity verification is required before any data export is released to prevent unauthorised data disclosure.
9.2 Right to Rectification
If any personal data kv66 holds about you is inaccurate or incomplete, you have the right to request correction. Most registration data fields (name, mobile number, email) can be updated directly from within your kv66 account settings panel. For fields that cannot be self-corrected, contact support with the relevant documentation.
9.3 Right to Erasure
You have the right to request that kv66 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (where consent was the basis for processing), or where you object to processing and there are no overriding legitimate grounds. This right is subject to kv66's legal obligation to retain certain categories of data (see Section 7). Erasure requests that conflict with legal retention obligations will be partially fulfilled — data that can be deleted will be deleted, and data subject to legal retention obligations will be placed under restricted access.
9.4 Right to Restriction
You may request that kv66 restrict the processing of your personal data in circumstances where the accuracy of the data is contested, where processing is unlawful but you prefer restriction over erasure, or where kv66 no longer needs the data but you require it for the establishment, exercise, or defence of a legal claim.
9.5 Right to Data Portability
Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive the personal data you have provided to kv66 in a structured, commonly used, machine-readable format (JSON or CSV on request).
9.6 Right to Object
You have the right to object to the processing of your personal data where that processing is based on kv66's legitimate interests. On receipt of a valid objection, kv66 will cease processing unless kv66 can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or unless the processing is necessary for the establishment, exercise, or defence of legal claims.
kv66 will not charge a fee for exercising any of the rights listed above, unless a request is manifestly unfounded or excessive — in particular because of its repetitive character. In such cases, kv66 may charge a reasonable administrative fee or refuse to act on the request, providing written reasons for either decision.
10. Children and Minors
kv66 operates an online gaming and betting platform intended exclusively for adults aged 21 years and above. kv66 does not knowingly collect personal data from individuals under the age of 21.
All kv66 registrations are subject to age verification at the point of account creation. Where kv66 has reasonable grounds to believe that an account has been registered by or is being used by a person under the age of 21, the account will be suspended immediately pending age verification. If verification cannot be completed or confirms underage access, the account will be permanently closed and any balance associated with the account may be withheld.
If you are a parent or guardian and believe that a person under the age of 21 in your care has registered a kv66 account, please contact us immediately at [email protected] so that the account can be closed and all associated personal data deleted without delay.
For further information on age restriction tools and underage access prevention at kv66, please visit our Responsible Gaming page.
11. Third-Party Links and Services
The kv66 platform may contain references to or integrations with third-party services — including game providers, MFS payment gateways, and promotional partner content. Where such integrations involve navigating away from the kv66 domain, this Privacy Policy no longer applies. Each third-party service operates under its own privacy policy, which you should review independently.
kv66 is not responsible for the data practices of any third-party service provider, game studio, or payment processor beyond the contractual obligations kv66 imposes upon such parties as described in Section 5 of this policy. The presence of a third-party integration on the kv66 platform does not constitute an endorsement of that third party's privacy practices.
12. Amendments to This Privacy Policy
kv66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in data processing practices, legal requirements, or platform features. All amendments will be published on this page with an updated effective date.
Where amendments are material — meaning they significantly change the nature of data collection, the purposes for which data is used, the categories of third parties with whom data is shared, or the rights available to players — kv66 will provide advance notice to active account holders via account dashboard notification or email at least seven (7) days before the amendment takes effect.
Your continued use of the kv66 platform following the publication of an amended Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to an amendment, you must stop using kv66 and may request account closure in accordance with the kv66 Terms & Conditions. All previous versions of this Privacy Policy are superseded upon the effective date of the updated version.
13. Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or to the manner in which kv66 processes your personal data, please contact the kv66 Data Protection team through the following channel:
- Email: [email protected] — please use the subject line "Privacy Policy Enquiry" or "Data Rights Request" as appropriate
- Live Chat: Available 24 hours a day, 7 days a week, directly from any page of the kv66 platform
- Response Language: English
- Response Timeframe: Privacy enquiries are acknowledged within two (2) business days and resolved within ten (10) business days of receipt
- Support Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)
kv66 takes all privacy-related enquiries seriously and is committed to resolving concerns promptly and transparently. If you are not satisfied with the outcome of a privacy enquiry, you have the right to escalate your concern to the appropriate data protection authority or seek independent legal advice.
For the fastest response to data rights requests — including access, erasure, or portability requests — please email [email protected] with a clear description of your request and the email address registered to your kv66 account. This allows our team to locate your records and action your request without delay.
Have Questions About Your Data?
Review our FAQ for quick answers, or explore the full kv66 platform with confidence knowing your privacy is protected.