kxv8 Privacy
Policy

When you register for a kxv8 account or use our platform, we may collect the following categories of personal information:

Identity Information: Your full legal name, date of birth, gender, and nationality as provided during account registration. This information is used to verify your identity, confirm your eligibility to use the platform (including the 18+ age requirement), and comply with our Know Your Customer (KYC) obligations.

Contact Information: Your Bangladeshi mobile phone number (used for OTP-based verification and account security), and your email address if provided. We do not require a residential address at the point of registration, though this may be requested during enhanced KYC verification for higher-value withdrawal requests.

Identification Documents: Copies or photographs of government-issued identification documents such as your Bangladesh National Identity Card (NID), passport, or driving licence. These documents are collected solely for identity verification purposes and are stored securely in encrypted form.

Financial Information: Details of the payment methods you use to deposit and withdraw funds, including your bKash, Nagad, Rocket, or Upay mobile wallet numbers, or bank account details where bank transfers are used. kxv8 does not store full card numbers for Visa or Mastercard transactions — these are tokenised by our payment processing partners.

Transaction History: A complete record of all deposits, withdrawals, bonus claims, wagers placed, and game results associated with your kxv8 account. This data is maintained for regulatory compliance, dispute resolution, and responsible gaming monitoring purposes.

Technical & Device Information: Your IP address, device type, operating system, browser type and version, and session timestamps. This information is collected automatically when you access kxv8.app and is used for security monitoring, fraud detection, and platform performance optimisation.

Behavioural Data: Information about how you navigate and use the kxv8 platform, including pages visited, games played, session duration, and betting patterns. This data helps kxv8 identify responsible gaming concerns, detect potentially prohibited activity, and improve the overall user experience.

Communications: Records of any communications you have with the kxv8 support team, including emails, live chat transcripts, and support ticket history. These records are maintained for quality assurance and dispute resolution purposes.

kxv8 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data. If any such data is inadvertently submitted through a support communication, it will be deleted as soon as it is identified and will not be processed for any purpose.

kxv8 may share your personal data with the following categories of third parties, strictly on a need-to-know basis and only to the extent necessary for the stated purpose:

Payment Service Providers: When you make a deposit or withdrawal using bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, or Mastercard, the minimum necessary data is shared with the relevant payment service provider to process the transaction. Each of these providers operates under its own data privacy framework and security standards.

Game Technology Providers: kxv8's casino and slot games are powered by certified third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, Play'n GO, and Hacksaw Gaming. These providers receive technical session data (such as player session tokens and wager amounts) necessary to deliver the game experience. They do not receive your full identity information.

Identity Verification Partners: To fulfil our KYC obligations, kxv8 may use third-party identity verification services that cross-reference the identification documents you submit against relevant databases. Any such partner is contractually bound to use your data solely for verification purposes.

Regulatory and Law Enforcement Authorities: kxv8 may be required by law, regulation, court order, or official government request to disclose certain player data to relevant authorities. In all such cases, kxv8 will comply with the minimum disclosure required and will notify the affected player of any such disclosure where legally permitted to do so.

Fraud Prevention and Risk Intelligence Services: kxv8 may share anonymised or pseudonymised risk signals with industry fraud prevention networks to identify and block bad actors who attempt to exploit multiple online gaming platforms. No directly identifiable personal data is shared for this purpose without a specific legal basis.

Corporate Transactions: In the event that kxv8 undergoes a business restructuring, merger, acquisition, or asset sale, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, kxv8 will ensure that the receiving entity is bound by data protection obligations equivalent to those set out in this Privacy Policy, and you will be notified of any material change in the processing of your data.

kxv8 does not transfer your personal data to countries outside your jurisdiction without ensuring that adequate data protection safeguards are in place. All third-party data processors engaged by kxv8 are bound by data processing agreements that require them to handle personal data in a manner consistent with this Privacy Policy.

kxv8 takes the security of your personal data seriously. We implement a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, alteration, or disclosure.

Transport Layer Security (TLS): All data exchanged between your browser or mobile device and kxv8.app is encrypted using TLS 1.2 or higher. This means that your login credentials, personal information, and payment data cannot be intercepted in transit by a third party.

Data Encryption at Rest: Sensitive personal data stored on kxv8 servers — including copies of identity documents and financial records — is encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the encrypted data and are subject to strict access controls.

Access Control: Access to personal data held by kxv8 is restricted to authorised staff members on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and undergo regular data protection training. Access logs are maintained and reviewed periodically.

OTP-Based Account Security: kxv8 uses one-time password (OTP) verification via your registered Bangladeshi mobile number for account login, password resets, and high-value withdrawal approvals. This provides an additional layer of security beyond your password alone.

Fraud Monitoring Systems: kxv8 operates continuous automated monitoring of account activity to detect anomalies that may indicate unauthorised access or fraudulent use. Suspicious activity triggers automatic account protection measures and alerts to our security team.

Incident Response: In the event of a data security incident that affects your personal data, kxv8 will act swiftly to contain and investigate the breach, notify affected players as soon as practicable, and implement remedial measures to prevent recurrence. Notifications will be sent to the mobile number or email address registered on your account.

While kxv8 employs robust security measures, no online platform can guarantee absolute security against all possible threats. You also play a role in protecting your account — please use a strong, unique password, never share your credentials with anyone, and contact support immediately at [email protected] if you suspect any unauthorised access.

As a player on the kxv8 platform, you have the following rights in relation to your personal data:

Right of Access: You have the right to request a copy of the personal data kxv8 holds about you. Upon receipt of a verified access request, kxv8 will provide you with a summary of the personal data we hold, the purposes for which it is processed, and the categories of third parties with whom it has been shared. Access requests are fulfilled within 30 days of receipt.

Right to Rectification: If any personal data kxv8 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For example, if your name has been registered incorrectly or your contact number has changed, you may request an update by contacting the support team. Identity verification may be required before certain data fields can be amended.

Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw your consent and there is no other lawful basis for processing. Please note that kxv8 is subject to legal retention obligations (see Section 6) that may mean we are unable to delete certain data immediately, even upon a valid erasure request.

Right to Restrict Processing: You may request that kxv8 restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified, or where you have objected to processing and a determination is pending.

Right to Object: You have the right to object to the processing of your personal data where that processing is based on kxv8's legitimate interests. You may also object at any time to the use of your data for direct marketing purposes, including profiling for marketing. Upon receipt of a valid objection to marketing, kxv8 will cease using your data for that purpose immediately.

Right to Data Portability: Where kxv8 processes your data by automated means on the basis of your consent or contractual necessity, you have the right to receive a copy of that data in a structured, commonly used, machine-readable format (such as CSV or JSON), so that you may transfer it to another service provider of your choice.

Right to Withdraw Consent: Where kxv8 processes your data on the basis of your consent (for example, for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal.

To exercise any of the above rights, please contact the kxv8 privacy team by email at [email protected] with the subject line "Privacy Rights Request". Please include your registered mobile number and a brief description of the right you wish to exercise. We may need to verify your identity before processing the request. All requests are handled free of charge and within 30 calendar days of receipt.

If you are dissatisfied with kxv8's response to a privacy rights request, you have the right to raise a complaint with the relevant data protection authority in your jurisdiction.