kr99 Privacy Policy — How We Handle Your Personal Data

1. Introduction

kr99 ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of all users who access kr99.ws and any associated services. This Privacy Policy describes what personal information we collect from you when you use the kr99 platform, how we use that information, with whom we share it, and what rights you have in relation to it. This policy applies to all registered members, visitors and any person who interacts with the kr99 platform in any capacity.

By registering an account, making a deposit, or otherwise using any part of the kr99 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Privacy Policy, please stop using the kr99 platform.

2. What Data We Collect

kr99 collects personal data in the following categories. The specific data points within each category depend on how you interact with the platform — for example, KYC-verified members will have more identity data on file than casual visitors:

3. How We Use Your Data

kr99 uses the personal data we collect for the following specific purposes. We do not use your data for any purpose beyond what is described below without first notifying you and, where required, obtaining your consent:

• Account creation and management: to register your account, verify your identity, manage your profile and communicate essential account-related information to you, including security alerts and transaction confirmations.
• Service delivery: to process your deposits and withdrawals, settle bets, award bonuses, deliver game results and provide the full range of kr99 gaming services as described in the Terms and Conditions.
• Regulatory compliance and fraud prevention: to carry out KYC identity verification, comply with anti-money-laundering (AML) obligations, detect and prevent fraud, investigate suspicious activity and fulfil any other legal or regulatory reporting requirements that apply to kr99's operations.
• Responsible gaming: to monitor player activity for indicators of problem gambling, enforce deposit limits and self-exclusion requests, send responsible gaming reminders, and apply the age verification and account restriction tools described in our Terms and Conditions.
• Platform improvement: to analyse aggregate usage patterns, diagnose technical issues, improve the performance and reliability of the kr99 platform, and develop new features that better serve players in Bangladesh.
• Marketing communications: to send you promotional offers, bonus notifications and platform updates by SMS or in-app notification, where you have opted in to receive such communications. You may opt out of marketing communications at any time via your account settings or by contacting customer support.

4. Legal Basis for Processing

kr99 processes personal data only where a lawful basis exists for doing so. The applicable legal bases for our processing activities are:

• Contractual necessity: processing your identity, contact and financial data is necessary to perform the contract between you and kr99 — that is, to operate your account, process transactions and deliver the gaming services you have requested.
• Legal obligation: we are required to collect and retain certain data — particularly identity and transaction records — to comply with applicable laws including anti-money-laundering regulations and age verification requirements. We cannot waive these obligations.
• Legitimate interests: kr99 processes certain technical and usage data on the basis of legitimate interests — specifically to prevent fraud, secure the platform, improve service quality and protect the interests of all players who use kr99. We balance these interests against your privacy rights.
• Consent: where we send marketing communications or use non-essential cookies, we rely on your consent as the legal basis. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Data Sharing and Disclosure

kr99 does not sell, rent or trade your personal data to any third party. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for the specified purpose:

• Payment processors and financial service providers: we share transaction data with payment partners (including bKash, Nagad, Rocket and supported banks) to the extent necessary to process your deposits and withdrawals. These partners are independently regulated and bound by their own data protection obligations.
• Game and technology providers: game studios (including Pragmatic Play, Evolution Gaming, Ezugi, Spribe and PG Soft) and technology infrastructure providers may receive technical session data necessary to deliver game results, process RNG outcomes and maintain platform uptime. These providers operate under contractual data protection obligations with kr99.
• Regulatory and law enforcement authorities: where required by applicable law, court order or regulatory direction, kr99 may be required to disclose personal data to relevant authorities. Where we are legally permitted to do so, we will notify you of such a disclosure.
• Identity verification and KYC service providers: third-party identity verification services may receive copies of identity documents submitted during the KYC process for the purpose of verifying their authenticity. These providers are bound by strict confidentiality obligations.

6. Payment Data and Financial Security

kr99 does not store full payment credentials on its own servers. When you make a deposit via bKash, Nagad, Rocket, Upay or a supported bank, the payment is processed directly through the respective payment provider's secure infrastructure. kr99 retains only a transaction reference, the amount, the date and a partial identifier (such as the last three digits of a mobile wallet number) sufficient to support account reconciliation and dispute resolution.

All financial data retained by kr99 is stored in encrypted form. Access to financial records is restricted to kr99 personnel with a specific operational need — for example, the payments team processing a withdrawal request or the compliance team reviewing a transaction for AML purposes. kr99 undergoes regular internal audits of its data access controls to ensure that financial data is handled appropriately at all times.

7. Cookies and Tracking Technologies

kr99 uses cookies and similar tracking technologies on its platform to enable core functionality, improve performance and, where you have consented, to personalise your experience. The following types of cookies are used:

You can manage cookie preferences through your device browser settings. Please note that disabling essential cookies will prevent the kr99 platform from functioning correctly. For non-essential cookies, you may withdraw consent at any time without affecting your account or access to kr99 services.

8. Data Retention

kr99 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting or reporting requirements. The standard retention periods that apply at kr99 are as follows: account and identity data is retained for the duration of the account relationship and for a minimum of five years following account closure; transaction and financial records are retained for a minimum of five years from the date of each transaction; communications records are retained for two years from the date of the communication; technical and log data is retained for up to twelve months.

Where data is no longer required for any lawful purpose, kr99 will securely delete or anonymise it. Anonymised data — from which no individual can be identified — may be retained indefinitely for statistical analysis and platform improvement purposes. If you submit a data erasure request (see Your Rights below), kr99 will delete your personal data to the maximum extent permitted by applicable law, retaining only that data which we are legally obliged to keep.

9. Data Security

kr99 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, disclosure or destruction. Our security measures include SSL/TLS encryption for all data transmitted between your device and the kr99 platform; encrypted storage for sensitive data at rest; role-based access controls limiting which kr99 personnel can access personal data; two-factor authentication requirements for staff accessing sensitive systems; and regular security reviews of our platform infrastructure.

Despite these measures, no internet transmission or electronic storage system is completely secure. While kr99 commits to using industry-standard protections, we cannot guarantee absolute security. In the event of a data breach that is likely to affect your rights and freedoms, kr99 will notify affected players promptly and take immediate remedial action. We will also report such incidents to relevant authorities as required by applicable law.

10. Your Privacy Rights

As a user of the kr99 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact kr99 customer support. kr99 will respond to all verified requests within 30 days:

• ✓
  Right of Access — You may request a copy of all personal data kr99 holds about you, along with information about how and why it is being processed.
• ✓
  Right to Rectification — You may request that kr99 correct any inaccurate or incomplete personal data held about you. You may also update many details directly via your account settings.
• ✓
  Right to Erasure — You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected and where no overriding legal obligation requires us to retain it.
• ✓
  Right to Restrict Processing — You may request that kr99 restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being resolved.
• ✓
  Right to Data Portability — Where processing is based on your consent or on a contract, you may request that kr99 provide your personal data in a structured, commonly used and machine-readable format.
• ✓
  Right to Object — You may object to the processing of your personal data where kr99 relies on legitimate interests as its legal basis. You may also object to the use of your data for direct marketing purposes at any time.

To exercise any of the above rights, please contact kr99 customer support via in-app live chat or by emailing [email protected]. Please note that the exercise of some rights may be subject to identity verification requirements before kr99 can action your request.

11. Children's Privacy

The kr99 platform is strictly intended for adults aged 21 and above. kr99 does not knowingly collect personal data from any person under the age of 21. If kr99 discovers or is notified that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account closed. Parents and guardians who believe their child may have registered an account on kr99 should contact customer support immediately via [email protected] so that the account can be closed and the data removed without delay.

12. Third-Party Links and Services

The kr99 platform may reference third-party services — such as payment providers and game studios — in the course of delivering its services. kr99 is not responsible for the privacy practices of any third-party service provider. Each third-party provider operates under its own privacy policy, and kr99 encourages players to review those policies independently. kr99's Privacy Policy governs only the data collected and processed by kr99 itself in connection with the kr99 platform at kr99.ws.

13. Changes to This Privacy Policy

kr99 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, kr99 will notify registered players via SMS or in-app notification and will update the "Last updated" date at the top of this page. The most current version of the Privacy Policy is always available at kr99.ws/privacy-policy.

Your continued use of the kr99 platform after any amendment to this Privacy Policy constitutes your acceptance of the updated policy. If you do not accept the amended Privacy Policy, you must stop using the kr99 platform and may request account closure by contacting customer support at [email protected].

14. Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or to how kr99 handles your personal data, please contact our customer support team. Our support team is available 24/7 via in-app live chat. Written requests may be submitted by email — our support address is listed in the footer of every kr99 page. kr99 takes all privacy enquiries seriously and will acknowledge your request within 48 hours.

If you are located in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh or anywhere else in Bangladesh, the same data protection standards and response commitments apply to you equally. kr99 does not operate tiered privacy standards based on player location within Bangladesh.