Privacy Policy — kr99 Bangladesh
At kr99, protecting the personal data of every player across Dhaka, Chittagong, Sylhet, and all of Bangladesh is a core responsibility — not an afterthought. This Privacy Policy explains exactly what data we collect, why we collect it, how we use it, and the rights you hold as a data subject.
How kr99 Protects Your Privacy
Six core commitments that underpin how kr99 handles your personal information across every interaction on the platform.
End-to-End Encryption
All data transmitted between your device and kr99's servers is protected by 256-bit SSL/TLS encryption. Whether you are completing KYC verification, making a bKash deposit, or logging into your account, your data travels over an encrypted channel at all times.
Minimal Data Collection
kr99 collects only the personal data that is strictly necessary to deliver our services, comply with identity verification requirements, prevent fraud, and maintain a safe gaming environment. We do not collect data speculatively or for purposes beyond those described in this policy.
No Third-Party Data Sales
kr99 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Data shared with third-party service providers (payment processors, game providers, KYC verification partners) is shared only to the extent necessary to provide the services you use.
KYC & Identity Security
Documents submitted for Know Your Customer (KYC) verification — including Bangladesh NID, passport, and proof of address — are processed securely, retained only for the period required by applicable compliance obligations, and are never shared with unauthorised parties.
Your Data, Your Control
You have the right to access, correct, and in certain circumstances request the deletion of your personal data held by kr99. You may also withdraw consent for non-essential data processing at any time by contacting our support team. kr99 will respond to all valid data subject requests promptly.
Defined Retention Periods
kr99 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable compliance and anti-money-laundering obligations. Once data is no longer required, it is securely deleted or anonymised in accordance with our internal data retention schedule.
Table of Contents
- Introduction & Scope
- Data Controller Identity
- Personal Data We Collect
- How We Collect Your Data
- Purposes & Legal Basis for Processing
- Sharing Your Data with Third Parties
- Cookies & Tracking Technologies
- Data Retention
- Data Security
- Your Rights as a Data Subject
- Children & Underage Players
- International Data Transfers
- Amendments to This Policy
- Contact & Data Enquiries
1 Introduction & Scope
This Privacy Policy ("Policy") explains how kr99 ("kr99", "we", "us", "our") collects, uses, stores, protects, and in certain circumstances shares the personal data of individuals ("you", "the Player", "the User") who access or use the kr99 online casino and sports betting platform at https://kr99.io and any associated mobile interface.
This Policy applies to all personal data processing activities undertaken by kr99 in connection with the platform, including data collected during account registration, KYC verification, deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and Dutch-Bangla Bank, gameplay, customer support interactions, and marketing communications where consent has been provided.
This Policy should be read alongside the kr99 Terms & Conditions, which form the overarching legal framework governing your use of the platform. By registering an account or using the kr99 platform, you confirm that you have read and understood this Policy and that you consent to the processing of your personal data as described herein.
2 Data Controller Identity
kr99 acts as the data controller in respect of the personal data collected and processed through the kr99 platform. As data controller, kr99 determines the purposes and means by which your personal data is processed.
For all data protection enquiries, subject access requests, or concerns relating to your personal data, the designated point of contact is the kr99 Data Protection team, reachable via the contact details set out in Section 14 of this Policy.
3 Personal Data We Collect
kr99 collects the following categories of personal data, depending on how you interact with the platform:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality | Account registration & KYC |
| Contact Data | Email address, mobile number, residential address (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, etc.) | Account registration |
| Verification Documents | Bangladesh NID, passport copy, driving licence, utility bills, bank statements | KYC verification |
| Financial Data | bKash / Nagad / Rocket / Upay mobile number, Visa/Mastercard last four digits, transaction history, deposit and withdrawal amounts in BDT ৳ | Deposits & withdrawals |
| Technical Data | IP address, device type, operating system, browser type, session duration, login timestamps (Bangladesh Standard Time, UTC+6) | Platform access |
| Gaming Activity Data | Games played, bets placed, wager amounts, winnings, bonus usage, session history | Active gameplay |
| Communications Data | Live chat transcripts, WhatsApp messages, email correspondence, support ticket content | Customer support interactions |
| Marketing Preferences | Opt-in/opt-out records for promotional emails and SMS, promotion engagement history | Consent-based marketing |
kr99 does not collect or process special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data) except where a document submitted for KYC incidentally contains such information, in which case that information is not extracted, processed, or stored for any purpose beyond identity verification.
4 How We Collect Your Data
kr99 collects personal data through the following means:
- Directly from you: When you register an account, complete KYC documentation, make a deposit or withdrawal request, contact our support team via live chat or WhatsApp, or respond to a promotional communication.
- Automatically through platform use: When you access and use the kr99 website or mobile interface, we automatically collect technical data including your IP address, device identifiers, browser characteristics, and session activity data through server logs and standard web analytics tools.
- Through cookies and similar technologies: As described in Section 7, kr99 uses cookies and similar tracking technologies to maintain session state, prevent fraud, and (where you have consented) personalise your experience on the platform.
- From third-party payment providers: When you initiate a transaction via bKash, Nagad, Rocket, Upay, Visa, Mastercard, or Dutch-Bangla Bank, the payment provider may share transaction confirmation data with kr99 to facilitate crediting or debiting your kr99 wallet balance.
- From KYC and identity verification partners: kr99 may use third-party identity verification services to validate the authenticity of documents and information submitted during the KYC process. These partners act as data processors on kr99's behalf and are subject to data processing agreements consistent with this Policy.
5 Purposes & Legal Basis for Processing
kr99 processes your personal data only where there is a lawful basis for doing so. The following table summarises the primary purposes for which we process personal data and the corresponding legal basis:
| Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of contract |
| KYC identity verification and age verification (21+) | Legal obligation & legitimate interests |
| Processing deposits and withdrawals in BDT ৳ | Performance of contract |
| Delivering casino games and sports betting services | Performance of contract |
| Fraud detection, anti-money-laundering checks, and responsible gaming monitoring | Legal obligation & legitimate interests |
| Customer support and complaint handling | Performance of contract & legitimate interests |
| Sending promotional communications (bonuses, seasonal offers) | Consent (opt-in) |
| Platform analytics and service improvement | Legitimate interests |
| Compliance with legal, regulatory, and audit requirements | Legal obligation |
6 Sharing Your Data with Third Parties
kr99 does not sell, rent, or trade your personal data. We may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection safeguards:
- Payment service providers: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank — to process your financial transactions. These providers receive only the minimum data necessary to complete the transaction and are subject to their own privacy policies.
- Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed studio partners — who may receive anonymised session identifiers to deliver game content and RNG certification. Game providers do not receive your identity documents or financial data.
- KYC and identity verification partners: Third-party identity verification services engaged by kr99 to authenticate documents submitted during the KYC process. These partners act as data processors bound by a written data processing agreement.
- IT infrastructure and hosting providers: Cloud hosting, database management, and cybersecurity service providers who process data on kr99's behalf under strict data processing agreements and are not permitted to use that data for their own purposes.
- Legal and regulatory authorities: kr99 may disclose personal data to law enforcement, regulators, courts, or other public authorities where required by applicable law, a court order, or a legitimate request from a competent authority.
- Professional advisors: Lawyers, auditors, and accountants engaged in the course of their professional duties, subject to confidentiality obligations.
7 Cookies & Tracking Technologies
kr99 uses cookies and similar browser storage technologies to enable essential platform functionality, maintain your logged-in session, detect and prevent fraudulent activity, and — where you have provided consent — to analyse platform usage patterns and personalise your experience.
The following categories of cookies are used on the kr99 platform:
- Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies, CSRF protection tokens, and load-balancing identifiers. These cookies cannot be disabled without preventing you from using the platform.
- Functional Cookies: Enable enhanced functionality such as remembering your language preference (English), your preferred deposit method, and your last game session state. These may be disabled but doing so will affect your experience.
- Analytics Cookies: Used (with your consent) to collect anonymised data about how players navigate the kr99 platform — which pages are visited most frequently, session duration, and technical error occurrences — to help us improve service quality.
- Marketing & Personalisation Cookies: Used only with explicit opt-in consent to deliver promotional content relevant to your gaming preferences and activity patterns on kr99.
You may manage your cookie preferences at any time through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the kr99 platform. For more detailed cookie information, please contact kr99 support.
8 Data Retention
kr99 retains personal data for no longer than is necessary to fulfil the purpose for which it was originally collected, or as required by applicable legal, regulatory, or audit obligations. The following general retention guidelines apply:
- Active account data (identity, contact, financial, gaming activity): Retained for the full duration of the account's active status plus a post-closure period as required by compliance obligations.
- KYC and identity documents: Retained in accordance with applicable anti-money-laundering record-keeping requirements, typically for a defined number of years following account closure.
- Transaction records: Financial transaction logs, including deposit and withdrawal records in BDT ৳ via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and Dutch-Bangla Bank, are retained for compliance audit purposes.
- Customer support communications: Live chat transcripts, WhatsApp records, and email correspondence are retained for a reasonable period to support complaint resolution and quality assurance processes.
- Marketing preferences and consent records: Retained for the period necessary to demonstrate compliance with consent-based marketing obligations.
- Technical and analytical data: Server logs and anonymised analytics data are retained for a shorter period consistent with their operational purpose.
At the end of the applicable retention period, personal data is securely and permanently deleted or anonymised such that it can no longer be attributed to any individual.
9 Data Security
kr99 implements a comprehensive range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include but are not limited to:
- 256-bit SSL/TLS encryption on all data transmitted between your device and kr99's servers, covering account login, KYC document upload, payment processing, and all in-platform communications.
- Access controls: Personal data is accessible only to kr99 personnel and authorised processors who require it to perform their specific role. All access is logged and subject to periodic review.
- Two-factor authentication (2FA): Available to all kr99 account holders as an additional layer of account security. kr99 strongly recommends enabling 2FA on your account.
- Secure data storage: Personal data and financial records are stored on secured servers with firewall protection, intrusion detection systems, and regular security patching.
- Regular security audits: kr99's technical infrastructure is subject to periodic security assessments by qualified security professionals.
- Incident response plan: In the event of a confirmed personal data breach that poses a risk to affected individuals, kr99 will take all necessary steps to contain the breach and notify affected account holders without undue delay.
10 Your Rights as a Data Subject
As a player on the kr99 platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact the kr99 Data Protection team using the details in Section 14. kr99 will respond to all valid requests within a reasonable timeframe.
Your Data Subject Rights
kr99 respects your rights over your personal data. Here is a summary of the rights you hold and what each one means in practice.
Right of Access
You have the right to request a copy of all personal data kr99 holds about you, along with information about how it is being processed. Submit a subject access request to our support team and we will provide a full data summary.
Right to Rectification
If any personal data kr99 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details directly within your account settings or by contacting support.
Right to Erasure
Also known as the "right to be forgotten", this allows you to request the deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to kr99's legal retention obligations.
Right to Restriction
You may request that kr99 restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed or where you have objected to processing based on legitimate interests.
Right to Portability
Where processing is based on your consent or on the performance of a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider if you choose.
Right to Object
You may object at any time to the processing of your personal data for direct marketing purposes. You may also object to processing carried out on the basis of legitimate interests, in which case kr99 will assess whether its interests override your rights.
11 Children & Underage Players
The kr99 platform is strictly intended for adults aged 21 years and above. kr99 does not knowingly collect, process, or retain personal data from any person under the age of 21. Age verification is a mandatory component of the kr99 KYC process and is applied to all account holders without exception.
If kr99 discovers or receives credible notification that an account has been registered by or is being operated by a person under the age of 21, that account will be immediately closed, all balances will be handled in accordance with kr99's underage account policy, and all associated personal data will be deleted as swiftly as compliance obligations allow.
12 International Data Transfers
In certain circumstances, personal data collected by kr99 may be transferred to, stored in, or processed in a country other than Bangladesh. This may occur when kr99 uses cloud hosting infrastructure, third-party game providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi), or KYC verification partners whose operations are based in other jurisdictions.
Where such international transfers occur, kr99 takes appropriate steps to ensure that your personal data remains protected to a standard that is consistent with this Policy and with applicable data protection principles. These steps may include entering into standard contractual clauses with the receiving party, conducting transfer impact assessments, and implementing supplementary technical safeguards such as encryption.
By using the kr99 platform and accepting this Privacy Policy, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Bangladesh as described in this section, subject to the safeguards outlined above.
13 Amendments to This Policy
kr99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, updates to applicable law, or changes to the kr99 platform and the services it offers. All amendments will be published on this page at https://kr99.io/privacy-policy.
The "Last updated" date at the top of this Policy will be revised each time a material change is made. Where a change is significant — for example, a material change to the purposes for which we process your data or to the categories of third parties with whom we share it — kr99 will endeavour to provide advance notice to active account holders via in-platform notification or email to the address registered to the account.
Your continued use of the kr99 platform following the publication of any amended Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree with the amended Policy, you must stop using the platform and may request the closure of your account by contacting kr99 support.
14 Contact & Data Enquiries
If you have any questions, concerns, or requests relating to this Privacy Policy or to the way in which kr99 processes your personal data, please contact the kr99 Data Protection team using any of the following channels:
- Email: [email protected] (plain text — not a clickable link)
- Live Chat: Available 24/7 directly on the kr99 platform at https://kr99.io
- WhatsApp: 24/7 support via WhatsApp — contact details available inside your kr99 account dashboard
kr99 is committed to resolving all data protection queries and subject access requests promptly and professionally. All enquiries are handled in English. Our support team operates on Bangladesh Standard Time (BST, UTC+6) but the live chat and WhatsApp channels maintain 24/7 availability for urgent data concerns.
Explore kr99's Full Game Library
Now that you understand how kr99 protects your privacy, discover hundreds of casino games, live cricket betting markets, and exclusive slots — all in a safe, SSL-encrypted environment built for players across Bangladesh.