kfbd Privacy Policy

1.1 Registration Data. When you create a kfbd account, we collect your full legal name, date of birth, residential address, email address, and mobile phone number. This information is required to establish your account, verify that you meet the minimum age requirement of 18 years, and communicate with you about your account. Providing false or inaccurate registration data is a breach of the kfbd Terms & Conditions.

1.2 Identity Verification Data. To comply with our Know Your Customer (KYC) obligations and to protect the integrity of the platform, kfbd may request documentary evidence of your identity and address. Acceptable documents include a National Identity Card (NID), passport, birth certificate, and recent utility bill or bank statement. Copies of these documents are processed and stored securely in accordance with Section 5 of this Privacy Policy.

1.3 Financial and Payment Data. When you deposit funds into or withdraw funds from your kfbd account, we collect transaction data including the payment method used (bKash, Nagad, Rocket, Upay, or bank transfer), transaction amount in BDT (৳), transaction reference numbers, and timestamps. kfbd does not store full payment credentials such as complete mobile banking PINs. Payment transactions are processed by third-party payment providers under their own security standards.

1.4 Activity and Usage Data. kfbd automatically records data about how you interact with the platform. This includes bets placed, games played, wager amounts and results, session durations, pages visited, features accessed, and bonus usage history. This data is used for account management, fraud detection, responsible gaming monitoring, and platform optimisation.

1.5 Technical and Device Data. We collect technical information about the device and network you use to access kfbd. This includes your IP address, browser type and version, operating system, device identifiers, screen resolution, time zone (Bangladesh Standard Time, UTC+6), and referral URL. This data helps us secure the platform, detect suspicious access patterns, and deliver a consistent user experience across devices.

1.6 Communications Data. If you contact kfbd support via email or any other channel, we retain records of that correspondence including the content of your messages and our responses. This data is used to manage your query, improve our support quality, and maintain an audit trail of player-facing communications.

1.7 Cookies and Tracking Data. kfbd uses cookies and similar tracking technologies to collect data about your browsing behaviour on the platform. Please refer to Section 4 of this Privacy Policy for full details of the cookies we use and how you can manage your cookie preferences.

Data Collected From Third Parties

1.8 Third-Party Sources. kfbd may receive personal data about you from third parties in limited circumstances. These include: identity verification agencies that confirm the authenticity of the documents you provide; payment processors that confirm the status of your financial transactions; fraud detection services that flag suspicious activity patterns; and, where permitted by applicable law, publicly available sources used to supplement or verify the information you have provided to us directly.

3.1 Payment Service Providers. To process your deposits and withdrawals, kfbd shares necessary transaction data with approved payment partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank. Each payment partner processes your data under their own privacy policy and security standards as well as any contractual obligations they hold with kfbd.

3.2 Identity Verification Providers. To fulfil our KYC obligations, kfbd shares identity document data with specialist third-party identity verification service providers. These providers are contractually bound to process your data solely for the purpose of identity verification on behalf of kfbd and may not use it for any other purpose.

3.3 Game Content Suppliers. The games available on the kfbd platform are provided by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game, the game supplier's software may process certain technical data (such as session identifiers and wager data) required to deliver the game experience. kfbd selects game suppliers that maintain appropriate data protection standards.

3.4 Fraud Prevention and Security Services. kfbd shares relevant data with specialist fraud prevention and cybersecurity service providers to protect the platform and its players. These providers act as data processors and are subject to strict contractual obligations that restrict their use of the data to the agreed security purposes only.

3.5 Legal and Regulatory Disclosure. kfbd may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities where required to do so by applicable law, by a valid legal order, or where kfbd reasonably believes that disclosure is necessary to prevent fraud, protect the safety of a person, or enforce kfbd's legal rights. kfbd will notify you of such disclosures where it is legally permitted to do so.

3.6 Business Transfers. In the event that kfbd undergoes a business restructuring, merger, acquisition, or sale of assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and any material changes to the way your data is processed that result from it.

3.7 No Sale of Data. kfbd does not and will not sell, rent, or otherwise provide your personal data to unrelated third parties for their own marketing or commercial exploitation purposes. Any sharing of data is strictly limited to the purposes described in this Section 3 and is subject to appropriate contractual protections.

5.1 SSL Encryption. All data transmitted between your device and the kfbd platform is protected using industry-standard Transport Layer Security (TLS) encryption. This ensures that your login credentials, personal information, and financial data cannot be intercepted in transit by third parties. You can verify the secure connection by checking for the padlock icon in your browser's address bar when visiting kfbd.club.

5.2 Access Controls. Access to personal data stored by kfbd is restricted on a strict need-to-know basis. Only authorised kfbd personnel and authorised service providers who require access to perform their designated functions are permitted to access player data. All such access is logged and subject to periodic audit.

5.3 Password Security. kfbd stores account passwords in an encrypted, hashed format. kfbd staff cannot view your password in plain text. If you forget your password, you will be required to complete a secure password reset process — kfbd will never send your password to you in plain text. You are responsible for maintaining the confidentiality of your own login credentials.

5.4 Secure Data Storage. Personal data collected by kfbd is stored on secure servers protected by firewalls, intrusion detection systems, and physical access controls. kfbd's infrastructure is maintained to current industry security standards and is subject to regular independent security review.

5.5 Data Breach Response. In the event of a data security incident that is likely to result in a risk to your rights and freedoms, kfbd will notify affected players as soon as reasonably practicable after becoming aware of the incident. Notifications will be sent to the email address registered on your kfbd account and will include details of the nature of the breach, the data affected, and the steps kfbd is taking in response.

5.6 Your Role in Data Security. While kfbd takes all reasonable steps to protect your data at our end, account security is a shared responsibility. You must keep your kfbd login credentials confidential, use a strong and unique password, enable two-factor authentication where available, and contact [email protected] immediately if you suspect your account has been compromised.

7.1 Active Accounts. While your kfbd account remains active, we retain all personal data associated with your account. This includes registration details, KYC documents, transaction history, activity records, and support communications. Active account data is retained because it is necessary for the ongoing performance of the contract between you and kfbd and to fulfil our compliance obligations.

7.2 Closed Accounts. Following the closure of your kfbd account — whether at your own request or by kfbd — we will retain your personal data for a minimum period of five (5) years from the date of closure. This retention period reflects standard financial record-keeping obligations and allows kfbd to respond to any regulatory enquiries, legal disputes, or fraud investigations that may arise after account closure.

7.3 Financial Transaction Records. Records of all financial transactions conducted through your kfbd account (deposits, withdrawals, bonuses, and adjustments) are retained for a minimum of five (5) years from the date of each transaction. This retention is required under applicable financial regulation and anti-money laundering obligations and cannot be waived even where an erasure request is made.

7.4 Identity Verification Documents. Copies of identity documents submitted for KYC verification are retained for a minimum of five (5) years following the closure of the associated kfbd account. Where an account is subject to a regulatory investigation, the retention period may be extended until the investigation is concluded and any associated legal proceedings are resolved.

7.5 Support Communications. Records of customer support interactions are retained for three (3) years from the date of the last interaction. This period allows kfbd to reference prior communications in the event of a dispute and to monitor support quality over time.

7.6 Marketing Data. Where you have consented to receive marketing communications, your contact details will be retained for marketing purposes until you withdraw your consent or your account is closed, whichever occurs first. Following withdrawal of consent, your details will be suppressed from marketing lists promptly and within a maximum of 5 business days.

7.7 Anonymised and Aggregated Data. kfbd may retain anonymised or aggregated data derived from your personal data indefinitely for analytics, product research, and business intelligence purposes. Once data has been genuinely anonymised such that you cannot be re-identified from it, it falls outside the scope of data protection obligations and is not subject to the retention limits described above.

7.8 Deletion Following Retention Period. When the applicable retention period expires and there is no ongoing legal or regulatory obligation requiring continued retention, kfbd will securely delete or anonymise your personal data. Secure deletion means that the data is permanently destroyed in a manner that prevents recovery.