Privacy Policy — kg997 Online Casino

When you use the kg997 Platform — whether to browse, register an account, deposit funds, place bets, or contact our support team — we collect certain information about you. The nature of the information we collect depends on how you interact with kg997 and what services you use.

Information You Provide Directly

We collect information that you voluntarily provide to us during the account registration process and in the course of your ongoing use of the Platform. This includes:

• Identity data: Full legal name, date of birth, national identity card (NID) number, passport number, or driving licence number (provided for KYC verification purposes).
• Contact data: Email address, mobile phone number, and residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna) and postal code.
• Account credentials: Your chosen username and an encrypted representation of your password. We never store passwords in plain text.
• Financial data: Mobile financial service account identifiers (e.g., your bKash or Nagad registered mobile number), bank account details where applicable, and transaction history relating to deposits and withdrawals made through the kg997 Platform.
• Communications data: The content of any messages you send to our support team via email or live chat, including timestamps and the nature of your query.
• Responsible gaming data: Any deposit limits, session reminders, cooling-off requests, or self-exclusion instructions you submit through the account dashboard or support channel.

Information We Collect Automatically

When you access the kg997 Platform, our servers and analytics infrastructure automatically collect certain technical data about your device and browsing session. This includes:

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and device language setting.
• Usage data: Pages visited, games opened, duration of gaming sessions, bet history, search queries entered on the Platform, and clickstream data indicating how you navigate between sections.
• Geolocation data: Approximate location derived from your IP address. We do not collect precise GPS-level location data unless you explicitly grant that permission through your device settings.
• Cookies and similar technologies: Data collected via first-party cookies, session tokens, and local storage. See the Cookies & Tracking Technologies section for full details.

Information From Third Parties

In certain circumstances, kg997 may receive information about you from third-party sources, including:

• Payment service providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard) confirming the status and outcome of a transaction.
• Identity verification partners who assist us with KYC and anti-money-laundering (AML) screening.
• Game providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) who may share aggregated session and outcome data with us for game-integrity and dispute-resolution purposes.
• Fraud detection services that flag high-risk account activity patterns based on cross-platform signals.

kg997 uses the personal data we collect for specific, legitimate purposes. We do not use your data for any purpose that is incompatible with the purposes disclosed at the time of collection. The primary purposes for which we process your personal data are set out below.

Marketing Communications

Where you have consented to receive marketing communications from kg997, we may send you information about new games, promotions, seasonal bonus offers (e.g., Eid specials, BPL cricket season offers, Pohela Boishakh rewards), and Platform updates via email or SMS. You may withdraw your consent to marketing communications at any time by contacting support at [email protected] or by updating your notification preferences in your account dashboard. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

kg997 processes your personal data on one or more of the following legal bases, depending on the specific purpose of the processing activity:

• Contractual necessity: Processing required to provide the services you have registered for and agreed to under the kg997 Terms & Conditions — including account management, transaction processing, and customer support — is carried out because it is necessary to perform our contract with you.
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations — including KYC identity verification, AML screening, and record-keeping requirements — is carried out because we are legally required to do so.
• Legitimate interests: Processing carried out to detect and prevent fraud, protect Platform security, improve our services through usage analytics, and manage responsible gaming obligations is based on our legitimate interests, balanced against your rights and interests. We apply a proportionality assessment before relying on this basis.
• Consent: Processing for the purpose of sending you marketing communications and promotional offers is based on your freely given, specific, and informed consent. You have the right to withdraw this consent at any time.

kg997 uses cookies and similar technologies (including local storage tokens and session identifiers) to operate the Platform reliably, remember your preferences, and understand how users interact with our services. This section explains what cookies we use and why.

Essential Cookies

These cookies are strictly necessary for the Platform to function. They include session authentication tokens that keep you logged in during your visit, security tokens that protect against cross-site request forgery (CSRF), and load-balancing cookies that direct your requests to the correct server. You cannot opt out of essential cookies as they are required for the Platform to operate.

Functional Cookies

Functional cookies remember choices you make on the Platform — such as your preferred currency display (BDT), your most recently played games, and your responsible gaming settings. These cookies improve your experience but are not strictly essential. You may disable them, though doing so may affect how certain features work.

Analytics Cookies

We use first-party analytics tools to understand how users navigate the kg997 Platform — which pages receive the most visits, where users drop off, and how long gaming sessions last on average. This data is aggregated and anonymised before analysis. No individual user's betting behaviour is profiled for third-party advertising purposes based on analytics data.

Managing Cookies

Most modern browsers allow you to view, manage, and delete cookies stored on your device. You can typically find these controls under your browser's "Privacy" or "Security" settings. Please note that disabling essential cookies will prevent you from logging in to the kg997 Platform. For guidance on managing cookies in your specific browser, refer to the help documentation provided by your browser vendor.

kg997 does not sell, rent, or trade your personal data to any third party for their own independent commercial purposes. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

Service Providers and Data Processors

We share personal data with carefully selected third-party service providers who process data on our behalf and under our instruction. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, and card network partners (Visa, Mastercard) receive the financial data necessary to execute deposits and withdrawals you initiate.
• KYC and AML verification providers: Identity verification partners receive your identity documents and related data for the purpose of completing required compliance checks.
• Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other game studios receive your account identifier and session data to deliver games and resolve technical disputes.
• Customer support platforms: Our support ticketing and live chat infrastructure providers process communications data to help us manage and respond to your enquiries.
• Hosting and infrastructure providers: Server and cloud infrastructure providers host the Platform and process data as part of delivering the service. All such providers operate under contractual data processing agreements with appropriate security obligations.

Legal and Regulatory Disclosures

kg997 may disclose your personal data to law enforcement agencies, regulatory authorities, financial intelligence units, or courts of competent jurisdiction where we are legally required to do so or where such disclosure is necessary to:

• Comply with a court order, legal obligation, or regulatory directive.
• Investigate or prevent suspected fraud, money laundering, or other criminal activity.
• Protect the rights, property, or safety of kg997, its users, or the public.

Where legally permissible, we will notify you of any such disclosure request as soon as reasonably practicable.

Business Transfers

In the event of a merger, acquisition, or sale of all or a substantial portion of kg997's assets, your personal data may be transferred to the acquiring entity as part of the transaction. In such circumstances, you will be notified of the transfer and the privacy practices of the new entity before the transfer takes effect, and your rights under this Policy will be preserved.

kg997 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with our legal and regulatory obligations, and to resolve any disputes or enforce our agreements.

The following general retention guidelines apply:

• Account and identity data: Retained for the duration of your account's active status plus a minimum of five (5) years following account closure, in compliance with applicable anti-money-laundering and record-keeping requirements.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction, as required for AML compliance and financial audit purposes.
• KYC documents: Retained for the same period as account and identity data. Physical or scanned copies of identity documents are stored in encrypted form and access is strictly controlled.
• Customer support communications: Retained for a period of three (3) years from the date of the last communication in a support thread, or longer if the matter relates to an unresolved dispute or legal proceedings.
• Marketing consent records: Retained for the duration of your consent plus sufficient time to demonstrate that consent was validly obtained, in case of any regulatory enquiry.
• Analytics and usage data: Aggregated and anonymised after a maximum of twenty-four (24) months. Once anonymised, the data no longer constitutes personal data and is retained indefinitely for statistical analysis purposes.

When personal data is no longer required for its stated retention purpose, it is securely deleted or irreversibly anonymised. We do not retain data beyond the minimum period required by applicable law.

kg997 takes the security of your personal data seriously. We implement a layered set of technical and organisational security measures designed to protect your information against unauthorised access, accidental loss, alteration, disclosure, or destruction.

Technical Safeguards

• SSL/TLS encryption: All data transmitted between your device and the kg997 Platform is encrypted using Transport Layer Security (TLS). Look for the padlock icon in your browser address bar when visiting kg997.
• Password hashing: Passwords are stored using strong one-way cryptographic hashing algorithms. We never store passwords in plain text or in reversibly encrypted form.
• Access controls: Access to personal data within kg997's systems is restricted on a need-to-know basis. Staff with access to sensitive personal data are bound by confidentiality obligations.
• Intrusion detection: Our infrastructure is monitored around the clock for signs of unauthorised access, suspicious traffic patterns, and potential security incidents.
• Payment security: Financial transaction data is processed through PCI-DSS-compliant payment gateways. kg997 does not store full card numbers or mobile wallet PINs on its own servers.

Organisational Safeguards

• All staff who handle personal data receive privacy and security training relevant to their role.
• Third-party service providers with access to personal data are vetted for security compliance before engagement and are subject to data processing agreements.
• Security policies and practices are reviewed and updated on a regular basis.

Your Role in Security

While kg997 takes all reasonable precautions to protect your data on our side, the security of your account also depends on your own practices. You are responsible for:

• Keeping your kg997 account password confidential and not sharing it with any third party.
• Using a strong, unique password for your kg997 account that you do not reuse on other websites.
• Logging out of your account when using a shared or public device.
• Reporting any suspected unauthorised access to your account to [email protected] without delay.

As a user of the kg997 Platform, you have a number of rights in relation to the personal data we hold about you. These rights are set out below, together with guidance on how to exercise them.

Right of Access

You have the right to request a copy of the personal data that kg997 holds about you. Upon a verified request, we will provide you with a summary of the categories of data held, the purposes for which it is processed, and — where technically feasible — a structured copy of your data.

Right to Rectification

If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You can update most contact information directly through your account dashboard; for changes to identity data (name, date of birth, NID), please contact support with the relevant supporting documentation.

Right to Erasure

You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where you object to processing based on legitimate interests and there is no overriding legitimate ground. Please note that this right is subject to our legal and regulatory data retention obligations — we cannot erase data that we are required by law to retain.

Right to Restrict Processing

In certain circumstances — for example, while we verify the accuracy of data you have contested — you may request that we restrict the processing of your personal data. During the restriction period, we will continue to store the data but will not actively process it except with your consent or for legal claims.

Right to Object

Where we process your personal data on the basis of legitimate interests, you have the right to object to that processing at any time. You also have an absolute right to object to the processing of your data for direct marketing purposes, and we will honour that objection without requiring you to provide any justification.

Right to Data Portability

Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that we transmit it directly to another data controller where technically feasible.

How to Exercise Your Rights

To exercise any of the rights described above, please contact the kg997 privacy team at [email protected] with the subject line "Privacy Rights Request". Please include your full name, the email address registered to your account, and a clear description of the right you wish to exercise. We will respond to verified requests within 30 calendar days. We do not charge a fee for handling privacy rights requests, except in cases of manifestly unfounded or excessive requests where we reserve the right to charge a reasonable administrative fee.

The kg997 Platform is strictly intended for adults aged 18 years and above. We do not knowingly collect personal data from any person under the age of 18. Registration on the Platform requires confirmation of age, and we apply KYC verification procedures to detect and prevent underage access.

If we become aware that we have inadvertently collected personal data from a person under the age of 18, we will take immediate steps to delete that data, close the associated account, and — where required — report the matter to relevant authorities. If you are a parent or guardian and you believe your child may have registered an account on the kg997 Platform, please contact us immediately at [email protected] so that we can investigate and act without delay.

kg997 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, regulatory requirements, or the services we offer. When we make material changes to this Policy, we will notify you via an on-Platform notification displayed at your next login and, where possible, by email to the address registered to your account.

The "Effective Date" displayed at the top of this page and in the hero section above indicates when the current version of this Privacy Policy entered into force. We encourage you to review this page periodically so that you are always aware of the most current version of our privacy practices.

Your continued use of the kg997 Platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the updated Policy, you should cease using the Platform and request account closure in accordance with the account closure process described in our Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way in which kg997 handles your personal data, please contact us using the details below. We are committed to addressing all privacy-related enquiries promptly and transparently.

• Email: [email protected] (plain text — not a clickable link)
• Response time: We aim to respond to all privacy enquiries within 5 business days (Bangladesh Standard Time, UTC+6). Complex privacy rights requests (such as data access or erasure requests requiring identity verification) may take up to 30 calendar days.
• Subject line: For privacy-specific requests, please include "Privacy Policy Enquiry" or "Privacy Rights Request" in your subject line to ensure your message is routed to the appropriate team.

For urgent account security concerns — such as suspected unauthorised access to your kg997 account — please contact support immediately using the same email address with the subject line "Urgent: Account Security". Our team monitors for security-flagged emails around the clock and will prioritise your request accordingly.