kix8 Privacy
Policy

kix8 (referred to as "kix8", "we", "us", or "our") operates the online casino and sports betting platform accessible at kix8.io. kix8 is the data controller responsible for the personal data of all registered players and visitors who access the platform from Bangladesh and other jurisdictions.

For all data-related enquiries, the kix8 data protection contact point is our support team, reachable at [email protected]. We are committed to handling your personal data with care, in accordance with this Privacy Policy and applicable data protection principles.

This Privacy Policy applies to all personal data collected through: the kix8 website at kix8.io; the kix8 mobile-optimised interface; any customer support channels operated by kix8, including live chat and email correspondence; and any promotional campaigns or bonus programmes administered by kix8.

kix8 collects the following categories of personal data from players and visitors:

kix8 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, biometric data, or health data, except where such data is voluntarily provided in the context of a responsible gaming self-exclusion request (e.g., a player disclosing a gambling-related health concern). Such disclosures are treated with the strictest confidentiality.

kix8 collects personal data through the following channels:

• Direct collection: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting our support team, or participating in a promotion or survey.
• Automated collection: Data gathered automatically as you use the kix8 platform, including via cookies, web beacons, server logs, and session-recording tools. See Section 7 (Cookies & Tracking) for full details.
• Third-party collection: Data received from payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank) to confirm transaction status; from KYC/identity verification partners to validate the authenticity of documents submitted; and from fraud-prevention and AML (anti-money laundering) screening services.
• Game provider data: Aggregated gameplay data received from game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, used to resolve disputes and ensure the accuracy of win/loss records in your kix8 account.

The personal data collected by kix8 is used exclusively for the following purposes:

kix8 does not use your personal data for automated decision-making that produces significant legal effects without human review. Where automated screening flags an account for review (e.g., for suspected fraud or AML concerns), a qualified kix8 compliance team member reviews the case before any action is taken.

kix8 processes personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to perform the contract between kix8 and the player, including account creation, KYC verification, payment processing, and delivery of gaming services.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering requirements, age verification obligations, and responses to lawful requests from regulatory or law enforcement authorities.
• Legitimate interests: Processing carried out for the legitimate business interests of kix8, including fraud prevention, platform security, internal analytics, and responsible gaming monitoring — provided those interests are not overridden by the rights and freedoms of the data subject.
• Consent: Where kix8 relies on consent as the legal basis (for example, for optional marketing communications), you have the right to withdraw that consent at any time by contacting [email protected] or updating your account communication preferences. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

kix8 does not sell personal data to third parties. Data may be shared with the following categories of recipients, strictly on a need-to-know basis and under contractual data-protection obligations:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and Dutch-Bangla Bank — to facilitate deposits and withdrawals and to verify payment method ownership.
• Identity verification providers: Third-party KYC and document verification services used to confirm player identity and age in compliance with applicable requirements.
• Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other platform partners — to deliver game services and resolve any game-result disputes. Game providers receive only the minimum data necessary to operate their services.
• Fraud prevention and AML services: Specialist third-party screening services that help kix8 detect and prevent fraudulent activity, money laundering, and match-fixing.
• Regulatory and law enforcement authorities: Where kix8 is required by law, court order, or regulatory direction to disclose personal data. kix8 will notify affected players of such disclosures where legally permitted to do so.
• IT and hosting providers: Cloud infrastructure and cybersecurity partners who provide the technical environment in which kix8 operates. All such providers are bound by strict data-processing agreements and are prohibited from using kix8 player data for their own purposes.

Any transfer of personal data to service providers located outside Bangladesh is conducted under appropriate contractual safeguards to ensure an equivalent standard of data protection is maintained.

kix8 uses cookies and similar tracking technologies on the kix8.io platform. A cookie is a small text file placed on your device that helps us recognise returning users, remember preferences, and measure platform performance. The following types of cookies are used:

You can control optional cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Note that disabling cookies beyond the strictly necessary category may affect the functionality of certain kix8 platform features. kix8 does not use third-party advertising cookies or cross-site tracking technologies that follow your activity beyond kix8.io.

kix8 retains personal data for the periods set out below, after which data is securely deleted or irreversibly anonymised:

• Active account data: Retained for the full duration of your account relationship with kix8, plus a minimum of five (5) years following account closure, to satisfy legal, regulatory, and audit obligations.
• KYC verification documents: Retained for a minimum of five (5) years from the date of submission, or longer if required by applicable anti-money laundering regulations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the relevant transaction.
• Customer support communications: Retained for three (3) years from the date of the most recent communication in the relevant support thread, unless the matter is subject to ongoing dispute, in which case records are retained until final resolution.
• Technical and device data (server logs): Retained for ninety (90) days in raw form, after which log data is aggregated and anonymised for performance analysis purposes.
• Marketing consent records: Retained for the duration of your active consent, plus two (2) years following any withdrawal of consent, as evidence of the consent having been obtained and withdrawn.

Where kix8 is required by a legal hold, regulatory investigation, or court order to retain data beyond the standard periods above, that data will be preserved for the duration specified by the relevant authority and deleted thereafter in accordance with that authority's instructions.

As a kix8 player, you have the following rights over your personal data. To exercise any of these rights, contact the kix8 support team at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving a verifiable request.

• Right of access: You may request a copy of the personal data kix8 holds about you, together with information about how it is being processed.
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected or completed without undue delay.
• Right to erasure: You may request that your personal data be deleted where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where it has been unlawfully processed. This right is subject to overriding legal retention obligations — for example, kix8 cannot delete KYC records that must be kept for AML compliance purposes.
• Right to restriction of processing: You may request that kix8 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested.
• Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request that your data be provided to you in a structured, commonly used, machine-readable format.
• Right to object: You may object to the processing of your personal data where kix8 relies on legitimate interests as the legal basis. kix8 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where kix8 relies on consent, you may withdraw it at any time. Withdrawal does not affect prior processing.

kix8 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and kix8 servers.
• AES-256 encryption for sensitive data at rest, including KYC documents and financial records.
• Role-based access controls ensuring that kix8 staff can only access personal data relevant to their specific job function.
• Multi-factor authentication required for all administrative access to systems containing player data.
• Regular penetration testing and vulnerability assessments conducted by independent cybersecurity specialists.
• 24/7 automated monitoring for anomalous access patterns, brute-force attempts, and data exfiltration indicators.
• Documented incident response procedures with defined escalation paths and player notification protocols in the event of a data breach.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, kix8 will notify affected players without undue delay and take all reasonable steps to contain the breach and mitigate its effects.

If you are a parent or guardian and believe that a person under the age of 21 has created a kix8 account, please notify us immediately at [email protected]. We treat all such reports as high-priority and will investigate and act without delay.

kix8 uses age verification as a mandatory step during the account registration process. Players are required to confirm their date of birth at registration and to submit valid government-issued identification confirming their age as part of the KYC process. Accounts where age has not been verified may have withdrawal functionality restricted until verification is satisfactorily completed.

The kix8 platform may, from time to time, contain references to or integrations with third-party services — including game providers such as Pragmatic Play, Evolution Gaming, and Spribe. When you interact with a game or service provided by a third party, that third party's own privacy policy governs the data collected through their service.

kix8 is not responsible for the privacy practices of third-party game providers or payment processors. We recommend reviewing the privacy policies of any third-party services you interact with through the kix8 platform. kix8 does not have control over, and accepts no liability for, the data-handling practices of third-party providers.

kix8 reviews this Privacy Policy regularly and updates it whenever our data practices change or when applicable law requires us to do so. The effective date at the top of this policy indicates when the current version was last reviewed and adopted.

Where a change is material — meaning it significantly affects how we collect, use, or share your personal data — kix8 will notify registered players by email and/or by displaying a prominent notice on the kix8 platform at least seven (7) days before the change takes effect. Non-material clarifications or administrative corrections may take effect immediately.

Your continued use of the kix8 platform after the effective date of any update to this Privacy Policy constitutes your acceptance of the revised policy. If you do not agree with the changes, you may request account closure by contacting [email protected] before the effective date of the revision.

Previous versions of this Privacy Policy are available on request by contacting the kix8 support team.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by kix8, please contact us using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: "Data Rights Request" or "Privacy Enquiry"
• Response Time: Within 30 calendar days of receiving a verifiable request
• Support Hours: 24/7, all days including public holidays (Bangladesh Standard Time, UTC+6)
• Platform: kix8.io — serving players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all of Bangladesh