kg995 Privacy Policy — Your Data, Protected

This Privacy Policy ("Policy") describes how kg995 ("we", "us", "our", "the Platform") collects, stores, uses, and protects the personal information of players and visitors who access the kg995 platform at kg995.io. We are committed to handling all personal data with integrity, transparency, and in compliance with applicable data protection principles.

kg995 operates as an online betting and casino entertainment platform serving adult players in Bangladesh. Our platform offers cricket sportsbook, live casino, slots, crash games, and a range of promotional features accessible via desktop and mobile browsers. All services are conducted in Bangladeshi Taka (BDT) through local mobile financial service (MFS) providers.

By registering an account on kg995, making a deposit, placing a wager, or simply browsing the platform, you acknowledge that you have read this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, please do not use the kg995 platform.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference and together form the complete agreement governing your use of the kg995 platform.

kg995 collects personal data through several channels: directly from you during account registration and ongoing account operation; automatically through your use of the platform; and from third-party identity and payment verification services where necessary. The categories of personal data we collect are set out below.

2.1 Registration & Identity Data

• Full legal name as it appears on your National Identity Card (NID) or passport.
• Date of birth (used for mandatory 21+ age verification).
• Bangladeshi mobile phone number (used for account verification, OTP authentication, and WhatsApp support).
• Preferred username and account password (stored in encrypted, hashed form — never in plain text).
• Residential address (collected during enhanced verification where required).

2.2 Payment & Transaction Data

• Mobile financial service (MFS) account references for bKash, Nagad, Rocket, or Upay accounts registered in your name, used to process deposits and withdrawals.
• Transaction IDs, deposit amounts, withdrawal amounts, and timestamps for all financial activity on your account.
• Records of bonus claims, wagering activity, and balance history retained for audit and dispute resolution purposes.

2.3 Identity Verification Documents

• Copies of government-issued identity documents (National Identity Card, passport, or driving licence) where requested to fulfil Know Your Customer (KYC) obligations.
• Utility bills or bank statements where proof of address is required.
• Screenshots of MFS account details where third-party payment verification is necessary.

2.4 Usage & Technical Data

• IP address, device type, operating system, and browser type collected automatically when you access the kg995 platform.
• Session duration, pages visited, games played, and click-path data used for platform improvement and fraud detection.
• Login timestamps and geographic location data derived from IP address, used for security monitoring and anomaly detection.

2.5 Communications Data

• Content of communications you send to kg995 via live chat, email, or WhatsApp, including support queries, complaints, and feedback.
• Records of marketing preferences, including opt-in and opt-out history for promotional communications.

kg995 uses the personal data we collect for the following clearly defined purposes. We process data only to the extent necessary to fulfil these purposes and do not use your personal information in ways that are incompatible with the reasons for which it was originally collected.

kg995 does not use automated decision-making processes that produce legal or similarly significant effects on individual players without human review. Where automated tools assist in fraud detection or responsible gaming monitoring, a human compliance team member reviews any resulting action before it is applied to a player account.

kg995 processes your personal data on one or more of the following legal grounds, depending on the specific processing activity:

• Contractual Necessity: Processing is necessary to perform the contract between you and kg995 as set out in our Terms & Conditions. This includes account management, payment processing, and the delivery of all platform services you have registered to use.
• Legitimate Interests: Processing is necessary for kg995's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and platform improvement — provided those interests are not overridden by your own privacy rights.
• Legal Obligation: Processing is necessary to comply with applicable legal or regulatory requirements, including Know Your Customer (KYC) obligations, anti-money laundering (AML) requirements, and record-keeping obligations.
• Consent: Where we rely on your consent as the basis for processing — such as sending promotional communications via SMS or WhatsApp — we will obtain that consent explicitly and maintain a record of it. You may withdraw consent at any time by contacting our support team.

kg995 does not sell, rent, or commercially transfer your personal data to any third party. We share personal data only in the following limited and clearly defined circumstances:

• Payment Service Providers: We share transaction references and account identifiers with bKash, Nagad, Rocket, and Upay solely to process your deposits and withdrawals. These providers act as independent data controllers under their own privacy policies and are regulated by Bangladesh Bank.
• Game Content Providers: Third-party game providers including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Spribe, and Microgaming may receive pseudonymised player session identifiers to facilitate game delivery and RNG certification. No directly identifying personal data (name, NID number, mobile number) is shared with game providers.
• Identity Verification Services: Where enhanced KYC checks are required, we may share identity document data with trusted third-party verification services operating under strict data processing agreements with kg995.
• Legal and Regulatory Authorities: kg995 may disclose personal data to law enforcement agencies, regulatory bodies, or judicial authorities where required to do so by applicable law, court order, or legal process. We will notify affected players of such disclosures where legally permitted to do so.
• Fraud Prevention Networks: In cases of confirmed fraud, we may share relevant account data with industry fraud prevention networks to protect other platforms and players from the same fraudulent actor.
• Professional Advisers: kg995's legal counsel, compliance advisers, and auditors may access personal data on a strictly need-to-know basis and are bound by professional confidentiality obligations.

All financial transactions on kg995 are conducted in Bangladeshi Taka (BDT) through mobile financial service (MFS) providers regulated by Bangladesh Bank. The MFS providers currently supported by kg995 are:

• bKash — operated by bKash Limited, a subsidiary of BRAC Bank PLC.
• Nagad — operated as a digital financial service under Bangladesh Post Office.
• Rocket — mobile banking service operated by Dutch-Bangla Bank Limited (DBBL).
• Upay — mobile financial service operated by United Commercial Bank PLC (UCB).

When you make a deposit or withdrawal using any of these services, the transaction is initiated between your registered MFS account and kg995's designated merchant account. kg995 receives confirmation of the transaction from the MFS provider along with a transaction reference ID, the amount, and a timestamp. kg995 does not receive or store your full MFS PIN, OTP codes, or any credentials used to authenticate the transaction on your MFS account.

All MFS transactions must be conducted from a payment account registered in your own name. Third-party deposits — where the sending MFS account belongs to a person other than the registered kg995 player — are strictly prohibited under both our Terms & Conditions and responsible gaming obligations.

Transaction records are retained for a minimum period as required by applicable financial regulations and are used for audit, dispute resolution, anti-money laundering monitoring, and responsible gaming compliance purposes.

kg995 uses cookies and similar local storage technologies to provide a functional, personalised, and secure platform experience. A cookie is a small text file placed on your device by the kg995 platform when you visit it. The following categories of cookies are used:

kg995 does not use third-party advertising cookies, cross-site tracking pixels, or social media retargeting technologies. You can manage or delete cookies through your browser settings at any time. Please note that disabling essential cookies may prevent certain platform features from functioning correctly, including maintaining your login session.

kg995 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and for as long as required by applicable legal, regulatory, and accounting obligations. The following retention periods apply as a general guide:

• Active Account Data: Retained for the full duration of your account relationship with kg995, plus a minimum post-closure retention period of five (5) years to comply with anti-money laundering record-keeping requirements.
• KYC & Identity Documents: Retained for a minimum of five (5) years from the date of last account activity, in compliance with financial crime prevention regulations.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by applicable financial record-keeping regulations.
• Support Communications: Retained for up to three (3) years from the date of the communication, or longer if the communication relates to an ongoing dispute or legal matter.
• Marketing Preference Records: Retained for the duration of your account relationship and for a period of three (3) years following account closure, to demonstrate compliance with opt-in and opt-out obligations.
• Anonymised Analytics Data: Retained indefinitely in anonymised aggregate form, as this data cannot be linked back to any individual player.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data deletion is requested by a player (see Section 10 — Your Rights), kg995 will complete the deletion within 30 days subject to any overriding legal retention obligations that require the data to be kept for a longer period.

kg995 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key security measures in place include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and kg995 servers is encrypted using industry-standard 256-bit SSL/TLS protocols. This is the same level of encryption used by major international banking institutions.
• Password Hashing: Account passwords are never stored in plain text. They are processed through a one-way cryptographic hashing algorithm with a unique salt per account before storage. kg995 staff cannot retrieve your password; if lost, it must be reset via your verified mobile number.
• OTP Authentication: Login attempts from unrecognised devices trigger a one-time password (OTP) verification step sent to your registered mobile number via SMS. This prevents unauthorised access even if your password is compromised.
• Access Controls: Access to personal data within kg995's internal systems is strictly limited on a need-to-know basis. Only authorised personnel with a legitimate operational reason may access player account data, and all such access is logged for audit purposes.
• Fraud Monitoring: kg995 operates automated and manual fraud monitoring systems that analyse transaction patterns, login behaviour, and wagering activity to detect and respond to suspicious activity in real time.
• Secure Data Storage: All personal data is stored on secure servers with restricted physical and network access. Data backups are encrypted and stored separately from primary data stores.

As a kg995 player and data subject, you hold the following rights in relation to the personal data we hold about you. kg995 is committed to honouring these rights promptly and without unnecessary barriers.

• Right of Access: You have the right to request a copy of all personal data kg995 holds about you. We will provide this in a structured, commonly used format within 30 days of a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain details directly within your kg995 account settings; for changes to core identity data, contact our support team.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data. kg995 will comply with erasure requests subject to any overriding legal obligation to retain data for a specified period (such as AML record-keeping requirements). Data that must be retained by law will be isolated and restricted from further processing beyond the legally required purpose.
• Right to Restriction of Processing: You may request that kg995 restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of the data is being resolved.
• Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format and to have it transferred to another data controller where technically feasible.
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of legitimate interests, including profiling for fraud prevention purposes. We will consider your objection and cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. This does not affect the lawfulness of prior processing.

To exercise any of the above rights, please contact our data team at [email protected] with the subject line "Data Rights Request — [Your Username]". We will verify your identity before processing any request and aim to respond within 30 days. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days and will notify you accordingly.

The kg995 platform is strictly intended for adults aged 21 years and above. kg995 does not knowingly collect, store, or process personal data belonging to any person under the age of 21. Registration on the kg995 platform requires confirmation that the registering player is aged 21 or older at the time of registration.

As part of our Know Your Customer (KYC) process, kg995 verifies the age of players using government-issued identity documentation. Any account found to belong to a person under 21 years of age will be immediately suspended, all balances will be frozen pending investigation, and the account will be permanently closed. Any deposits made by a minor will be returned via the original payment method after deduction of any bonuses claimed or winnings generated, which will be forfeited.

If you are a parent or guardian and you believe your child has registered an account on kg995, please contact our support team immediately at [email protected] with the subject line "Minor Account Report". We will investigate and take appropriate action within 24 hours of receiving your report.

kg995 may send you promotional communications — including information about new games, seasonal promotions, bonus offers, and platform updates — via SMS to your registered mobile number or via WhatsApp, provided you have explicitly opted in to receive such communications at the time of registration or through your account settings.

kg995 does not send unsolicited marketing communications to players who have not opted in. We do not purchase marketing lists or send bulk promotional messages to unverified contacts. All marketing communications sent by kg995 will clearly identify kg995 as the sender and will include clear instructions on how to opt out.

You may opt out of marketing communications at any time by:

• Updating your communication preferences within your kg995 account settings.
• Replying "STOP" to any SMS marketing message received from kg995.
• Sending an opt-out request to [email protected] with the subject line "Marketing Opt-Out — [Your Username]".

Opting out of marketing communications does not affect your ability to receive essential transactional messages, such as deposit confirmations, withdrawal notifications, OTP authentication codes, account security alerts, or important policy update notifications. These essential communications are sent regardless of your marketing preference settings, as they are necessary for the operation of your account.

Seasonal promotions tied to Bangladeshi cultural events — such as Eid, Pohela Boishakh (Bengali New Year), Victory Day (December 16), and Independence Day (March 26) — may be communicated to opted-in players as part of kg995's standard promotional calendar.

kg995 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, platform features, applicable law, or regulatory requirements. When material changes are made to this Policy, we will notify registered players via one or more of the following channels:

• A prominent notice displayed on the kg995 platform homepage or login screen at the time you next access the platform.
• An SMS notification to your registered mobile number summarising the key changes and directing you to the updated Policy.
• A WhatsApp message to your registered contact number, where you are opted in to platform communications.

The "Last Updated" date at the top of this Privacy Policy will always reflect the date of the most recent revision. We encourage you to review this Policy periodically, even if you have not received a notification, as minor non-material updates may be made without individual notification.

Your continued use of the kg995 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should stop using the platform and contact our support team to close your account and request deletion of your personal data in accordance with Section 10 of this Policy.

If you have any questions, concerns, or complaints about this Privacy Policy, or if you wish to exercise any of your data rights as described in Section 10, please reach out to the kg995 support and data team using the contact details below. All privacy-related queries are handled by trained staff and treated with the highest level of confidentiality.

• Email: [email protected] — use subject line "Privacy Query" or "Data Rights Request — [Your Username]" for fastest routing.
• Live Chat: Available 24/7 directly within the kg995 platform after logging in. For data rights requests, live chat agents will escalate your request to the data team with a formal acknowledgement sent via email.
• WhatsApp: +880 1700 000000 — available around the clock for account and privacy queries in Bangladesh Standard Time (BST, UTC+6).

kg995 aims to acknowledge all privacy-related queries within 24 hours and to resolve them fully within 30 days. For complex data rights requests, an extension of up to a further 30 days may apply, and you will be informed of this extension in advance.