Privacy Policy for kb33

This Privacy Policy applies to all personal data collected, processed, and stored by kb33 ("we", "us", "our", "the Platform") in connection with the operation of the kb33 website at kb33.lat, including all subdomains, associated mobile interfaces, and any mirror domains operated by kb33.

For the purposes of this policy, kb33 acts as the data controller in respect of the personal data it processes about registered account holders, prospective account holders, and visitors to the kb33 platform. "Personal data" means any information that identifies or can reasonably be used to identify a living individual, either directly or in combination with other information.

By registering an account on kb33 or by continuing to use the kb33 platform after this policy has been published, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

kb33 collects personal data in the following categories. The specific data points collected depend on how you use the platform and whether you have completed the full account verification process.

kb33 does not collect special categories of sensitive personal data (such as health data, biometric data for identification purposes beyond liveness checks, racial or ethnic origin, political opinions, or religious beliefs) except where strictly required by anti-money laundering (AML) obligations, in which case such data is collected only with your explicit consent and handled under heightened security controls.

kb33 collects personal data through the following channels:

• Direct submission: Data you provide when filling in the registration form, completing the KYC verification process, submitting a deposit or withdrawal request, or contacting support by email.
• Automated collection: Technical and activity data collected automatically when you access the kb33 platform, including IP address, device identifiers, browser fingerprint, and session behaviour, captured via server logs and first-party cookies.
• Payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and Islami Bank when you initiate a deposit or withdrawal. kb33 does not receive your wallet PIN or bank login credentials through these integrations.
• Identity verification partners: Confirmation of identity document authenticity and liveness check results passed to kb33 by our third-party KYC verification service provider, used solely for account verification purposes.
• Game providers: Aggregate session data (game rounds played, stakes, results) passed to kb33 by game providers including Pragmatic Play, Evolution Gaming, Spribe, Microgaming, Ezugi, NetEnt, and PG Soft for the purpose of account balance reconciliation and responsible gaming monitoring.

kb33 uses the personal data it collects for the following purposes:

• Account management: Creating and maintaining your kb33 account, verifying your identity, and communicating important account-related information such as transaction confirmations, security alerts, and policy updates.
• Transaction processing: Processing deposits and withdrawals via supported payment channels, reconciling account balances, and resolving transaction disputes.
• Regulatory compliance: Fulfilling anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and any other compliance obligations applicable to kb33's operations.
• Platform security: Detecting and preventing fraudulent activity, unauthorised account access, bonus abuse, collusion, and other prohibited conduct defined in the Terms & Conditions.
• Responsible gaming: Monitoring account activity for indicators of problem gambling behaviour and administering player-requested tools such as deposit limits, cooling-off periods, and self-exclusion.
• Customer support: Responding to your enquiries, processing complaints, and maintaining records of support interactions for quality assurance.
• Service improvement: Analysing aggregated, anonymised usage patterns to improve the kb33 platform, identify technical issues, and optimise the user experience. This analysis does not involve profiling individual users for advertising purposes.
• Direct communications: Sending you promotional offers, bonus notifications, and platform updates by email or SMS, subject to your communication preferences and opt-out rights described in Section 10 of this policy.

kb33 processes your personal data on one or more of the following legal bases depending on the specific processing activity:

• Contractual necessity: Processing required to perform our contract with you — namely, operating your kb33 account, processing your bets, and handling your deposits and withdrawals.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML obligations, KYC requirements, and responses to lawful requests from competent authorities.
• Legitimate interests: Processing carried out for the legitimate interests of kb33, such as platform security, fraud prevention, responsible gaming monitoring, and anonymised service analytics, where those interests are not overridden by your privacy rights.
• Consent: Processing carried out on the basis of your explicit consent, such as sending you marketing communications. You may withdraw consent for consent-based processing at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

kb33 does not sell, rent, or trade your personal data. We share personal data with third parties only in the following circumstances and only to the extent strictly necessary:

• Payment processors: Your mobile wallet number or bank account details are shared with bKash, Nagad, Rocket, Upay, and supported bank partners solely for the purpose of processing a specific deposit or withdrawal transaction you have initiated.
• Identity verification providers: Copies of your identity documents and liveness check data are shared with our KYC verification partner to confirm the authenticity of your documents. This partner is contractually bound to process your data only for this purpose and to delete it thereafter.
• Game providers: Your account identifier (not your full personal details) is shared with game providers including Pragmatic Play, Evolution Gaming, Spribe, Microgaming, Ezugi, NetEnt, and PG Soft to attribute game sessions and results to your kb33 account balance.
• Fraud prevention services: Technical data including IP address, device fingerprint, and session behaviour may be shared with fraud prevention services to detect suspicious activity patterns across the platform.
• Legal authorities: kb33 will disclose personal data to law enforcement agencies, financial regulators, or other competent authorities where required to do so by applicable law, court order, or other legally binding obligation. kb33 will, where permitted by law, notify you of such a disclosure.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of kb33's assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the acquiring entity's privacy practices before the transfer takes effect.

kb33 uses first-party cookies and similar tracking technologies to operate the platform. The cookies used by kb33 fall into the following categories:

• Strictly necessary cookies: Session cookies that are essential for platform operation, including maintaining your logged-in state, preserving your bet slip contents between pages, and enabling the security features of the cashier. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: Cookies that remember your preferences such as display settings, language preference, and previously used payment method to improve your experience. These are retained across sessions.
• Analytics cookies: First-party analytics cookies that record anonymised data about how visitors navigate the kb33 platform — pages visited, time spent, errors encountered — to help us identify and resolve usability issues. No personally identifiable information is included in analytics data.

kb33 does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts. You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your kb33 account.

kb33 applies the following technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure:

• Encryption in transit: All data transmitted between your device and the kb33 platform is encrypted using TLS 1.2 or higher. This applies to every page of the platform, not just the cashier.
• Encryption at rest: Sensitive personal data fields, including identity document copies and financial data, are encrypted at rest in the kb33 database using industry-standard symmetric encryption.
• Password hashing: Account passwords are never stored in plain text. kb33 uses a one-way cryptographic hashing algorithm with per-account salting. Even kb33 staff cannot retrieve your password — only reset it.
• Access controls: Access to personal data within kb33's internal systems is restricted to staff members whose role requires it, governed by role-based access controls and activity logging.
• Infrastructure security: kb33's platform infrastructure is hosted in data centres with physical security controls, redundant power and networking, and regular independent security reviews.

Despite these measures, no platform can guarantee absolute security against all threats. If you believe your kb33 account has been compromised, you must contact [email protected] immediately so that we can suspend the account and investigate.

kb33 retains your personal data for as long as your account is active and for a defined period after account closure, as follows:

• Active accounts: Personal data is retained for the lifetime of your account plus a minimum of five (5) years after account closure to satisfy AML record-keeping obligations.
• Identity documents: Copies of identity documents submitted for KYC verification are retained for the same five-year post-closure period and are then securely deleted or anonymised.
• Transaction records: Deposit, withdrawal, and betting history records are retained for a minimum of five (5) years after the transaction date in compliance with financial record-keeping requirements.
• Support correspondence: Email and support chat records are retained for three (3) years from the date of the last interaction in that ticket or thread.
• Technical logs: Server access logs and session logs containing IP addresses and device data are retained for a maximum of twelve (12) months before automated deletion.

Where retention beyond these periods is required by a specific legal obligation (for example, in connection with an ongoing investigation or litigation), kb33 will retain the relevant data for the duration of that requirement and delete it promptly thereafter.

As a kb33 account holder, you have the following rights in respect of your personal data. To exercise any of these rights, submit a written request to [email protected] from the email address registered on your kb33 account. kb33 will respond within 30 calendar days of receiving a valid request.

• Right of access: You may request a copy of the personal data kb33 holds about you, including a summary of how it is used and with whom it is shared.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held by kb33. For data that you can update directly in your account settings (such as your email address or phone number), please do so there first.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected and there is no overriding legal obligation to retain it. Note that AML and KYC data retention obligations described in Section 9 above take precedence over erasure requests for the relevant retention periods.
• Right to restrict processing: You may request that kb33 restrict processing of your personal data — for example, while the accuracy of the data is disputed — without deleting it.
• Right to data portability: You may request a machine-readable copy of the personal data you have provided directly to kb33 (such as your registration details and transaction history) in a structured, commonly used format.
• Right to object to marketing: You may opt out of marketing communications (promotional emails, SMS bonus offers) at any time by emailing [email protected] with the subject line "Unsubscribe". Opting out of marketing does not affect transactional communications such as deposit confirmations and security alerts.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

kb33 is strictly an adult platform. The minimum age to register an account and use any feature of kb33 is 21 years. kb33 does not knowingly collect, process, or retain personal data from individuals under the age of 21.

If kb33 becomes aware that an account has been registered by or is being used by a person under 21, the following steps will be taken immediately:

• The account will be suspended and then permanently closed.
• Any deposits held in the account will be returned to the payment method from which they originated, where technically feasible.
• Any betting activity or winnings accrued during the period of underage use will be voided and forfeited.
• All personal data associated with the underage account will be deleted or anonymised as soon as the closure process is complete, subject to any overriding legal obligation to retain specific records.

If you are a parent or guardian and believe that a person under your care has registered an account on kb33, please contact [email protected] immediately. We will investigate and take action within 48 hours of receiving your report.

The kb33 platform may contain references to third-party game providers (Pragmatic Play, Evolution Gaming, Spribe, Microgaming, Ezugi, NetEnt, PG Soft) and payment partners (bKash, Nagad, Rocket, Upay). When you interact with a game interface or payment page that is served by one of these third parties, their own privacy policies apply to data processed within their systems.

kb33 is not responsible for the privacy practices of third-party game providers or payment partners. We recommend reviewing the privacy policies of any third-party service with which you interact. The presence of a third-party service within the kb33 platform does not constitute an endorsement of that provider's privacy practices by kb33.

kb33 reserves the right to update or replace this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or the features and services offered on the platform. When material changes are made, we will publish the revised policy on this page with an updated effective date and, where practicable, notify registered account holders by email.

Your continued use of the kb33 platform after the revised Privacy Policy has been published constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you should cease using kb33 and may request account closure by contacting support. We encourage you to review this page periodically to stay informed of how kb33 protects your personal data.

If you are viewing a cached or printed copy of this policy, please visit kb33.lat/privacy-policy to confirm you are reading the current version dated 1 January 2026.

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data kb33 holds about you, please contact our support team in writing. All privacy-related correspondence is handled with priority and treated confidentially.

Privacy Contact Email: [email protected]

Subject Line for Privacy Requests: Use "Privacy Request — [Your Full Name]" to help us route your message to the correct team member promptly.

Response Time: kb33 will acknowledge privacy-related requests within 48 hours and provide a substantive response within 30 calendar days, Bangladesh Standard Time (UTC+6).