kxo8 Privacy Policy

kxo8 collects personal data from you through several channels: directly from you during registration and account management, automatically through your use of the platform, and from third-party payment processors and identity verification services. The categories of personal data we collect are described below.

Registration & Account Data

When you create a kxo8 account, we collect the following information:

• Full legal name as it appears on your government-issued identity document
• Date of birth (used to verify that you meet the 18+ age requirement)
• Email address and mobile phone number
• Residential address, including city (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, or other)
• Chosen username and encrypted password (passwords are stored using one-way hashing — kxo8 staff cannot read your password)
• Preferred currency (Bangladeshi Taka, ৳)

Identity Verification (KYC) Documents

To comply with our Know Your Customer obligations and to protect players against identity fraud, kxo8 may request copies of the following documents at any point during your membership:

• National Identity Card (NID), passport, or driving licence
• Proof of current residential address (utility bill, bank statement, or government letter dated within 90 days)
• Proof of payment method ownership — for example, a screenshot showing that a bKash, Nagad, Rocket, or Upay account is registered in your name

Transaction & Payment Data

Each time you deposit or withdraw funds on kxo8, we record the transaction amount in Bangladeshi Taka (৳), the payment method used, the transaction timestamp, and a reference identifier assigned by the payment processor (bKash, Nagad, Rocket, Upay, bank, or card network). We do not store full card numbers or mobile banking PINs — these are handled directly by the respective payment processors under their own security standards.

Behavioural & Usage Data

We automatically collect data about how you interact with the kxo8 platform, including:

• IP address and approximate geolocation (country and city level)
• Device type, operating system, and browser version
• Pages visited, games played, bets placed, session duration, and click-through patterns
• Bonus offers viewed, claimed, and completed
• Customer support interactions, including chat transcripts and email correspondence

kxo8 uses the personal data we collect for the following specific purposes. We do not use your data for any purpose that is incompatible with the reason it was originally collected without first obtaining your explicit consent.

Marketing Communications

kxo8 may send you promotional emails, SMS messages, or on-platform notifications about bonuses, new games, cricket betting markets (including BPL, IPL, and T20 World Cup promotions), and seasonal offers (Eid, Pohela Boishakh, Victory Day). You may opt out of marketing communications at any time by clicking the unsubscribe link in any email, adjusting your notification preferences in your account settings, or contacting [email protected]. Opting out of marketing does not affect transactional communications such as deposit confirmations and withdrawal notices.

kxo8 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing that is required to fulfil our contract with you — including managing your account, processing transactions, and delivering the gaming services you have requested.
• Legal obligation: Processing required to comply with applicable legal requirements, including KYC identity verification, anti-money laundering record-keeping, and responsible gaming interventions.
• Legitimate interests: Processing carried out for kxo8's legitimate business interests, where those interests are not overridden by your privacy rights — including fraud detection, platform security, and product analytics. We conduct a balancing assessment before relying on this basis.
• Consent: Where required by law, we will ask for your explicit consent before processing — for example, before sending marketing emails or SMS messages. Consent can be withdrawn at any time without affecting the lawfulness of prior processing.

kxo8 does not sell your personal data. We share personal data with third parties only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

Payment Processors

To process deposits and withdrawals, kxo8 shares relevant transaction data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. Each provider processes data under their own privacy policy and security standards. kxo8 does not transmit your full payment credentials to these providers — only the minimum data required to execute the relevant transaction.

Identity Verification Services

Where kxo8 uses third-party identity verification technology to assist with KYC checks, your submitted documents may be processed by that provider's systems. Such providers are bound by contractual obligations that restrict their use of your data to the specific verification purpose only.

Game Software Providers

Certain games on the kxo8 platform are provided by third-party studios including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe. These providers may receive anonymised session data (such as game round identifiers and bet amounts) to deliver game functionality and resolve disputes. They do not receive your name, contact details, or payment information.

Analytics Providers

kxo8 uses analytics software to understand platform usage at an aggregate level. Where analytics tools process personal data (such as IP addresses), we ensure that appropriate data processing agreements are in place and that data is anonymised or pseudonymised wherever technically feasible.

Legal Disclosures

kxo8 may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required by applicable law, court order, or where kxo8 reasonably believes that disclosure is necessary to prevent fraud, protect the safety of individuals, or defend kxo8's legal rights.

kxo8 uses cookies and similar technologies (such as local storage and session tokens) to operate the platform, remember your preferences, and understand how the platform is used. The following categories of cookies are used:

kxo8 does not use third-party advertising or retargeting cookies. No cookie data from the kxo8 platform is shared with social media platforms, advertising networks, or data brokers.

Managing Cookies

You can control or delete cookies through your browser settings. Please note that disabling strictly necessary or responsible gaming cookies may impair your ability to use the kxo8 platform or may disable safety features designed to protect you. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.

kxo8 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention periods apply:

• Active account data: Retained for the full duration of your kxo8 membership and for a period of 5 years following account closure, in line with standard financial record-keeping obligations.
• KYC documents: Retained for a minimum of 5 years from the date of submission, as required by anti-money laundering regulations. Documents are securely deleted after the applicable retention period expires.
• Transaction records: Retained for 5 years from the date of the transaction. This includes deposit and withdrawal records, bet history, and bonus transaction logs.
• Customer support correspondence: Retained for 3 years from the date of the most recent interaction, to support dispute resolution and training.
• Marketing preference records: Retained for 3 years from the date of your last opt-in or opt-out action, to demonstrate compliance with consent requirements.
• Analytics data: Aggregated and anonymised analytics data may be retained indefinitely, as it contains no personally identifiable information.

When personal data reaches the end of its applicable retention period, kxo8 securely deletes or anonymises it. Secure deletion means overwriting stored data such that it cannot be reconstructed or recovered.

kxo8 respects your rights over your personal data. The following rights are available to all kxo8 members. To exercise any of these rights, contact our support team at [email protected] with the subject line "Privacy Request — [Right Type]". We aim to respond to all privacy requests within 30 days.

Right of Access

You may request a copy of all personal data that kxo8 holds about you. We will provide this in a structured, commonly used, machine-readable format (such as CSV or PDF) at no charge. We may ask you to verify your identity before processing this request to protect your data from unauthorised disclosure.

Right to Rectification

If any personal data held by kxo8 is inaccurate, out of date, or incomplete, you have the right to request that we correct it. For basic account details such as your address or phone number, you may update these directly through your account settings panel. For corrections to identity documents or date of birth, please contact support.

Right to Erasure

You may request that kxo8 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent and no other legal basis applies, or where the data has been unlawfully processed. We will fulfil erasure requests within 30 days, subject to our legal retention obligations. Data that we are required by law to retain will not be deleted prior to the end of the applicable retention period, but will be clearly flagged as inactive and access-restricted.

Right to Restrict Processing

In certain circumstances — for example, while a data accuracy dispute is being resolved — you may request that kxo8 restrict the processing of your personal data. During a restriction period, we will continue to store your data but will not actively process it beyond the scope of the restriction.

Right to Object

You may object to processing carried out on the basis of kxo8's legitimate interests, or to the use of your data for direct marketing purposes. An objection to marketing will be acted upon immediately. An objection to legitimate-interest processing will be reviewed and balanced against kxo8's operational requirements, and you will be notified of the outcome within 30 days.

Right to Data Portability

Where processing is based on consent or contractual necessity and carried out by automated means, you have the right to receive a copy of your personal data in a portable format, and to request that it be transmitted to another data controller where technically feasible.

kxo8 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security programme includes the following controls:

• TLS/SSL encryption: All data in transit between your browser or app and the kxo8 servers is encrypted using TLS 1.2 or higher. The kxo8 platform enforces HTTPS at all times — unencrypted HTTP connections are automatically redirected.
• Password security: User passwords are never stored in plain text. kxo8 uses industry-standard one-way cryptographic hashing with salting to store password credentials. kxo8 staff cannot retrieve or read your password.
• Access controls: Access to personal data within kxo8's systems is restricted on a need-to-know basis. Staff members are granted access to customer data only to the extent required by their specific role. All internal data access is logged and audited.
• Data storage security: Personal data and KYC documents are stored on secured servers with physical access controls, network firewalls, and intrusion detection systems. Sensitive documents are encrypted at rest.
• Security monitoring: kxo8 operates continuous monitoring for suspicious login activity, unusual transaction patterns, and other indicators of compromise. Automated alerts are generated when anomalies are detected.
• Incident response: kxo8 maintains a documented data breach response plan. In the event of a security incident that is likely to result in a risk to your rights and freedoms, kxo8 will notify affected players without undue delay and will take all necessary steps to contain and remediate the incident.

kxo8 reviews this Privacy Policy periodically and may update it to reflect changes in our data processing practices, applicable regulations, or platform features. The effective date at the top of this policy indicates when it was last revised. Where changes are material — meaning they significantly affect how we use your data or reduce your rights — kxo8 will notify registered members via email at least 14 days before the changes take effect.

For minor, non-substantive updates (such as clarifications of existing language, correction of typographical errors, or reorganisation of sections without changing their substance), kxo8 may update the policy without advance notice. The most current version of this Privacy Policy is always available at kxo8.app/privacy-policy.

Continued use of the kxo8 platform following a privacy policy update constitutes your acknowledgement of the revised policy. If you do not agree with the updated terms, you should cease using the platform and may request account closure by contacting our support team.

Contact the kxo8 Privacy Team

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data kxo8 holds about you, please contact us using the details below. Our support team is available 24 hours a day, 7 days a week, in Bangladesh Standard Time (BST, UTC+6).

• Email: [email protected] (subject line: "Privacy Request" or "Privacy Query")
• Response time: We acknowledge all privacy-related emails within 48 hours and aim to resolve them within 30 days.
• Platform: kxo8.app
• Market served: Bangladesh