kxl8 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

kxl8 is an online casino and sports betting platform operating at https://kxl8.io and accessible to players in Bangladesh. For the purposes of this Privacy Policy, kxl8 is the data controller responsible for determining how and why your personal information is collected and processed.

We are committed to handling all personal data with care, transparency, and in a manner consistent with recognised data protection principles. Our platform is designed for adults aged 21 and above residing in Bangladesh. All privacy-related enquiries may be directed to our dedicated English support team at [email protected].

kxl8 collects personal data that is necessary to provide a safe, compliant, and fully functional gaming and betting experience. The categories of personal data we collect are set out in the table below:

kxl8 collects personal data through the following channels and interactions:

• Direct registration: When you create a kxl8 account, you provide identity and contact data directly through the registration form on the platform.
• KYC submission: When you submit identity verification documents in response to a verification request from the kxl8 compliance team.
• Payment transactions: When you make a deposit or request a withdrawal, financial data is captured through the payment provider's secure interface.
• Platform interaction: Automatically, as you navigate and use the kxl8 platform — via cookies, server logs, and session tracking tools embedded in the website.
• Support communications: When you contact kxl8 through live chat or email, the content and metadata of those communications are recorded for quality and resolution purposes.
• Third-party verification providers: kxl8 may receive supplementary identity or fraud-risk data from contracted identity verification services used to authenticate player documents.

kxl8 uses the personal data we collect for the following specific and legitimate purposes:

• To create and manage your kxl8 player account, including processing deposits and withdrawals via bKash, Nagad, Rocket, and bank transfer channels available in Bangladesh.
• To verify your identity in accordance with our Know Your Customer (KYC) procedures, ensuring that only eligible adults aged 21 and above can access real-money play.
• To detect, investigate, and prevent fraudulent activity, money laundering, underage gambling, and other prohibited conduct on the platform.
• To monitor your gaming activity in support of responsible gambling obligations, including the administration of deposit limits, cooling-off periods, and self-exclusion requests.
• To provide English-language customer support, respond to your enquiries, and resolve disputes arising from your use of the kxl8 platform.
• To send you account-related notifications, including deposit confirmations, withdrawal updates, security alerts, and responsible gaming reminders.
• To send promotional offers, bonuses, and marketing communications — only where you have provided explicit consent and have not opted out.
• To improve the kxl8 platform through aggregated, anonymised analysis of usage patterns, game performance metrics, and player journey data.

kxl8 processes your personal data on the following legal grounds, depending on the nature of the processing activity:

• Contractual necessity: Processing required to fulfil our obligations to you as a registered kxl8 player — including account management, payment processing, and support delivery.
• Legitimate interests: Processing carried out to pursue kxl8's legitimate business interests, including fraud prevention, security monitoring, platform performance analysis, and responsible gaming oversight, where those interests are not overridden by your data protection rights.
• Consent: Processing of your data for marketing communications and optional cookies, where you have given clear, affirmative consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.
• Legal obligation: Processing necessary for kxl8 to comply with applicable legal requirements, including identity verification obligations and data retention requirements.

kxl8 does not sell your personal data to any third party under any circumstances. We may share your data with carefully selected third-party service providers in the following limited circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, and banking partners receive the minimum financial data necessary to process your deposits and withdrawals. These partners operate under their own privacy frameworks and are contractually bound to protect your data.
• Identity verification providers: Third-party KYC services may receive copies of your identity documents and personal details solely for the purpose of verifying your eligibility to use the kxl8 platform.
• Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and similar providers may receive your player session identifier for the purpose of game delivery and fairness certification. They do not receive your full identity or financial data.
• Legal authorities: kxl8 may disclose personal data to law enforcement agencies, courts, or regulatory authorities where we are legally required to do so, or where disclosure is necessary to protect the safety and security of our platform and users.
• Fraud prevention services: Aggregated or pseudonymised transaction data may be shared with anti-fraud networks to detect and prevent financial crime across platforms.

kxl8 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply to your kxl8 account data:

After the applicable retention period expires, personal data is securely deleted or irreversibly anonymised. Where data is anonymised rather than deleted, it may be retained indefinitely for aggregate statistical analysis without identifying any individual player.

kxl8 uses cookies and similar technologies — including local storage objects and session tokens — to operate and improve the platform. Cookies are small text files stored on your device by your web browser when you visit the kxl8 website. The categories of cookies used by kxl8 are as follows:

• Strictly necessary cookies: These are essential for the kxl8 platform to function correctly. They manage your login session, maintain your account security state, and enable core platform features. These cookies cannot be disabled.
• Functional cookies: These remember your preferences such as your selected language, display settings, and recent game choices, allowing us to deliver a personalised experience each time you return to kxl8.
• Analytics cookies: These collect anonymised data about how players navigate and interact with the kxl8 platform. This data is used to identify usability issues, improve page performance, and enhance the overall player experience. No individual player is identified through analytics data.

kxl8 does not use third-party advertising or behavioural profiling cookies. You may manage or clear cookies stored by kxl8 through your browser's settings at any time. Disabling strictly necessary cookies may impair the functionality of your kxl8 account.

kxl8 takes the security of your personal data seriously and maintains a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, disclosure, or destruction. Key security measures in place include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the kxl8 servers, ensuring that your login credentials, payment details, and personal information cannot be intercepted in transit.
• Encrypted storage of all personal data and verification documents on kxl8's servers. Sensitive fields such as payment account numbers are stored using one-way encryption and are never exposed in plain text to kxl8 staff.
• Role-based access controls ensuring that only authorised kxl8 personnel whose job functions require access to personal data are granted the minimum necessary permissions. All internal data access is logged and auditable.
• Regular security assessments and penetration testing carried out by independent technical specialists to identify and remediate vulnerabilities in the kxl8 platform and its supporting infrastructure.
• Multi-factor authentication enforced for all kxl8 administrative accounts to prevent unauthorised internal access to player data systems.

kxl8 operates with server infrastructure and third-party service providers that may be located outside Bangladesh. Where your personal data is transferred internationally, kxl8 ensures that appropriate safeguards are in place to maintain the same standard of data protection that applies within Bangladesh.

Such safeguards include contractual data processing agreements with all international third-party service providers that impose obligations consistent with recognised data protection standards, data minimisation requirements that limit what personal information is shared across borders, and a preference for service providers who store and process data within the Asia-Pacific region wherever this is operationally feasible.

If you would like further information about the international transfer mechanisms applied to your personal data, please contact the kxl8 privacy team at [email protected].

As a kxl8 player, you have the following rights regarding your personal data. You may exercise any of these rights at any time by contacting kxl8 English support via live chat or by emailing [email protected]. kxl8 will respond to all valid privacy rights requests within 30 days of receipt.

The kxl8 platform is strictly intended for adults aged 21 and above. kxl8 does not knowingly collect personal data from individuals under the age of 21. The registration process includes an age declaration requirement, and identity verification is used to enforce this restriction.

If kxl8 becomes aware that personal data has been collected from an individual who is under the age of 21, the account will be immediately suspended, all associated data will be securely deleted, and any deposited funds will be returned to the source payment method following a verification process. If you believe that a minor may have accessed or registered on the kxl8 platform, please contact our support team immediately at support@kx l8.io.

kxl8 reserves the right to update or modify this Privacy Policy at any time. When material changes are made, we will notify registered players via email or a prominent notice on the kxl8 platform at least 14 days before the changes take effect. The "Last updated" date at the top of this page will always reflect the most recent revision.

Your continued use of the kxl8 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you must discontinue use of the platform and may request account closure by contacting English support. We encourage all players to review this Privacy Policy periodically to stay informed about how kxl8 protects your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way kxl8 handles your personal data, please reach out to our dedicated English support team using the contact details below. We aim to respond to all privacy-related enquiries within 24 hours.