kc922 Privacy Policy

kc922 is the data controller responsible for the personal data collected through the kc922 platform. As data controller, kc922 determines the purposes for which and the means by which your personal data is processed. All enquiries relating to this Policy or to the exercise of your data rights should be directed to the kc922 data protection contact at [email protected].

kc922 operates as a safe and reliable platform serving players primarily located in Bangladesh. The platform is designed to offer sports betting (including cricket BPL, IPL, T20 World Cup, and other markets), live casino games, slots, and related gaming services, all denominated in Bangladeshi Taka (BDT).

kc922 collects personal data across several categories depending on how you interact with the platform. The table below summarises the categories of data we collect, with examples:

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data beyond responsible gaming indicators, or biometric data. If you voluntarily disclose any such information in a support communication, it will be used only to resolve your query and will not be retained beyond that purpose.

kc922 collects personal data through the following means:

• Direct Interactions: Data you provide voluntarily when you register an account, complete identity verification, make a deposit or withdrawal, contact our support team, or update your profile settings.
• Automated Technologies: Technical and usage data collected automatically as you interact with the platform, including via browser cookies, server logs, session tracking scripts, and device fingerprinting technologies used for fraud prevention and security purposes.
• Third-Party Sources: Identity and address verification data obtained from third-party KYC service providers when we conduct identity checks. Payment confirmation data passed to us by payment processors including bKash, Nagad, Rocket, Upay, and Dutch-Bangla Bank following a deposit or withdrawal instruction.
• Game Providers: Game session outcome data, RTP logs, and game-level technical event data provided by our certified game studios including Evolution Gaming, Pragmatic Play, NetEnt, and Spribe, for dispute resolution and fair play certification purposes.

kc922 processes your personal data for the following purposes:

• Account Management: To create, maintain, and administer your kc922 player account, including authentication, security monitoring, and account communications.
• Identity Verification (KYC): To verify your identity, age (21+), and address in compliance with our obligations as a platform operator, and to prevent underage gambling and fraud.
• Payment Processing: To process deposits and withdrawals in BDT through approved payment channels including bKash, Nagad, Rocket, Upay, and Dutch-Bangla Bank, and to maintain accurate transaction records.
• Service Delivery: To provide access to sports betting markets, live casino games, slots, and other gaming content available on the kc922 platform.
• Responsible Gaming: To monitor player activity for signs of problem gambling, to enforce self-exclusion periods and deposit limits, and to send responsible gaming communications where warranted.
• Fraud Prevention and Security: To detect and prevent unauthorised account access, multi-accounting, bonus abuse, match-fixing involvement, and money laundering activity.
• Legal Compliance: To meet obligations imposed by applicable laws, including responding to lawful requests from law enforcement authorities and regulatory bodies.
• Customer Support: To respond to and resolve player queries, complaints, and disputes effectively.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the platform experience, optimise game content, and enhance our services for players across Bangladesh.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates via your registered contact details — where you have consented to receive such communications or where we have a legitimate interest to do so. You may opt out of marketing communications at any time.

kc922 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between kc922 and you as a registered player — including account creation, payment processing, and service delivery.
• Legitimate Interests: Processing carried out in pursuit of kc922's legitimate business interests, including fraud prevention, security monitoring, responsible gaming enforcement, and platform analytics — provided such interests are not overridden by your own rights and interests.
• Legal Obligation: Processing necessary for kc922 to comply with applicable legal requirements, including identity verification obligations, anti-money laundering checks, and responding to lawful authority requests.
• Consent: Where processing is based on your explicit consent — most commonly in relation to optional marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

kc922 does not sell, rent, or trade your personal data. We share personal data only in the following limited and controlled circumstances:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other approved payment partners receive transaction-level data necessary to process your deposits and withdrawals. These parties operate their own privacy policies and security frameworks.
• Identity Verification Providers: Third-party KYC and anti-fraud service providers may receive identity documents and personal details for the purpose of verifying your identity and age. These providers are bound by strict confidentiality obligations.
• Game Technology Providers: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi, and other certified game studios may receive a pseudonymous player identifier and game session data necessary to deliver and certify gameplay outcomes. They do not receive your full personal profile.
• Legal and Regulatory Authorities: kc922 may disclose personal data to law enforcement agencies, regulatory bodies, or courts in Bangladesh or other applicable jurisdictions where required to do so by law, court order, or enforceable regulatory direction.
• Anti-Money Laundering (AML) Compliance: Where required by applicable AML obligations, kc922 may share transaction and identity data with financial intelligence units or equivalent authorities.
• Corporate Transactions: In the event of a merger, acquisition, restructuring, or sale of assets involving kc922, personal data held by kc922 may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections being maintained.

All third parties with whom kc922 shares personal data are required to maintain appropriate technical and organisational security measures and to use the data only for the specified purpose.

kc922 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and in any case for the minimum periods required by applicable law. The following general retention periods apply:

Once the applicable retention period has expired, kc922 will either securely delete your personal data or anonymise it so that it can no longer be associated with you. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

kc922 implements a comprehensive range of technical and organisational security measures to protect your personal data from unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Transport Encryption: All data transmitted between your browser and kc922's servers is encrypted using 256-bit TLS (Transport Layer Security) protocols. The platform enforces HTTPS on all pages without exception.
• Password Security: Account passwords are stored using bcrypt hashing with unique per-user salts. kc922 never stores passwords in plain text and cannot retrieve your password — only reset it through a verified process.
• Access Controls: Access to personal data within kc922's internal systems is strictly limited to staff members who require it for their specific role. Role-based access control (RBAC) is enforced, and all internal data access is logged and auditable.
• Intrusion Detection: kc922 operates real-time anomalous login detection and automated account lockout following repeated failed authentication attempts to protect against brute-force attacks.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their accounts via the account security settings panel. 2FA provides an additional layer of protection against unauthorised access.
• Data at Rest: Personal data stored in kc922's database infrastructure is encrypted at rest using AES-256 encryption.
• Vendor Security: All third-party service providers who handle personal data on kc922's behalf — including KYC providers and payment processors — are required to maintain security standards at least equivalent to those applied by kc922 itself.

kc922 uses cookies and similar tracking technologies to operate the platform, maintain session state, prevent fraud, and improve the player experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in, CSRF protection tokens, and load-balancing identifiers. These cannot be disabled without affecting core platform functionality.
• Functional Cookies: Used to remember your preferences such as language settings, responsible gaming reminder configurations, and display preferences. These improve your experience but are not essential to platform operation.
• Analytical Cookies: Used to collect aggregated, anonymised data about how players use the kc922 platform — including pages visited, features used, and session duration. This data helps us identify performance issues and improve the platform experience.
• Security Cookies: Used for fraud detection, device fingerprinting, and anomalous behaviour identification. These are essential to kc922's security infrastructure and help protect all players on the platform.

kc922 does not use third-party advertising or retargeting cookies. Cookies set by kc922 do not track your activity on other websites. You can manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will prevent you from logging in or using core platform features.

As a player on the kc922 platform, you hold the following rights with respect to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Privacy Request":

• Right of Access: You have the right to request a copy of the personal data kc922 holds about you, including information about the purposes for which it is processed and the categories of data involved.
• Right to Rectification: You have the right to request correction of any personal data that is inaccurate or incomplete. You may also update certain details directly via the account profile settings panel.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to kc922's legal retention obligations — data that must be retained to comply with AML, KYC, or financial record-keeping requirements cannot be deleted on request before the applicable retention period has expired.
• Right to Restrict Processing: You have the right to request that kc922 restricts the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing pending verification of kc922's legitimate grounds.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to kc922 in a structured, commonly used, machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Object: You have the right to object to processing of your personal data where kc922 relies on legitimate interests as its legal basis. kc922 will cease such processing unless it can demonstrate compelling legitimate grounds that override your rights and interests.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

kc922 will respond to all valid data rights requests within 30 days. Where a request is complex or involves a large volume of data, this period may be extended by a further 60 days with prior notification to you. kc922 will not charge a fee for handling data rights requests unless they are manifestly unfounded or excessive.

The kc922 platform is strictly intended for persons aged 21 years and above. kc922 does not knowingly collect, store, or process personal data from individuals under the age of 21. If you are under 21, you must not register an account, access the platform, or provide any personal data to kc922.

kc922 employs active age verification measures at registration and at the point of first withdrawal to enforce this restriction. If kc922 becomes aware that personal data has been collected from an individual who was under 21 at the time of collection, that data will be deleted and the associated account permanently closed without delay.

If you have reason to believe that a person under the age of 21 has registered an account on kc922 using false information, please report this to us immediately at [email protected] with the subject line "Underage Account Report".

kc922 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform services. When material changes are made, kc922 will notify registered players via the email address on file and will update the "Last Updated" date at the top of this page.

Where changes are minor and do not materially affect how your data is used, kc922 may update the policy without individual notification, relying on the posting of the revised policy on this page as sufficient notice. We encourage you to review this Policy periodically to stay informed about how kc922 handles your personal data.

Your continued use of the kc922 platform after a revised Policy has been posted constitutes your acceptance of the updated terms. If you object to any change, you should cease using the platform and contact support to request account closure as described in the Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way kc922 handles your personal data, please reach out to our team using the contact details below. We are committed to addressing all privacy enquiries promptly and transparently.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Privacy Requests: "Privacy Request"
• Subject Line for Underage Reports: "Underage Account Report"
• Response Time: Within 48 hours for acknowledgement; within 30 days for full response.
• Support Hours: 24 hours a day, 7 days a week, in English and Bengali.