kt89 Privacy Policy — How We Protect Your Personal Data

1 Introduction and Scope

This Privacy Policy describes how kt89, operating the online casino and sports betting platform at https://kt89.io, collects, uses, stores, and protects the personal data of individuals who access or use the kt89 platform. The policy applies to all registered players, prospective players, and visitors to the kt89 website, regardless of the device or method used to access the platform.

kt89 is committed to handling all personal data responsibly and in accordance with sound data protection principles. This Privacy Policy should be read alongside the kt89 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

By creating a kt89 account, making a deposit, or otherwise using the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.

2 Data Controller Information

For the purposes of this Privacy Policy, kt89 acts as the data controller in respect of the personal data collected through the kt89 platform. As data controller, kt89 determines the purposes and means of processing your personal data.

All data privacy enquiries, access requests, correction requests, and deletion requests should be directed to the kt89 Data Privacy team using the contact details set out in Section 15 of this document. kt89 will acknowledge all privacy-related communications within 48 hours of receipt (Bangladesh Standard Time, UTC+6) and endeavour to resolve substantive requests within 30 calendar days.

3 Personal Data We Collect

kt89 collects the following categories of personal data in connection with your use of the platform:

kt89 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data beyond responsible gaming disclosures, or biometric identifiers except where a photograph is voluntarily submitted as part of identity verification.

4 How We Collect Your Data

kt89 collects personal data through the following means:

• Direct submission: Data you provide when registering an account, completing identity verification, making a deposit or withdrawal, contacting customer support, or using responsible gaming tools.
• Automated collection: Technical and usage data collected automatically through cookies, server logs, and similar technologies each time you access the kt89 platform.
• Payment processors: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, and other payment partners when processing deposits or withdrawals.
• Game providers: Aggregate game outcome data passed to kt89 from third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi in order to resolve game result queries and ensure fair play.
• Fraud and security tools: Device fingerprinting and IP geolocation data collected by kt89's security infrastructure to detect fraudulent account activity and protect player funds.

5 Legal Basis for Processing

kt89 processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to enter into and perform the contract with you — including registering your account, processing deposits and withdrawals, and settling bets.
• Legal obligation: Processing required to comply with applicable legal requirements, including age verification (21+), anti-money laundering obligations, and financial record-keeping requirements.
• Legitimate interests: Processing carried out for kt89's legitimate business interests where those interests are not overridden by your fundamental privacy rights — including fraud prevention, platform security, responsible gaming monitoring, and improvement of platform services.
• Consent: Processing based on your freely given, specific, and informed consent — including the sending of promotional communications and the use of non-essential cookies. You may withdraw consent at any time by contacting [email protected] or adjusting your browser cookie settings.

6 How We Use Your Personal Data

kt89 uses your personal data for the following specific purposes:

• Creating, managing, and maintaining your kt89 account.
• Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported Bangladeshi bank partners.
• Verifying your identity and confirming that you meet the minimum age requirement of 21 years.
• Settling game results and sports betting outcomes, including cricket (BPL, IPL, T20 World Cup, ICC events), football, and kabaddi markets.
• Detecting and preventing fraud, money laundering, account takeover, and other prohibited activities.
• Operating responsible gaming tools including deposit limits, self-exclusion, and session time reminders.
• Providing 24/7 English-language customer support.
• Sending you transactional communications such as deposit confirmations, withdrawal notifications, and account security alerts.
• Sending you promotional communications about kt89 bonuses, tournaments, and seasonal offers — but only where you have consented to receive such communications.
• Analysing aggregate platform usage to improve kt89's products, services, and user experience.
• Complying with applicable legal and regulatory obligations.

7 Sharing Your Personal Data

kt89 does not sell, rent, or trade your personal data to third parties. kt89 shares your personal data only in the following limited circumstances:

• Payment processors: Financial data is shared with bKash, Nagad, Rocket, Upay, and bank partners solely to process your deposit and withdrawal transactions.
• Game providers: Limited account and session identifiers are shared with third-party game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) solely to deliver game content and resolve game result queries.
• Identity verification partners: Verification data (such as ID documents) may be shared with specialist third-party identity verification services engaged by kt89 for the purpose of confirming player identity and age.
• Fraud prevention services: Technical data including IP addresses and device identifiers may be shared with fraud-detection service providers engaged by kt89 to protect the security of the platform and player funds.
• Legal and regulatory authorities: Personal data may be disclosed to law enforcement agencies, regulatory bodies, or courts where kt89 is legally required to do so or where disclosure is necessary to protect the rights or safety of kt89, its players, or the public.

All third parties with whom kt89 shares personal data are contractually required to process that data only for the purpose for which it was shared, to maintain appropriate technical security measures, and to handle the data in a manner consistent with this Privacy Policy.

8 International Data Transfers

Some of kt89's third-party service providers — including certain game studio partners and fraud-prevention vendors — may operate servers or process data outside of Bangladesh. Where personal data is transferred to a country that does not provide an equivalent level of data protection, kt89 takes appropriate steps to ensure that the transfer is lawful and that your data remains protected, including by requiring contractual data protection commitments from the relevant provider.

By using the kt89 platform you acknowledge that your personal data may be transferred internationally as described in this section. kt89 does not transfer personal data internationally for any purpose beyond those set out in this Privacy Policy.

9 Cookies and Tracking Technologies

kt89 uses the following categories of cookies on the platform:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged into your kt89 account. These cookies cannot be disabled without preventing you from using the platform.
• Functional cookies: Used to remember your preferences such as language selection and display settings. These improve your experience but are not essential to platform operation.
• Analytics cookies: Used to collect aggregate, anonymised data about how players interact with the kt89 platform. This data helps us identify technical issues and improve platform performance. No individual player is identified in this analytics data.

kt89 does not use third-party advertising or retargeting cookies. You can manage or delete cookies through your browser settings at any time. Disabling strictly necessary cookies will affect your ability to remain logged into your kt89 account.

10 Data Security Measures

kt89 implements the following technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration:

• SSL/TLS encryption applied to all data in transit between your device and kt89 servers.
• Password hashing — account passwords are stored using a one-way cryptographic hash and are never stored or accessible in plain text.
• New-device SMS verification sent to your registered Bangladesh mobile number when a login is attempted from an unrecognised device.
• Access controls — kt89 staff access to player personal data is restricted to those with a specific operational need, and all staff access is logged and audited.
• Regular security assessments of the kt89 platform infrastructure to identify and remediate vulnerabilities.
• Incident response procedures — in the event of a personal data breach that poses a risk to affected players, kt89 will notify impacted players without undue delay.

11 Data Retention

kt89 retains your personal data for the following periods:

• Account and identity data: Retained for the duration of your account and for a minimum of five years following account closure, in accordance with standard financial record-keeping requirements.
• Transaction and financial data: Retained for a minimum of five years following the date of the relevant transaction.
• Communications data (support chat transcripts, email correspondence): Retained for two years from the date of the communication.
• Technical and usage data: Retained in aggregate, anonymised form for up to 24 months for platform analytics purposes.
• Responsible gaming records (self-exclusion requests, deposit limit history): Retained for the duration of the self-exclusion period plus five years.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. kt89 does not retain personal data beyond the periods described above unless required to do so by a valid legal obligation or court order.

12 Your Privacy Rights

As a kt89 player you hold the following rights in respect of your personal data. To exercise any of these rights, contact the kt89 Data Privacy team at [email protected] with the subject line "Privacy Rights Request":

• Right of Access: You have the right to request a copy of the personal data kt89 holds about you and to receive information about how it is being used.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held by kt89.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to kt89's legal retention obligations.
• Right to Restriction: You have the right to request that kt89 restricts its processing of your personal data in certain circumstances, for example while a rectification request is being resolved.
• Right to Data Portability: You have the right to request that kt89 provides your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to kt89's processing of your personal data where that processing is based on legitimate interests. kt89 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

kt89 will respond to all privacy rights requests within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case kt89 will notify you of the extension and the reasons for it within the initial 30-day period.

13 Children and Underage Players

The kt89 platform is strictly intended for individuals aged 21 years and above. kt89 does not knowingly collect personal data from any person under the age of 21. If kt89 becomes aware that personal data has been collected from a person under the minimum age, that data will be promptly deleted and the associated account will be permanently closed.

If you believe that kt89 has inadvertently collected personal data relating to a person under 21 years of age, please contact [email protected] immediately so that the matter can be investigated and resolved without delay.

14 Changes to This Privacy Policy

kt89 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform services. Where changes are material, kt89 will provide reasonable advance notice via the platform or by email to your registered address.

The date of the most recent revision is displayed at the top of this document. Your continued use of the kt89 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the revised Privacy Policy, you should cease using the platform and contact kt89 to close your account.

15 Contact and Data Rights Requests

For all privacy-related enquiries, data rights requests, and concerns about kt89's handling of your personal data, please contact the kt89 Data Privacy team using the details below. All communications are handled in English and responded to within 48 hours of receipt (Bangladesh Standard Time, UTC+6).

• Data Privacy Email: [email protected] (plain text — not a clickable link)
• Subject Line for Rights Requests: "Privacy Rights Request"
• Response Time: Acknowledgement within 48 hours; substantive response within 30 calendar days
• Support Hours: 24 hours a day, 7 days a week, including Bangladesh public holidays such as Eid and Victory Day (December 16)
• Platform URL: https://kt89.io

For questions about responsible gaming data, including self-exclusion records and deposit limit history, please visit the Responsible Gaming page or reference the Terms & Conditions for the full framework governing your kt89 account.