Your Privacy Matters
to kxo8

This Privacy Policy ("Policy") describes how kxo8 ("kxo8", "we", "us", "our") collects, uses, stores, and protects the personal data of individuals ("you", "your", "Player", "User") who access or use the kxo8 online betting and casino platform available at https://kxo8.io.

kxo8 is committed to handling your personal data responsibly, lawfully, and with full transparency. We process personal data only for legitimate, specified purposes and retain it no longer than is necessary for those purposes. This Policy has been drafted in plain English to ensure that every player can clearly understand how their information is handled.

By creating a kxo8 account or using any part of our platform, you acknowledge that you have read, understood, and agree to the data practices described in this Policy. If you do not agree to this Policy, you must not use the kxo8 platform.

kxo8 collects personal data that is necessary for the operation of a safe, compliant, and high-quality online betting and casino platform. The categories of personal data we collect are set out below:

We do not intentionally collect sensitive personal data such as health information, religious beliefs, or political opinions. If any such information is incidentally disclosed during a support interaction, it will not be recorded or processed beyond what is strictly necessary to resolve the matter at hand.

kxo8 collects personal data through the following channels:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting our support team, or submitting feedback.
• Automated technologies: Technical and usage data collected automatically as you interact with our platform, including cookies, server logs, and similar tracking technologies. See Section 7 for full details.
• Third-party sources: Identity and address verification data from KYC service providers; fraud-signal data from payment processors; publicly available information used to verify account details or investigate potential fraud.
• Payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, Visa, Mastercard, and participating Bangladeshi banks to confirm the status of deposits and withdrawals.

kxo8 uses your personal data for the following purposes, each grounded in a legitimate legal basis (see Section 5):

• Account management: Creating, maintaining, and administering your kxo8 player account, including verifying your identity and age.
• Service delivery: Enabling access to sports betting markets, casino games, live dealer tables, and all other features of the kxo8 platform.
• Payment processing: Processing deposits, withdrawals, and refunds via your chosen payment method, and reconciling transaction records.
• Regulatory compliance: Meeting our Know Your Customer (KYC), Anti-Money Laundering (AML), and responsible gaming obligations, including age verification and source-of-funds checks.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, money laundering, and other unlawful conduct.
• Customer support: Responding to your queries, complaints, and feedback through live chat, email, and other support channels.
• Responsible gaming: Monitoring gambling patterns to identify potential problem gambling behaviour and applying protective tools where appropriate, including deposit limits, cooling-off periods, and self-exclusion.
• Platform improvement: Analysing aggregated usage data to improve the functionality, performance, and user experience of the kxo8 platform.
• Marketing communications: Sending promotional offers, bonus notifications, and news relevant to your account, subject to your marketing preferences. See Section 14 for details.
• Legal proceedings: Establishing, exercising, or defending legal claims, and cooperating with law enforcement or regulatory authorities where required.

kxo8 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or where otherwise permitted by law.

kxo8 processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing is necessary to perform the contract between you and kxo8 — specifically, to provide you with access to our betting and casino services, process your payments, and administer your account.
• Legal obligation: Processing is necessary to comply with applicable legal and regulatory requirements, including KYC, AML, responsible gaming laws, and any lawful requests from competent authorities.
• Legitimate interests: Processing is necessary for kxo8's legitimate business interests, including fraud prevention, platform security, service improvement, and the responsible operation of a gaming platform — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where you have provided explicit, informed consent for a specific processing activity — most commonly in relation to receiving direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

kxo8 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for each purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and participating Bangladeshi financial institutions receive the transaction data necessary to process your deposits and withdrawals.
• Identity verification providers: Specialist KYC service providers who verify the authenticity of identity documents and perform age and address checks as part of our regulatory compliance obligations.
• Game and software providers: Licensed game studios and platform software providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) receive the minimum data necessary to deliver their games within the kxo8 environment.
• Fraud prevention services: Third-party providers of fraud detection, risk scoring, and device fingerprinting services who help kxo8 identify and prevent fraudulent or abusive activity.
• Responsible gaming organisations: Where a player has self-excluded or been identified as at risk, limited data may be shared with recognised responsible gaming support organisations to facilitate player protection measures.
• Legal and regulatory authorities: Competent courts, law enforcement agencies, financial intelligence units, and regulatory bodies where kxo8 is required to disclose data by law, court order, or lawful regulatory request.
• Professional advisers: Lawyers, auditors, and accountants who are bound by professional secrecy obligations and require access to data in the course of providing professional services to kxo8.

kxo8 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file stored on your device that helps us recognise you across sessions, remember your preferences, and gather analytical data. The types of cookies we use are as follows:

You can manage or disable cookies through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the kxo8 platform. kxo8 does not use third-party advertising cookies or behavioural targeting cookies.

kxo8 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or regulation. Our general retention practices are as follows:

• Active account data: Retained for the full duration of your registered account plus a minimum of five (5) years following account closure, to satisfy KYC, AML, and regulatory audit requirements.
• Transaction records: Retained for a minimum of six (6) years from the date of each transaction to comply with financial record-keeping obligations.
• Identity verification documents: Retained for five (5) years after account closure or the completion of the last transaction, whichever is later.
• Support communications: Live chat transcripts and email correspondence retained for three (3) years from the date of the last interaction.
• Technical and usage logs: Retained for up to twenty-four (24) months for security monitoring, fraud investigation, and platform analytics purposes.
• Marketing consent records: Retained for the period during which consent is active, plus three (3) years following withdrawal of consent, for compliance audit purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction or identification. Where data must be retained beyond normal periods due to an active legal claim, regulatory investigation, or court order, it will be held until the matter is fully resolved.

kxo8 employs industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security infrastructure includes:

• 256-bit SSL/TLS encryption: All data transmitted between your device and kxo8's servers is encrypted using 256-bit SSL/TLS protocols, making it unreadable to any third party intercepting the connection.
• Encrypted data storage: Personal data stored in kxo8's databases is encrypted at rest using AES-256 encryption. Financial credentials such as payment account numbers are stored in tokenised form and are never held in plain text.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. kxo8 staff are granted the minimum level of data access required to perform their role. All data access by staff is logged and subject to regular audit.
• Multi-factor authentication: Administrative access to systems holding personal data requires multi-factor authentication. Players are encouraged to use OTP-based two-factor authentication on their accounts.
• Vulnerability management: kxo8's platform undergoes regular security assessments, penetration testing, and vulnerability scanning by qualified security professionals.
• Incident response: kxo8 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, kxo8 will notify affected players promptly and without undue delay.

As a data subject, you have the following rights in relation to your personal data held by kxo8. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request — [Your Username]". We will respond within 30 calendar days of receiving a verifiable request.

• Right of access: You have the right to request a copy of the personal data kxo8 holds about you, along with information about how it is used and with whom it is shared.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to erasure: In certain circumstances, you have the right to request that kxo8 delete your personal data. This right is not absolute — we may be required to retain certain data to fulfil legal obligations or defend legal claims.
• Right to restrict processing: You may request that kxo8 suspend the processing of your personal data in certain circumstances, for example while the accuracy of data is being contested.
• Right to data portability: Where processing is based on consent or contractual necessity, you may request that your personal data be provided to you in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing based on legitimate interests, including profiling. If you object, kxo8 must cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

The kxo8 platform is strictly intended for adults aged 21 and above. kxo8 does not knowingly collect personal data from any individual under the age of 21. If we become aware that personal data has been collected from a person under the age of 21, we will immediately suspend the associated account, delete all personal data relating to that individual, and void any transactions associated with the account.

kxo8 employs robust age verification procedures at registration to prevent underage access. These include document-based identity verification requiring government-issued photo ID showing date of birth. Where a player's age cannot be verified to our satisfaction, account access will be suspended until verification is completed.

The kxo8 platform may, from time to time, contain references to or integrations with third-party services, including game providers, payment processors, and identity verification tools. When you interact with a third-party service embedded within or linked from the kxo8 platform, that party's own privacy policy governs the collection and use of any data you provide directly to them.

kxo8 is not responsible for the privacy practices of third-party services and makes no representations about how those parties handle your personal data. We strongly recommend reviewing the privacy policy of any third-party service you interact with. kxo8 selects third-party service providers who are contractually required to implement appropriate data protection standards; however, we cannot guarantee the data practices of independent third parties beyond our contractual arrangements.

kxo8 operates a platform that serves players located in Bangladesh. Some of our service providers, including game studios, identity verification providers, and cloud infrastructure partners, may be located in jurisdictions outside Bangladesh. Where personal data is transferred outside Bangladesh to such providers, kxo8 ensures that appropriate safeguards are in place to protect the data, including:

• Contractual clauses requiring the recipient to uphold data protection standards equivalent to those applied by kxo8.
• Transfers only to service providers located in jurisdictions that offer an adequate level of data protection.
• Technical safeguards such as end-to-end encryption ensuring that data in transit is protected regardless of the jurisdiction through which it passes.

If you would like further information about the specific safeguards applied to any international data transfer, please contact us at [email protected].

With your consent, kxo8 may send you promotional communications including bonus offers, match previews, seasonal promotions tied to events such as the BPL, IPL, T20 World Cup, Eid, and Pohela Boishakh, as well as general platform news. Marketing communications are sent via email and, where you have provided consent, by SMS to your registered mobile number.

You can manage your marketing preferences at any time in the following ways:

• Using the unsubscribe link included in every marketing email.
• Updating your communication preferences within your kxo8 account settings.
• Contacting our support team at [email protected] with the subject line "Unsubscribe Request".

Please allow up to five (5) business days for an unsubscribe request to take full effect across all communication channels. Unsubscribing from marketing communications does not affect transactional communications, which include deposit confirmations, withdrawal notifications, account security alerts, and responses to your support queries. Transactional communications are sent as part of our service delivery and cannot be opted out of while your account remains active.

kxo8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When a material change is made, we will update the "Last Updated" date at the top of this page and, where the change significantly affects your rights or the way we use your data, we will notify you via email or in-platform notification prior to the change taking effect.

Your continued use of the kxo8 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you must discontinue use of the platform and contact us to close your account.

We recommend reviewing this page periodically to stay informed about how kxo8 protects your personal data. Archived versions of previous Privacy Policies are available upon request by contacting [email protected].

If you have any questions, concerns, or complaints about this Privacy Policy or about how kxo8 handles your personal data, please contact our Data Protection team. We take all privacy-related queries seriously and will respond promptly.

• Email: [email protected]
• Subject line for data rights requests: "Data Rights Request — [Your Username]"
• Subject line for privacy complaints: "Privacy Complaint — [Your Username]"
• Response time: Acknowledgement within 3 business days; full response within 30 calendar days.
• Support hours: 24/7, Bangladesh Standard Time (BST, UTC+6)