kr99 Privacy Policy

1. Information We Collect

kr99 collects personal information from users in order to operate the platform safely, verify player identities, process financial transactions, and comply with our obligations as a responsible gaming operator. The categories of personal data we collect are described below.

Information You Provide Directly

When you register for a kr99 account, make deposits or withdrawals, contact our support team, or participate in promotions, you may provide us with the following categories of personal information:

• Identity Data: Full name, date of birth, gender, and national identification number (Bangladesh NID) or passport number as provided during KYC (Know Your Customer) verification.
• Contact Data: Mobile phone number, email address, and residential address including city (e.g., Dhaka, Chittagong, Sylhet, Khulna) and postal code.
• Account Credentials: Username and encrypted password used to access your kr99 account. Passwords are never stored in plain text.
• Financial Data: Payment method details including bKash account numbers, Nagad wallet numbers, Rocket mobile banking numbers, Upay credentials, and bank account details for DBBL, City Bank, BRAC Bank, Islami Bank, and Sonali Bank transfers. We do not store full card numbers if card payments are used; these are handled by our PCI-compliant payment processors.
• KYC Documentation: Scanned copies or photographs of identity documents (NID, passport, driving licence), proof of address documents, and payment method ownership confirmations that you submit during the account verification process.
• Communication Data: Records of communications you send to kr99 via live chat, email, or any other support channel, including the content of those messages and any attachments.

Information Collected Automatically

When you access kr99.app, certain technical data is collected automatically by our systems. This data is used primarily for platform security, fraud prevention, and performance optimisation:

• Device and Browser Data: Device type, operating system, browser type and version, screen resolution, and hardware identifiers.
• Network Data: IP address, internet service provider (ISP), approximate geographic location derived from IP address, and connection type.
• Usage Data: Pages visited on kr99.app, time spent on each page, game sessions played, betting history, deposit and withdrawal transaction logs, and feature interactions within the platform.
• Session Data: Login timestamps, session duration, logout timestamps, and in-session activity patterns used for security monitoring.

Data from Third Parties

We may receive limited personal data about you from the following third-party sources in connection with your use of kr99:

• Payment Providers: Transaction confirmation data from bKash, Nagad, Rocket, Upay, and banking partners to verify deposit and withdrawal processing.
• Game Providers: Game-session results and betting records from studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, for dispute resolution and fair-play audit purposes.
• Fraud Prevention Services: Risk signals and device fingerprinting data from third-party fraud detection tools used to protect the integrity of the kr99 platform.

2. How We Use Your Data

kr99 processes your personal data for the following specific purposes. Each purpose is supported by a lawful basis for processing as described below.

Marketing Communications

If you have opted in to receive promotional communications from kr99, we may use your contact information — primarily your registered mobile number and email address — to send you information about bonuses, seasonal promotions (such as Eid or Pohela Boishakh special offers), new game releases, and cricket or sports betting events. You may withdraw your consent to receive marketing communications at any time by contacting our support team via live chat or by using the unsubscribe option included in any promotional message.

Automated Decision-Making

kr99 uses automated systems for fraud screening, bot detection, and responsible gaming monitoring. These systems may result in temporary account restrictions being applied without human intervention in cases where a high-risk signal is detected. Where an automated decision materially affects your account, you have the right to request human review of that decision by contacting our support team.

3. Data Sharing & Disclosure

kr99 does not sell, rent, or otherwise trade your personal data to third-party advertisers or data brokers. We share personal data only in the limited circumstances described in this section, and only to the minimum extent necessary for the stated purpose.

Service Providers and Technology Partners

We share personal data with carefully selected third-party service providers who assist in operating the kr99 platform. These providers are contractually required to process your data solely on our instructions, to maintain appropriate security standards, and not to use your data for their own purposes. Categories of service providers who may access your data include:

• Payment processors: bKash, Nagad, Rocket, Upay, and banking partners who process your deposit and withdrawal transactions.
• Game studios: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, for the purpose of delivering game content and resolving game-session disputes.
• KYC and identity verification providers: Third-party services that assist in verifying the authenticity of identity documents submitted by players during the account verification process.
• Fraud prevention and cybersecurity providers: Services that analyse device and network signals to detect account takeover attempts, bot activity, and multi-accounting.
• Customer support infrastructure: Live-chat and ticketing system providers that host and deliver our 24/7 English-language customer support service.
• Analytics providers: Anonymised or pseudonymised usage data may be processed by analytics platforms to help us understand platform performance and user experience patterns.

Legal and Regulatory Disclosures

kr99 may disclose your personal data to law enforcement authorities, regulatory bodies, or courts where we are legally required to do so, or where such disclosure is necessary to protect the safety of users or the integrity of the platform. Such disclosures will be made only to the extent required by law and will be documented internally.

Business Transfers

In the event that kr99 or any part of its business is acquired, merged, or transferred to another entity, your personal data held at the time of that transaction may be transferred as part of the business assets. In such a scenario, you will be notified via your registered email address or through a prominent notice on kr99.app before your data becomes subject to a different privacy policy.

4. Cookies & Tracking

kr99 uses cookies and similar tracking technologies on kr99.app to ensure the platform functions correctly, to keep your session active while you are logged in, and to understand how players navigate and use the site so we can continuously improve the experience.

What Are Cookies?

Cookies are small text files stored on your device by your web browser when you visit a website. They allow the website to remember information about your visit — such as your login status and language preferences — so that certain features work correctly during your session and on subsequent visits.

Types of Cookies We Use

• Essential Cookies: Required for the kr99 platform to function. These include session authentication cookies that keep you logged in while you navigate the site, CSRF protection tokens, and load-balancing identifiers. These cookies cannot be disabled without preventing access to the platform.
• Analytical Cookies: Used to collect anonymised data about how users interact with kr99.app — such as which pages are most visited, average session length, and navigation paths. This data helps us identify areas for improvement. The data collected by analytical cookies does not identify you personally.
• Functional Cookies: Store your preferences — such as display settings and game lobby filters — so that your customised experience is preserved between sessions.
• Security Cookies: Support our fraud detection systems by establishing a device fingerprint that helps identify suspicious login attempts or bot behaviour. These cookies do not track your activity across other websites.

Third-Party Cookies

Some features of the kr99 platform are delivered by third-party providers — particularly live game studio iframes operated by Evolution Gaming and Ezugi. These studios may set their own session cookies within their game environments, governed by their own privacy practices. kr99 does not control these third-party cookies and recommends reviewing the privacy documentation of these studios if you have specific concerns.

Managing Cookies

Most modern web browsers allow you to control cookie settings via the browser's privacy or settings menu. You may be able to block or delete cookies, though doing so may impair certain functions of the kr99 platform — including your ability to stay logged in during a session. For guidance on managing cookies in your specific browser, consult your browser's official support documentation.

5. Data Security

kr99 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. While no online platform can guarantee absolute security, we are committed to maintaining robust safeguards that reflect current best practices for the online gaming industry.

Technical Safeguards

• SSL/TLS Encryption: All data exchanged between your browser or app and kr99 servers is encrypted in transit using SSL/TLS protocols. This prevents interception of your login credentials, financial transactions, or personal information during transmission.
• Password Security: Account passwords are hashed using a strong one-way cryptographic algorithm before being stored. kr99 staff cannot view your password; only a reset mechanism is available if credentials are lost.
• Data Encryption at Rest: Sensitive data fields — including identity document scans and financial account references — are encrypted within our database infrastructure.
• Access Controls: Access to personal data within kr99's internal systems is restricted on a role-based basis. Only staff members with a legitimate operational need to access a particular category of data are authorised to do so. All internal data access is logged and auditable.
• Network Security: Our server infrastructure is protected by firewalls, intrusion detection systems, and DDoS mitigation services. Regular penetration testing is conducted to identify and address potential vulnerabilities.

Organisational Safeguards

All kr99 staff who handle personal data receive training on data protection responsibilities. Confidentiality obligations are contractually binding for all personnel and third-party service providers with access to player data. Internal policies and procedures govern how data is accessed, processed, stored, and disposed of throughout its lifecycle.

Data Breach Procedures

In the event of a personal data breach that is likely to result in a high risk to affected individuals, kr99 will notify affected players as quickly as reasonably practicable via their registered email address or through a platform-wide notice on kr99.app. The notification will describe the nature of the breach, the data affected, and the steps we are taking to mitigate harm.

6. Data Retention

kr99 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The retention periods applied to key categories of personal data are as follows:

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data subject's identity. Where data is anonymised rather than deleted, the anonymised dataset may be retained indefinitely for statistical and analytical purposes.

Requests for Early Deletion

You may request the deletion of your personal data before the end of the retention period described above. kr99 will honour such requests where there is no overriding legal obligation to retain the data. Where a legal obligation does require retention — such as AML record-keeping requirements — we will inform you that deletion cannot be completed at that time and will explain the applicable retention obligation. See the "Your Privacy Rights" section below for guidance on submitting a deletion request.

7. Your Privacy Rights

As a registered kr99 player, you hold the following rights in relation to your personal data. These rights may be exercised at any time by contacting our support team via live chat inside your account dashboard or by emailing [email protected] from your registered email address.

• Right of Access: You have the right to request a copy of the personal data that kr99 holds about you, together with information about how it is being used and with whom it has been shared. We will respond to valid access requests within 30 days of receipt.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Certain data — such as your registered name or date of birth — may require supporting documentation before a correction can be processed.
• Right to Erasure ("Right to be Forgotten"): You may request that kr99 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is otherwise unlawful. Deletion requests are subject to our legal retention obligations as described in the Data Retention section above.
• Right to Restrict Processing: You may request that kr99 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of your data is being contested, or where you have objected to processing based on legitimate interests pending verification of those interests.
• Right to Data Portability: Where your data is processed on the basis of consent or contract performance, and the processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on kr99's legitimate interests, including where your data is used for direct marketing. Where you object to direct marketing, kr99 will cease processing your data for that purpose immediately.
• Rights Related to Automated Decision-Making: Where an automated decision produces a significant effect on your account — such as a fraud-triggered restriction — you have the right to request human review of that decision by contacting our support team.

How to Exercise Your Rights

To exercise any of the rights listed above, please contact the kr99 support team via live chat inside your account dashboard (available 24/7, Bangladesh Standard Time, UTC+6). You may also send your request by email to [email protected] from the email address registered to your kr99 account. To protect your privacy, we may ask you to verify your identity before processing a rights request. We will respond to all valid requests within 30 calendar days. If the complexity or volume of requests requires additional time, we will inform you of the delay and the revised expected completion date.

8. Policy Updates & Contact

kr99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to platform functionality. When material changes are made to this policy, the updated version will be published on this page with a revised effective date prominently displayed at the top of the document.

Notification of Changes

Where changes to this Privacy Policy are considered material — meaning they significantly affect how your personal data is processed or the rights available to you — kr99 will notify registered players via the platform's internal notification system or by email to your registered address. Your continued use of the kr99 platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with any amendment, you should cease using the platform and contact our support team to request account closure.

Contact Details

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by kr99, please contact our support team using any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, via the chat widget inside your kr99 account dashboard. This is the fastest way to reach our English-speaking support team.
• Email: [email protected] — please use the email address registered to your kr99 account when sending privacy-related requests, so we can verify your identity efficiently.
• Support Hours: 24/7 (Bangladesh Standard Time, UTC+6)

kr99 takes all privacy-related enquiries seriously and is committed to providing clear, timely, and helpful responses to every request we receive.