Privacy Policy
How kessbet Protects Your Data

Section 1

Information We Collect

kessbet collects personal information from players in Bangladesh through a number of channels, including account registration, deposits and withdrawals, identity verification, customer support interactions, and general use of the Platform. The categories of personal data we collect are described below.

1.1 Registration & Account Data

When you create a kessbet account, we collect the following information:

• Full legal name — as it appears on your government-issued identity document.
• Date of birth — used to verify that you meet the 18+ age requirement.
• Email address — used for account communications, promotional messages (where opted in), and security alerts.
• Mobile phone number — Bangladesh mobile number used for two-factor authentication and account recovery.
• Username and encrypted password — your chosen login credentials. Passwords are stored in hashed, salted form and are never readable in plain text by kessbet staff.
• City and district of residence — used for market analytics and to confirm Bangladesh residency (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Mymensingh, Barisal, Rangpur).

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process, we may request and retain copies of:

• National Identity Card (NID) — both sides, clearly legible.
• Passport — photo page and personal data page of a valid Bangladesh passport.
• Birth Registration Certificate — accepted as a supplementary age verification document.
• Payment method proof — a screenshot or statement confirming that the bKash, Nagad, Rocket, Upay, or bank account used for transactions is registered in your name.

1.3 Financial Transaction Data

Every deposit and withdrawal made through the kessbet Platform generates a transaction record. We collect and retain:

• Transaction amounts in BDT, timestamps (Bangladesh Standard Time, UTC+6), and transaction reference numbers.
• Payment method identifiers — for example, a partial bKash or Nagad account number (full credentials such as PINs are never stored by kessbet).
• Deposit and withdrawal status records, including any flagged or declined transactions.

1.4 Technical & Usage Data

When you access the kessbet Platform through any device or browser, we automatically collect certain technical information:

• IP address — used to detect suspicious login activity, enforce geographic access policies, and prevent fraud.
• Device type, operating system, and browser version — used to optimise Platform performance across Android, iOS, and desktop browsers commonly used in Bangladesh.
• Session data — pages visited, time spent, game sessions played, and navigation paths through the Platform.
• Referral source — the URL or channel through which you first arrived at kessbet, used for internal marketing attribution.

1.5 Communications Data

When you contact kessbet through live chat, email (support@kessbet), or any other support channel, we retain a record of those communications including the content of messages, timestamps, and any attachments or screenshots you share with our team. This data is used to resolve disputes, improve service quality, and maintain an audit trail.

Section 2

How We Use Your Information

kessbet uses the personal data it collects for clearly defined purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary uses of your personal information are as follows:

Purpose	Data Used	Legal Basis
Account creation & management	Registration data, email, mobile number	Contractual necessity
Age & identity verification (KYC)	Date of birth, NID / passport, payment proof	Legal obligation / responsible gaming
Processing deposits & withdrawals	Financial transaction data, payment method identifiers	Contractual necessity
Fraud prevention & security monitoring	IP address, device data, session data, transaction records	Legitimate interest
Customer support & dispute resolution	Communications data, account history	Contractual necessity / legitimate interest
Responsible gaming monitoring	Session data, deposit frequency, betting patterns	Legal obligation / player welfare
Promotional communications (opted-in players)	Email address, mobile number, betting preferences	Consent
Platform analytics & improvement	Aggregated usage data, device and browser data	Legitimate interest

Marketing Communications

kessbet may send promotional emails or SMS messages to players who have explicitly opted in to receive such communications during registration or through their account settings. These may include offers tied to cricket season (BPL, IPL, T20 World Cup), Eid promotions, Pohela Boishakh bonuses, or general platform updates. You may withdraw consent for marketing communications at any time by contacting support at support@kessbet or by adjusting your notification preferences in your account settings. Withdrawal of consent for marketing does not affect your ability to use the Platform or receive transactional communications relating to your account.

Automated Decision-Making

kessbet uses automated systems to detect patterns consistent with fraudulent activity, bonus abuse, money laundering, and problem gambling behaviour. Where an automated system flags an account, a human review is conducted before any significant action — such as account suspension or withdrawal restriction — is taken. If you believe an automated decision has been applied incorrectly to your account, you may request a manual review by contacting our support team.

Section 3

Data Sharing & Disclosure

kessbet does not sell or rent your personal data to any third party. However, in order to operate the Platform and deliver its services to players across Bangladesh, kessbet works with a limited number of trusted third-party service providers and may be required by law to disclose certain information in specific circumstances. The full scope of data sharing is described below.

3.1 Service Providers

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive only the minimum data required to process your transaction. kessbet does not share your full account profile with payment providers.
• KYC verification services: Third-party identity verification platforms may receive copies of your identity documents for the sole purpose of confirming your name, age, and document authenticity. These providers are contractually bound to handle your documents with strict confidentiality.
• Game providers: Studios such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe operate game servers and may receive a pseudonymised player identifier and session token to facilitate game sessions. They do not receive your name, NID, or payment details.
• Analytics and infrastructure providers: Cloud hosting, content delivery, and aggregated analytics services may process technical usage data. These providers are prohibited from using this data for their own commercial purposes under our data processing agreements.

3.2 Legal Disclosures

kessbet may disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies when required to do so by applicable law, a valid court order, or a legally binding governmental request. In such cases, kessbet will disclose only the minimum amount of data necessary to satisfy the legal requirement and, where legally permissible, will notify the affected player.

3.3 Business Transfers

In the event that kessbet undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may form part of the transferred assets. In such circumstances, kessbet will take reasonable steps to ensure that the acquiring entity is bound by privacy obligations at least as protective as those set out in this Privacy Policy, and affected players will be notified prior to any transfer taking effect.

Section 4

Cookies & Tracking Technologies

kessbet uses cookies and similar technologies (including local storage and session tokens) to operate the Platform, remember your preferences, maintain your login session, and gather aggregated analytics about how the site is used. This section explains what types of cookies we use and how you can manage them.

Cookie Type	Purpose	Duration
Strictly Necessary	Maintain your login session, remember your account state, process transactions securely. These cannot be disabled without breaking core Platform functionality.	Session / up to 30 days
Functional	Remember your language preference (English), display settings, and responsible gaming tool configurations (e.g., deposit limit reminders).	Up to 12 months
Analytics	Aggregate data on page views, game session durations, navigation paths, and feature usage — used to improve the Platform for all players in Bangladesh.	Up to 24 months
Security	Detect and prevent fraudulent logins, bot activity, and session hijacking attempts. Cross-reference IP address and device fingerprint against known threat patterns.	Session / up to 90 days

Managing Your Cookie Preferences

You may manage cookie preferences through your browser settings. Most modern browsers — including Chrome, Firefox, Samsung Internet, and the browsers built into Android and iOS devices commonly used in Bangladesh — allow you to view, block, or delete cookies. Please be aware that blocking strictly necessary cookies will impair your ability to log in to kessbet or use certain Platform features. Blocking analytics or functional cookies will not prevent you from using the Platform but may affect your personalised experience.

kessbet does not use third-party advertising cookies or cross-site tracking pixels. The analytics data we collect is processed in aggregate form and is not used to build individual advertising profiles or to retarget you on other websites.

Section 5

Data Security & Storage

kessbet implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. While no online platform can guarantee absolute security, our safeguards include:

• SSL / TLS Encryption: All data in transit between your browser or app and the kessbet servers is encrypted using TLS 1.2 or higher. This applies to login requests, deposit flows, withdrawal requests, and all account management actions.
• Password Hashing: Account passwords are never stored in plain text. kessbet applies a strong cryptographic hashing algorithm (with unique salting per account) so that even in the unlikely event of a data breach, passwords remain unreadable.
• Access Controls: Access to player personal data is restricted to kessbet staff members who have a specific operational need to view that data (e.g., KYC reviewers, support agents handling a related query). Access is logged and audited.
• Server-Side Security: kessbet's infrastructure is hosted on secured cloud servers with firewall protection, intrusion detection systems, and regular vulnerability assessments. Identity verification documents are stored in encrypted form in isolated storage environments.
• Incident Response: In the event of a personal data breach that poses a risk to your rights, kessbet will notify affected players without undue delay and will take immediate remediation steps. You will be informed of the nature of the breach, the data affected, and the actions taken to mitigate harm.

Section 6

Your Privacy Rights

As a player on kessbet, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team via live chat (available 24 hours a day, 7 days a week, BST UTC+6) or at support@kessbet. kessbet will acknowledge your request within 3 business days and fulfil it within 14 calendar days where legally required to do so.

1. Right to Access: You may request a copy of all personal data kessbet holds about you, including your account profile, KYC records, transaction history, and communication logs. We will provide this information in a structured, readable format.
2. Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For account details such as your registered email or phone number, corrections can be made by contacting support and completing a brief identity confirmation step.
3. Right to Erasure: You may request the deletion of your personal data where: the data is no longer necessary for the purpose it was collected; you withdraw consent (where consent was the basis for processing); or the data has been unlawfully processed. Note that certain data — particularly financial transaction records and KYC documents — may be subject to mandatory retention periods that prevent immediate deletion.
4. Right to Restriction of Processing: You may request that kessbet restricts the use of your personal data in certain circumstances, for example while the accuracy of the data is being contested or while a complaint is under review.
5. Right to Data Portability: Where processing is based on your consent or on a contractual relationship, you may request that kessbet provide your personal data in a machine-readable format (such as JSON or CSV) so that it can be transferred to another service provider.
6. Right to Object: You may object to kessbet's use of your data for marketing purposes at any time, with immediate effect. You may also object to processing carried out on the basis of legitimate interests, though such objections will be weighed against kessbet's legitimate operational needs.
7. Right to Withdraw Consent: Where kessbet processes your data on the basis of your consent (for example, for promotional communications), you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing that took place before the withdrawal.

Section 7

Data Retention Policy

kessbet retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal obligations, and to resolve disputes or enforce agreements. The following table summarises our standard retention periods by data category.

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years post-closure	Contractual records, dispute resolution
KYC identity documents	Duration of account + 5 years post-closure	Anti-money-laundering best practices
Financial transaction records	7 years from transaction date	Financial record-keeping obligations
Customer support communications	3 years from last interaction	Dispute resolution, service quality audit
Session and usage data	24 months from collection	Responsible gaming monitoring, analytics
Marketing consent records	Duration of consent + 3 years	Proof of consent for regulatory purposes
Cookie / analytics data	Up to 24 months	Platform performance improvement

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual player. Where deletion is technically complex (for example, data held in backup systems), kessbet will quarantine the data from active use until full deletion can be completed.

If you request early deletion of your personal data under your Right to Erasure (see Section 6), kessbet will assess whether any mandatory retention obligation applies. Where no such obligation exists, deletion will be completed within 30 calendar days of the request being confirmed.

Section 8

Policy Updates & Contact

kessbet reserves the right to update or amend this Privacy Policy at any time. When material changes are made — meaning changes that meaningfully affect how your personal data is collected, used, or shared — we will notify you by email to your registered address or via a prominent notice on the Platform prior to the changes taking effect. For minor administrative or clarifying amendments, the updated Privacy Policy will be published at /privacy-policy and will take effect immediately upon publication. The "Last Updated" date at the top of this page reflects the date of the most recent revision.

Your continued use of the kessbet Platform following publication of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any material update, you may close your account as described in the Terms & Conditions.

Third-Party Links

The kessbet Platform does not contain links to external third-party websites. In the event that any content on the Platform references an external service or brand (for example, a game provider such as Pragmatic Play or Evolution Gaming), please note that kessbet has no control over the privacy practices of those third parties and this Privacy Policy does not extend to their platforms or services.

Children's Privacy

kessbet is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that a player has provided personal data while being under 18, that account will be immediately suspended, all associated funds will be dealt with in accordance with our Terms & Conditions, and the personal data will be deleted as soon as practically possible. If you believe a minor has registered on kessbet, please contact us immediately at support@kessbet.

Contact Our Privacy Team

For all privacy-related enquiries, data access requests, complaints, or general questions about this Privacy Policy, you may reach kessbet as follows:

• Email: support@kessbet — use the subject line "Privacy Enquiry" for fastest routing to our privacy team.
• Live Chat: Available 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6). Start a chat session directly from the kessbet Platform.
• Response Time: kessbet acknowledges all privacy enquiries within 3 business days and resolves the majority of requests within 14 calendar days. Complex or legally sensitive requests may require up to 30 days.

18+ Only. Gambling involves financial risk. Please gamble responsibly. kessbet — Safe & Reliable Platform  •  SSL Encrypted  •  Fair Play Certified.