kc33 Privacy Policy
How We Collect, Use & Protect Your Data

1. Introduction

kc33 ("we", "us", "our") is committed to protecting the privacy and security of personal information belonging to all users of the kc33 platform, accessible at kc33.onl. This Privacy Policy describes in detail how we collect, use, store, disclose, and safeguard your personal data in connection with your use of our online casino, sports betting, and related services.

This Policy applies to all visitors to the kc33 website, all registered account holders, and all individuals who interact with kc33 through any communication channel, including email and support chat. By accessing the kc33 platform or creating an account, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection and processing of your personal data as described herein.

2. Data Controller

For the purposes of this Privacy Policy, kc33 acts as the data controller in respect of personal data collected directly from users through the platform, registration process, payment flows, and support channels.

Where kc33 engages third-party service providers — such as payment processors, KYC verification services, or game software providers — those parties act as independent data controllers or data processors in respect of data they collect or process pursuant to their own terms and privacy notices. kc33 takes reasonable steps to ensure that all such third parties maintain appropriate data protection standards.

3. Data We Collect

kc33 collects personal data across several categories, each of which is necessary for a specific operational purpose. We do not collect more data than is required to fulfil the relevant purpose. The categories of data we collect include the following:

• Identity Data: Full legal name, date of birth, nationality, National ID (NID) number or passport number, and a photographic likeness (selfie) submitted during KYC verification. This data is mandatory for all users wishing to withdraw funds.
• Contact Data: Mobile phone number, email address, and general location (district or city, such as Dhaka, Chittagong, Sylhet, Khulna, or Rajshahi). This is provided at registration and may be updated via account settings.
• Financial Data: Mobile banking account details (bKash, Nagad, Rocket, or Upay account numbers associated with transactions), USDT wallet addresses, deposit amounts, withdrawal requests, and transaction history.
• Technical Data: IP address, browser type and version, operating system, device identifier, time zone, screen resolution, referral URL, and session activity logs.
• Usage and Gameplay Data: Details of games played, stakes placed, game outcomes, bonus usage, session start and end times, and responsible gaming tool usage (e.g., deposit limits, cooling-off activations).
• Communication and Support Data: Records of all interactions with the kc33 support team, including chat transcripts, emails, and any attachments or documents you submit in connection with a support request or dispute.
• Preferences Data: Language preferences, notification settings, and any self-imposed responsible gaming limits you have configured on your account.

4. How We Collect Data

kc33 collects personal data through the following primary channels:

• Direct submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or updating account settings.
• Automated collection: Technical and usage data collected automatically via server logs, session tracking, and platform analytics tools as you navigate and interact with the kc33 website.
• Payment providers: Transaction confirmation data passed back to kc33 from bKash, Nagad, Rocket, Upay, and USDT network confirmations to verify and reconcile payment activity on your account.
• Identity verification services: Results and risk signals from third-party KYC and AML screening providers used to verify your identity and assess compliance risk.
• Cookies and similar technologies: Data collected via cookies, local storage, and session tokens placed on your device when you visit the kc33 website. See Section 11 for full details.

5. How We Use Your Data

kc33 uses personal data collected from users for the following purposes:

• Account creation and management: To register your account, verify your identity, maintain your account settings, and communicate important platform updates to you.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and USDT, to reconcile transaction records, and to investigate payment disputes.
• Age and eligibility verification: To confirm that you meet the minimum age requirement of 21 years and are otherwise eligible to use the kc33 platform.
• Fraud and security monitoring: To detect, investigate, and prevent unauthorised access, fraudulent transactions, money laundering, and other illegal activity on the platform.
• Responsible gaming: To monitor gameplay patterns that may indicate problem gambling behaviour, to administer self-imposed limits and exclusions, and to facilitate escalation to responsible gaming support services.
• Customer support: To respond to your support requests, investigate complaints, resolve disputes, and improve the quality of our support services.
• Legal and regulatory compliance: To comply with applicable anti-money laundering (AML), know-your-customer (KYC), and other legal obligations, and to respond to lawful requests from regulatory bodies or law enforcement authorities.
• Platform improvement: To analyse usage patterns, diagnose technical issues, conduct A/B testing, and improve the performance, design, and features of the kc33 platform.
• Communications and promotions: To send you account-related notifications and, where you have opted in, to inform you of relevant promotions and offers. You may opt out of promotional communications at any time.

6. Legal Basis for Processing

kc33 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions agreement between you and kc33, including operating your account and processing payments.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML/KYC obligations, record-keeping requirements, and responses to lawful authority requests.
• Legitimate interests: Processing carried out for our legitimate business interests, such as fraud prevention, platform security, and service analytics, where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for optional purposes such as sending promotional communications, where you have given clear, affirmative consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7. Data Sharing & Disclosure

kc33 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We share personal data only in the limited circumstances described below:

• Payment service providers: bKash, Nagad, Rocket, Upay, and USDT network operators receive the minimum data necessary to process deposit and withdrawal transactions on your behalf.
• Identity verification and KYC providers: Third-party services that assist kc33 in verifying user identity, assessing fraud risk, and conducting AML screening. These providers are contractually bound to use data only for the specified purpose.
• Game software providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive technical session data necessary to deliver their games to your device. They do not receive your financial or identity data.
• Law enforcement and regulatory bodies: kc33 will disclose personal data to relevant authorities when required to do so by law, court order, or where we believe disclosure is necessary to prevent fraud, protect the safety of users, or protect the rights of kc33. Where legally permissible, we will notify you before making such a disclosure.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the kc33 business, user data may be transferred to the acquiring entity. We will provide notice of any such transfer and the privacy implications before it takes effect.

8. International Data Transfers

kc33 operates a platform accessible to players in Bangladesh and other jurisdictions. As a result, personal data may be processed and stored on servers located outside Bangladesh. Where such transfers occur, kc33 takes appropriate steps to ensure that your personal data is afforded a comparable level of protection to that which it receives in its country of origin.

Transfers to third-party service providers (such as game software providers based in Europe or other regions) are governed by data processing agreements that impose appropriate technical and organisational security measures and restrict the use of data to the specified purpose.

By using the kc33 platform, you acknowledge and consent to your personal data being transferred to and processed in jurisdictions outside Bangladesh where kc33's operational infrastructure and service partners are located.

9. Data Retention

kc33 retains personal data for the duration of your account's active lifetime and for a minimum period of five (5) years following permanent account closure. This retention period reflects our obligations under applicable AML, KYC, and financial record-keeping regulations.

Specific retention periods by data category are as follows:

• Identity and KYC data: Minimum 5 years post account closure or post last transaction, whichever is later.
• Financial transaction records: Minimum 5 years post transaction date, in accordance with financial record-keeping obligations.
• Support and communication records: 3 years post interaction, or longer where a dispute, investigation, or legal claim is outstanding.
• Technical and usage data: 13 months from collection (rolling), unless longer retention is required for fraud investigation.
• Marketing consent records: Duration of account plus 2 years, or until consent is withdrawn.

After the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be used to identify any individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

10. Security of Your Data

kc33 employs a multi-layered security architecture designed to protect your personal and financial data against unauthorised access, disclosure, alteration, and destruction. Our security measures include, but are not limited to, the following:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the kc33 platform.
• Encrypted storage for sensitive personal data including identity documents and financial account details.
• OTP-based two-factor authentication for account login and sensitive account operations.
• Automated fraud detection and anomaly monitoring systems that flag unusual account activity in real time.
• Role-based access controls ensuring that kc33 staff can only access personal data relevant to their specific operational responsibilities.
• Regular internal security audits and third-party penetration testing to identify and remed iate vulnerabilities before they can be exploited.
• Strict data minimisation practices — only staff with a legitimate operational need are granted access to identifiable user data, and all such access is logged and audited.

While kc33 takes all reasonable and practicable steps to secure your personal data, no online platform can guarantee absolute security against all threats. You are responsible for maintaining the confidentiality of your kc33 account credentials and for notifying us immediately at [email protected] if you suspect any unauthorised access to your account.

11. Cookies & Similar Technologies

kc33 uses cookies and similar tracking technologies to operate and improve the platform, personalise your experience, and ensure platform security. A cookie is a small text file placed on your device when you visit a website. The following categories of cookies are used on the kc33 platform:

• Strictly necessary cookies: Essential for the platform to function. These cookies enable session management, authentication state, and security token validation. They cannot be disabled without preventing core platform functionality.
• Functional cookies: Used to remember your preferences, such as language settings, and to provide enhanced features. Disabling these may limit the personalisation of your experience.
• Analytics cookies: Used to collect aggregated, anonymised data about how users interact with the platform — including pages visited, time on site, and navigation paths — to help us improve the kc33 experience. These cookies do not identify you personally.
• Security cookies: Used to detect fraudulent activity, protect against account takeover attempts, and verify that actions on the platform are being performed by the legitimate account holder.

kc33 does not use third-party advertising cookies or tracking pixels that transmit your data to external advertising networks. You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in or using core platform features.

12. Your Data Rights

kc33 respects your right to control your own personal data. Subject to applicable law and certain operational limitations (such as our regulatory data retention obligations), you hold the following rights in respect of the personal data we hold about you:

• Right of access: You may request a copy of the personal data we hold about you, together with information about how it is being processed. We will provide this within 30 days of a verified request.
• Right to rectification: You may request that we correct any inaccurate or incomplete personal data held on your account. Minor updates (such as email address changes) can typically be made via your account settings panel.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where the data has been unlawfully processed. Note that we may be unable to delete data we are legally required to retain (e.g., KYC and financial records).
• Right to restrict processing: You may ask us to temporarily suspend processing of your personal data in certain circumstances, for example while you contest the accuracy of data we hold.
• Right to data portability: You may request a copy of your personal data in a structured, commonly used, and machine-readable format so that it can be transferred to another service provider where technically feasible.
• Right to object: You may object at any time to processing based on legitimate interests, including direct marketing. Where you object to marketing communications, we will cease sending them promptly.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the rights listed above, please submit a written request to [email protected] with the subject line "Data Rights Request". We may ask you to verify your identity before processing your request. We will respond within 30 calendar days. If we are unable to fulfil your request, we will explain why in writing.

13. Minors & Age Restriction

The kc33 platform is strictly intended for adults aged 21 years and above. kc33 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been submitted by or on behalf of a person under 21, we will take immediate steps to delete that data and close the associated account.

As part of our KYC process, all users are required to submit government-issued identity documentation confirming that they meet the 21+ age requirement before withdrawal privileges are granted. If you have reason to believe that a minor has accessed or registered on the kc33 platform, please contact [email protected] immediately.

14. Updates to This Privacy Policy

kc33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. Where changes are material — meaning they substantially affect how we process your personal data or your rights in relation to it — we will provide at least 14 days' advance notice via the email address associated with your kc33 account, or via a prominent banner notification on the platform.

Minor, administrative, or clarificatory amendments that do not materially affect your rights may take effect without advance notice. The updated Policy will always be published at kc33.onl/privacy-policy with the effective date and version number clearly stated at the top of the document.

Your continued use of the kc33 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any material change, you have the right to close your account and request deletion of your data by contacting [email protected] prior to the effective date of the change.

15. Contact & Privacy Queries

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which kc33 handles your personal data, please contact our support and privacy team using the details below. All privacy-related communications are handled in strict confidence.

• Email: [email protected] — use the subject line "Privacy Request" for data rights requests or "Privacy Query" for general questions.
• Response time: Privacy requests are acknowledged within 24 hours. Substantive responses are provided within 30 calendar days.
• Support hours: 24 hours a day, 7 days a week, in English.
• Platform: kc33.onl
• Serving: Bangladesh and international players (21+ only).

This Privacy Policy was last reviewed and updated on 1 January 2026. kc33 thanks you for trusting us with your personal data and remains committed to handling that data responsibly, transparently, and securely — in the best interests of every player across Bangladesh and beyond.