Your Privacy Matters at kl666 —
Transparent, Secure Data Practices

kl666 is an online casino and sports betting platform operating at kl666.io, designed specifically for adult players in Bangladesh. The platform offers a comprehensive suite of gambling products including slot games from providers such as Pragmatic Play, NetEnt, Microgaming, and Spribe; live dealer casino tables powered by Evolution Gaming and Ezugi; crash games; and sports betting markets covering BPL, IPL, T20 World Cup, ICC tournaments, and Bangladesh Tigers international fixtures.

For the purposes of this Privacy Policy, "kl666", "we", "us", and "our" refer to the operator of the kl666.io platform. "You" and "your" refer to any individual who accesses, registers on, or otherwise uses the kl666 platform. "Personal data" means any information that identifies or can reasonably be used to identify a living individual.

kl666 operates as the data controller in respect of all personal data collected through the platform. We determine the purposes and means by which personal data is processed, and we take responsibility for ensuring that data is handled lawfully, fairly, and securely in accordance with this policy.

kl666 collects personal data through several channels: directly from you during registration and ongoing platform use, automatically through technical systems, and from third-party verification partners during KYC processes. The categories of personal data we collect are described below.

kl666 does not knowingly collect sensitive personal data categories — such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data — except where identity photographs are required for KYC purposes, in which case they are used solely to verify your identity and are not processed for any other purpose.

kl666 uses the personal data it collects only for specific, legitimate purposes directly related to the operation of the platform and the provision of services to you. We do not use personal data in ways that are incompatible with the purpose for which it was originally collected.

• Account creation and management: To register your account, authenticate your identity at login, and maintain accurate account records throughout your relationship with kl666.
• Payment processing: To process deposits via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other supported payment methods, and to execute withdrawal requests to your verified payment method.
• KYC and fraud prevention: To verify your age (21+), identity, and the legitimacy of your payment methods in accordance with responsible gaming and anti-money-laundering obligations.
• Platform delivery: To provide access to casino games, sports betting markets, live dealer tables, crash games, and all other kl666 platform features.
• Customer support: To respond to your queries, resolve disputes, process complaints, and deliver 24/7 live chat support in English across Bangladesh Standard Time (UTC+6).
• Responsible gaming: To monitor gameplay patterns for indicators of problem gambling and to implement deposit limits, self-exclusion, and other responsible gaming tools you activate.
• Security and platform integrity: To detect, investigate, and prevent fraudulent activity, collusion, multi-accounting, automated bot usage, and other prohibited conduct as defined in the Terms & Conditions.
• Platform improvement: To analyse aggregated, anonymised usage data to improve game selection, platform performance, and the overall user experience.
• Legal and regulatory compliance: To fulfil obligations under applicable law, respond to lawful requests from competent authorities, and maintain records as required by applicable financial regulations.
• Marketing communications: To send you promotional offers, bonus notifications, and tournament announcements relevant to the kl666 platform, where you have not opted out of such communications (see Section 12).

kl666 processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:

• Contractual necessity: Processing that is necessary to provide the services described in the Terms & Conditions, including account management, payment processing, and customer support.
• Legal obligation: Processing required to comply with applicable laws, including identity verification, age verification, anti-money-laundering checks, and record-keeping obligations.
• Legitimate interests: Processing carried out for kl666's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and aggregated analytics — where those interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific consent — in particular, the sending of direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

kl666 does not sell, rent, or trade your personal data. We share personal data only in the limited circumstances described below, and only to the extent necessary for the specific purpose involved.

• Game studio partners: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive technical session data necessary to deliver their games. These partners are bound by strict data processing agreements and may not use your data for any purpose beyond game delivery.
• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive financial transaction data necessary to process your deposits and withdrawals. Each provider operates under its own privacy policy and applicable financial regulations.
• KYC and identity verification providers: Third-party identity verification services may process copies of your identity documents and verification photographs solely for the purpose of confirming your identity and age.
• Fraud prevention and security services: Specialist security partners may receive technical and usage data to assist in detecting fraudulent activity, multi-accounting, and other prohibited conduct.
• Legal and regulatory authorities: kl666 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required by law, pursuant to a lawful order, or where necessary to protect the rights, property, or safety of kl666 or its players.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of kl666's assets, personal data may be transferred to the acquiring entity. You will be notified in advance of any such transfer and of any changes to this Privacy Policy that result from it.

All third parties with whom kl666 shares personal data are required to implement appropriate technical and organisational security measures and to process that data only in accordance with kl666's instructions and applicable law.

kl666 uses cookies and similar tracking technologies on its website and mobile platform. Cookies are small text files stored on your device that help the platform function correctly, remember your preferences, and gather aggregated analytics data.

You may control cookie preferences through your browser settings. Disabling essential cookies will impair the functionality of the kl666 platform and may prevent you from accessing certain features. Disabling analytics or marketing cookies will not affect your core platform experience.

kl666 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulation. The following retention periods apply as a general guide:

• Account data: Retained for the duration of your active account relationship with kl666, plus a minimum of 5 years following account closure, in accordance with standard financial record-keeping obligations.
• Transaction and financial records: Retained for a minimum of 5 years from the date of each transaction, in accordance with anti-money-laundering regulations applicable to financial service providers.
• KYC documents: Retained for the duration of your account plus 5 years following closure. Identity documents are stored in encrypted form and access is strictly limited to authorised compliance personnel.
• Customer support communications: Retained for 2 years from the date of the interaction, to support dispute resolution and quality assurance.
• Responsible gaming records: Self-exclusion and cooling-off period records are retained for 7 years to prevent the circumvention of exclusion periods through account re-registration.
• Marketing preferences: Retained until you opt out, after which a suppression record is maintained to ensure no further marketing is sent.
• Technical and usage logs: Retained for 90 days in active systems, after which they are aggregated and anonymised for analytics purposes.

When personal data is no longer required, kl666 securely deletes or anonymises it in a manner that prevents recovery or reconstruction of the original data.

kl666 implements a multi-layered approach to data security, combining technical controls, organisational procedures, and physical safeguards to protect your personal data from unauthorised access, disclosure, alteration, or destruction.

• Encryption in transit: All data transmitted between your device and kl666's servers is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to the website, mobile platform, payment flows, and API connections with third-party game providers.
• Encryption at rest: Sensitive personal data stored in kl666's databases — including identity documents, financial records, and KYC data — is encrypted at rest using AES-256 encryption.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff with access to player data undergo background checks and are bound by confidentiality obligations. Access logs are maintained and reviewed regularly.
• Two-factor authentication: All player accounts support SMS-based two-factor authentication, which kl666 strongly encourages all registered players to activate.
• Regular security audits: kl666 engages independent security specialists to conduct periodic penetration testing and vulnerability assessments of the platform's infrastructure.
• Incident response: kl666 maintains a documented data breach response plan. In the event of a confirmed personal data breach that poses a risk to your rights, affected players will be notified promptly with details of the nature of the breach and the remediation steps taken.

As a player on the kl666 platform, you hold the following rights with respect to the personal data kl666 holds about you. To exercise any of these rights, contact kl666 support via live chat or at [email protected]. We will respond within 30 days of receiving a valid request.

• Right of access: You have the right to request a copy of all personal data kl666 holds about you, along with information about how it is being used.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data. Some data corrections may require re-verification of your identity through the KYC process.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to kl666's legal obligations to retain certain records (see Section 7).
• Right to restrict processing: You may request that kl666 temporarily restrict the processing of your personal data while a dispute regarding its accuracy or lawfulness is being resolved.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you have the right to receive a copy of your personal data in a structured, machine-readable format.
• Right to object: You have the right to object to processing based on legitimate interests — including profiling — and to opt out of direct marketing communications at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out before the withdrawal.

kl666 will not charge a fee for handling data rights requests in standard circumstances. If a request is manifestly unfounded or excessive, kl666 reserves the right to charge a reasonable administrative fee or decline to act on the request, with written explanation.

kl666 is strictly intended for adults aged 21 and above. The platform does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the KYC process, and kl666 will refuse or suspend accounts where there is reasonable suspicion that the account holder is under 21 years of age.

If kl666 becomes aware that personal data has been collected from an individual under the age of 21 without the safeguards in place to have prevented this, that data will be deleted promptly and the associated account will be permanently closed.

If you are a parent or guardian and believe that a minor under your care has registered on kl666, please contact us immediately at [email protected]. We take reports of underage access extremely seriously and will investigate and act without delay.

The kl666 platform may contain references to third-party services — such as payment providers like bKash, Nagad, Rocket, and Upay — that operate under their own independent privacy policies. kl666 is not responsible for the privacy practices of any third-party service, and this Privacy Policy applies only to data collected directly by kl666 through its own platform.

When you interact with a third-party payment provider to complete a deposit or withdrawal, your transaction data is subject to that provider's own terms and privacy policy in addition to this policy. kl666 strongly recommends that you review the privacy policies of any third-party services you use in connection with your kl666 account.

Game content delivered by studio partners — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — is provided under licence and rendered within the kl666 platform environment. Technical session data passed to game providers for the purpose of game delivery is governed by data processing agreements and the providers' own privacy frameworks.

kl666 may send you promotional communications about bonuses, new games, seasonal offers — such as those tied to Eid, Pohela Boishakh, or major cricket tournaments like the BPL and IPL — and platform updates. These communications are sent by email and, where you have provided consent, via WhatsApp or SMS to your registered Bangladesh mobile number.

You may opt out of marketing communications at any time using any of the following methods:

• Clicking the unsubscribe link included in any marketing email from kl666.
• Contacting kl666 support via live chat and requesting removal from the marketing list.
• Emailing [email protected] with the subject line "Marketing Opt-Out" and your registered account email address.

Opting out of marketing communications will not affect the delivery of transactional messages — such as deposit confirmations, withdrawal notifications, KYC status updates, and security alerts — which are necessary for the operation of your account.

kl666 does not share your contact data with third-party marketers. All promotional communications you receive will originate from kl666 directly.

kl666 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, platform features, data processing practices, or operational requirements. All amendments will be published at kl666.io/privacy-policy with a revised "Last Updated" date clearly displayed at the top of the page.

Where kl666 makes material changes to this Privacy Policy — meaning changes that meaningfully affect the way your personal data is collected, used, or shared — registered players will be notified via email to their registered address, or via a prominent in-platform notification, no less than 14 days before the revised policy takes effect. Your continued use of the kl666 platform after the effective date of any amendment constitutes acceptance of the updated Privacy Policy.

If you do not agree with any amendment to this Privacy Policy, you should cease using the platform and contact support to request account closure. kl666 will process any such request in accordance with the data retention obligations described in Section 7.

kl666 recommends that you review this Privacy Policy periodically to remain informed about how your personal data is being handled. The date at the top of this policy reflects when it was most recently reviewed and approved by the kl666 compliance team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way kl666 handles your personal data, please contact our support team using any of the channels below. All privacy-related enquiries are handled by kl666's dedicated compliance team and will receive a response within 5 business days.

• Live Chat: Available 24/7 through your kl666 account dashboard — the fastest way to reach our support team.
• Email: [email protected] — for formal data rights requests, please include your registered account email and a brief description of your request in the subject line.
• WhatsApp: +880 1700 000000 — for general privacy enquiries during Bangladesh Standard Time (UTC+6) business hours.

kl666 serves players across Bangladesh including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. Our support team operates entirely in English and is trained to assist with data rights requests, marketing opt-outs, account security concerns, and all other privacy-related matters.