Privacy Policy
at kvi8

1 Information We Collect

kvi8 collects personal information from players in three ways: information you provide directly when registering or using the platform, information generated automatically by your use of the platform, and information received from third-party service providers such as payment processors.

1.1 Information You Provide Directly

When you register a kvi8 account, contact our support team, or use our services, you may provide the following categories of personal data:

• Identity data: Full legal name, date of birth, gender, and national identification details (e.g., Bangladesh National ID card number, passport number).
• Contact data: Email address, Bangladesh mobile phone number, and city of residence (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi).
• Payment data: Mobile banking account number (bKash, Nagad, Rocket, Upay), bank account details (DBBL, City Bank, BRAC Bank), and card details where applicable (Visa, Mastercard). Note: full card numbers are not stored by kvi8; card transactions are processed by PCI-DSS compliant payment processors.
• Identity verification documents: Scanned copies or photographs of identity documents submitted during KYC verification, as required by our anti-money laundering obligations.
• Communications data: The content of any messages you send to kvi8 via live chat, email, or any other support channel.

1.2 Information Generated Automatically

When you access and use the kvi8 platform, certain technical data is collected automatically by our systems:

Data Category	Examples	Purpose
Device & Technical Data	IP address, device type, operating system, browser type and version	Security, fraud detection, platform optimisation
Usage Data	Pages visited, game sessions played, bet history, session duration, click patterns	Service improvement, responsible gaming monitoring
Location Data	Approximate geographic location derived from IP address (country/city level)	Jurisdiction compliance verification
Log Data	Server access logs, error logs, transaction logs	Security auditing, technical support, dispute resolution
Cookie & Session Data	Session tokens, preference cookies, analytics identifiers	Session management, platform performance (see Section 4)

1.3 Information from Third Parties

kvi8 may receive personal data about you from the following third-party sources in limited circumstances:

• Payment processors: Transaction confirmation data, payment method verification status, and fraud-screening results from bKash, Nagad, Rocket, Upay, and our card processing partners.
• Identity verification services: Results of automated or manual document verification checks conducted by our KYC provider.
• Anti-fraud networks: Risk signals and flagged account data from industry fraud prevention services, used solely to protect the integrity of the kvi8 platform.

2 How We Use Your Data

kvi8 uses your personal data only for specific, legitimate purposes directly connected to the delivery and improvement of the kvi8 service. We do not use your data for any purpose unrelated to operating the kvi8 platform.

2.1 Service Delivery

• Creating and managing your kvi8 player account.
• Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and banking partners.
• Verifying your identity and age (18+) during KYC checks.
• Delivering sports betting, live casino, and slot gaming services.
• Applying and tracking bonus offers and promotional credits in accordance with the kvi8 Terms & Conditions.
• Providing 24/7 customer support via live chat and email.

2.2 Security & Compliance

• Detecting and preventing fraud, money laundering, match-fixing, and other prohibited activities as defined in the kvi8 Terms & Conditions.
• Complying with applicable anti-money laundering (AML) and Know Your Customer (KYC) obligations.
• Verifying that users are located in a jurisdiction where access to the kvi8 platform is permissible.
• Maintaining audit logs for security, dispute resolution, and regulatory compliance purposes.

2.3 Responsible Gaming

kvi8 uses player activity data — including bet frequency, session duration, deposit patterns, and game type preferences — to monitor for signs of problem gambling behaviour. This analysis is conducted in your interest to support the responsible gaming tools described on our Responsible Gaming page. We may contact you proactively if our monitoring systems identify activity consistent with problematic gambling patterns.

2.4 Platform Improvement

• Analysing aggregated and anonymised usage data to improve platform performance, game selection, and user experience.
• Conducting internal research and analytics to understand how players in Bangladesh interact with our platform.
• Testing new features, promotions, and platform updates before wider rollout.

2.5 Communications

kvi8 will contact you by email or SMS for the following purposes:

• Account-related notifications (e.g., deposit confirmations, withdrawal status updates, KYC requests, security alerts).
• Promotional communications about kvi8 bonuses, new game releases, and seasonal offers — but only if you have opted in to marketing communications during registration or subsequently via your account settings. You may opt out of marketing communications at any time by updating your preferences in your account settings or by contacting [email protected].

3 Data Sharing & Disclosure

kvi8 does not sell, rent, or otherwise transfer your personal data to third parties for commercial gain. We share your data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

3.1 Service Providers

kvi8 engages trusted third-party service providers to assist in operating the platform. These providers are permitted to access your personal data solely to perform services on our behalf and are contractually prohibited from using your data for any other purpose. Categories of service providers include:

• Payment processors: bKash, Nagad, Rocket, Upay, and card payment processing partners (Visa/Mastercard networks), to facilitate deposits and withdrawals.
• KYC and identity verification providers: Third-party services that verify identity documents and screen against sanctions and politically exposed persons (PEP) lists.
• Game software providers: Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe, and other licensed game studios whose software is integrated into the kvi8 platform. These providers may process technical game data to deliver their services.
• Platform infrastructure providers: Cloud hosting, content delivery network (CDN), and database services that store and serve platform data.
• Customer support software: Live chat and email support platforms used to manage player communications.
• Analytics providers: Anonymised and aggregated usage analytics services used to improve platform performance.

3.2 Legal & Regulatory Disclosure

kvi8 may disclose your personal data to competent authorities or regulatory bodies where required to do so by applicable law, court order, or lawful regulatory request. This includes disclosures made in connection with anti-money laundering investigations or other financial crime proceedings. kvi8 will notify affected players of any such disclosure where legally permitted to do so.

3.3 Business Transfers

In the event that kvi8 undergoes a merger, acquisition, asset sale, or corporate restructuring, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, kvi8 will take reasonable steps to ensure that the receiving entity applies data protection standards no less protective than those in this Privacy Policy, and will notify affected players prior to any transfer where practicable.

4 Cookies & Tracking Technologies

kvi8 uses cookies and similar tracking technologies to operate the platform, maintain your session, and understand how players interact with the site. This section explains what cookies we use, why we use them, and how you can manage them.

4.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and to store certain preferences or session state. Cookies do not contain executable code and cannot access other data on your device.

4.2 Cookies Used by kvi8

Cookie Type	Purpose	Duration
Strictly Necessary	Maintains your authenticated session, prevents cross-site request forgery (CSRF), and enables core platform functionality. Cannot be disabled.	Session / up to 24 hours
Functional	Remembers your language preference (English), display preferences, and last-visited game category to personalise your experience.	Up to 30 days
Analytics	Collects anonymised data about page visits, session duration, and navigation paths to help kvi8 improve platform performance and usability.	Up to 13 months
Security	Supports fraud detection and bot prevention systems to protect your account and the integrity of the platform.	Session / up to 7 days

4.3 Managing Cookies

You can control and manage cookies through your web browser settings. Most modern browsers allow you to refuse new cookies, delete existing cookies, or be notified when a new cookie is set. Please note that disabling strictly necessary cookies will prevent you from logging in to your kvi8 account and using core platform features.

kvi8 does not use third-party advertising cookies, retargeting pixels, or social media tracking tags on the kvi8 platform. Analytics data collected via kvi8 analytics cookies is processed in anonymised and aggregated form and is not linked to your personal identity.

5 Data Security

kvi8 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security practices include the following:

5.1 Technical Measures

• Transport Layer Security (TLS/SSL): All data transmitted between your device and kvi8 servers is protected by 256-bit SSL/TLS encryption, preventing interception by third parties.
• Data encryption at rest: Sensitive personal data stored in kvi8 databases — including identity document data and payment method information — is encrypted at rest using AES-256 encryption.
• Access controls: Access to player personal data within the kvi8 organisation is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and subject to regular audit.
• Two-factor authentication (2FA): Players are strongly encouraged to enable 2FA on their kvi8 accounts. All kvi8 internal staff accounts with access to player data are required to use 2FA.
• Penetration testing: The kvi8 platform undergoes regular independent security assessments to identify and remediate vulnerabilities.
• PCI-DSS compliance: Card payment processing on the kvi8 platform is handled by PCI-DSS Level 1 compliant payment processors. kvi8 does not store raw card numbers on its own servers.

5.2 Organisational Measures

• All kvi8 staff who handle player personal data receive regular data protection training.
• Third-party service providers are subject to contractual data processing agreements that impose equivalent security obligations.
• kvi8 maintains an incident response plan to ensure that any data breach is identified, contained, and reported promptly.

6 Data Retention

kvi8 retains your personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply to the main categories of personal data we hold:

Data Category	Retention Period	Basis
Account registration data (name, email, phone)	Duration of account + 5 years after closure	AML compliance and legal obligation
KYC identity documents	Duration of account + 5 years after closure	Anti-money laundering legal obligation
Transaction records (deposits, withdrawals, bets)	7 years from date of transaction	Financial record-keeping obligation
Customer support communications	3 years from date of last communication	Dispute resolution and service improvement
Technical and security log data	12 months from date of log entry	Security monitoring and fraud investigation
Anonymised analytics data	Up to 26 months (aggregated, not personal)	Platform improvement (no personal data retained)

When the retention period for any category of personal data expires, kvi8 will securely delete or anonymise that data in accordance with our internal data disposal procedures. Anonymised data (data from which all personal identifiers have been irreversibly removed) may be retained indefinitely for statistical and research purposes.

7 Your Privacy Rights

As a kvi8 player, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact the kvi8 support team at [email protected] with your registered account email address. kvi8 will respond to all valid rights requests within 30 days.

7.1 Right of Access

You have the right to request a copy of all personal data that kvi8 holds about you. Upon a valid access request, kvi8 will provide a structured summary of your personal data in a commonly used format. Identity verification may be required before the data is released.

7.2 Right to Rectification

If any personal data kvi8 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as updating your contact email or phone number) may be made directly from your account settings panel. More significant corrections (such as a legal name change supported by documentation) should be submitted via the support team.

7.3 Right to Erasure

You may request deletion of your personal data when you close your kvi8 account, subject to any legal obligations that require kvi8 to retain certain records (see Section 6). Where full erasure is not possible due to legal retention requirements, kvi8 will inform you of the specific data categories that must be retained and the applicable retention period.

7.4 Right to Restriction of Processing

You may request that kvi8 restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed, or where you contest the legal basis for processing. During a restriction period, kvi8 will continue to store the data but will not actively process it beyond what is legally required.

7.5 Right to Data Portability

Where technically feasible, you may request that kvi8 provide your personal data in a structured, machine-readable format (e.g., JSON or CSV) so that you can transfer it to another service provider. This right applies to data you have directly provided to kvi8 and that is processed on the basis of your consent or contractual necessity.

7.6 Right to Withdraw Consent

Where kvi8 processes your personal data on the basis of your consent — for example, for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing that took place before the withdrawal. To withdraw marketing consent, update your preferences in your account settings or contact [email protected].

8 Policy Updates & Contact

8.1 Updates to This Policy

kvi8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we provide. When we make material changes to this policy, we will notify registered players by email to their registered address and update the "Last Updated" date at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how kvi8 protects your data.

Your continued use of the kvi8 platform following notification of a material update constitutes your acceptance of the revised Privacy Policy. If you do not agree with the updated policy, you should close your account and cease using the kvi8 platform before the effective date of the changes.

8.2 Children's Privacy

The kvi8 platform is strictly for adults aged 18 and above. kvi8 does not knowingly collect personal data from any person under the age of 18. If we become aware that personal data has been submitted by a minor, we will immediately delete that data and close the associated account. If you believe a minor has registered on the kvi8 platform, please contact us immediately at [email protected].

8.3 Contact the kvi8 Privacy Team

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by kvi8, please contact our support team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 directly from the kvi8 platform
• Response Time: Live chat: immediate; Email: 2–6 hours during standard hours (BST, UTC+6)