kj99 Privacy Policy — How We Protect Your Data

1 Introduction & Scope

This Privacy Policy applies to the kj99 website at kj99.io and all associated mobile interfaces, applications, and sub-domains operated under the kj99 brand (collectively, the "Platform"). The operator of the kj99 Platform ("kj99", "we", "us", "our") is the data controller responsible for the personal data you provide when using the Platform.

This Privacy Policy covers:

• What personal data kj99 collects from you and how we collect it.
• The legal basis on which we process your personal data.
• How we use your personal data and for what purposes.
• Who we may share your data with and under what conditions.
• How long we retain your personal data.
• The rights you hold in relation to your personal data and how to exercise them.
• How kj99 uses cookies and similar tracking technologies.
• How to contact kj99 about privacy matters.

This Privacy Policy should be read together with the kj99 Terms & Conditions and the Responsible Gaming policy. The effective date of this version of the Privacy Policy is 1 January 2026. kj99 reserves the right to update this Privacy Policy periodically. Where material changes are made, registered players will be notified via email or via a prominent on-platform notice before the changes take effect.

2 Data We Collect

kj99 collects personal data in three main ways: information you provide to us directly, information we collect automatically when you use the Platform, and information we receive from third-party partners. The following table provides a comprehensive overview of the categories of personal data we collect.

kj99 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information, unless you voluntarily disclose such information in the context of a responsible gaming self-assessment or support request. Any such sensitive data disclosed in a support context is used solely to provide appropriate support and is not used for commercial purposes.

2.1 Data From Minors

The kj99 Platform is strictly restricted to individuals aged 21 years and above. kj99 does not knowingly collect personal data from individuals under 21. If we become aware that personal data has been collected from a person under 21, we will immediately delete that data and close the associated account. If you believe a person under 21 has provided personal data to kj99, please contact us immediately using the details in Section 10.

3 How We Use Your Data

kj99 processes your personal data for clearly defined purposes, each supported by a lawful legal basis. We do not use your data for any purpose that is incompatible with the purposes described in this section.

3.1 Account Management & Service Delivery

We use your identity and contact data to create and maintain your kj99 account, verify your identity, process deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, and partner banks, provide access to sports betting and casino games, and deliver customer support. This processing is necessary for the performance of the contract between you and kj99.

3.2 Compliance & Legal Obligations

We process financial and identity data to fulfil our anti-money laundering (AML) and know-your-customer (KYC) obligations, to verify that players meet the 21+ age requirement, to respond to lawful requests from regulatory authorities, and to prevent fraud and other criminal activity on the Platform. This processing is necessary to comply with legal obligations applicable to kj99's operations.

3.3 Platform Security & Fraud Prevention

Technical data and usage data are processed to monitor the security of the kj99 Platform, detect and prevent fraudulent activity such as bonus abuse and multi-accounting, identify and block unauthorised access attempts, and maintain the integrity of betting and gaming outcomes. This processing is based on kj99's legitimate interests in maintaining a secure and fair platform for all players.

3.4 Marketing & Promotions

Where you have provided explicit consent, kj99 may use your contact data and marketing preferences to send you information about promotions, bonuses, and special offers — including seasonal campaigns such as BPL match promotions and Eid bonus offers. You may withdraw your consent to marketing communications at any time by updating your notification preferences within your kj99 account settings or by contacting our support team. Withdrawal of consent does not affect the lawfulness of any processing that occurred prior to withdrawal.

3.5 Responsible Gaming

kj99 uses usage data and betting behaviour data to identify patterns that may indicate problem gambling, to apply responsible gaming interventions (such as activity alerts or account reviews), and to ensure that self-exclusion and deposit limits set by players are respected across the Platform. This processing is in the vital interests of affected players and reflects kj99's commitment to player protection.

3.6 Platform Improvement & Analytics

Aggregated and anonymised usage data is analysed to understand how players interact with the kj99 Platform, to improve game offerings and user interface design, and to optimise Platform performance. This processing is based on kj99's legitimate interest in developing and improving its services. The data used for this purpose is anonymised wherever possible and does not allow identification of individual players.

4 Data Sharing & Third Parties

kj99 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data processing agreements.

4.1 Payment Processors

To process deposits and withdrawals in BDT, kj99 shares necessary financial and identity data with payment service providers including bKash, Nagad, Rocket, Upay, and partner banking institutions such as Dutch-Bangla Bank and BRAC Bank. These providers act as data processors on kj99's behalf and are contractually bound to process your data only for the purposes of executing your requested transactions.

4.2 Identity Verification Partners

kj99 works with certified KYC and AML compliance partners to verify player identities and to screen for sanctions and politically exposed persons (PEPs). Your identity documents and personal details may be shared with these partners as part of the account verification process. These partners are contractually obligated to maintain strict data confidentiality.

4.3 Game Providers

Third-party game providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Spribe, and Habanero may receive limited technical data (such as player session tokens and game round IDs) necessary to deliver game content to your device. These providers do not receive your full personal profile and are bound by data processing agreements with kj99.

4.4 Analytics & Technology Partners

kj99 uses analytics and platform infrastructure partners to operate the kj99 website and measure platform performance. These partners may process technical and usage data on kj99's behalf. All such partners are subject to data processing agreements and are prohibited from using your data for their own commercial purposes.

4.5 Legal & Regulatory Authorities

kj99 may disclose your personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or where disclosure is necessary to protect the rights, property, or safety of kj99, its players, or the general public. kj99 will, where permitted by law, notify you of such a disclosure request.

5 Cookies & Tracking Technologies

The kj99 Platform uses cookies and similar tracking technologies to ensure Platform functionality, enhance your experience, and gather anonymised analytical insights. A cookie is a small data file placed on your device by a website when you visit it. Cookies do not contain viruses and cannot access other data stored on your device.

5.1 Categories of Cookies Used

• Essential Cookies: These cookies are strictly necessary for the kj99 Platform to function. They enable core features such as account login sessions, session security tokens, and language/region preference storage. Without these cookies, key Platform features would not work correctly. These cookies cannot be disabled.
• Performance Cookies: These cookies collect anonymised information about how players navigate and use the kj99 Platform (e.g., which pages are visited most frequently, how long sessions last). This data is used to improve Platform performance and user experience. No personally identifiable information is collected via performance cookies.
• Functional Cookies: These cookies remember your preferences on the kj99 Platform, such as your preferred game category, display settings, and currency display options. They make your experience on the Platform more personalised and efficient.
• Marketing Cookies: Where you have provided consent, marketing cookies are used to track your interaction with kj99 promotional content and to ensure that marketing communications you receive are relevant to your interests. You may opt out of marketing cookies at any time via your browser settings or by contacting kj99 Support.

5.2 Managing Cookies

You can control and manage cookies through your web browser settings. Most modern browsers allow you to view, delete, and block cookies. Please note that disabling essential cookies will affect the functionality of the kj99 Platform, and some features may not work as intended. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

6 Data Retention

kj99 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The table below outlines our standard data retention periods by data category.

Following the expiry of the applicable retention period, personal data is securely deleted or permanently anonymised in accordance with kj99's data deletion procedures. Where data has been anonymised, the anonymised data set may be retained indefinitely for statistical and analytical purposes, as it can no longer identify individual players.

7 Your Data Rights

As a kj99 player, you hold a number of important rights in relation to your personal data. kj99 is committed to facilitating the exercise of these rights in a timely and transparent manner. All rights requests should be submitted to the kj99 support team using the contact details in Section 10. kj99 will respond to all verified rights requests within 30 days.

To exercise any of the rights listed above, please contact kj99 Support directly. kj99 may need to verify your identity before processing a rights request to ensure that data is not disclosed to or amended by an unauthorised party. Where a request is particularly complex or where a large volume of requests has been received, kj99 may extend the response period by a further 30 days, but will notify you of this extension within the initial 30-day period.

8 Data Security

kj99 takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect your data against accidental loss, unauthorised access, disclosure, alteration, or destruction. Key security measures in place include:

• SSL/TLS Encryption: All data transmitted between your browser or mobile device and the kj99 Platform is encrypted using industry-standard SSL/TLS protocols. This protects your login credentials, payment details, and personal information from interception during transmission.
• Secure Server Infrastructure: kj99's Platform data is hosted on secure servers with physical and network access controls, firewall protection, and regular security patching and updates.
• Access Controls: Access to personal data within kj99's internal systems is restricted to authorised personnel on a strictly need-to-know basis. All internal access is logged and monitored.
• Password Hashing: Player passwords are never stored in plain text. All passwords are stored using a strong one-way cryptographic hashing algorithm, meaning that even kj99 staff cannot retrieve your original password.
• Fraud Monitoring: Automated systems monitor Platform transactions and account activity 24/7 for indicators of fraud, money laundering, and unauthorised access.
• Regular Security Audits: kj99 conducts periodic security reviews and vulnerability assessments to identify and address potential weaknesses in its infrastructure.

While kj99 employs robust security measures, no online platform can guarantee absolute security against all possible threats. You also play an important role in keeping your data safe by choosing a strong, unique password for your kj99 account, not sharing your login credentials with anyone, logging out of your account when using shared devices, and contacting kj99 Support immediately if you suspect any unauthorised activity on your account.

9 International Data Transfers

kj99 operates primarily for players based in Bangladesh, and the majority of data processing takes place within secure server environments. However, some of our third-party service partners — including certain game providers such as Pragmatic Play, Evolution Gaming, and Microgaming — may be based outside Bangladesh and may process your data in other jurisdictions as part of delivering their services to the kj99 Platform.

Where personal data is transferred outside Bangladesh, kj99 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy. Such safeguards may include:

• Contractual data processing agreements incorporating standard data protection clauses that bind the recipient to process your data only for specified, legitimate purposes and to maintain appropriate security standards.
• Transfers to service providers operating in jurisdictions that maintain recognised data protection standards consistent with international best practice.
• Technical measures including encryption and pseudonymisation applied to data before cross-border transfer.

By using the kj99 Platform, you acknowledge that your personal data may be processed in jurisdictions outside Bangladesh in the circumstances described above, and that kj99 takes all reasonable steps to ensure your data remains protected regardless of where it is processed.

10 Contact & Data Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way kj99 handles your personal data, please contact the kj99 Support team using the details below. All privacy-related enquiries will be handled with strict confidentiality and responded to within 5 business days (Bangladesh Standard Time, UTC+6).

10.1 Support Contact

For general support and privacy enquiries, please contact kj99 at:

• Email: [email protected] (plain text — not a clickable link)
• Platform: kj99.io — via the on-site live chat support feature
• Support Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)

10.2 Data Rights Requests

To submit a formal data rights request — including requests to access, correct, delete, or port your personal data — please email [email protected] with the subject line "Data Rights Request" and include your registered account username, the email address associated with your kj99 account, and a clear description of your request. kj99 will verify your identity before processing any data rights request to protect your account security.

10.3 Policy Updates & Notifications

kj99 reserves the right to update this Privacy Policy at any time in response to changes in applicable law, Platform features, or data processing practices. When material updates are made, registered players will be notified via the email address associated with their kj99 account at least 7 days before the updated policy takes effect. Continued use of the kj99 Platform after the effective date of an updated Privacy Policy constitutes acceptance of the updated terms. We encourage you to review this Privacy Policy periodically to stay informed about how kj99 protects your data.