kk7 Privacy Policy — Your Data, Your Rights

1. Introduction

This Privacy Policy ("Policy") describes how kk7 ("kk7", "we", "us", "our") collects, uses, stores, shares and protects personal information relating to individuals ("you", "your", "Player", "User") who access or use the kk7 online gaming and sports betting platform at kk7.lat. kk7 is committed to handling your personal data with transparency, integrity and in accordance with applicable data protection principles.

By registering an account with kk7 or by using the kk7 platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree to this Policy, you must not use the kk7 platform. This Policy should be read alongside the kk7 Terms and Conditions.

2. Personal Data We Collect

kk7 collects personal data that is necessary to operate the platform, verify your identity, process your transactions and comply with applicable legal and regulatory obligations. The categories of personal data we collect include:

• Registration data: your full name, date of birth, gender (where provided), registered mobile number, and a unique username selected by you.
• Identity verification data: copies of government-issued identification documents (such as a National ID card), selfie photographs, and proof of payment method ownership — collected only when KYC verification is required.
• Financial transaction data: deposit amounts, withdrawal amounts, deposit and withdrawal dates, and the mobile wallet or bank account identifiers used for transactions (e.g. bKash mobile number, Nagad mobile number). kk7 does not store full payment card numbers.
• Gaming activity data: bet history, game session logs, bonus redemption records, win and loss history, and account balance history. This data is retained for regulatory compliance and dispute resolution purposes.
• Technical and device data: IP address, device type, operating system, browser type and version, and session timestamps. This data is collected automatically when you access the platform and is used for security monitoring, fraud prevention and platform performance analysis.

kk7 collects only the minimum data necessary for the stated purposes. We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where a government-issued ID necessarily contains such information as part of the standard KYC verification process.

3. How We Use Your Personal Data

kk7 uses your personal data strictly for the following purposes:

• Account creation and management: to register your account, verify your identity, manage your account settings and preferences, and communicate with you about your account.
• Transaction processing: to process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported Bangladeshi bank transfers, and to maintain accurate financial records for each transaction.
• Fraud prevention and security: to monitor account activity for signs of fraud, money laundering, multiple account usage, and other prohibited conduct as described in the kk7 Terms and Conditions.
• Regulatory compliance: to fulfil Know Your Customer (KYC) and anti-money laundering (AML) obligations, to retain records as required by applicable law, and to respond to lawful requests from competent authorities.
• Responsible gaming: to monitor gaming patterns that may indicate problem gambling and to apply responsible gaming tools (deposit limits, self-exclusion, session reminders) in accordance with the player's preferences and our responsible gaming obligations.

4. Legal Basis for Processing

kk7 processes your personal data on the following legal bases: (a) Contract performance — processing necessary to provide the kk7 platform services you have requested, including account management, transaction processing and game delivery; (b) Legal obligation — processing required to comply with applicable KYC, AML and other regulatory requirements; (c) Legitimate interests — processing for fraud prevention, security monitoring and platform performance improvement, where such interests are not overridden by your fundamental rights; and (d) Consent — for any processing activities beyond those described above, where kk7 seeks and obtains your explicit consent.

Where kk7 relies on legitimate interests as the legal basis for processing, we conduct a balancing assessment to ensure that our interests do not override your fundamental privacy rights. You have the right to object to processing based on legitimate interests by contacting kk7 at [email protected].

5. Sharing Your Personal Data

kk7 does not sell, rent or trade your personal data to third parties. kk7 may share your personal data only in the following limited circumstances:

• Payment processing partners: kk7 shares transaction data with the payment service providers you use (e.g. bKash, Nagad, Rocket, supported banks) to the minimum extent necessary to process your deposits and withdrawals. These providers are bound by their own privacy obligations.
• Game and technology providers: kk7 works with licensed game providers (such as Pragmatic Play, Evolution Gaming, Ezugi, Microgaming, NetEnt and Spribe) and technology partners to deliver platform services. These providers may process limited technical and session data necessary to operate their games on the kk7 platform.
• Legal and regulatory authorities: kk7 may disclose your personal data to competent courts, law enforcement agencies, financial intelligence units or other regulatory authorities where required to do so by applicable law, court order, or in connection with the investigation of suspected financial crime or other unlawful activity.

In every case where kk7 shares personal data with a third party, we take reasonable steps to ensure that the recipient handles the data securely and uses it only for the purpose for which it was shared. kk7 does not authorise any third party to use your personal data for their own independent marketing purposes.

6. Data Security

kk7 implements technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss or destruction. These measures include SSL/TLS encryption for all data transmissions between your device and the kk7 platform, access controls restricting personal data access to authorised personnel only, secure server infrastructure with regular security audits and vulnerability assessments, and transaction monitoring systems to detect and respond to unusual or potentially fraudulent activity.

While kk7 takes all reasonable precautions to secure your personal data, no system is entirely immune to security risk. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, kk7 will notify affected players without undue delay and, where required, will notify relevant regulatory authorities in accordance with applicable data breach notification obligations.

7. Cookies and Tracking Technologies

kk7 uses the following categories of cookies and similar tracking technologies on the kk7 platform:

• Essential cookies: strictly necessary for the platform to function. These cookies maintain your login session, remember your language preference and enable core platform features. They cannot be disabled without impairing platform functionality.
• Analytics cookies: used to collect anonymous, aggregated information about how visitors use the kk7 platform — such as pages visited, time spent on the platform and error frequencies. This data helps kk7 improve platform performance and user experience. Analytics cookies do not identify you personally.
• Security cookies: used to detect and prevent fraudulent activity, bot access and other security threats. These cookies are essential for protecting the platform and its users and cannot be disabled.
• You can manage non-essential cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the kk7 platform. kk7 does not use advertising or retargeting cookies.

8. Data Retention

kk7 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, subject to any applicable legal or regulatory retention obligations. In practice, this means: account data and gaming history are retained for a minimum of five (5) years from the date of account closure; KYC verification documents are retained for a minimum of five (5) years from the date of the last transaction; and technical and device data (e.g. IP logs) are typically retained for twelve (12) months.

Following the expiry of the applicable retention period, kk7 will securely delete or anonymise your personal data. Where data is anonymised rather than deleted, the anonymised data may be retained indefinitely for statistical and platform improvement purposes, as it can no longer be linked to any identifiable individual.

9. Your Privacy Rights

Subject to applicable law, you have the following rights in relation to your personal data held by kk7:

• Right of access: you may request a copy of the personal data kk7 holds about you. Requests will be responded to within thirty (30) days.
• Right to rectification: if any personal data kk7 holds about you is inaccurate or incomplete, you have the right to request correction. You may update certain data directly within your account settings.
• Right to erasure: you may request deletion of your personal data when your account is closed, subject to kk7's legal and regulatory data retention obligations. kk7 cannot delete data it is legally required to retain.
• Right to restriction: you may request that kk7 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or while an objection to processing is being assessed.
• Right to object: you have the right to object to processing of your personal data based on kk7's legitimate interests. kk7 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.

To exercise any of these rights, please contact kk7 at [email protected] with the subject line "Privacy Rights Request". kk7 will verify your identity before processing any rights request and will respond within thirty (30) days. kk7 does not charge a fee for handling privacy rights requests in ordinary circumstances.

10. Children and Minors

The kk7 platform is strictly for adults aged 21 and above. kk7 does not knowingly collect or process personal data from any person under the age of 21. If kk7 becomes aware that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account will be closed without delay.

If you are a parent or guardian and you believe that a minor in your care has registered an account on kk7 or provided personal data to kk7, please contact us immediately at [email protected] so that we can take prompt action to close the account and delete the data.

11. Changes to This Privacy Policy

kk7 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations or platform features. When material changes are made, kk7 will update the "Last Updated" date at the top of this page. Where practicable and where the changes materially affect your rights, kk7 will notify active players via a platform announcement or by contacting them using their registered details.

Your continued use of the kk7 platform following the posting of a revised Privacy Policy constitutes your acceptance of the updated Policy. We encourage you to review this page periodically to remain informed of how kk7 handles your personal data.

12. Contact and Data Enquiries

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a data-related concern, please contact kk7 using the following details: Email: [email protected] (plain text — not a clickable link). kk7 aims to acknowledge all privacy enquiries within two (2) business days and to provide a substantive response within thirty (30) days.

Please include "Privacy Enquiry" in your message subject and provide sufficient detail to allow kk7 to identify your account and understand the nature of your request. kk7 will verify your identity before actioning any request that involves access to, correction of, or deletion of personal data.

13. Governing Law

This Privacy Policy and any dispute arising out of or in connection with it shall be governed by and construed in accordance with applicable law. By using the kk7 platform, you acknowledge that data may be processed and stored on servers located outside Bangladesh. kk7 takes appropriate measures to ensure that any cross-border transfer of personal data is subject to adequate safeguards consistent with applicable data protection standards.