ke99 Privacy Policy

Who We Are

ke99 ("we", "us", "our") operates the online casino and sports betting platform accessible at ke99.io (the "Platform"). ke99 is Bangladesh's premier destination for cricket betting, live casino games, slots, and a full range of online gaming products, serving players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and throughout Bangladesh.

For the purposes of this Privacy Policy, ke99 acts as the data controller in respect of the personal data collected from registered players and visitors to the Platform. This means ke99 determines the purposes and means by which your personal data is processed.

Any questions about this Privacy Policy, or requests to exercise your data rights, should be directed to the ke99 Data Protection team via the contact details provided in Section 13 of this document.

Personal Data We Collect

ke99 collects personal data from you in the following circumstances: when you register an account, when you use the Platform, when you contact ke99 support, when you make a deposit or withdrawal, and when you interact with ke99 promotions. The categories of personal data ke99 may collect include:

Where ke99 requests identity or payment verification documents, those documents are processed solely for the purpose of confirming account ownership and preventing fraud. Original document files are not retained beyond the period required for verification purposes, in accordance with the data retention schedule described in Section 7.

How We Use Your Personal Data

ke99 uses the personal data described in Section 2 for the following specific purposes:

• Account Registration and Management: To create and maintain your ke99 account, verify your identity, and ensure that only eligible players (21 years of age or older) can access the Platform.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer, verify the ownership of payment instruments, and maintain accurate transaction records.
• Platform Delivery: To provide access to ke99's full suite of casino games, live dealer tables, sports betting markets, slot titles, and promotional features.
• Customer Support: To respond to enquiries, resolve disputes, investigate technical issues, and manage support tickets submitted via live chat or email.
• Fraud Prevention and Security: To detect and prevent fraudulent activity, multi-accounting, money laundering, bonus abuse, and unauthorised access to player accounts.
• Responsible Gambling: To monitor player behaviour for signs of problem gambling, apply responsible gambling tools (deposit limits, self-exclusion, cooling-off periods), and maintain records of player-requested account restrictions.
• Legal and Regulatory Compliance: To comply with applicable legal obligations, including identity verification requirements and financial record-keeping obligations.
• Marketing Communications: To send you promotional offers, bonus alerts, and platform news by email or SMS, where you have consented to receive such communications. You may withdraw this consent at any time by contacting ke99 support.
• Platform Improvement: To analyse usage patterns, measure the performance of games and features, and improve the ke99 Platform experience for all Bangladesh players.

ke99 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a new lawful basis for processing.

Legal Basis for Processing

ke99 processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:

• Contractual Necessity: Processing is necessary to perform the contract between you and ke99 — specifically, to create and maintain your account, process transactions, and deliver gaming services.
• Legal Obligation: Processing is necessary for ke99 to comply with applicable legal requirements, including age-verification obligations, anti-money-laundering (AML) record-keeping, and responsible gambling compliance.
• Legitimate Interests: Processing is necessary for ke99's legitimate interests in operating a safe, fair, and commercially viable platform — including fraud detection, security monitoring, and Platform analytics — where those interests are not overridden by your privacy rights.
• Consent: For marketing communications and optional personalisation features, ke99 relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Data Sharing & Third Parties

ke99 does not sell, rent, or exchange your personal data with third parties for their own commercial purposes. ke99 may share your personal data with the following categories of third-party service providers, solely to the extent necessary to deliver the ke99 Platform and comply with legal obligations:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank (DBBL), City Bank, BRAC Bank, Visa, and Mastercard, for the purpose of processing deposits and withdrawals. These providers receive only the data required to authenticate and complete the relevant transaction.
• Identity Verification Providers: Third-party KYC (Know Your Customer) services that assist ke99 in verifying player identity and age, and in complying with anti-fraud and anti-money-laundering obligations.
• Game Content Providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data necessary to deliver game functionality. These providers do not receive identifiable personal data beyond what is technically required to operate their game APIs.
• IT and Hosting Providers: Secure data centre and cloud infrastructure partners responsible for hosting the ke99 Platform and associated databases, operating under strict data processing agreements.
• Customer Support Tools: Live chat and support ticketing platform providers that process support communications on ke99's behalf.
• Law Enforcement and Regulatory Authorities: ke99 may disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by applicable law, legal process, or in connection with the prevention and investigation of fraud or other criminal activity.

Cookies & Tracking Technologies

ke99 uses cookies and similar tracking technologies on the Platform to ensure the site functions correctly, to remember your session and preferences, and to collect analytics data that helps ke99 improve the player experience. The categories of cookies used by ke99 are as follows:

• Strictly Necessary Cookies: Required for the Platform to operate. These include session cookies that maintain your logged-in state, security tokens that protect against cross-site request forgery, and load-balancing cookies. These cookies cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Used to remember your preferences such as display language, interface settings, and responsible gambling tool configurations you have applied to your ke99 account.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate and use the ke99 Platform, including which games are most popular, how long sessions last, and where players encounter technical difficulties. This data is used solely to improve the Platform.
• Marketing Cookies: Used only where you have provided explicit consent, to personalise promotional content and measure the effectiveness of ke99's marketing activities. You may withdraw consent for marketing cookies at any time via your account settings or by contacting ke99 support.

Most modern browsers allow you to control cookie settings, including blocking or deleting cookies. Please note that blocking strictly necessary cookies may prevent you from logging into or using the ke99 Platform. For full details on managing browser cookie settings, please refer to your browser's help documentation.

Data Retention

ke99 retains your personal data for no longer than is necessary to fulfil the purpose for which it was collected, subject to any longer retention periods required by applicable legal, regulatory, or responsible gambling obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of your ke99 account and for a period of five (5) years following permanent account closure, to comply with financial record-keeping and anti-money-laundering obligations.
• Transaction Records: Deposit, withdrawal, and game activity records are retained for a minimum of five (5) years following the date of each transaction.
• Identity Verification Documents: Retained for the duration of your account and for five (5) years following account closure, or longer where required by applicable law.
• Support Communications: Live chat transcripts and support email correspondence are retained for two (2) years from the date of the interaction, unless the communication is relevant to an ongoing dispute or legal matter, in which case it is retained until the matter is resolved.
• Self-Exclusion Records: Retained for the full duration of the self-exclusion period plus five (5) years following its expiry, to prevent the re-registration of self-excluded players.
• Analytics Data: Aggregated and anonymised analytics data may be retained indefinitely, as it cannot be used to identify individual players.

On expiry of the applicable retention period, ke99 will securely delete or irreversibly anonymise your personal data. Where deletion is not immediately technically feasible (for example, in the case of backup copies), the data will be isolated from active processing until it can be deleted.

Data Security

ke99 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and ke99's servers.
• Encryption of sensitive data at rest, including financial information and identity documents.
• One-way cryptographic hashing of account passwords — ke99 cannot retrieve or view your password in plain text.
• Role-based access controls ensuring that ke99 staff can only access player data to the extent required to perform their specific job functions.
• Regular security audits and penetration testing of the ke99 Platform and underlying infrastructure.
• Intrusion detection systems and 24/7 security monitoring of ke99's hosting environment.
• Mandatory data protection training for all ke99 staff with access to personal data.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ke99 will notify affected players without undue delay after becoming aware of the breach, and will take immediate steps to contain and remediate the incident.

Your Privacy Rights

As a ke99 player, you have the following rights in relation to the personal data that ke99 holds about you. To exercise any of these rights, please contact the ke99 Data Protection team using the details in Section 13. ke99 will respond to all valid requests within 30 days of receipt.

• Right of Access: You have the right to request a copy of the personal data ke99 holds about you, along with information about how it is being used. This is sometimes referred to as a Subject Access Request (SAR).
• Right to Rectification: You have the right to request that ke99 corrects any personal data that is inaccurate, incomplete, or out of date. Certain data corrections (for example, changes to your registered name) may require identity verification before they are applied.
• Right to Erasure: You have the right to request that ke99 deletes your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no other legal basis for processing. Note that this right is not absolute: ke99 may be required to retain certain data to comply with legal obligations, even where an erasure request is received.
• Right to Restrict Processing: You have the right to ask ke99 to temporarily suspend the processing of your personal data in certain circumstances, such as while the accuracy of data is being contested.
• Right to Object: You have the right to object to ke99's processing of your personal data where that processing is based on legitimate interests. ke99 will cease that processing unless ke99 can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where ke99's processing is based on your consent (for example, for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out before withdrawal.
• Right to Data Portability: Where technically feasible and where processing is based on consent or contract, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.

Children's Privacy

The ke99 Platform is strictly intended for adults aged 21 years and above. ke99 does not knowingly collect personal data from any person under the age of 21, and does not permit persons under the age of 21 to register or use the Platform.

ke99 employs both automated and manual age-verification processes to detect and prevent underage access. Where ke99 discovers or has reasonable grounds to believe that a registered account is held by a person under the age of 21, ke99 will immediately suspend the account, investigate the matter, void any transactions made on the account, and securely delete all personal data associated with the account to the extent permitted by law.

If you are a parent or guardian and believe that your child has registered on ke99 without your knowledge, please contact ke99 support immediately so that the account can be closed and all associated data deleted.

Third-Party Links

The ke99 Platform may contain references to third-party payment providers (such as bKash and Nagad) and game content providers (such as Pragmatic Play, Evolution Gaming, and Spribe). These references are provided for functional purposes and do not constitute endorsements of any third-party privacy practices.

ke99 has no control over, and accepts no responsibility for, the privacy policies or data practices of any third-party platforms or services. If you access any third-party platform in connection with using ke99, ke99 strongly recommends reviewing the relevant third party's own privacy policy before providing any personal data to that platform.

Updates to This Privacy Policy

ke99 reserves the right to update this Privacy Policy at any time. When material changes are made, the revised Policy will be published on the Platform with an updated "Last Updated" date at the top of this document. For significant changes that materially affect the way ke99 processes your personal data, ke99 will also notify registered players via email or an in-platform notification before the changes take effect.

Your continued use of the ke99 Platform after any updated Privacy Policy is published constitutes your acknowledgement of the changes. If you do not agree with any updated Policy, you must stop using the Platform and may request account closure by contacting ke99 support. The version of this Privacy Policy currently published at ke99.io/privacy-policy is the authoritative and current version.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or ke99's handling of your personal data, please contact the ke99 Data Protection team using the following details. All data-related enquiries will be acknowledged within 48 hours and responded to in full within 30 days.

• Live Chat: Available 24/7 inside the ke99 Platform at ke99.io — the fastest way to reach the ke99 support and data protection team.
• Email: [email protected]
• WhatsApp: +880 1700 000 000

ke99 support is available every day of the year, including Bangladesh public holidays such as Eid, Pohela Boishakh, Victory Day, and Independence Day. All privacy-related correspondence is handled in English and treated with strict confidentiality.