k991 Privacy Policy

1 Who We Are

k991 is Bangladesh's premier online casino and sports betting platform, operating at https://k991.io. References to "k991", "we", "us", or "our" in this Privacy Policy refer to the operator of the k991 platform and all associated services, including cricket betting, live dealer games, slot games, sports betting, and racing markets.

k991 acts as the data controller in respect of personal data collected through the platform. This means we determine the purposes and means by which your personal data is processed. If you have any questions or concerns about this Privacy Policy or the way in which your data is handled, please contact us using the details set out in Section 13.

2 Data We Collect

k991 collects personal data in the following categories, depending on how you interact with the platform:

2.1 Registration & Identity Data

When you create a k991 account, we collect information necessary to establish and verify your identity, including:

• Full legal name as it appears on your government-issued identification;
• Date of birth (to confirm you meet the 21+ age requirement);
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi);
• Email address;
• Mobile phone number associated with your preferred payment method.

2.2 Identity Verification Documents

To satisfy our Know Your Customer (KYC) and anti-money-laundering obligations, we may request copies of:

• Government-issued photographic identification (National ID card, passport, or driving licence);
• Proof of residential address (utility bill, bank statement, or similar document issued within the last 90 days);
• Proof of payment method ownership (screenshot of bKash, Nagad, Rocket, or bank account in your name).

2.3 Financial & Transaction Data

k991 records all financial transactions associated with your account, including deposit amounts, withdrawal requests, betting activity, bonus credits and usage, and running account balance in BDT. We do not store full mobile banking PINs or bank account passwords — payment authentication is handled directly by your payment provider.

2.4 Technical & Usage Data

When you use the k991 platform, we automatically collect certain technical data, including:

• IP address and approximate geographic location;
• Device type, operating system, and browser version;
• Session timestamps, pages visited, and features used;
• Game play history, bet placement logs, and in-session activity.

2.5 Communications Data

If you contact k991 support via live chat, WhatsApp, or email, we retain records of that communication for the purpose of resolving your query and maintaining service quality standards.

Data Category	Examples	Collection Method
Identity Data	Name, date of birth, address	Registration form
Verification Documents	National ID, proof of address	KYC upload process
Financial Data	Deposits, withdrawals, bets in BDT	Platform transactions
Technical Data	IP address, device info, session logs	Automatic collection
Communications Data	Support chat transcripts, email records	Support interactions

3 How We Use Your Data

k991 uses the personal data we collect for the following specific purposes:

• Account creation and management: To register your account, verify your identity, and maintain your player profile on the k991 platform;
• Transaction processing: To facilitate deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, and partner banks, and to maintain accurate financial records;
• Age and identity verification: To confirm that you are at least 21 years of age and to satisfy our KYC obligations;
• Fraud prevention and security: To detect and prevent fraudulent activity, money laundering, account takeover attempts, and other security threats;
• Customer support: To respond to your enquiries, resolve disputes, and improve the quality of our support services;
• Responsible gaming: To monitor gaming behaviour for signs of problem gambling and to administer self-exclusion, deposit limit, and cooling-off requests;
• Platform improvement: To analyse usage patterns and improve the k991 platform, its features, and the overall player experience;
• Legal compliance: To meet obligations imposed by applicable law, including anti-money-laundering regulations and financial reporting requirements;
• Service communications: To send you account-related notifications, security alerts, and important policy updates. k991 will not send unsolicited marketing communications without your explicit consent.

4 Legal Basis for Processing

k991 processes your personal data on the following legal grounds, depending on the specific processing activity in question:

• Contractual necessity: Processing is necessary to perform the contract between you and k991 — specifically, to operate your account, process transactions, and deliver the gaming services you have requested;
• Legal obligation: Processing is required to comply with applicable legal obligations, including KYC identity verification, anti-money-laundering checks, and financial record-keeping requirements;
• Legitimate interests: Processing is necessary for k991's legitimate interests in fraud prevention, platform security, responsible gaming monitoring, and service quality improvement, where these interests are not overridden by your data protection rights;
• Consent: Where k991 relies on consent as the legal basis for a specific processing activity (such as sending marketing communications), that consent will be obtained explicitly from you and may be withdrawn at any time.

5 Sharing Your Data

k991 does not sell your personal data to third parties. We may share your data with the following categories of recipient only where necessary and under appropriate data protection obligations:

5.1 Payment Processors

To process deposits and withdrawals in BDT, k991 shares necessary transaction data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other partner institutions. Each provider operates under its own privacy policy and applicable financial regulations.

5.2 Identity Verification Providers

k991 may engage specialist third-party KYC and identity verification services to assist with document verification and fraud screening. These providers process verification data solely on k991's behalf and are contractually prohibited from using it for their own purposes.

5.3 Game Studios and Technology Providers

Game studios supplying content to the k991 platform — including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe — may receive limited technical and session data necessary to deliver their games. No financial or identity data is shared with game studios beyond what is strictly required for game delivery.

5.4 Legal and Regulatory Authorities

k991 may disclose personal data to competent authorities, financial intelligence units, or law enforcement bodies where required to do so by applicable law, court order, or regulatory obligation. Such disclosures are made only to the extent required and in accordance with applicable legal procedures.

5.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of k991's business assets, personal data held by k991 may be transferred to the relevant successor entity. Users would be notified of any such transfer and any resulting changes to this Privacy Policy in advance of the transfer taking effect.

6 Cookies & Tracking Technologies

k991 uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, and analyse platform usage. The types of cookies we use include:

• Strictly necessary cookies: Required for the platform to function correctly, including session management, login state, and security features. These cannot be disabled without impairing platform functionality;
• Functional cookies: Used to remember your preferences such as language settings, preferred payment method, and display options, so you do not need to reconfigure them on each visit;
• Analytical cookies: Used to collect aggregated, anonymised data about how users interact with the k991 platform — such as which pages are visited most frequently and where users encounter difficulties — to help us improve the service;
• Security cookies: Used to detect and prevent fraudulent activity, bot traffic, and unauthorised access attempts.

Most web browsers allow you to control or disable cookies through their settings. Please note that disabling certain cookies may affect the functionality of the k991 platform. Purely analytical cookies that do not affect platform operation may be disabled without impacting your ability to use k991.

7 Data Security

k991 takes the security of your personal data seriously and employs a range of technical and organisational measures to protect it against unauthorised access, loss, destruction, or alteration. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and k991's servers;
• Encrypted storage of sensitive personal and financial data at rest;
• Access controls ensuring that only authorised k991 personnel with a legitimate need may access personal data;
• Regular security assessments and vulnerability testing of the k991 platform infrastructure;
• Two-factor authentication options available for account login to reduce the risk of unauthorised account access;
• Continuous automated monitoring for suspicious activity, unusual login patterns, and potential account compromise.

Despite these measures, no system connected to the internet can be guaranteed to be completely secure. k991 cannot provide an absolute assurance that personal data will never be subject to a breach. In the event of a data security incident that is likely to result in a risk to your rights and freedoms, k991 will notify affected users promptly and take all appropriate remedial action.

8 Data Retention

k991 retains personal data only for as long as necessary for the purposes described in this Privacy Policy, or as required by applicable legal and regulatory obligations. Our general retention guidelines are as follows:

• Account and identity data: Retained for the lifetime of your active account and for a period of five years following account closure, in accordance with standard financial record-keeping requirements;
• Transaction and betting records: Retained for a minimum of five years from the date of each transaction, as required for financial compliance and dispute resolution purposes;
• Identity verification documents: Retained for the duration of your account relationship and for five years thereafter, unless a longer period is required by applicable law;
• Support communications: Retained for two years from the date of the communication, or longer if the matter relates to an ongoing dispute or legal proceeding;
• Technical and usage logs: Retained for up to 12 months, after which they are anonymised or deleted.

When personal data is no longer required, k991 will securely delete or anonymise it in a manner that prevents reconstruction or identification of the individual.

9 Your Data Rights

As a data subject, you hold the following rights in relation to the personal data that k991 holds about you. To exercise any of these rights, please contact us at the address provided in Section 13. k991 will respond to all valid requests within a reasonable timeframe and no later than 30 days from receipt of your request.

Please note that certain rights are subject to exceptions. For example, k991 may be unable to delete personal data that it is legally required to retain. Where a request cannot be fulfilled in full, k991 will explain the reason clearly in its response.

10 Children's Privacy

The k991 platform is strictly intended for adults aged 21 and above. k991 does not knowingly collect personal data from individuals under the age of 21. The platform incorporates age verification procedures at registration to prevent access by minors.

If k991 becomes aware that personal data has been collected from an individual who is under 21 years of age, that data will be deleted promptly and the associated account will be closed. If you have reason to believe that a minor has registered on the k991 platform, please notify us immediately at [email protected] so that we can take appropriate action.

11 Third-Party Links

The k991 platform may contain references to third-party services, such as payment providers (bKash, Nagad, Rocket) and game studios. While k991 exercises care in selecting its partners, we are not responsible for the privacy practices of third-party websites or applications that operate independently of the k991 platform.

When you interact directly with a third-party service — for example, when completing a payment transaction through the bKash or Nagad interface — that interaction is governed by the third party's own privacy policy. k991 encourages you to review the privacy policies of any third-party services you use in connection with your k991 account.

12 Changes to This Privacy Policy

k991 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or the services we offer. The effective date at the top of this document indicates when the current version entered into force.

Where changes to this Privacy Policy are material — meaning they significantly affect your rights or the way in which we use your personal data — k991 will provide advance notice to registered users via the email address associated with your account, or through a prominent notice displayed on the platform. Your continued use of k991 following the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes.

k991 recommends that you review this Privacy Policy periodically to remain informed about how we are protecting your information. The most current version will always be available at https://k991.io/privacy-policy.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which k991 processes your personal data, please contact our support team through any of the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the chat widget on the k991 platform
• WhatsApp Support: Available 24/7 — number provided within your account dashboard
• Response Time: 2–5 minutes via live chat; up to 24 hours via email

k991 support is staffed around the clock in Bangladesh Standard Time (BST, UTC+6). All privacy-related requests will be handled with confidentiality and responded to within 30 days of receipt. Where a request is complex or involves multiple data subjects, k991 may extend the response period by an additional 30 days, with notice provided to you before the initial deadline expires.

For formal complaints regarding our data processing practices, you may also raise the matter with the relevant data protection authority in your jurisdiction.