k222 Privacy Policy — How We Protect Your Data

k222 is an international online gaming and sports betting platform serving players across Bangladesh and beyond. The k222 Platform offers a comprehensive range of products including cricket betting, live casino games, online slots, and fishing games, accessible via the website at k222.io.

For the purposes of this Privacy Policy, k222 acts as the data controller in respect of the personal information collected from registered Users and visitors to the Platform. As data controller, k222 determines the purposes and means by which your personal data is processed, and takes responsibility for ensuring that all processing activities are carried out lawfully, fairly, and transparently.

If you have any questions or concerns regarding this Privacy Policy or the way k222 handles your personal data, please contact our dedicated privacy support channel at [email protected]. All enquiries are handled in English and are treated with strict confidentiality.

k222 collects several categories of personal data in the course of operating the Platform and providing services to registered players. The following table summarises the categories of data collected and the context in which each category arises.

k222 collects personal data through a number of different channels and methods. Understanding how your data reaches us is an important part of being transparent about our data practices.

• Direct Submission: You provide data directly to k222 when you register an Account, complete KYC verification, make a deposit or withdrawal, contact our support team, or update your Account profile settings.
• Automated Collection: When you visit and use the k222 Platform, certain technical and usage data is collected automatically through cookies, server logs, and web analytics tools. This includes your IP address, device identifiers, and session behaviour data.
• Payment Processors: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a bank card, our payment processing partners may share transaction confirmation data and masked payment identifiers with k222 to complete the transaction and reconcile your Account Wallet.
• KYC Verification Partners: In the course of verifying your identity and age, k222 may use third-party identity verification services that cross-reference the documents you submit against authoritative data sources. These services return a verification result to k222; the underlying document data is handled in accordance with the verification partner's own privacy standards.
• Game Providers: Game studios integrated into the k222 Platform (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may share game session data and round outcomes with k222 for the purposes of Account settlement, bonus tracking, and responsible gaming monitoring.
• Publicly Available Sources: In limited circumstances related to fraud prevention and anti-money laundering compliance, k222 may supplement your profile with information drawn from publicly available records or commercially licensed data providers.

k222 uses the personal data it collects for specific, clearly defined purposes. We do not use your data in ways that go beyond what is reasonably necessary to deliver the Platform's services or to comply with our legal obligations. The primary purposes for which k222 processes personal data are as follows.

• Account Management: To create, maintain, and administer your k222 Account, including processing your registration, verifying your age and identity, managing your Wallet balance, and keeping your profile information up to date.
• Service Delivery: To provide and improve the full range of k222 products, including cricket betting markets, live casino tables, slot games, and fishing games, and to ensure that bets, game rounds, and transactions are settled accurately and promptly.
• Payment Processing: To process deposits and withdrawals via supported payment methods including bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and City Bank, and to maintain accurate financial records of all transactions.
• KYC and Age Verification: To verify that every Account holder is at least 21 years of age and to confirm the identity of each registered User in accordance with k222's anti-fraud and responsible gaming policies.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, collusion, bonus abuse, and any other form of prohibited conduct on the Platform, and to protect the integrity of all games and betting markets.
• Responsible Gaming: To monitor gaming behaviour and session patterns for signs of problem gambling, to administer self-exclusion and deposit limit requests, and to ensure that all responsible gaming tools operate effectively for the benefit of players.
• Customer Support: To respond to support enquiries, resolve disputes, process Account closure or self-exclusion requests, and provide 24/7 assistance to players across Bangladesh.
• Legal Compliance: To comply with applicable anti-money laundering (AML) obligations, financial record-keeping requirements, and any other legal or regulatory duties that k222 is subject to as an international gaming platform.
• Platform Improvement: To analyse usage patterns, game preferences, and technical performance data in order to improve the k222 Platform, fix bugs, optimise load times, and develop new features that benefit our players.
• Communications: To send you transactional notifications (deposit confirmations, withdrawal updates, account alerts), promotional communications where you have opted in, and important policy update notices.

k222 processes personal data only where it has a valid legal basis for doing so. The following legal bases apply to the different categories of processing activity carried out on the Platform.

• Contractual Necessity: The majority of data processing carried out by k222 is necessary for the performance of the contract between k222 and the User — specifically, the Terms & Conditions that govern the Account relationship. This includes Account management, payment processing, game settlement, and customer support.
• Legal Obligation: Certain processing activities — in particular KYC identity verification, age verification, and transaction record-keeping — are required for k222 to comply with its anti-money laundering and responsible gaming obligations. Processing under this basis cannot be avoided without k222 being in breach of its legal duties.
• Legitimate Interests: k222 processes certain data on the basis of its legitimate interests as a platform operator, including fraud detection, security monitoring, platform analytics, and responsible gaming monitoring. In each case, k222 has assessed that its legitimate interests are not overridden by the privacy interests of individual Users.
• Consent: Where k222 sends promotional emails or marketing communications, it does so only on the basis of explicit consent provided by the User during registration or via Account settings. Consent for marketing can be withdrawn at any time by contacting [email protected] or adjusting your notification preferences within the Platform.

k222 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Data is shared with external parties only to the extent strictly necessary to operate the Platform and fulfil k222's obligations. The categories of recipient with whom k222 may share data are listed below.

• Payment Processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, City Bank, and other payment partners receive the minimum data necessary to process deposits and withdrawals on your behalf. These providers operate under their own privacy and security standards.
• KYC and Identity Verification Providers: Third-party identity verification services receive copies of the documents you submit for KYC purposes. These providers are contractually required to handle document data securely and to use it solely for the verification task assigned by k222.
• Game Providers: Certified game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session and Account reference data necessary to authenticate your session, settle game outcomes, and enforce bet limits within their game engines.
• Technology and Infrastructure Partners: Cloud hosting providers, content delivery networks, and platform security services that support the technical operation of k222 may have limited access to certain data as part of their service delivery. All such partners are bound by confidentiality and data processing agreements.
• Law Enforcement and Regulatory Bodies: k222 may disclose personal data to competent authorities — including law enforcement agencies and financial intelligence units — where required to do so by law, court order, or regulatory obligation. k222 cooperates fully with authorised investigations into fraud, money laundering, and other financial crime.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of k222's business, personal data held by k222 may be transferred to the acquiring entity as part of that transaction. k222 will notify registered Users of any such transfer where required by applicable law.

k222 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device by your web browser when you visit the k222 website. The following types of cookies may be active during your visit.

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They maintain your authenticated session after login, preserve your Account state across page navigation, and ensure that security and anti-fraud protections operate correctly. These cookies cannot be disabled without breaking core Platform functionality.
• Functional Cookies: These cookies remember your preferences — such as preferred language settings, display options, and notification preferences — to personalise your experience across sessions. Disabling functional cookies may result in some preferences not being retained between visits.
• Analytics Cookies: k222 uses analytics tools to collect aggregated data about how players navigate the Platform, which games are most popular, how long sessions last, and where technical errors occur. This data is used solely to improve Platform performance and player experience. Analytics data is processed in anonymised or pseudonymised form wherever possible.
• Security and Fraud-Detection Cookies: Certain cookies support k222's fraud-prevention and responsible gaming systems by tracking unusual access patterns, multiple account indicators, and bot-like behaviour. These cookies are active for all registered Users and cannot be opted out of while using the Platform.

You can manage cookie preferences via your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your k222 Account. For full details on the cookies k222 uses, please contact [email protected].

k222 takes the security of your personal and financial data seriously. We implement a layered set of technical and organisational security controls designed to protect against unauthorised access, data loss, and accidental disclosure.

• SSL/TLS Encryption: All data transmitted between your device and the k222 Platform is protected by industry-standard Transport Layer Security (TLS) encryption. This prevents interception of your personal data, login credentials, or financial information in transit.
• Encrypted Data Storage: Sensitive personal data — including identity documents and payment references — is stored in encrypted form within k222's secure data infrastructure. Encryption keys are managed separately from the data they protect.
• Access Controls: Access to personal data within k222's systems is restricted on a strict need-to-know basis. Only authorised personnel with a legitimate operational need may access identifiable User data, and all such access is logged and subject to periodic audit.
• Intrusion Detection: k222's infrastructure is monitored continuously for signs of unauthorised access, unusual traffic patterns, and potential security incidents. Automated alerts and manual review processes are in place to respond to threats promptly.
• Secure Password Handling: User passwords are stored using industry-standard cryptographic hashing with salt. k222 does not store passwords in plain text and will never ask you to reveal your password via email or chat.
• Your Responsibility: While k222 applies robust security measures on the Platform side, you are also responsible for keeping your Account credentials confidential. Use a strong, unique password, do not share your login details, and contact [email protected] immediately if you suspect your Account has been compromised.

k222 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or financial record-keeping obligations. The following retention periods apply as a general guide.

Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data has been anonymised, it may be retained for statistical or analytical purposes without time limit, as it can no longer be linked to any individual.

As a registered k222 player, you hold a number of rights in relation to the personal data that k222 holds about you. k222 is committed to honouring these rights promptly and without undue formality. To exercise any of the rights listed below, please contact us at [email protected] with a clear description of your request.

• Right to Access: You have the right to request a copy of the personal data k222 holds about you, along with information about how that data is being used. k222 will respond to valid access requests within 30 days.
• Right to Rectification: If any personal data k222 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may also update certain profile information directly from within your Account settings.
• Right to Erasure: In certain circumstances, you have the right to request that k222 delete your personal data. Note that this right is subject to exceptions where k222 is required to retain data by law — for example, KYC and financial transaction records that must be retained under AML obligations cannot be erased on request.
• Right to Restrict Processing: You may request that k222 restrict the processing of your personal data in circumstances where you contest its accuracy, object to its use, or require it to be preserved for a legal claim.
• Right to Data Portability: Where k222 processes your data on the basis of consent or contractual necessity using automated means, you have the right to request a copy of that data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where k222 relies on legitimate interests as its legal basis. k222 will stop processing the relevant data unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where k222 processes your data on the basis of consent (for example, for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.
• Right to Complain: If you are not satisfied with how k222 has handled a privacy concern, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. k222 encourages you to contact us first so that we have an opportunity to resolve the matter directly.

The k222 Platform is strictly intended for adults aged 21 years and above. k222 does not knowingly collect, solicit, or retain personal data from any person under the age of 21.

• Age Verification: All registered Users are required to verify their age as part of the KYC process. k222 will not activate real-money Account features for any User who has not successfully verified that they are at least 21 years of age.
• Discovery of Underage Accounts: If k222 discovers or is informed that an Account is held by a person under the age of 21, that Account will be suspended immediately, all associated data will be deleted in accordance with k222's data retention policy, and any deposited funds will be returned to the source payment method.
• Parental Guidance: If you are a parent or guardian and believe that a minor in your care has registered on the k222 Platform, please contact us immediately at [email protected]. k222 will investigate and take appropriate action without delay.

k222 operates as an international online gaming platform. In the course of delivering its services, personal data collected from players in Bangladesh and other markets may be transferred to and processed in countries outside of the User's country of residence, including countries where data protection laws may differ from those applicable locally.

• Transfer Safeguards: Where personal data is transferred internationally, k222 implements appropriate safeguards to ensure that the transferred data continues to be protected to a standard equivalent to that required under applicable data protection principles. Safeguards may include contractual data processing agreements, standard contractual clauses, or transfers to jurisdictions with recognised adequate data protection frameworks.
• Cloud Infrastructure: k222's Platform infrastructure is hosted on internationally certified cloud services. Personal data stored within this infrastructure is subject to the same encryption and access control standards regardless of the physical location of the servers on which it is held.
• Game Provider Data Flows: Game session data shared with third-party game providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may be processed on servers located in multiple jurisdictions. k222 requires all game providers to maintain appropriate security and confidentiality standards consistent with the terms of their integration agreements with k222.

The k222 Platform may, from time to time, display references to or integrations with third-party services such as game providers, payment processors, and verification partners. This Privacy Policy applies exclusively to data collected and processed by k222 in connection with the k222 Platform.

• External Services: Third-party game studios and payment providers operate under their own independent privacy policies and data handling practices. k222 is not responsible for the privacy practices of these external parties and encourages Users to review the privacy policies of any third-party service they interact with.
• No Responsibility for Third-Party Privacy: Once data passes to a third-party provider for the purpose of completing a payment, identity verification, or game session, that provider's own privacy terms apply to their handling of that data. k222 has no ability to control or audit the internal data practices of third-party partners beyond the contractual obligations described in this Policy.

k222 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. The following process governs how changes to this Policy are communicated.

• Notification of Material Changes: Where a change to this Privacy Policy materially affects the way in which k222 processes your personal data, k222 will notify registered Users via email or via a prominent notice displayed on the Platform prior to the change taking effect.
• Effective Date: The "Last Updated" date displayed at the top of this Privacy Policy indicates when the most recent version came into effect. Continued use of the k222 Platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised terms.
• Previous Versions: If you would like to review a previous version of this Privacy Policy, please contact us at [email protected] and we will provide the applicable historical version on request.
• Minor Updates: k222 may make minor clarifications, typographical corrections, or formatting adjustments to this Policy without formal notification. Such changes do not alter the substance of k222's data processing commitments and will be reflected in an updated "Last Updated" date.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way k222 handles your personal data, please do not hesitate to get in touch. Our privacy support team is available 24 hours a day, 7 days a week, and responds to all enquiries in English.

• Email Support: Send your privacy-related enquiry to [email protected]. Please include your registered Account username (if applicable) and a clear description of your request so that we can respond as efficiently as possible.
• Response Time: k222 aims to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 calendar days of receipt. Complex requests involving data access or erasure may require additional time, in which case k222 will notify you of the expected timeline.
• Account-Specific Requests: For requests relating to your own Account data — such as access requests, rectification, or Account closure — please ensure that you contact us from the email address registered to your k222 Account so that we can verify your identity before processing the request.