kux8 Privacy Policy

1 Introduction

This Privacy Policy (the "Policy") describes how kux8 (the "Company", "we", "us" or "our") collects, uses, stores, discloses and protects personal information about you (the "Player", "you" or "your") when you access or use the kux8 website at https://kux8.io and all associated services, including the online casino, sportsbook, live dealer platform, crash games, and payment and account management services (collectively, the "Platform").

This Policy is incorporated by reference into the kux8 Terms and Conditions. By registering an account on the kux8 Platform, you acknowledge that you have read and understood this Policy and you consent to the collection and use of your personal data as described herein. If you do not agree to this Policy, you must not register an account or use the Platform.

kux8 is committed to protecting the privacy and personal data of its players. We handle all personal data in accordance with applicable data protection principles, including purpose limitation, data minimisation, storage limitation, integrity, and confidentiality.

2 Data We Collect

2.1 Registration Data

When you create a kux8 account, we collect the personal information you provide during the registration process. This includes your full name, date of birth, mobile phone number, email address, and the username and password you choose for your account. This data is required to create and manage your account and verify that you meet the minimum age requirement of 21 years.

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer programme, kux8 may require you to submit documentary proof of identity and address. Acceptable documents include a National Identity Card (NID), passport, or birth certificate issued by a recognised Bangladeshi authority, and a recent utility bill or bank statement showing your current address. We retain copies of these documents in accordance with the retention schedule set out in Section 6.

2.3 Financial and Transaction Data

kux8 records the details of every deposit and withdrawal transaction conducted through your account, including the transaction date and time (Bangladesh Standard Time, UTC+6), the amount in BDT, the payment method used (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, or BRAC Bank), and the transaction reference number assigned by the payment processor. kux8 does not store mobile banking PINs, account passwords, or any other authentication credentials associated with your payment method.

2.4 Gaming and Betting Activity Data

We maintain detailed records of your gaming and betting activity on the kux8 Platform. This includes the games played, bet amounts, wager outcomes, bonus usage, session durations, and responsible gaming tool settings such as deposit limits and self-exclusion status. This data is used for account management, fraud prevention, responsible gaming monitoring, and dispute resolution purposes.

2.5 Technical and Device Data

When you access the kux8 Platform, our servers automatically record certain technical information about your device and connection. This may include your IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited on the Platform, and timestamps of your visits. This data helps us maintain Platform security, diagnose technical issues, and improve the user experience.

2.6 Communications Data

If you contact kux8 support via email at [email protected] or through any in-Platform messaging system, we retain records of those communications, including your contact details and the content of the messages. These records are used to handle your query, improve our support processes, and maintain an audit trail.

3 How We Use Your Data

kux8 uses the personal data it collects for the following purposes:

kux8 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a new lawful basis for the processing.

4 Legal Basis for Processing

kux8 processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing is necessary to perform the contract between you and kux8, specifically to operate your account, process transactions, and provide the gaming and betting services you have requested.
• Legal obligation: Processing is necessary to comply with applicable legal obligations, including anti-money laundering requirements, age verification obligations, and record-keeping requirements.
• Legitimate interests: Processing is necessary for kux8's legitimate interests in fraud prevention, Platform security, responsible gaming monitoring, and improving the quality of the kux8 service — provided those interests are not overridden by your privacy rights.
• Consent: For certain processing activities — such as sending you promotional communications about kux8 bonuses, seasonal offers (including Eid and Pohela Boishakh promotions), and new game launches — kux8 relies on your consent. You may withdraw consent at any time by contacting [email protected] or updating your communication preferences in your account settings.

5 Sharing Your Data

5.1 Payment Processors

To process deposits and withdrawals, kux8 shares relevant transaction data with the payment processors and mobile financial service providers that facilitate your chosen payment method (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank). These processors receive only the data necessary to complete the specific transaction and are not permitted to use your data for any other purpose.

5.2 Game Suppliers

The kux8 Platform integrates games supplied by third-party providers including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, and Spribe. When you play a game hosted by a third-party supplier, that supplier's platform may process technical data (such as your session token and bet activity for that session) in order to run the game. kux8 does not share your name, address, or payment details with game suppliers.

5.3 Legal and Regulatory Disclosures

kux8 may disclose your personal data to law enforcement agencies, courts, or other governmental authorities where we are required to do so by applicable law, a valid court order, or a lawful request from a regulatory authority. In such cases, kux8 will disclose only the minimum data necessary to comply with the request and will, where legally permissible, notify you of the disclosure.

5.4 Business Transfers

In the event that kux8 undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. If such a transfer occurs, kux8 will ensure that the acquiring entity is bound by privacy obligations no less protective than those set out in this Policy and will notify affected players in advance where legally practicable.

6 Data Retention

kux8 retains your personal data for as long as your account remains active and for a further period after closure as required by applicable legal, regulatory, and contractual obligations. The following retention periods apply:

At the end of the applicable retention period, kux8 will securely delete or anonymise your personal data. Where anonymisation is not technically feasible, data will be stored in a manner that prevents identification of the individual.

7 Security Measures

kux8 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmissions between your device and the kux8 Platform;
• Encryption of sensitive data fields (including passwords and identity document references) within the kux8 database using industry-standard encryption algorithms;
• Access controls: kux8 staff access to personal data is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations;
• Regular security assessments of the kux8 Platform infrastructure to identify and remediate vulnerabilities;
• Automated fraud detection systems that monitor account activity in real time for indicators of unauthorised access, money laundering, or fraudulent behaviour;
• Secure data centre infrastructure with physical access controls, redundant systems, and regular backup procedures.

Despite these measures, no electronic transmission or storage system is completely secure. kux8 cannot guarantee absolute security but is committed to maintaining appropriate safeguards proportionate to the risk and nature of the data processed. If you become aware of any security vulnerability or suspected breach relating to the kux8 Platform, please report it to [email protected] immediately.

8 Cookies and Tracking Technologies

8.1 What Are Cookies

Cookies are small text files placed on your device by a website you visit. They are widely used to make websites function efficiently and to provide analytical information to site operators. kux8 uses cookies and similar technologies (including local storage and session storage) to operate and improve the Platform.

8.2 Types of Cookies Used by kux8

8.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse all cookies, accept only certain types, or delete cookies that have already been set. Please be aware that disabling essential cookies will impair the functionality of the kux8 Platform, including your ability to log in and maintain an active gaming session.

9 Your Data Rights

Subject to applicable law, you hold the following rights in relation to the personal data that kux8 processes about you:

• Right of access: You may request a copy of the personal data kux8 holds about you. kux8 will respond to verified access requests within 30 days.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct it. Basic account details (name, mobile number, email) can also be updated directly within your account settings.
• Right to erasure: You may request deletion of personal data that kux8 is not legally required to retain. Note that transaction records, KYC documents, and other data subject to legal retention obligations cannot be erased until the applicable retention period has elapsed.
• Right to restriction: In certain circumstances you may request that kux8 restrict the processing of your data while a dispute or correction request is being resolved.
• Right to data portability: You may request that kux8 provide your account and transaction data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to object: You may object to processing based on kux8's legitimate interests. kux8 will assess each objection on its merits and cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests.

10 Minors and Under-Age Players

The kux8 Platform is strictly intended for adults aged 21 years and above. kux8 does not knowingly collect personal data from individuals under the age of 21. If kux8 becomes aware that personal data has been collected from an individual who is under 21, we will take immediate steps to delete that data and permanently close the associated account.

If you believe that a minor has registered an account on the kux8 Platform, please report this to [email protected] immediately so that we can investigate and act swiftly. kux8 reserves the right to request age verification documentation from any player at any time.

11 International Data Transfers

The kux8 Platform is operated primarily for and from the Bangladesh market. However, some of the third-party service providers and game suppliers that kux8 works with — including certain game providers such as Evolution Gaming, Pragmatic Play, and Microgaming — operate infrastructure located outside Bangladesh. Where personal data is transferred to servers or processors located outside Bangladesh in connection with these services, kux8 takes steps to ensure that an adequate level of data protection is maintained by:

• Entering into contractual arrangements with third-party processors that impose data protection obligations equivalent in substance to those in this Policy;
• Sharing only the minimum data necessary for the third party to perform its specific function (for example, session tokens for game providers rather than full personal profiles);
• Conducting due diligence on the data protection practices of third-party processors before engaging their services.

12 Changes to This Policy

kux8 reserves the right to update or amend this Privacy Policy at any time. When we make a material change to this Policy, we will publish the updated version on this page with a revised effective date and, where practicable, notify registered players via their registered email address or mobile number. The date on which the current version of this Policy came into effect is stated at the top of this page.

Your continued use of the kux8 Platform after the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Policy, you must cease using the Platform and close your account in accordance with the account closure procedure described in the kux8 Terms and Conditions. We encourage you to review this Policy periodically to stay informed about how kux8 protects your personal data.

13 Contact Us

If you have any questions, concerns or requests in relation to this Privacy Policy or kux8's data handling practices, please contact the kux8 Privacy and Data team. The team is available 24 hours a day, 7 days a week, including Bangladeshi public holidays.

For account closure requests, self-exclusion requests, or responsible gaming queries, please refer to the kux8 Responsible Gaming page or include the relevant subject in your email so it is routed to the appropriate team without delay.