Privacy Policy
How kk10 Collects, Uses,
and Protects Your Personal Data

kk10 operates the online gaming and sports betting platform accessible at kk10 .net and associated sub-domains (collectively, the "Platform"). In this Privacy Policy, references to "kk10", "we", "us", and "our" refer to the operator of the Platform. References to "you" and "your" refer to any individual who accesses, browses, or holds a registered Account on the Platform.

kk10 acts as the data controller in respect of the personal information collected through the Platform. This means kk10 determines the purposes for which and the manner in which your personal data is processed. Where kk10 engages third-party service providers to process data on its behalf, those providers act as data processors under contractual obligations that are consistent with the standards described in this policy.

If you have any questions about kk10's role as data controller, or about any aspect of this Privacy Policy, you may contact us at any time at [email protected].

kk10 collects the following categories of personal data in connection with the operation of the Platform and the provision of gaming services to Account holders in Bangladesh:

kk10 does not intentionally collect special category personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) from Account holders. If any such data is inadvertently included in documents submitted for identity verification purposes, it will not be separately recorded, processed, or used beyond the verification purpose for which it was submitted.

kk10 collects personal data through the following channels:

• Direct submission by you — when you complete the Account registration form, submit identity verification documents, make a deposit or withdrawal request, contact customer support, or participate in a promotional offer.
• Automated technical collection — when you access or browse the Platform, certain technical data is collected automatically via server logs, cookies, and similar tracking technologies. This collection occurs regardless of whether you are logged in to an Account.
• Third-party verification providers — where kk10 engages a third-party identity verification service to confirm the authenticity of documents submitted during the KYC process, that provider may return a verification result and associated data flags to kk10.
• Payment processors — when you initiate a deposit or withdrawal, the relevant mobile wallet or bank partner (such as bKash, Nagad, or Rocket) transmits transaction confirmation data to kk10's payment processing system.
• Fraud prevention and compliance tools — kk10 may receive risk signals or flagged data from third-party anti-fraud and anti-money laundering screening services as part of its compliance obligations.

kk10 uses the personal data it collects for the following specific purposes:

• Account creation and management — to establish your kk10 Account, maintain your Account profile, and provide you with access to all Platform features and services.
• Identity and age verification — to confirm that you are at least 18 years of age and that your identity is genuine, as required by kk10's responsible gaming and anti-fraud obligations.
• Transaction processing — to process deposits, withdrawals, bonus credits, and all other financial transactions associated with your Account, in Bangladeshi Taka (৳) via your chosen Payment Method.
• Platform operation and improvement — to monitor Platform performance, diagnose technical issues, analyse aggregated usage patterns, and develop improvements to the kk10 experience for Bangladesh players.
• Customer support — to respond to your enquiries, resolve Account issues, and maintain records of support interactions for quality assurance purposes.
• Responsible gaming — to apply and monitor responsible gaming tools you have activated on your Account, and to identify Account activity patterns that may indicate potential problem gambling requiring intervention.
• Fraud prevention and security — to detect, investigate, and prevent fraudulent activity, account takeovers, money laundering, bonus abuse, and other prohibited activities described in the kk10 Terms & Conditions.
• Legal and regulatory compliance — to meet applicable legal obligations, respond to lawful requests from authorised authorities, and maintain records required under anti-money laundering and related regulatory frameworks.
• Direct communications — to send you transactional notifications (such as deposit confirmations and withdrawal receipts) and, where you have not opted out, promotional communications about kk10 offers, bonuses, and new game launches relevant to your interests.

kk10 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your express consent or establishing a separate lawful basis for the new processing activity.

kk10 processes your personal data on one or more of the following lawful bases depending on the specific processing activity involved:

• Contractual necessity — processing is necessary to perform the contract represented by the kk10 Terms & Conditions, including operating your Account, processing transactions, and providing gaming services.
• Legal obligation — processing is necessary to comply with applicable legal and regulatory requirements, including identity verification, anti-money laundering screening, and record-keeping obligations.
• Legitimate interests — processing is necessary for kk10's legitimate interests in fraud prevention, Platform security, responsible gaming monitoring, and business analytics, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent — for processing activities that are not covered by the above bases — in particular, the sending of optional marketing communications — kk10 will rely on your freely given, specific, and informed consent, which you may withdraw at any time by contacting [email protected].

kk10 may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate contractual data protection obligations:

• Payment processors — mobile wallet operators (bKash, Nagad, Rocket, Upay) and bank partners (Dutch-Bangla Bank, City Bank, BRAC Bank) receive the transaction data necessary to execute your deposit and withdrawal instructions.
• Identity verification providers — third-party KYC and document verification services receive identity documents and associated data solely for the purpose of confirming your identity and age as part of the Account verification process.
• Game software providers — certified game suppliers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi receive the minimum data necessary (typically a pseudonymous player identifier and session token) to operate their games within the Platform environment. These providers do not receive your full identity or financial data.
• Fraud prevention and AML screening services — third-party anti-fraud and anti-money laundering screening providers may receive transaction data and risk indicators to assist kk10 in fulfilling its compliance obligations.
• Legal authorities — kk10 will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by a valid legal order, or where disclosure is necessary to protect kk10's legal rights or the safety of other users.
• Professional advisers — kk10's legal, financial, and technical advisers may access personal data to the minimum extent necessary to provide their professional services, subject to strict confidentiality obligations.

All third-party data processors engaged by kk10 are required to process personal data only in accordance with kk10's documented instructions and to implement security measures consistent with the standards described in this policy.

kk10 processes payment data in connection with the deposit and withdrawal services offered through the Platform. All monetary amounts are denominated in Bangladeshi Taka (৳) and processed through the Payment Methods listed in the kk10 Terms & Conditions.

kk10 does not store your complete mobile wallet PIN or bank account login credentials on its own systems. When you initiate a payment, you are redirected or connected to the secure payment interface of the relevant Payment Method provider (such as bKash or Nagad), where authentication is handled directly by that provider under its own security standards. kk10 receives only the transaction confirmation and reference data necessary to update your Account Balance.

Transaction records — including deposit and withdrawal amounts, dates, Payment Method references, and transaction status — are retained by kk10 for the period specified in Section 10 of this policy, as required to support account reconciliation, dispute resolution, and regulatory record-keeping obligations.

kk10 uses cookies and similar browser-based technologies on the Platform for the following specific purposes:

• Session cookies — strictly necessary cookies that maintain your authenticated login session while you are active on the Platform. These are deleted automatically when you close your browser and cannot be disabled without preventing access to your Account.
• Preference cookies — cookies that remember your Platform settings (such as preferred game category or display language) between sessions, so that you do not need to reconfigure your preferences on each visit.
• Analytics cookies — first-party analytics cookies that collect anonymised, aggregated data about how visitors navigate the Platform, which pages attract the most engagement, and where users encounter difficulties. This data is used solely to improve the Platform and is not linked to individual Account identities.
• Security cookies — cookies used to detect and prevent fraudulent login attempts, account takeover activity, and other security threats.

kk10 does not deploy third-party advertising cookies, cross-site tracking pixels, or social media tracking scripts on the Platform. You may configure your browser to refuse or delete cookies at any time; however, disabling session cookies will prevent you from logging in to your Account.

kk10 implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, and unlawful processing. Technical and organisational security measures applied by kk10 include, but are not limited to:

• SSL/TLS encryption for all data in transit between your device and kk10's servers.
• Encryption of sensitive personal data fields at rest within kk10's database infrastructure.
• Role-based access controls ensuring that kk10 staff access personal data only to the extent required for their specific operational role.
• Automated monitoring systems that detect and alert on anomalous access patterns, potential data breaches, and suspicious Account activity.
• Regular internal security reviews and vulnerability assessments of the Platform's technical infrastructure.
• Staff training on data protection obligations and security best practices, including phishing awareness and secure data handling procedures.

Notwithstanding these measures, no online platform can guarantee absolute security against all possible threats. In the event that kk10 becomes aware of a data security incident that is likely to result in a risk to the rights and freedoms of Account holders, kk10 will take prompt steps to contain the incident, assess its scope, and notify affected individuals in accordance with applicable requirements.

You are responsible for maintaining the security of your own Account credentials. kk10 strongly recommends using a strong, unique password for your kk10 Account that is not used on any other platform. If you believe your Account has been compromised, contact [email protected] immediately.

kk10 retains personal data for no longer than is necessary for the purpose for which it was originally collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account and identity data — retained for the duration of your active Account and for a minimum of five (5) years following Account closure, to satisfy anti-money laundering record-keeping requirements.
• Financial transaction records — retained for a minimum of five (5) years from the date of each transaction, in accordance with financial record-keeping standards.
• Responsible gaming records — records of self-exclusion requests, deposit limits, and other responsible gaming tool activations are retained for the duration of the applied restriction and for three (3) years thereafter, to prevent circumvention through Account re-registration.
• Customer support communications — retained for two (2) years from the date of the most recent interaction in a support thread, for quality assurance and dispute resolution purposes.
• Technical and analytics data — anonymised aggregated analytics data may be retained indefinitely. Non-anonymised technical data (such as IP address logs) is retained for no more than twelve (12) months from collection.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual Account holder.

As a kk10 Account holder, you hold the following rights in respect of the personal data kk10 processes about you. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request" and include your registered Account username. kk10 will acknowledge your request within five (5) working days and provide a substantive response within thirty (30) calendar days.

• Right of access — you may request a copy of the personal data kk10 holds about you, together with information about how that data is being used.
• Right to rectification — you may request correction of any personal data that is inaccurate or incomplete. For certain Account fields, you may update your own details directly through the Account settings page.
• Right to erasure — in certain circumstances you may request deletion of your personal data. This right is subject to limitations where kk10 is required to retain data to comply with a legal obligation or to establish, exercise, or defend a legal claim.
• Right to restriction of processing — you may request that kk10 limits the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you object to processing based on legitimate interests.
• Right to data portability — you may request that kk10 provide a copy of the personal data you have supplied in a structured, machine-readable format, where technically feasible.
• Right to withdraw consent — where processing is based on your consent (in particular, optional marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to object — you may object to processing based on kk10's legitimate interests at any time. kk10 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, or that the processing is necessary for the establishment, exercise, or defence of legal claims.

kk10 operates a strict age verification process at the point of Account registration and at subsequent identity verification checkpoints. If kk10 becomes aware that personal data has been collected from an individual who is under the age of 18, it will immediately suspend the relevant Account, delete the associated personal data, and decline to process any pending transactions associated with that Account.

If you are a parent or guardian and you believe that a minor in your care has created a kk10 Account or submitted personal data to the Platform, please contact kk10 immediately at [email protected] so that appropriate action can be taken without delay. For guidance on parental controls and responsible gaming tools that can be used to restrict access to online gambling platforms, please visit the kk10 Responsible Gaming page.

kk10 reviews this Privacy Policy periodically and will update it where necessary to reflect changes in its data processing practices, applicable legal requirements, or the services offered through the Platform. The "Last updated" date displayed at the top of this page indicates the date on which the most recent revision was published.

Where an update to this Privacy Policy constitutes a material change to the way in which kk10 processes your personal data, kk10 will notify registered Account holders by email to the address on record or through a prominent notice within the Platform prior to the change taking effect. Continued use of the Platform following the effective date of any such change constitutes your acknowledgement and acceptance of the updated Privacy Policy.

kk10 recommends that all Account holders review this page periodically to remain informed of the current privacy practices applicable to their Account and data.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way in which kk10 processes your personal data, please contact the kk10 data protection team using the details below. kk10 is committed to addressing all privacy-related enquiries promptly and transparently.

• Email: [email protected]
• Subject line for data rights requests: "Data Rights Request — [Your Account Username]"
• Response time: Acknowledgement within 5 working days; substantive response within 30 calendar days
• Operating hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, BST UTC+6)