kg5k Privacy Policy
At kg5k, protecting the personal data of every player across Bangladesh is a responsibility we take seriously. This Privacy Policy explains exactly what data we collect, why we collect it, how we store it, who we share it with, and what rights you hold over your own information.
Six Core Privacy Commitments
A plain-English summary of the six most important privacy principles that govern how kg5k handles your personal information.
Minimal Data Collection
kg5k only collects the personal data that is strictly necessary to create your account, process transactions, verify your identity, and comply with applicable legal requirements. We do not collect data for the sake of it.
Encryption at Rest & in Transit
All personal data transmitted between your device and the kg5k platform is protected by 256-bit SSL/TLS encryption. Data held on our servers is encrypted at rest. Payment credentials are tokenised and never stored in readable form.
Your Rights, Respected
You have the right to access, correct, and request deletion of your personal data at any time. Submit a data request to [email protected] and our team will respond within 30 days. We do not sell or rent your data to third parties.
Limited Third-Party Sharing
kg5k shares your data only with trusted service providers who are contractually bound to handle it securely — including KYC verification partners, payment processors (bKash, Nagad, Rocket), and game providers. No broader commercial sharing occurs.
Defined Retention Periods
We retain your account data for as long as your account is active, and for up to five years after closure to meet legal and anti-money laundering obligations. After this period, your data is securely deleted or anonymised.
Marketing Opt-Out
You can opt out of all marketing communications — including promotional emails and SMS notifications — at any time by updating your preferences in the account settings menu or by contacting our support team directly.
Contents
- Introduction & Scope
- Data Controller
- Data We Collect
- How We Collect Data
- How We Use Your Data
- Legal Basis for Processing
- Cookies & Tracking
- Third-Party Sharing
- International Transfers
- Data Security
- Data Retention
- Your Rights
- Children's Privacy
- Marketing Communications
- Policy Updates
- Contact & Complaints
Introduction & Scope
kg5k is committed to protecting the privacy and personal data of every player who uses our platform. This Privacy Policy describes how kg5k collects, uses, stores, shares, and protects personal information in connection with the services available at https://kg5k.io, including all betting, casino, and gaming features.
This policy applies to all users of the kg5k platform, whether you are a registered account holder, a visitor browsing the site without an account, or a former account holder whose data we are required to retain for legal purposes. By accessing or using kg5k, you acknowledge that you have read and understood this Privacy Policy.
This Privacy Policy should be read alongside the kg5k Terms & Conditions, which govern the overall use of the platform. In the event of any conflict between this policy and the Terms & Conditions regarding data handling, this Privacy Policy shall take precedence.
Data Controller
For the purposes of this Privacy Policy, kg5k acts as the data controller in respect of all personal data collected through the kg5k platform. As data controller, kg5k determines the purposes and means by which your personal data is processed.
If you have any questions about how kg5k handles your personal data, or if you wish to exercise any of your data rights as described in Section 12, please contact our Data Protection team at [email protected]. All data-related enquiries are handled within 30 days of receipt.
Data We Collect
kg5k collects personal data in several categories depending on your level of interaction with the platform. The table below summarises the main categories of data collected and their purpose.
| Data Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, NID / passport number, photograph | Account registration, KYC age and identity verification |
| Contact Data | Email address, mobile number, residential address | Account communications, support, notifications |
| Financial Data | bKash / Nagad / Rocket mobile number, Visa / Mastercard last-four digits, transaction history | Deposit and withdrawal processing, fraud prevention |
| Gaming Data | Bets placed, game sessions, win/loss history, bonus usage | Account management, responsible gaming monitoring, dispute resolution |
| Technical Data | IP address, device type, browser, operating system, session timestamps | Platform security, fraud detection, service optimisation |
| Usage Data | Pages visited, features used, time on platform, click patterns | User experience improvement, analytics |
| Communications Data | Support chat transcripts, email correspondence, feedback submissions | Support delivery, quality assurance, compliance records |
We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond what is required for NID verification), or health data, unless you have explicitly provided such information in the context of a responsible gaming self-exclusion request.
How We Collect Data
kg5k collects personal data through the following channels:
- Direct Submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion.
- Automated Collection: Technical and usage data collected automatically when you access the kg5k platform, including via browser cookies, server logs, and session tracking technology. See Section 7 for full details on cookies.
- Third-Party Sources: Identity verification data received from KYC service providers to confirm the accuracy of registration details you have submitted. Payment confirmation data received from payment processors such as bKash, Nagad, Rocket, Upay, Visa, and Mastercard.
- Publicly Available Sources: In limited circumstances related to fraud prevention and responsible gaming compliance, kg5k may reference publicly available information to verify player-provided data.
How We Use Your Data
kg5k uses personal data for the following specific purposes:
- Account Management: Creating, maintaining, and administering your kg5k account, including login authentication and account security.
- Service Delivery: Processing bets and casino game sessions, crediting winnings, and managing deposit and withdrawal transactions across all supported payment methods.
- Identity & Age Verification (KYC): Confirming that you are who you say you are and that you meet the 21+ age requirement before processing withdrawals or high-value transactions.
- Fraud Prevention & Security: Detecting and preventing fraudulent activity, account takeover attempts, money laundering, bonus abuse, and other prohibited conduct described in the Terms & Conditions.
- Responsible Gaming: Monitoring gaming behaviour to identify signs of problem gambling, administering self-exclusion and deposit limit requests, and sending responsible gaming communications where appropriate.
- Customer Support: Responding to support requests, resolving disputes, and maintaining records of communications for quality assurance and compliance purposes.
- Legal & Regulatory Compliance: Meeting applicable legal obligations, including anti-money laundering (AML) record-keeping requirements and responding to lawful requests from competent authorities.
- Platform Improvement: Analysing usage patterns and technical data to improve the kg5k platform, identify bugs, and optimise the user experience for players across Dhaka, Chittagong, Sylhet, and beyond.
- Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to players who have not opted out of marketing. See Section 14 for opt-out instructions.
kg5k will not use your personal data for any purpose that is incompatible with those listed above without first obtaining your explicit consent.
Legal Basis for Processing
kg5k processes personal data on the following legal bases:
- Contractual Necessity: Processing that is necessary to perform the contract between kg5k and the player — including account creation, bet processing, and payment handling.
- Legal Obligation: Processing required to comply with applicable legal requirements, including KYC, AML record-keeping, and responding to lawful authority requests.
- Legitimate Interests: Processing carried out for kg5k's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided such interests do not override your fundamental privacy rights.
- Consent: Processing based on your freely given, specific, and informed consent — including the sending of marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
Cookies & Tracking Technologies
The kg5k platform uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your session while logged in, and to gather anonymised analytics data that helps us improve the user experience.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential Cookies | Maintain your login session, remember language preference, enable core platform functionality | Session / up to 24 hours |
| Analytics Cookies | Collect anonymised usage data to understand how players interact with the platform | Up to 12 months |
| Preference Cookies | Remember your display preferences, notification settings, and responsible gaming limits | Up to 12 months |
| Security Cookies | Detect and prevent fraudulent activity, protect against CSRF attacks | Session |
kg5k does not use advertising or third-party tracking cookies for the purpose of profiling players for cross-site advertising. You may manage or delete cookies through your browser settings at any time, though disabling essential cookies may impair your ability to use the platform.
Third-Party Data Sharing
kg5k shares personal data with the following categories of third parties:
- KYC & Identity Verification Providers: Third-party services used to verify the identity and age of players during the KYC process. These providers receive only the data necessary to perform identity checks.
- Payment Processors: bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, Visa, and Mastercard receive transaction data necessary to process deposits and withdrawals. Payment credential data is handled directly by these providers under their own security standards.
- Game Providers: Casino game and sports data providers including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi receive session data necessary to deliver their games through the kg5k platform. These providers operate under independent data protection policies.
- Customer Support Tools: Third-party live chat and helpdesk software providers used to deliver 24/7 support. Support agents have access to account and communication data required to resolve your query.
- Analytics Providers: Anonymised, aggregated usage data may be shared with analytics platforms for the purpose of platform improvement. No personally identifiable information is included in such data sets.
- Legal & Regulatory Authorities: kg5k will disclose personal data to competent legal authorities, law enforcement agencies, or regulatory bodies when required to do so by law or by valid legal process.
International Data Transfers
Some of the third-party service providers used by kg5k — including certain game providers and technology infrastructure partners — may process data in countries outside Bangladesh. Where such transfers occur, kg5k takes steps to ensure that appropriate safeguards are in place to protect your personal data, including contractual data protection clauses that require the recipient to handle your data to a standard equivalent to that applied by kg5k.
If you have concerns about the international transfer of your personal data, please contact our support team at [email protected] for further information about the specific safeguards applicable to your data.
Data Security
kg5k implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. Key security measures include:
- 256-bit SSL/TLS Encryption: All data transmitted between your browser or mobile device and the kg5k platform is encrypted in transit using industry-standard 256-bit SSL/TLS protocols.
- Encryption at Rest: Personal data stored on kg5k servers is encrypted at rest. Payment credentials are tokenised, meaning that full card numbers and mobile wallet details are never stored in a readable format accessible to kg5k staff.
- Access Controls: Access to personal data within kg5k's systems is restricted on a strict need-to-know basis. Staff access is role-based, logged, and subject to regular review.
- Intrusion Detection: kg5k's infrastructure is protected by automated intrusion detection systems that monitor for unusual access patterns and potential security threats in real time.
- Two-Factor Authentication: Players are encouraged to enable two-factor authentication (2FA) on their kg5k account. Account security is a shared responsibility between kg5k and the player.
- Regular Security Audits: kg5k conducts regular internal security reviews and works with third-party security specialists to identify and address potential vulnerabilities in our platform.
Despite these measures, no digital platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, kg5k will notify affected players as soon as practicable and take immediate steps to contain the breach and mitigate its impact.
Data Retention
kg5k retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including legal, accounting, and regulatory obligations. The following retention periods apply:
- Active Account Data: Retained for the full duration that your account remains active on the kg5k platform.
- Post-Closure Data: Following account closure, kg5k retains account records, transaction history, and KYC documentation for a minimum of five years to comply with anti-money laundering record-keeping requirements.
- Support Communications: Chat transcripts and email correspondence are retained for up to three years after the last interaction for quality assurance and dispute resolution purposes.
- Marketing Data: If you have opted out of all marketing communications, your opt-out preference is retained indefinitely to ensure we do not re-add you to marketing lists without fresh consent.
- Technical & Log Data: Server logs and technical access records are retained for up to 12 months and then purged, except where specific records are required in connection with an ongoing security investigation.
Once a retention period expires, personal data is securely deleted from kg5k's systems or rendered permanently anonymous so that it can no longer be attributed to an identifiable individual.
Your Rights
As a player on the kg5k platform, you hold the following rights in respect of your personal data. To exercise any of these rights, contact our support team at [email protected]. kg5k will respond within 30 days of receipt of a valid request.
- Right of Access: You have the right to request a copy of all personal data kg5k holds about you. We will provide this in a structured, commonly used, machine-readable format upon verified request.
- Right to Rectification: If any personal data kg5k holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain information directly within your account settings.
- Right to Erasure: You may request that kg5k delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to kg5k's legal obligation to retain certain records (see Section 11). This right cannot override mandatory legal retention requirements.
- Right to Restriction: You have the right to request that kg5k restrict the processing of your data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
- Right to Data Portability: Where processing is carried out by automated means on the basis of your consent or contract, you have the right to receive your personal data in a portable format and to transmit it to another data controller.
- Right to Object: You have the right to object to processing of your personal data that is carried out on the basis of kg5k's legitimate interests, including profiling for responsible gaming purposes. kg5k will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
- Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.
Children's Privacy
The kg5k platform is strictly intended for adults aged 21 and above. kg5k does not knowingly collect personal data from individuals under the age of 21. Registration by or on behalf of a person under 21 years of age is prohibited under the kg5k Terms & Conditions.
If kg5k discovers that personal data has been collected from a person under the age of 21 — whether through the registration process or through KYC verification — the account will be immediately closed, all funds held on the account will be handled in accordance with the underage account procedure described in the Terms & Conditions, and all personal data associated with the account will be securely deleted except where retention is required by law.
If you have reason to believe that a person under the age of 21 has registered on the kg5k platform, please report this immediately to [email protected].
Marketing Communications
With your consent at the point of registration, kg5k may send you promotional communications by email or SMS, including information about welcome bonuses, reload promotions, loyalty rewards, seasonal offers, and new game launches. All marketing communications are sent in English.
You may opt out of marketing communications at any time by:
- Updating your communication preferences in the account settings menu on the kg5k platform.
- Clicking the unsubscribe link included in any marketing email sent by kg5k.
- Contacting our support team at [email protected] and requesting removal from all marketing lists.
Opting out of marketing communications will not affect transactional communications that are necessary for the operation of your account, such as deposit confirmations, withdrawal notifications, KYC requests, and security alerts. These operational messages will continue to be sent regardless of your marketing preference setting.
Players who have activated a self-exclusion period on their account will automatically be removed from all marketing communications for the duration of their self-exclusion. No promotional content will be sent to self-excluded accounts.
Policy Updates
kg5k reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made to this policy, kg5k will notify registered players by email to the address on file and will post a prominent notice on the platform homepage for a minimum of seven days before the changes take effect.
The effective date displayed at the top of this page indicates when the current version came into force. We encourage you to review this page periodically to stay informed about how kg5k protects your personal data. Continued use of the kg5k platform after an updated Privacy Policy has taken effect constitutes your acceptance of the revised policy.
Contact & Complaints
If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which kg5k handles your personal data, please contact our Data Protection team using the details below. All privacy-related enquiries are treated as a priority and will receive a substantive response within 30 days.
- Email: [email protected] (plain text — not a clickable link)
- Live Chat: Available inside the kg5k platform after login
- Support Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)
- Response Time: Privacy requests responded to within 30 days; urgent security concerns within 24 hours
If you are not satisfied with kg5k's response to a privacy complaint, you have the right to escalate the matter through applicable legal channels in your jurisdiction. For questions about responsible gaming or self-exclusion, please visit our Responsible Gaming page.
Your Privacy Is Protected at kg5k
Now that you understand how we protect your data, explore everything kg5k has to offer — from cricket betting and live casino to slots and our loyalty programme. 21+ only. Please play responsibly.