kax8 Privacy Policy

1 Scope and Application

This Privacy Policy applies to all personal data collected, processed, stored, or transmitted by kax8 in connection with the operation of the kax8 platform, accessible at kax8.io. It applies to all individuals who interact with the kax8 platform, including registered account holders, prospective players browsing the kax8 website, and individuals who contact kax8 support by any channel.

By accessing the kax8 platform or creating a kax8 account, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the kax8 platform and should contact [email protected] to request account closure if a kax8 account has already been created in your name.

This Privacy Policy should be read alongside the kax8 Terms & Conditions and the Responsible Gaming Policy, both of which are published separately on the kax8 platform. Where a conflict arises between this Policy and any other kax8 document, this Privacy Policy governs all matters relating specifically to personal data and privacy.

2 Data Controller Identity

For the purposes of this Privacy Policy, the data controller responsible for your personal data is the kax8 operating entity that manages the kax8 platform and its associated services. As the data controller, kax8 determines the purposes for which your personal data is collected and the means by which it is processed.

All privacy-related enquiries, data subject requests, and complaints should be directed to the kax8 data protection contact using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Platform: kax8.io
• Support Language: English
• Response Time: Within 72 hours for all privacy-related requests

kax8 takes its obligations as data controller seriously and has designated internal personnel responsible for ensuring that data processing activities comply with this Privacy Policy and applicable data protection standards at all times.

3 Personal Data We Collect

kax8 collects the minimum amount of personal data necessary to provide a safe, functional, and compliant betting and casino platform to players in Bangladesh. The categories of personal data kax8 collects are set out in the table below:

kax8 does not collect sensitive categories of personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless specifically required by law or with the explicit and informed consent of the player concerned.

4 How We Collect Your Data

kax8 collects personal data through the following channels and mechanisms:

• Direct Registration: When you create a kax8 account, you provide identity data, contact data, and payment method information directly through the kax8 registration process. This data is submitted voluntarily by you as part of setting up your account.
• KYC Verification Process: When you initiate a withdrawal or trigger an identity verification request, you submit copies of identity documents (such as a national ID card or passport) directly to the kax8 verification team via the account panel or support channel.
• Payment Transactions: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a bank transfer, kax8 receives payment confirmation data from the relevant payment provider, including your registered mobile wallet number or bank account reference, solely for the purpose of matching the transaction to your kax8 account.
• Platform Interaction: kax8 automatically collects technical data as you browse and use the platform, including your IP address, device identifiers, session duration, and page interaction patterns. This data is collected through server logs and first-party analytics tools.
• Cookies and Similar Technologies: kax8 uses cookies and similar tracking technologies to collect data about how you interact with the platform. Full details are set out in Section 7 of this Policy.
• Support Communications: When you contact the kax8 support team by email or live chat, the content of those communications is recorded and stored for quality assurance and dispute resolution purposes.
• Third-Party Verification Services: Where kax8 uses third-party KYC service providers to assist with identity verification, those providers may return verification results and associated data to kax8 as part of the verification process.

kax8 does not purchase personal data from third-party data brokers, list vendors, or marketing aggregators. All personal data held by kax8 relates directly to individuals who have interacted with the kax8 platform.

5 Purposes and Legal Basis for Processing

kax8 processes your personal data only where there is a clear and lawful purpose for doing so. The primary purposes for which kax8 processes personal data, together with the legal basis for each, are set out below:

• Account Creation and Management: kax8 processes your identity and contact data to create, maintain, and administer your kax8 account. The legal basis is the performance of the contract between you and kax8 (the Terms & Conditions you accepted at registration).
• Payment Processing: kax8 processes your payment data to facilitate deposits and withdrawals in BDT via your chosen payment method (bKash, Nagad, Rocket, Upay, or bank transfer). The legal basis is contractual performance and fraud prevention.
• Identity and Age Verification (KYC): kax8 processes identity documents to verify that you are at least 21 years of age and to confirm the accuracy of the identity information provided at registration. The legal basis is legal obligation and the protection of minors from access to gambling services.
• Fraud Prevention and Security: kax8 processes technical data, account activity data, and payment data to detect, investigate, and prevent fraudulent activity, money laundering, and other prohibited conduct on the platform. The legal basis is legitimate interests and legal obligation.
• Responsible Gaming Monitoring: kax8 processes account activity data to monitor for patterns consistent with problem gambling behaviour, to apply and enforce any responsible gaming tools set by the player (such as deposit limits or self-exclusion), and to flag accounts that may require intervention. The legal basis is legitimate interests and player welfare obligations.
• Customer Support: kax8 processes communications data and account data to respond to support enquiries, resolve disputes, and maintain a record of support interactions for quality assurance. The legal basis is contractual performance and legitimate interests.
• Platform Improvement and Analytics: kax8 processes anonymised and aggregated technical data to understand how players use the platform, identify areas for improvement, and optimise platform performance. The legal basis is legitimate interests. This processing does not involve identifying individual players.
• Marketing Communications: Where you have given explicit consent, kax8 may use your contact data to send you promotional communications about kax8 offers, new games, and seasonal promotions relevant to players in Bangladesh. You may withdraw consent for marketing communications at any time by contacting [email protected].

6 Data Sharing and Third-Party Disclosure

kax8 treats the personal data of all players as strictly confidential. We do not sell, rent, or trade your personal data to any third party for commercial purposes. kax8 may share your personal data with third parties only in the limited circumstances described below:

• Payment Service Providers: kax8 shares the minimum necessary payment data with payment processors including bKash, Nagad, Rocket, Upay, and partner banks in Bangladesh, solely for the purpose of processing your deposit or withdrawal transaction. These providers are contractually bound to process data only on kax8's instructions and may not use it for their own purposes.
• KYC and Identity Verification Providers: kax8 may share identity document data with accredited third-party KYC verification service providers for the purpose of conducting identity and age verification checks. These providers operate under strict data processing agreements with kax8.
• Technology and Infrastructure Providers: kax8 uses third-party cloud hosting, server infrastructure, and platform technology providers. These providers may process technical data and account data as part of delivering the underlying services that power the kax8 platform. All such providers are bound by data processing agreements that prohibit unauthorised use of player data.
• Game Content Providers: Certain game data (such as game session results) may be processed by third-party game studios and software providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe) for the purpose of delivering game content and calculating outcomes. This processing is limited to game session data and does not include your identity, contact, or payment data.
• Legal and Regulatory Authorities: kax8 may disclose personal data to law enforcement authorities, regulatory bodies, or courts in Bangladesh where required to do so by applicable law, court order, or regulatory instruction. kax8 will notify the affected player of any such disclosure where it is legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of kax8's assets, player personal data may be transferred to the acquiring entity as part of that transaction. Affected players will be notified of any such transfer and any resulting changes to this Privacy Policy with reasonable advance notice.

In all cases where kax8 shares personal data with third parties, kax8 takes reasonable steps to ensure that the recipient processes that data securely and only for the specified purpose. kax8 does not authorise any third-party recipient to further disclose player data to additional parties without kax8's prior written consent.

7 Cookies and Tracking Technologies

The kax8 platform uses cookies and similar technologies to provide a functional, personalised, and secure experience for players in Bangladesh. A cookie is a small text file placed on your device when you visit the kax8 website. kax8 uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the kax8 platform to function correctly. They enable core features such as player login sessions, account security verification, and the shopping cart functionality within the kax8 cashier. These cookies cannot be disabled without impairing the functionality of the platform.
• Functional Cookies: These cookies allow the kax8 platform to remember your preferences, such as your preferred language, display settings, and last-accessed game category, so that you do not need to re-enter these each time you visit. They improve the overall user experience but are not strictly required for the platform to operate.
• Analytics Cookies: kax8 uses first-party analytics cookies to collect anonymised data about how players navigate and interact with the platform. This data helps kax8 identify popular game categories, understand player journeys, and improve the layout and performance of the kax8 platform. Analytics cookies do not identify you personally.
• Security Cookies: kax8 uses security cookies to detect and prevent fraudulent login attempts, bot activity, and other suspicious behaviour on the platform. These cookies are strictly necessary for the security of all players' accounts and cannot be disabled.

kax8 does not use third-party advertising or retargeting cookies. No player activity data collected via cookies on the kax8 platform is shared with external advertising networks or data brokers. You may manage cookie preferences through your browser settings; however, disabling strictly necessary or security cookies may affect the functionality of your kax8 account.

8 Data Retention Periods

kax8 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The standard retention periods applied by kax8 to each category of personal data are as follows:

When a retention period expires, kax8 will securely delete or irreversibly anonymise the relevant data. Where data is anonymised rather than deleted, it may be retained indefinitely for aggregated statistical and analytical purposes, as it can no longer be attributed to any identifiable individual.

9 Security Measures

kax8 applies a comprehensive set of technical and organisational security measures to protect all personal data held on the platform against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to, the following:

• SSL/TLS Encryption: All data transmitted between a player's device and the kax8 platform is protected by 256-bit SSL/TLS encryption. This ensures that personal data, login credentials, and payment information cannot be intercepted during transmission.
• Access Controls: Access to player personal data within kax8's internal systems is restricted to authorised personnel on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and receive regular data security training.
• Two-Factor Authentication: kax8 applies SMS-based two-factor authentication to player accounts to prevent unauthorised access resulting from compromised passwords. Players are strongly encouraged to use a unique, strong password for their kax8 account.
• Data Storage Security: Player personal data is stored on secure, access-controlled servers. Database access is logged and audited. Data at rest is encrypted where technically feasible.
• Fraud Monitoring Systems: kax8 operates real-time fraud detection and account monitoring systems that flag unusual activity patterns for human review. These systems help to protect player accounts from unauthorised access and financial fraud.
• Incident Response: In the event of a personal data breach, kax8 has a documented incident response procedure that includes internal escalation, containment, investigation, and — where required — notification to affected players and relevant authorities within an appropriate timeframe.

10 Your Data Rights

As a player whose personal data is processed by kax8, you hold a number of rights in relation to that data. kax8 respects these rights and has established processes to facilitate their exercise. Your rights include the following:

• Right of Access: You have the right to request confirmation of whether kax8 holds personal data about you and, if so, to receive a copy of that data together with information about how it is processed. kax8 will respond to access requests within 30 calendar days of receipt.
• Right to Rectification: If you believe that any personal data kax8 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may update certain account details (such as your contact number or address) directly through your kax8 account settings. For changes to identity data, you must contact [email protected].
• Right to Erasure: You may request that kax8 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and consent was the sole legal basis for processing), or where the data has been unlawfully processed. kax8 will honour erasure requests subject to any overriding legal obligations to retain data (such as financial record-keeping requirements) as described in Section 8.
• Right to Restriction of Processing: You may request that kax8 temporarily restrict the processing of your personal data where you have contested its accuracy, where the processing is unlawful but you prefer restriction to deletion, or where kax8 no longer needs the data but you require it for a legal claim.
• Right to Data Portability: Where kax8 processes your personal data on the basis of your consent or a contract, and that processing is carried out by automated means, you have the right to receive a copy of your data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where kax8 relies on legitimate interests as the legal basis for that processing. kax8 will cease the processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where kax8 processes your data on the basis of your consent (for example, for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

To exercise any of the rights described above, please submit a written request to [email protected], clearly identifying yourself, specifying the right you wish to exercise, and providing sufficient detail to allow kax8 to locate the relevant data. kax8 may request additional verification of your identity before processing the request, to ensure that data is not disclosed to unauthorised parties.

11 Children and Minors

The kax8 platform is strictly intended for adults aged 21 years and above. kax8 does not knowingly collect personal data from any person under the age of 21, and does not permit persons under 21 to register a kax8 account or access any betting, casino, or gaming services on the platform.

As part of the kax8 registration and KYC process, all players are required to confirm their date of birth and to provide identity documentation verifying that they are at least 21 years of age. Where kax8 discovers that a player has provided false information about their age and is in fact under 21, kax8 will immediately close the account, return any deposited real-money funds to the originating payment method, and securely delete all personal data associated with the minor's account as promptly as is operationally feasible.

If a parent or guardian believes that a minor has registered a kax8 account using false information, they are encouraged to contact kax8 support immediately at [email protected] so that the matter can be investigated and resolved without delay.

12 Changes to This Policy

kax8 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or the introduction of new platform features that affect how personal data is collected or used.

Where changes to this Privacy Policy are material — meaning they significantly affect the way kax8 processes your personal data or the rights you hold in relation to that data — kax8 will notify registered players by sending a notification to the email address associated with their kax8 account, and by publishing a prominent notice on the kax8 platform, at least 14 calendar days before the revised Policy takes effect.

For minor changes (such as clarifications of existing language, corrections of typographical errors, or updates to contact details), kax8 will update the Policy and revise the effective date at the top of the document without advance individual notification. Players are encouraged to review this Privacy Policy periodically to remain informed of how their data is being handled.

13 Contact and Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how kax8 has handled your personal data, please contact the kax8 data protection team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Please include "Privacy Request" or "Data Rights" in the subject line of your email to ensure it is directed to the correct team promptly
• Response Time: kax8 aims to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 calendar days
• Support Hours: 24 hours a day, 7 days a week, including all public holidays in Bangladesh

If you are not satisfied with kax8's response to your privacy complaint or data rights request, you may be entitled to escalate the matter to a relevant data protection authority or consumer protection body in Bangladesh. kax8 will cooperate fully with any such authority in the investigation of a complaint.