kt33 Privacy Policy

1. Who We Are

kt33 is an international online betting and casino platform operating via kt33.io, serving players across Bangladesh with sports betting, live casino, slot games, and related entertainment services. References to "kt33", "we", "us", or "our" throughout this Privacy Policy refer to the kt33 platform and its operating entity.

kt33 acts as the data controller in respect of the personal data collected from players and visitors using the kt33 platform. As data controller, kt33 determines the purposes and means by which personal data is processed and is responsible for ensuring that such processing complies with applicable data protection principles.

For all data-related enquiries, players may contact kt33 at: [email protected]

2. Data We Collect

kt33 collects personal data through multiple touchpoints across the platform. The categories of data collected, along with examples and the context in which they are gathered, are set out in the table below.

2.1 Data We Do Not Collect

kt33 does not collect or store full payment card numbers, card CVV codes, or full MFS PIN credentials. Payment processing is handled by certified third-party payment gateways that are independently compliant with applicable financial data security standards. kt33 receives only tokenised references and partial identifiers sufficient to match a transaction to an account.

3. How We Use Your Data

kt33 uses the personal data we collect for the following purposes:

• Account Management: Creating, maintaining, and administering your kt33 account, including authentication and access control.
• Identity Verification (KYC): Confirming your identity and age (21+) in accordance with responsible gaming obligations and anti-money laundering requirements.
• Payment Processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and maintaining accurate transaction records.
• Service Delivery: Providing access to sports betting markets, live casino games, slot titles, and all other kt33 platform features.
• Customer Support: Responding to enquiries, resolving disputes, and providing technical assistance via the support team.
• Responsible Gaming: Monitoring betting patterns to identify potential problem gambling behaviour and applying responsible gaming tools where appropriate.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, and abuse of promotional offers.
• Legal & Regulatory Compliance: Meeting obligations under applicable anti-money laundering (AML), know-your-customer (KYC), and financial crime prevention requirements.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve platform performance, game selection, and user experience.
• Marketing Communications: Sending promotional offers, bonus notifications, and relevant updates to players who have opted in to receive such communications. Players may opt out at any time.

4. Legal Basis for Processing

kt33 processes personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing that is necessary to fulfil the agreement between kt33 and the player — including account creation, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable laws, including KYC/AML obligations, financial record-keeping requirements, and fraud prevention duties.
• Legitimate Interests: Processing carried out for kt33's legitimate operational interests, including platform security, fraud detection, and aggregate analytics, provided these interests are not overridden by the player's fundamental rights.
• Consent: Processing based on a player's freely given, specific, and informed consent — including the sending of direct marketing communications. Consent may be withdrawn at any time by contacting [email protected] or updating account preferences.

5. Sharing Your Data

5.1 Operational Partners

kt33 may share personal data with trusted third-party service providers who assist in the operation of the platform. These include payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard settlement networks), identity verification service providers, fraud detection technology providers, cloud hosting and infrastructure providers, and customer support tooling vendors. All such partners are bound by contractual data processing agreements that prohibit them from using your data for any purpose beyond the specific service they provide to kt33.

5.2 Game Studio Providers

When you play games from third-party studios such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Play'n GO, Spribe, or Ezugi, session data (player ID, stake, and game result) is transmitted to the relevant studio's systems to determine game outcomes and record results. No financial data or identity documents are shared with game studios. kt33 player IDs shared with studios are pseudonymised references rather than your full personal details.

5.3 Legal Disclosures

kt33 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by applicable law, a court order, or regulatory direction. kt33 will only disclose the minimum data necessary to satisfy the legal requirement and will, where legally permissible, notify the affected player of any such disclosure.

5.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of the kt33 business, personal data held by kt33 may be transferred to the acquiring entity. Players will be notified of any such transfer and of any material changes to data processing practices that result from it, with adequate notice provided before any change takes effect.

5.5 No Sale of Personal Data

kt33 does not sell, rent, exchange, or otherwise transfer personal data to third-party advertisers, data brokers, or marketing networks. Your data is used solely to operate the kt33 platform and to fulfil our obligations to you as a player.

6. Cookies & Tracking Technologies

The kt33 platform uses cookies and similar technologies to support core functionality, enhance user experience, and gather analytical insights. The primary categories of cookies used by kt33 are:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies, security tokens, and load-balancing identifiers. These cannot be disabled without rendering the platform inoperable.
• Functional Cookies: Remember your preferences such as language, currency display, and game lobby layout to provide a more personalised experience across sessions.
• Analytical Cookies: Collect anonymised data about how players navigate the platform — pages visited, time on site, game categories browsed — to help kt33 improve the platform. No personally identifiable information is included in analytical cookie data.
• Security Cookies: Support fraud detection and account security by flagging unusual session behaviour such as access from unrecognised devices or geographic anomalies.

Most browsers allow you to manage cookie preferences through their settings. Disabling strictly necessary cookies will impair platform functionality. kt33 does not use cookies to serve third-party advertising.

7. Data Retention

kt33 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The general retention periods applied by kt33 are as follows:

• Active Account Data: Retained for the duration of your account and for a period of 5 years following account closure, to satisfy financial record-keeping and AML obligations.
• KYC / Identity Documents: Retained for a minimum of 5 years from the date of verification, in line with standard financial compliance requirements.
• Transaction Records: Retained for 7 years from the date of the transaction for financial audit and compliance purposes.
• Customer Support Records: Retained for 3 years from the date of the last interaction, to support dispute resolution and service improvement.
• Marketing Consent Records: Retained for 3 years from the date of opt-in or until consent is withdrawn, whichever occurs first.
• Technical / Log Data: Retained for a rolling 12-month period, after which it is automatically purged or anonymised.

Once the applicable retention period expires, data is securely deleted or irreversibly anonymised so that it can no longer be linked to an identifiable individual.

8. Data Security

kt33 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Key measures include:

• TLS 1.3 encryption for all data in transit between user devices and kt33 servers.
• AES-256 encryption for sensitive data at rest within kt33's database infrastructure.
• Bcrypt password hashing with per-user salts — passwords are never stored in recoverable form.
• Tokenisation of all financial identifiers, including MFS references and payment card details.
• Role-based access controls (RBAC) ensuring that kt33 staff can only access personal data to the extent required by their specific function.
• Regular independent security audits and penetration testing of the kt33 platform infrastructure.
• Automated anomaly detection systems that flag unusual login patterns, geographic discrepancies, and potential account takeover attempts in real time.
• Multi-factor authentication (MFA) enforced for all kt33 administrative access.

While kt33 takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. Players are encouraged to use a strong, unique password for their kt33 account and to enable any available account security features. If you believe your account has been compromised, contact [email protected] immediately.

9. Your Rights

As a kt33 player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact kt33 at [email protected] with your full name and registered account details. kt33 aims to respond to all data rights requests within 30 days.

• Right of Access: You may request a copy of all personal data kt33 holds about you, along with details of how it is processed.
• Right to Rectification: If any personal data held by kt33 is inaccurate or incomplete, you may request that it be corrected or updated.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to kt33's legal retention obligations.
• Right to Restrict Processing: You may request that kt33 pause the processing of your personal data in certain circumstances, for example while a rectification request is under review.
• Right to Data Portability: Where processing is based on consent or contract, you may request a copy of your personal data in a commonly used, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, or to any direct marketing communications. Marketing opt-outs take effect immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

10. Children & Minors

The kt33 platform is strictly for adults aged 21 years and above. kt33 does not knowingly collect personal data from individuals under the age of 21. If kt33 discovers that an account has been registered by, or that personal data has been submitted by, a person under 21, the account will be immediately suspended, all balances will be forfeited, and the associated personal data will be deleted in accordance with applicable law.

If you are the parent or guardian of a minor and believe they may have accessed the kt33 platform, please contact [email protected] immediately. kt33 takes underage gambling seriously and cooperates fully with guardians and relevant authorities in such cases.

11. Third-Party Links

The kt33 platform may contain references or links to third-party websites or services — for example, payment provider portals or game studio information pages. This Privacy Policy applies solely to the kt33 platform and does not extend to any third-party sites. kt33 has no control over the data practices of third-party websites and accepts no responsibility for their privacy policies or data handling. Players should review the privacy policies of any third-party service they access independently of kt33.

12. Updates to This Privacy Policy

kt33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. Where changes are material, kt33 will notify registered players by email or by displaying a prominent notice on the platform at least 14 days before the changes take effect. The effective date at the top of this page will be updated on each revision.

Your continued use of the kt33 platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with any amendment, you should cease using the platform and may request account closure by contacting [email protected].

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way kt33 handles your personal data, please reach out to the kt33 data support team through the following channel:

• Email: [email protected] (plain text — not a clickable link)
• Response Time: kt33 aims to respond to all privacy-related queries within 5 business days (Bangladesh Standard Time, UTC+6).
• Support Hours: 24 hours a day, 7 days a week.

For enquiries specifically relating to responsible gaming data, including self-exclusion records and deposit limit settings, please also refer to the Responsible Gaming page.