kvi8 Privacy Policy

kvi8 is committed to protecting the privacy and personal data of every registered player. As Bangladesh's premier online betting and casino platform, kvi8 processes personal data responsibly, transparently, and in accordance with internationally recognised data protection principles. This Privacy Policy describes our practices in detail so that you always know exactly how your data is handled.

This Policy should be read alongside kvi8's Terms & Conditions and Responsible Gaming policy, both of which are incorporated by reference. Where any conflict arises between this Policy and those documents, this Privacy Policy shall govern all data protection matters.

kvi8 collects personal data that is necessary to provide you with a safe, compliant, and personalised betting and gaming experience. The categories of personal data we collect include:

kvi8 does not collect special category data such as racial or ethnic origin, political opinions, religious beliefs, or health data except where required for responsible gaming assessments, in which case such data is processed with your explicit consent and handled with the highest degree of care.

kvi8 collects personal data through the following channels:

• Directly from you: When you register an account, complete identity verification, make a deposit or withdrawal, place a bet, contact our support team, or respond to a survey or promotion.
• Automatically: When you access and interact with kvi8.io, our servers and analytics tools automatically record technical and usage data including your IP address, device identifiers, session activity, and navigation patterns.
• From payment providers: When you initiate a transaction via bKash, Nagad, Rocket, or Upay, those providers may share transaction confirmation data with kvi8 to facilitate deposit crediting and withdrawal processing.
• From identity verification services: Where kvi8 uses third-party identity verification partners to validate your NID or other documentation, those partners may share verification outcomes with kvi8.
• From fraud prevention and AML partners: kvi8 may receive risk signals and screening outcomes from third-party compliance and anti-money laundering service providers.

kvi8 will always inform you at the point of collection what data is being collected and for what purpose, where it is practical and legally permissible to do so.

kvi8 uses your personal data for the following purposes:

• Account Management: To create, maintain, and administer your kvi8 account, including verifying your identity, processing your deposits and withdrawals in BDT, and managing your account settings.
• Service Delivery: To provide you with access to kvi8's sports betting markets, live casino games, and slots, and to settle bets and credit winnings accurately.
• Regulatory Compliance: To fulfil kvi8's obligations under applicable anti-money laundering (AML), know-your-customer (KYC), and responsible gaming regulations, including age verification and transaction monitoring.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, account takeovers, collusion, and other security threats to kvi8 and its players.
• Customer Support: To respond to your enquiries, resolve disputes, and improve the quality of our customer service interactions.
• Platform Improvement: To analyse usage patterns, identify technical issues, and develop new features that improve the kvi8 experience for players across Dhaka, Chittagong, Sylhet, Khulna, and the rest of Bangladesh.
• Marketing Communications: Where you have provided consent, to send you promotional offers, bonus notifications, and relevant updates about kvi8's products and events. You may withdraw consent at any time by contacting [email protected].
• Responsible Gaming: To monitor your gaming behaviour for indicators of problem gambling and to proactively offer responsible gaming tools where appropriate.

kvi8 will not use your personal data for any purpose that is incompatible with the purposes described in this section without first obtaining your consent or establishing a separate lawful basis for the new processing activity.

kvi8 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform the contract between you and kvi8 — that is, to provide you with the betting and gaming services you have registered for, process your BDT transactions, and manage your account.
• Legal Obligation: Processing is necessary to comply with kvi8's legal obligations, including AML and KYC requirements, age verification, and the retention of transaction records for audit purposes.
• Legitimate Interests: kvi8 processes certain data — such as technical logs and fraud signals — on the basis of its legitimate interest in operating a secure, fraud-free platform that protects all players equally. kvi8 ensures these interests do not override your fundamental rights and freedoms.
• Consent: Where kvi8 sends you marketing communications or processes data for optional personalisation features, we do so only with your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

kvi8 does not sell, rent, or trade your personal data. We share data only in the following limited circumstances and only to the extent necessary:

• Payment Providers: bKash, Nagad, Rocket, and Upay receive the minimum data necessary to process your deposit and withdrawal transactions. Each provider operates under its own privacy framework and is independently responsible for the data it processes.
• Identity Verification Partners: Third-party KYC service providers receive identity and documentation data to assist with the verification of your account prior to withdrawal processing.
• AML and Compliance Partners: kvi8 may share transaction data and player identifiers with compliance screening services to fulfil its anti-money laundering obligations.
• Technology and Infrastructure Partners: kvi8 uses third-party cloud infrastructure and software-as-a-service providers to operate the platform. These providers act as data processors under kvi8's instruction and are contractually bound to protect your data.
• Game Content Providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymous session identifiers for the purpose of delivering game content and settling outcomes. They do not receive your personal identity data.
• Law Enforcement and Regulatory Authorities: Where kvi8 is legally compelled to disclose personal data by a court order, regulatory directive, or law enforcement request, we will comply with such requirements and notify you where permitted by law.

All deposits and withdrawals on kvi8 are processed in Bangladeshi Taka (BDT) via mobile financial service providers. When you initiate a payment transaction, kvi8 receives a transaction reference number and a confirmation of the amount transferred. kvi8 does not store full mobile wallet PINs, passwords, or authentication credentials on its own servers.

Your mobile wallet number (bKash, Nagad, Rocket, or Upay) is stored securely in association with your kvi8 account for the purpose of processing withdrawal requests to your registered payment method. This number is treated as sensitive financial data and is accessible only to authorised kvi8 personnel for payment processing and dispute resolution purposes.

kvi8 maintains a complete record of all deposit and withdrawal transactions associated with your account. This record is retained in accordance with Section 8 (Data Retention) of this Policy and may be reviewed by kvi8's compliance team as part of AML monitoring obligations.

kvi8 uses cookies and similar tracking technologies on kvi8.io to provide a functional, personalised, and secure platform experience. A cookie is a small text file placed on your device when you visit a website. kvi8 uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the platform to function correctly. They enable you to log in to your account, navigate between pages, and use core features such as placing bets and managing your balance. These cookies cannot be disabled.
• Performance and Analytics Cookies: These cookies collect anonymised data about how players use kvi8.io — such as which pages are visited most frequently and where errors occur. This data helps kvi8 improve platform performance and reliability.
• Functionality Cookies: These cookies remember your preferences (such as preferred game categories or language settings) to provide a more personalised experience on repeat visits.
• Security Cookies: kvi8 uses cookies to support fraud detection and account security functions, including session authentication tokens and device fingerprinting for suspicious login detection.

You may control non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of some kvi8 platform features. For detailed guidance on managing cookies in your specific browser, please refer to your browser's help documentation.

kvi8 does not use cookies to serve third-party advertising or to track your activity across other websites for commercial profiling purposes.

kvi8 retains your personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, including for the satisfaction of any legal, regulatory, or reporting requirements. The following retention periods apply as a general guide:

• Account Data: Retained for the duration of your active account relationship with kvi8, and for a period of 5 years following account closure, to comply with AML record-keeping obligations.
• Transaction Records: Deposit, withdrawal, and betting transaction records are retained for a minimum of 5 years from the date of each transaction.
• Identity Verification Documents: NID copies, utility bills, and KYC documentation are retained for the same period as account data, subject to applicable regulatory requirements.
• Customer Support Records: Support tickets and correspondence are retained for 3 years following the resolution of each case, to support quality assurance and dispute resolution.
• Technical Logs: Server logs, IP records, and session data are retained for up to 12 months, after which they are deleted or anonymised.
• Marketing Consent Records: Records of your consent to receive marketing communications are retained for the duration of your account relationship and for 3 years following any withdrawal of consent.

Upon the expiry of the applicable retention period, kvi8 will securely delete or anonymise your personal data so that it can no longer be associated with your identity.

kvi8 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, loss, destruction, or disclosure. These measures include:

• SSL/TLS Encryption: All data transmitted between your browser or device and kvi8's servers is encrypted using industry-standard SSL/TLS protocols, indicated by the padlock icon in your browser's address bar.
• Access Controls: Access to personal data stored in kvi8's systems is restricted to authorised personnel on a strict need-to-know basis. All staff with access to personal data receive data protection training and are bound by confidentiality obligations.
• Secure Storage: Personal data is stored on servers hosted in secure data centres with physical access controls, environmental monitoring, and redundant systems to prevent data loss.
• Two-Factor Authentication: kvi8 supports two-factor authentication (2FA) for player accounts to provide an additional layer of security against unauthorised login attempts.
• Fraud Detection: kvi8's security systems continuously monitor account activity for unusual patterns that may indicate fraud, account sharing, or unauthorised access, and will alert or temporarily lock accounts where risk is detected.
• Regular Security Reviews: kvi8 conducts periodic reviews of its security practices and infrastructure to identify and address potential vulnerabilities.

As a kvi8 player, you hold the following rights in respect of your personal data. To exercise any of these rights, submit a written request to [email protected] from the email address associated with your kvi8 account. kvi8 will respond within 30 days of receiving your request.

• Right of Access: You have the right to request a copy of the personal data kvi8 holds about you, along with information about how it is used and with whom it is shared.
• Right to Rectification: If any personal data kvi8 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated promptly.
• Right to Erasure: Subject to certain legal exceptions (including AML record-keeping obligations), you have the right to request that kvi8 delete your personal data. Where deletion is not immediately possible due to a legal obligation, kvi8 will restrict processing of your data to the minimum necessary.
• Right to Restriction of Processing: You may request that kvi8 restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or object to its processing.
• Right to Data Portability: Where processing is based on your consent or contractual necessity, you have the right to receive a copy of your personal data in a structured, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where kvi8 relies on legitimate interests as the lawful basis, unless kvi8 can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

kvi8 will not charge a fee for handling your data rights request unless the request is manifestly unfounded or excessive. In such cases, kvi8 reserves the right to charge a reasonable administrative fee or decline the request, with written reasons provided.

kvi8 is strictly an adults-only platform. Players must be 21 years of age or older to register an account, make a deposit, or place any wager. kvi8 does not knowingly collect or process personal data from individuals under the age of 21.

During account registration, kvi8 collects date of birth information and may request identity verification documents to confirm that the player meets the minimum age requirement. Any account found to have been registered by a person under the age of 21 will be immediately closed, and any personal data associated with that account will be deleted without undue delay.

If you believe that a minor has registered an account on kvi8, or if you are a parent or guardian with concerns about a minor's access to kvi8, please contact our support team immediately at [email protected]. We take underage gambling prevention seriously and will act promptly on any verified report.

kvi8.io may from time to time display references to third-party services, game providers, or payment platforms. Where such references include links to external websites or services, kvi8 is not responsible for the privacy practices, content, or security of those third-party destinations. Each third party operates under its own privacy policy, and kvi8 encourages you to review those policies before providing any personal data to a third-party platform.

kvi8's Privacy Policy applies exclusively to data processed by kvi8 in connection with your use of the kvi8.io platform. It does not extend to any data you provide directly to bKash, Nagad, Rocket, Upay, or any other third-party service you may interact with in connection with your kvi8 account.

kvi8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. When material changes are made, kvi8 will notify registered players by email to the address on file and will publish the updated Policy on kvi8.io with a revised "Last Updated" date at the top of this page.

Your continued use of the kvi8 platform following publication of an updated Privacy Policy constitutes your acknowledgement of the changes. If you do not accept the revised Policy, you must cease using the platform and may request account closure by contacting [email protected]. Your outstanding verified balance will be returned in accordance with the Terms & Conditions in force at the time.

kvi8 recommends that players review this Privacy Policy periodically to remain informed of how their personal data is being handled.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way kvi8 handles your personal data, please contact our support team using the details below. All privacy-related correspondence must be submitted in writing in English.

Please include your registered username and the email address associated with your kvi8 account in all privacy-related correspondence to help us locate your records promptly. Do not include sensitive information such as passwords, OTP codes, or full payment credentials in any email to kvi8.