Privacy Policy – How ko8 Collects, Uses, and Protects Your Personal Data

1. How We Collect Your Data

ko8 collects personal data through the following channels:

• Direct submission: Information you provide when registering an account, completing identity verification, making a deposit or withdrawal, contacting customer support, or filling in any form on the ko8 platform.
• Automated collection: Technical data collected automatically when you access the ko8 platform, including your IP address, device identifiers, browser fingerprint, session timestamps, and clickstream data. This data is collected via server logs and first-party analytics tools.
• Third-party verification providers: Where you submit identity documents for KYC purposes, our authorised verification partner processes those documents on our behalf and returns a verification result to ko8. The documents themselves are not stored by ko8 beyond the legally required retention period.
• Payment processors: When you transact via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, the relevant payment service provider shares a transaction reference and status with ko8 for the purpose of crediting your account or processing your withdrawal. ko8 does not receive or store full card numbers or mobile banking PINs.

2. Legal Basis for Processing

ko8 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to register your account, operate your gameplay, process your payments, and provide customer support is necessary for the performance of the contract between you and ko8.
• Legal obligation: Certain processing activities — particularly identity verification, transaction monitoring, and record-keeping — are required by applicable anti-money laundering, responsible gaming, and financial compliance frameworks.
• Legitimate interests: ko8 processes technical and usage data based on its legitimate interest in maintaining platform security, detecting fraud, preventing abuse, and improving the quality of its services.
• Consent: Where ko8 sends you marketing communications or promotional materials, it does so on the basis of your explicit consent given at the time of account registration or subsequently updated via your account preferences. You may withdraw this consent at any time.

3. How We Use Your Data

The personal data ko8 holds about you is used for the following purposes:

• Creating and managing your player account, including verifying your identity and age (21+ requirement).
• Processing deposits and withdrawals via your chosen payment method, including bKash, Nagad, Rocket, Upay, Visa, and Mastercard.
• Monitoring transactions and gameplay for signs of fraudulent activity, money laundering, or platform abuse.
• Applying responsible gaming measures including deposit limit monitoring, cooling-off periods, and self-exclusion enforcement.
• Providing customer support and resolving account disputes.
• Sending account-related notifications such as deposit confirmations, withdrawal approvals, security alerts, and policy update notices.
• Sending promotional communications and bonus offers where you have consented to receive them.
• Improving platform functionality, game selection, and user experience through aggregated, anonymised usage analysis.
• Complying with applicable legal and regulatory obligations, including responding to lawful requests from competent authorities.

4. Data Sharing and Third-Party Disclosure

ko8 does not sell, rent, or disclose personal data to third parties for commercial purposes. Data is shared only in the following limited, controlled circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard — strictly for the purpose of executing your requested transactions.
• Identity verification providers: Authorised KYC and age-verification partners who process identity documents solely to return a verification result to ko8.
• Fraud prevention services: Industry-standard fraud screening tools that analyse transaction patterns and flag anomalies. These services process data under strict contractual data-processing agreements with ko8.
• Legal and regulatory disclosure: ko8 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required by applicable law, a valid court order, or a lawful regulatory request. ko8 will not disclose data beyond what is legally required in such circumstances.
• Business transfers: In the event of a merger, acquisition, or transfer of all or substantially all of ko8's business assets, player data may be transferred to the acquiring entity as part of the transaction. Affected players will be notified in advance where practicable.

All third parties with whom ko8 shares personal data are required to process that data only for the stated purpose, to maintain appropriate technical and organisational security measures, and to comply with applicable data protection obligations.

5. Cookies and Tracking Technologies

The ko8 platform uses cookies and similar tracking technologies to operate core platform functions and to improve the player experience. The categories of cookies used are as follows:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies, security tokens, and load-balancing identifiers. They cannot be disabled without breaking core functionality.
• Functional cookies: Remember your preferences such as language settings, agreed terms status, and display preferences. These are not used for tracking across external sites.
• Analytics cookies: First-party analytics cookies that collect anonymised usage data — such as pages visited and session duration — to help ko8 understand how players interact with the platform. ko8 does not use third-party advertising or retargeting cookies.

You may manage cookie preferences through your device or browser settings. Disabling strictly necessary cookies will impair your ability to log in and use core platform features. ko8 does not deploy cross-site advertising trackers, social media pixels, or behavioural profiling cookies.

6. Data Security Measures

ko8 implements a layered security architecture to protect player data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• SSL/TLS encryption for all data transmitted between your device and the ko8 platform.
• Encrypted storage of sensitive personal and financial data at rest using industry-standard encryption protocols.
• Role-based access controls ensuring that only authorised personnel with a defined operational need can access player records.
• Automated anomaly detection systems that flag unusual login patterns, suspicious transactions, and potential account compromise attempts in real time.
• Regular internal security reviews and vulnerability assessments of all systems handling player data.
• Strict contractual data-processing agreements with all third-party service providers who access ko8 player data.

While ko8 takes all reasonable technical and organisational precautions to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials. If you believe your account has been compromised, please contact ko8 support immediately.

7. Data Retention

ko8 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law. Our standard retention guidelines are as follows:

• Active account records: Retained for the full duration of the account relationship.
• Closed account records: Retained for a defined period following account closure to meet anti-money laundering, audit, and dispute-resolution obligations. After this period, data is securely deleted or irreversibly anonymised.
• Transaction records: Financial transaction records are retained for the period required by applicable financial compliance frameworks.
• Support correspondence: Customer support communications are retained for quality assurance and dispute-resolution purposes and are deleted after the applicable retention period.
• Marketing consent records: Records of marketing consent and withdrawal of consent are retained indefinitely to demonstrate compliance with consent obligations.

8. Your Rights as a Data Subject

ko8 respects your rights over your personal data. Subject to applicable law, you have the following rights:

• Right of access: You may request a copy of the personal data ko8 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: In certain circumstances, you may request the deletion of your personal data. Note that this right may be limited by legal retention obligations.
• Right to restrict processing: You may request that ko8 suspend processing of your data in certain defined circumstances while a dispute or rectification request is being resolved.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.
• Right to lodge a complaint: If you believe ko8 has processed your data in a manner inconsistent with this Policy, you have the right to raise the matter directly with our support team in the first instance.

To exercise any of the above rights, please contact ko8 customer support using the email address displayed in the footer of this page. ko8 will respond to all data rights requests within a reasonable timeframe. Requests may be subject to identity verification before they are actioned.

9. Children and Underage Players

The ko8 platform is strictly intended for adults aged 21 years and above. ko8 does not knowingly collect personal data from individuals under the age of 21. If ko8 becomes aware that a registered account belongs to a person under 21, that account will be closed immediately, all funds will be returned to the original payment source, and any associated personal data will be deleted in accordance with our retention policy. If you believe a minor has registered an account on ko8, please contact our support team immediately.

10. International Data Transfers

The ko8 platform is operated primarily for players based in Bangladesh, and we aim to process player data within appropriate regional infrastructure where possible. Where it is necessary to transfer data to service providers located outside Bangladesh — for example, internationally hosted verification or fraud-screening services — ko8 ensures that appropriate safeguards are in place, including contractual data-processing agreements that impose equivalent data protection standards on the receiving party.

11. Changes to This Privacy Policy

ko8 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, platform services, or applicable legal requirements. When material changes are made, we will update the "Last Updated" date at the top of this page and notify registered players via their account email address prior to the changes taking effect. Your continued use of the ko8 platform after the effective date of any revision constitutes acceptance of the updated Policy.

We encourage you to review this Policy periodically to stay informed about how ko8 protects your personal data. If you have questions or concerns about this Policy or our data practices, please contact our support team using the contact details in the footer below.

12. Contact and Data Queries

For any questions, concerns, or requests relating to this Privacy Policy or the personal data ko8 holds about you, please contact our customer support team. We are available 24 hours a day, 7 days a week. All privacy-related correspondence should be directed to the official ko8 support email address displayed in the footer of this page. For general platform questions, our FAQ page may provide a quicker answer. For information about your rights as a player, see our Terms & Conditions.