klx8 Privacy Policy

1Introduction

This Privacy Policy ("Policy") explains how klx8 ("we", "us", "our", "the Platform") collects, uses, stores, and discloses personal information relating to individuals ("you", "the User", "the Player") who access or use the klx8 website at https://klx8.io and any associated mobile or web-based interfaces.

klx8 is an internationally operated online betting and casino platform. We serve players primarily from the Bangladesh market and take our obligations regarding personal data seriously. This Policy is incorporated by reference into our Terms & Conditions, and by registering an account or continuing to use the Platform, you confirm that you have read and understood this Policy.

If you do not agree with any part of this Policy, you should not use the Platform and should contact klx8 support to arrange account closure if you are already registered.

2Data Controller

For the purposes of applicable data protection law, klx8 is the data controller in respect of personal data collected through the Platform. This means klx8 is the entity that determines the purposes and means of processing your personal data.

klx8 is an internationally operated platform. Correspondence regarding privacy matters may be directed to the klx8 data protection contact via the email address stated in Section 15 of this Policy. We will acknowledge receipt of all privacy-related enquiries and aim to provide a substantive response within 14 calendar days.

3What Personal Data We Collect

klx8 collects personal data across several categories depending on how you interact with the Platform. The table below summarises the categories of data we collect and examples of specific data points within each category.

klx8 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data (other than self-exclusion requests made in connection with responsible gaming), or biometric data.

4How We Collect Your Data

4.1 Directly From You

The majority of personal data we hold about you is provided by you directly, including when you register an account, complete the KYC verification process, make a deposit or withdrawal, contact our support team, set responsible gaming preferences, or respond to any surveys or promotions.

4.2 Automatically Through the Platform

When you access and use the klx8 platform, certain technical and usage data is collected automatically through standard web technologies, including cookies, pixel tags, and server log files. This data helps us operate the platform securely, diagnose technical issues, detect fraud, and understand how players interact with our services.

4.3 From Third Parties

In some cases, klx8 may receive personal data about you from third parties, including:

• Payment providers (bKash, Nagad, Rocket, Upay) — transaction confirmation and reference data to match deposits and withdrawals to your account.
• Identity verification services — where klx8 uses a third-party service to assist with the verification of identity documents submitted during KYC.
• Fraud prevention and AML screening services — data returned by sanctions list checks or fraud scoring tools used to assess the risk profile of new registrations and transactions.
• Game providers (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi) — game round outcomes and session data that is passed back to klx8 systems to maintain accurate account balances and betting histories.

5Why We Use Your Personal Data

klx8 uses personal data collected from players for the following purposes:

• Account creation and management: To register your account, maintain your profile, process login authentication, and manage account settings.
• Identity verification (KYC): To confirm your identity, verify your age (21+), and comply with anti-money-laundering requirements before processing withdrawals.
• Processing deposits and withdrawals: To initiate, track, and reconcile financial transactions via supported payment methods (bKash, Nagad, Rocket, Upay).
• Providing betting and casino services: To deliver sports betting markets, live casino games, slots, and crash games, and to maintain accurate records of all bets placed and results.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and provide assistance through live chat and email.
• Responsible gaming: To implement and monitor deposit limits, session time limits, self-exclusion requests, and cooling-off periods you have set on your account.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, bonus abuse, multi-accounting, money laundering, and other prohibited conduct.
• Platform improvement: To analyse usage patterns, identify technical issues, optimise the user experience, and develop new features.
• Marketing communications: To send you information about promotions, bonuses, and new features — only where you have consented to receive such communications, and subject to your right to withdraw consent at any time.
• Legal compliance: To comply with applicable laws and regulations, respond to lawful requests from authorities, and enforce our Terms & Conditions.

6Legal Basis for Processing

klx8 processes personal data on the following legal bases:

• Contract performance: Processing that is necessary to provide you with the services you have registered for, including account management, betting services, and payment processing.
• Legal obligation: Processing that is required to comply with applicable legal and regulatory requirements, including KYC, anti-money-laundering checks, and record-keeping obligations.
• Legitimate interests: Processing carried out in pursuit of klx8's legitimate business interests, including fraud prevention, platform security, improving services, and protecting the integrity of the Platform — provided those interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, and informed consent — principally in respect of marketing communications. You may withdraw consent at any time by contacting klx8 support or adjusting your account notification preferences.

7Sharing Your Personal Data

klx8 does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and only to the extent necessary for the stated purpose:

7.1 Payment Providers

Transaction data (including your account reference and payment amount) is shared with bKash, Nagad, Rocket, and Upay as required to initiate and confirm deposit and withdrawal transactions. These providers operate under their own privacy policies and are responsible for the personal data they hold in connection with those transactions.

7.2 Game Providers

A limited amount of technical session data (such as a session token and currency) is passed to our game providers — including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi — to authenticate your game session. These providers do not receive your full name, payment details, or other personally identifying information beyond what is strictly required to establish and record the game round.

7.3 Identity Verification and AML Services

Identity documents and personal details submitted during KYC may be passed to a third-party identity verification or anti-money-laundering screening provider for processing. These providers act as data processors under contract with klx8 and are prohibited from using your data for their own purposes.

7.4 Legal and Regulatory Authorities

klx8 may disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where required to do so by applicable law, a court order, or other legally binding authority. klx8 will challenge any request it considers to be unlawful or disproportionate.

7.5 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of the assets of klx8, personal data held by klx8 may be transferred to the acquiring entity as part of that transaction. Affected players will be notified of any such transfer and any resulting changes to this Privacy Policy before the transfer takes effect.

8Cookies & Tracking Technologies

8.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. They allow the website to recognise your device on subsequent visits and to store certain preferences or session information. The klx8 platform uses cookies and similar technologies (including pixel tags and local storage) to operate core platform functionality, enhance your experience, and gather analytical information.

8.2 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are required for the Platform to function. They include session authentication tokens, security cookies, and load-balancing identifiers. These cannot be disabled without impairing your ability to use the Platform.
• Functional Cookies: These cookies remember your preferences — such as your selected language, display settings, or responsible gaming configuration — so you do not need to re-enter them on each visit.
• Analytical Cookies: These cookies collect aggregated, anonymised data about how players navigate and use the Platform, helping klx8 identify areas for improvement. We use this data internally and do not share raw analytical data with third parties for their own use.
• Security and Fraud Prevention Cookies: These cookies help klx8 detect suspicious behaviour, prevent unauthorised access, and identify potential fraud patterns such as multiple accounts originating from the same device.

8.3 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will affect the functionality of the klx8 Platform and may prevent you from logging in or completing transactions. Instructions for managing cookies in common browsers are available in the browser's help documentation.

9Data Retention

klx8 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or for as long as we are required to retain it by law or regulation. The following general retention principles apply:

• Active account data: Personal data associated with an active klx8 account is retained for the duration of the account's existence, and for a minimum of five (5) years following account closure, in accordance with standard financial record-keeping requirements.
• KYC and identity verification documents: Copies of identity documents submitted for KYC are retained for a minimum of five (5) years from the date of the most recent transaction on the account, in compliance with anti-money-laundering regulations.
• Betting and transaction records: Full records of all bets placed and all financial transactions are retained for a minimum of five (5) years from the date of each transaction.
• Support communications: Chat transcripts and email correspondence with klx8 support are retained for three (3) years from the date of the communication.
• Marketing consent records: Records of consent to receive marketing communications are retained for the duration of your account and for two (2) years after account closure or consent withdrawal.
• Closed account data: When an account is closed, data that is no longer required for legal purposes is securely deleted or anonymised within a reasonable period following the expiry of the applicable retention period.

10Security Measures

klx8 implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and klx8 servers is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Password Hashing: Account passwords are stored using strong one-way cryptographic hashing algorithms. klx8 staff cannot view your password in plain text.
• Access Controls: Access to personal data within klx8's internal systems is strictly limited to staff members who require it to perform their job functions, and is governed by role-based access control policies.
• Two-Factor Authentication: Players are strongly encouraged to enable two-factor authentication (2FA) on their accounts to provide an additional layer of protection against unauthorised access.
• Regular Security Reviews: klx8 conducts periodic reviews of its security policies, procedures, and technical infrastructure to identify and address vulnerabilities.
• Incident Response: klx8 maintains a documented incident response procedure to ensure that any personal data breaches are contained, investigated, and communicated to affected individuals promptly.

11Your Data Rights

As a klx8 player, you have the following rights in connection with the personal data we hold about you. To exercise any of these rights, please contact us at support (at) klx8.io with the subject line "Data Rights Request" and we will respond within 14 calendar days.

• Right of Access: You have the right to request a copy of the personal data klx8 holds about you. We will provide this in a structured, commonly used format.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain profile information directly through your account dashboard.
• Right to Erasure: You may request that klx8 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to klx8's legal obligation to retain certain data (e.g., KYC records and transaction histories) for a minimum statutory period.
• Right to Restriction of Processing: You may request that klx8 restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where klx8 relies on legitimate interests as the legal basis for processing, and where you believe your rights and interests override those of klx8.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

12Minors

The klx8 platform is strictly intended for individuals who are 21 years of age or older. klx8 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to close the relevant account, delete the personal data in question, and return any funds where legally permissible.

If you believe that a minor has registered an account on the klx8 platform, please notify us immediately at support (at) klx8.io so that we can investigate and act accordingly.

13International Data Transfers

klx8 is an internationally operated platform. Personal data collected through the Platform may be stored on or processed by servers or systems located outside of Bangladesh. Where personal data is transferred internationally, klx8 takes appropriate steps to ensure that the data receives a level of protection equivalent to that which it would receive if processed within Bangladesh.

These steps may include contractual data protection clauses with third-party processors, the use of service providers in jurisdictions that maintain adequate data protection standards, and internal data handling policies that govern how personal data is accessed and processed by klx8 staff regardless of location.

14Changes to This Policy

klx8 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will notify registered players by email and/or by posting a prominent notice on the Platform at least seven (7) days before the changes take effect.

Your continued use of the Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you must stop using the Platform and contact support to close your account prior to the effective date of the changes.

The "Last Reviewed" date at the top of this Policy will always reflect the date of the most recent update. We encourage you to review this Policy periodically to stay informed about how klx8 is protecting your personal data.

15Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way klx8 handles your personal data, please contact us through any of the following channels:

• Email: support (at) klx8.io — please include "Privacy Request" in the subject line.
• Live Chat: Available inside your account dashboard after login, 24 hours a day, 7 days a week, including all Bangladesh public holidays.
• Response Time: We aim to acknowledge all privacy enquiries within 24 hours and to provide a full response within 14 calendar days of receipt.