kgf2 Privacy Policy — How We Protect Your Data

1. Introduction and Scope

This Privacy Policy ("Policy") applies to all personal data collected, processed, stored, and shared by kgf2 ("we," "us," "our," or the "Platform") in connection with the operation of the kgf2 website at kgf2.com, any associated mobile applications, and all services made available therein, including sports betting, live casino gaming, slot games, payment processing, and customer support. This Policy is addressed to all users registered on kgf2 ("you," "your," or "User"), including players based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and throughout Bangladesh.

By registering an account on kgf2 or otherwise accessing our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue your use of kgf2 immediately. This Policy should be read alongside our Terms & Conditions, which together form the complete legal framework governing your relationship with kgf2.

We periodically review and update this Policy to reflect changes in applicable regulations, technological developments, business practices, or the scope of data we process. Material updates will be communicated via email notifications to registered users or prominent notices on the kgf2 platform. The version date at the top of this document reflects when the Policy was last meaningfully revised.

2. Data Controller Information

kgf2 acts as the data controller for personal information collected through the kgf2 platform. As data controller, we determine the purposes and means by which your personal data is processed. For any privacy-related inquiries, data access requests, correction requests, or deletion requests, you may contact our privacy team directly:

• Email: [email protected] (plain text — not a clickable link)
• Response Time: We endeavor to respond to all privacy-related inquiries within 30 calendar days of receipt
• Languages: English support available 24 hours per day, 7 days per week

3. Personal Data We Collect

kgf2 collects personal data through several channels: directly from you during registration and account management, automatically through your use of our platform, from third-party verification and payment service providers, and through our customer support interactions. The specific categories of personal data we collect include the following:

3.1 Account Registration Data

• Identity Information: Full legal name as it appears on government-issued identification, date of birth, nationality, and gender
• Contact Information: Email address, mobile phone number (including bKash/Nagad/Rocket-linked mobile numbers), and residential address including city (e.g., Dhaka, Chittagong, Sylhet) and postal code
• Login Credentials: Username (stored as entered) and password (stored exclusively as a cryptographic hash — the plaintext password is never retained)
• Verification Documents: Scanned copies or photographs of national ID card, passport, driving licence, utility bills, and bank statements submitted during the KYC (Know Your Customer) process

3.2 Financial and Transaction Data

• Payment Method Details: bKash account number, Nagad account number, Rocket account number, bank account information (bank name, branch, account number), and Visa/Mastercard details where applicable — stored in tokenized, encrypted form
• Transaction Records: Deposit amounts, withdrawal amounts, dates and times of all financial transactions, transaction reference numbers, and payment processor confirmation codes
• Balance History: Account balance snapshots, bonus credits applied, wagering contributions, and withdrawal history

3.3 Betting and Gaming Activity Data

• Bet Records: Complete history of all bets placed including market type, selection, stake amount in BDT (৳), odds at time of placement, settlement outcome, and profit/loss
• Casino Game History: Records of all slot sessions, live dealer game rounds, table game hands, and RNG game results including wager amounts and outcomes
• Session Data: Login timestamps, session durations, pages visited within the platform, game categories accessed, and logout timestamps

3.4 Technical and Device Data

When you access kgf2, our servers and analytics systems automatically record technical data including your IP address, device type and model, operating system and version, web browser type and version, screen resolution, language settings, referring URL, and time zone (Bangladesh Standard Time, UTC+6). We also store cookie identifiers and similar tracking technologies as described in Section 7 of this Policy.

3.5 Communications Data

We retain records of all communications between you and kgf2, including live chat transcripts, email correspondence, support ticket history, and any feedback, complaints, or dispute submissions you submit. These records are maintained for a minimum of five years for regulatory compliance and dispute resolution purposes.

Data Category	Examples	Primary Purpose	Retention Period
Identity Data	Name, DOB, NID scan	Account verification, KYC compliance	5 years post-closure
Contact Data	Email, mobile, address	Communication, account access	5 years post-closure
Financial Data	bKash number, transaction records	Payment processing, AML compliance	7 years post-transaction
Betting History	Bet records, game sessions	Service provision, responsible gaming	5 years post-closure
Technical Data	IP address, device info	Security, fraud prevention	2 years
Communications	Support chats, emails	Dispute resolution, service improvement	5 years

4. Legal Basis and Purposes for Processing

kgf2 processes your personal data only when we have a legitimate legal basis to do so. Under applicable data protection principles, our legal bases for processing include performance of contract, legal obligation, legitimate interests, and your explicit consent. The specific legal bases and purposes for which we process your personal data are outlined below:

4.1 Performance of Contract

To provide you with the betting and gaming services you have contracted for by registering an account on kgf2, we must process your account registration data, financial data, and betting activity data. This includes creating and maintaining your account, processing deposits via bKash, Nagad, and Rocket, executing bets you place on cricket matches (BPL, IPL, T20 World Cup) and other sports, operating casino games and live dealer tables from Evolution Gaming and Pragmatic Play, calculating winnings, processing withdrawals, and delivering customer support. Without processing this data, we cannot fulfill our contractual obligations to you.

4.2 Legal Obligations

kgf2 is subject to various legal and regulatory requirements that compel us to collect and retain certain personal data. These obligations include Know Your Customer (KYC) and age verification requirements mandating that we verify you are 21 years or older before granting access to gambling services; Anti-Money Laundering (AML) regulations requiring us to monitor transaction patterns, conduct source-of-funds checks, report suspicious activity, and maintain transaction records for seven years; tax reporting obligations where applicable; and cooperation with law enforcement investigations when presented with lawful requests. Failure to comply with these legal obligations would expose kgf2 to significant regulatory penalties and jeopardize our ability to operate.

4.3 Legitimate Interests

kgf2 processes certain personal data based on our legitimate business interests, provided these interests do not override your fundamental rights and freedoms. Our legitimate interests include fraud prevention and platform security (monitoring for duplicate accounts, bonus abuse, collusion, payment fraud, and unauthorized access attempts); service improvement and analytics (analyzing betting patterns, game preferences, and user behavior to enhance platform features and optimize game offerings); marketing and promotional activities (sending targeted bonus offers, tournament announcements, and product updates to players who have not opted out); and business intelligence and financial reporting (aggregated, anonymized analysis of platform performance, revenue, and player retention metrics).

4.4 Consent

For certain processing activities not covered by the above legal bases, we rely on your explicit consent. This includes optional marketing communications such as promotional emails about new games, bonus offers, and VIP program benefits; installation and use of non-essential cookies for analytics and advertising purposes; and sharing your data with third-party partners for co-marketing initiatives. You may withdraw your consent at any time through your account settings or by contacting [email protected], though withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

5. Data Sharing and Third-Party Disclosure

kgf2 does not sell or rent your personal data to third parties for their independent marketing purposes. However, we do share your data with carefully selected third-party service providers and partners who assist us in delivering kgf2 services. All third parties are bound by strict confidentiality obligations and are permitted to process your data only for the specific purposes we authorize. The categories of third parties with whom we share data include:

5.1 Payment Service Providers

To process deposits and withdrawals, we share necessary financial and identity data with bKash, Nagad, Rocket, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, and international payment processors such as Visa and Mastercard. These providers receive only the minimum data required to execute transactions and verify account ownership, including your name, account number, transaction amount in BDT (৳), and transaction reference.

5.2 Identity Verification Services

We engage third-party identity verification and KYC service providers to validate the authenticity of identification documents you submit, cross-reference your details against global watchlists and sanctions databases, and confirm your age is 21 or above. These providers receive copies of your identity documents and personal information but are contractually prohibited from using this data for any purpose other than verification services for kgf2.

5.3 Game Providers and Platform Partners

When you play games developed by Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi, or other third-party studios, we share limited session data including your player ID (pseudonymous identifier), bet amounts, game outcomes, and balance adjustments. These providers do not receive your full name, contact details, or financial information. They process this data to operate game sessions, calculate results, and maintain game integrity.

5.4 Cloud Infrastructure and Hosting Providers

kgf2 utilizes secure cloud infrastructure services for data storage, server hosting, database management, and backup solutions. All data stored with cloud providers is encrypted both in transit (using TLS 1.3 or higher) and at rest (using AES-256 encryption). Our cloud providers are located in jurisdictions with robust data protection standards and are contractually obligated to maintain confidentiality and implement industry-standard security measures.

5.5 Regulatory Authorities and Law Enforcement

In limited circumstances, we may be legally required to disclose your personal data to governmental authorities, regulatory bodies, or law enforcement agencies. Such disclosures occur only when we receive a lawful request, court order, subpoena, or other legally binding demand, or when disclosure is necessary to prevent imminent harm, enforce our legal rights, or comply with anti-money laundering reporting obligations. We will notify you of such requests unless legally prohibited from doing so.

6. Data Security Measures

kgf2 implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Our security framework includes the following safeguards:

• Encryption: All data transmitted between your device and kgf2 servers is encrypted using TLS 1.3 protocol with 256-bit encryption. Sensitive data at rest, including passwords and payment information, is encrypted using AES-256 encryption with industry-standard key management practices.
• Access Controls: Access to personal data within kgf2 systems is restricted on a need-to-know basis. Employees, contractors, and service providers are granted access only to the specific data categories required to perform their authorized duties. All access is logged and regularly audited.
• Authentication: User accounts are protected by strong password requirements (minimum 8 characters, including uppercase, lowercase, numbers, and special characters). We encourage all users to enable two-factor authentication (2FA) for enhanced account security.
• Monitoring and Intrusion Detection: kgf2 deploys real-time security monitoring systems, intrusion detection software, and automated threat response mechanisms to identify and mitigate cyberattacks, unauthorized access attempts, and malicious activity targeting our platform.
• Regular Security Audits: We conduct periodic security assessments, vulnerability scans, and penetration testing performed by independent third-party cybersecurity firms to identify and remediate potential weaknesses in our infrastructure.
• Employee Training: All kgf2 personnel with access to personal data receive mandatory data protection and information security training covering confidentiality obligations, phishing awareness, secure data handling procedures, and incident response protocols.
• Physical Security: Our data centers and server facilities implement physical access controls including biometric authentication, 24/7 surveillance monitoring, and environmental safeguards against fire, flood, and power failure.

While we employ industry-leading security measures, no method of electronic storage or internet transmission is 100% secure. We cannot guarantee absolute security, but we continually invest in advanced security technologies and practices to minimize risk. If you become aware of any security vulnerability or unauthorized access to your kgf2 account, you must notify us immediately at [email protected].

7. Cookies and Tracking Technologies

kgf2 uses cookies, web beacons, and similar tracking technologies to enhance your user experience, personalize content, analyze platform performance, and deliver targeted marketing. Cookies are small text files stored on your device that enable us to recognize you on subsequent visits, remember your preferences, and track your interactions with the platform. The types of cookies we use include:

• Essential Cookies: Required for core platform functionality including session management, login authentication, security features, and payment processing. These cookies cannot be disabled without preventing access to kgf2 services.
• Performance Cookies: Collect anonymous data about how users navigate the platform, which pages are most visited, which games are most popular, and where errors occur. This information helps us optimize platform performance and user experience.
• Functionality Cookies: Remember your preferences such as language selection (English for Bangladesh users), preferred odds format, betting slip settings, and favorite games to provide a personalized experience.
• Marketing Cookies: Track your browsing behavior across kgf2 pages to deliver relevant promotional offers, bonus notifications, and targeted advertisements. These cookies may also be used to limit the frequency with which you see specific ads and measure campaign effectiveness.

You can manage your cookie preferences through your web browser settings by accepting, blocking, or deleting cookies. Note that disabling essential cookies will prevent you from accessing certain kgf2 features. Most modern browsers provide tools to view, manage, and delete cookies, and mobile devices offer settings to limit ad tracking. For detailed guidance on cookie management, consult your browser's help documentation.

8. Data Retention

kgf2 retains your personal data only for as long as necessary to fulfill the purposes outlined in this Policy or as required by applicable legal and regulatory obligations. Our standard retention periods are as follows:

• Active Accounts: While your kgf2 account remains active, we retain all associated personal data to provide ongoing services, maintain betting and gaming history, process transactions, and support customer inquiries.
• Closed Accounts: If you voluntarily close your account or we terminate your account for Terms violations, we retain your identity data, contact information, betting history, and transaction records for five years from the date of closure. This retention period is necessary for regulatory compliance, dispute resolution, fraud prevention, and enforcement of outstanding claims.
• Financial Records: Transaction data including deposits, withdrawals, bKash/Nagad/Rocket payments, and all financial activity is retained for seven years from the date of the transaction in accordance with anti-money laundering regulations and tax record-keeping requirements.
• Technical Logs: Server logs, IP addresses, and technical session data are typically retained for two years for security monitoring, troubleshooting, and fraud investigation purposes.
• Communications: Support chat transcripts, email correspondence, and dispute records are retained for five years to support ongoing customer service, resolve complaints, and defend against legal claims.

After the applicable retention period expires, your personal data is securely deleted or anonymized such that it can no longer be associated with you as an individual. Anonymized data may be retained indefinitely for statistical analysis, business intelligence, and research purposes.

9. Your Data Protection Rights

As a kgf2 user, you hold certain rights with respect to your personal data. We are committed to facilitating the exercise of these rights in accordance with applicable data protection principles:

9.1 Right of Access

You have the right to request a copy of all personal data kgf2 holds about you. Upon receiving a verified access request, we will provide you with a comprehensive report detailing your account information, betting history, transaction records, communications logs, and any other data we have processed. We will respond to access requests within 30 days of receipt.

9.2 Right to Rectification

If you believe any personal data we hold about you is inaccurate, incomplete, or outdated, you have the right to request correction. You can update certain information directly through your kgf2 account settings, including your email address, mobile number, and password. For changes to verified identity information such as your name or date of birth, contact [email protected] with supporting documentation.

9.3 Right to Erasure (Right to Be Forgotten)

You may request deletion of your personal data under certain circumstances, including if the data is no longer necessary for the purposes for which it was collected, if you withdraw consent (where consent was the legal basis), or if you object to processing based on legitimate interests and no overriding legitimate grounds exist. However, your right to erasure is subject to our legal obligations to retain data for regulatory compliance, AML requirements, and dispute resolution. We will honor erasure requests to the fullest extent permitted by law.

9.4 Right to Restriction of Processing

In limited situations, you may request that we temporarily restrict processing of your personal data while we investigate a dispute about accuracy, assess the legitimacy of processing, or determine whether data must be retained for legal claims even after the retention period has expired.

9.5 Right to Data Portability

Where technically feasible, you have the right to receive personal data you have provided to kgf2 in a structured, commonly used, machine-readable format (such as CSV or JSON), and to transmit that data to another service provider without hindrance from kgf2. This right applies to data processed based on consent or contract performance.

9.6 Right to Object

You may object to processing of your personal data based on legitimate interests or for direct marketing purposes. Upon receiving an objection, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where processing is necessary for establishment, exercise, or defense of legal claims. You can opt out of marketing communications at any time by adjusting your account settings or clicking the unsubscribe link in promotional emails.

9.7 Right to Withdraw Consent

Where we rely on your consent as the legal basis for processing, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal but will prevent future processing based on that consent.

9.8 Exercising Your Rights

To exercise any of the above rights, contact our privacy team at [email protected] with your full name, registered email address, and a clear description of your request. To protect your privacy, we may require verification of your identity before processing requests involving access, rectification, or erasure of personal data. We will respond to all rights requests within 30 calendar days. If we deny a request, we will provide you with a written explanation of the reasons for denial.

10. Children's Privacy

kgf2 services are strictly intended for adults aged 21 years or older. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. During account registration, we require users to confirm their date of birth and verify their age through government-issued identification documents. If we discover that we have inadvertently collected personal data from a person under 21, we will immediately delete the account, erase all associated data, and refund any deposited funds to the extent possible. Parents or guardians who believe a minor has accessed kgf2 services should contact [email protected] immediately.

11. Changes to This Privacy Policy

kgf2 reserves the right to modify, update, or replace this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or business operations. Material changes will be communicated to registered users via email notification sent to the email address on file or through prominent in-platform notices displayed upon login. The effective date at the top of this document will be updated to reflect when changes become operative. We encourage you to review this Policy periodically. Your continued use of kgf2 services following notification of changes constitutes acceptance of the updated Policy. If you disagree with material changes, you must cease using the platform and contact us to close your account.

12. Contact Information and Complaints

If you have questions, concerns, or complaints regarding this Privacy Policy or our data processing practices, or if you wish to exercise any of your data protection rights, please contact our privacy team:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Please include "Privacy Inquiry" or "Data Rights Request" in your email subject line
• Response Time: We will acknowledge receipt of your inquiry within 3 business days and provide a substantive response within 30 calendar days

If you are not satisfied with our response to a privacy complaint, you may have the right to lodge a complaint with your local data protection authority or regulatory body overseeing data privacy in Bangladesh.