kb22 Privacy Policy — How We Protect Your Personal Data
At kb22, protecting the personal information of every player in Bangladesh is a responsibility we take seriously. This Privacy Policy explains what data we collect, why we collect it, how it is used, and the rights you hold over your own information — all in plain, clear English.
Your Data, Your Rights
How kb22 Keeps Your Information Safe
These cards highlight the core principles of the kb22 Privacy Policy. They are a summary only — please read the full policy document further down this page for complete details.
Minimal Data Collection
kb22 collects only the personal information that is strictly necessary to operate your account, process payments, verify your identity, and comply with legal obligations. We do not collect data speculatively or store information beyond the defined retention periods.
256-Bit SSL Encryption
Every connection to the kb22 platform is protected by industry-standard 256-bit SSL encryption. Whether you are making a bKash deposit, submitting identity documents, or simply browsing the game lobby, your data is encrypted in transit at all times.
No Third-Party Data Sales
kb22 will never sell, rent, or trade your personal information to third-party marketing companies. Your data is shared only with essential service providers — such as payment processors and identity verification partners — who are contractually bound to protect it under strict confidentiality terms.
Full Player Control
You have meaningful control over your personal data at kb22. You can request access to the data we hold about you, ask for corrections, request deletion of your account data (subject to legal retention requirements), and opt out of non-essential marketing communications at any time through your account dashboard or by contacting support.
Defined Retention Periods
kb22 does not retain your personal data indefinitely. Retention periods are set based on the purpose for which data was collected and applicable legal requirements. Transaction records and identity verification documents are retained for a maximum of 7 years to meet anti-money laundering obligations. All other data is reviewed and purged on a rolling schedule.
Transparent Cookie Use
kb22 uses a small number of functional and analytical cookies to operate the platform correctly and improve the player experience. We do not use cookies to build marketing profiles or track your activity across third-party websites. A full breakdown of the cookies used is provided in Section 8 of this Privacy Policy.
Full Privacy Policy
Table of Contents
- Who We Are
- Information We Collect
- How We Use Your Information
- Legal Bases for Processing
- Sharing Your Information
- International Data Transfers
- Data Retention
- Cookies & Tracking Technologies
- Your Privacy Rights
- Children & Minors
- Security Measures
- Third-Party Links
- Changes to This Policy
- Contact & Complaints
1 Who We Are
This Privacy Policy applies to the kb22 online gaming platform, accessible at https://kb22.io (the "Platform"). kb22 is Bangladesh's trusted online cricket betting and casino platform, serving registered players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and beyond since 2020.
For the purposes of this Privacy Policy, kb22 acts as the data controller with respect to the personal information of registered players and website visitors. This means kb22 determines the purposes for which, and the means by which, your personal data is processed. Where kb22 engages third-party service providers to process data on its behalf, those providers act as data processors under written agreements that impose binding data-protection obligations.
If you have any questions about this Privacy Policy or about how kb22 handles your personal information, please contact the kb22 Data Protection team at [email protected] (displayed as plain text only — not a clickable link).
2 Information We Collect
kb22 collects personal information from you in the following ways: information you provide directly, information collected automatically when you use the Platform, and information received from third parties such as identity verification providers and payment processors.
2.1 — Information you provide directly
- Registration data: Full legal name, date of birth, email address, Bangladesh mobile number, and a chosen username and password when you create your kb22 account.
- Identity verification documents: A scanned or photographed copy of your Bangladesh National Identity Card (NID), passport, or other government-issued photo ID, and proof of address (e.g., a recent utility bill or bank statement) when requested during the KYC (Know Your Customer) verification process.
- Payment information: Your bKash or Nagad mobile wallet number, bank account details, or Visa/Mastercard details used for deposits and withdrawals. Full card numbers are not stored by kb22; payment card data is handled exclusively by PCI-DSS-compliant payment processors.
- Communications: The content of messages you send to the kb22 support team via live chat, email, or any in-platform support tool, including any attachments you provide.
- Responsible gaming inputs: Deposit limits, session time limits, self-exclusion requests, and cooling-off preferences you set voluntarily through your account dashboard.
2.2 — Information collected automatically
- Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
- Usage and behavioural data: Pages visited, games played, bets placed and their outcomes, session start and end times, features accessed, and in-platform navigation patterns.
- Transaction logs: A complete record of all deposits, withdrawals, bonus claims, and wagers associated with your account, including timestamps and transaction reference numbers.
- Cookie and tracking data: As described in Section 8 of this Privacy Policy.
2.3 — Information received from third parties
- Identity verification providers: Confirmation of your identity and age-verification status from accredited third-party KYC providers used to meet regulatory obligations.
- Payment processors: Transaction status confirmations, payment method validation results, and fraud screening scores from bKash, Nagad, Rocket, Upay, and banking partners.
- Fraud and risk intelligence providers: Risk scores or fraud flags from third-party security services used to protect the Platform and its players.
3 How We Use Your Information
kb22 uses the personal information collected about you for the following purposes:
| Purpose | Types of data used |
|---|---|
| Account creation and management — creating and maintaining your kb22 player account, authenticating your identity at login, and managing your account preferences. | Registration data, device data, usage data |
| Payment processing — processing deposits via bKash, Nagad, Rocket, Upay, and bank transfer, and processing withdrawal requests to your registered payment method. | Payment information, identity data, transaction logs |
| Identity and age verification (KYC) — verifying that you are at least 21 years of age and confirming your identity in accordance with anti-money laundering obligations. | Identity documents, registration data, third-party KYC data |
| Customer support — responding to your queries, resolving complaints, and providing 24/7 English-language support via live chat and email. | Registration data, communications, transaction logs |
| Fraud prevention and security — detecting, investigating, and preventing fraudulent transactions, money laundering, bonus abuse, and other prohibited conduct. | Device data, usage data, transaction logs, third-party risk data |
| Responsible gaming — enforcing the deposit limits, session limits, and self-exclusion arrangements you have set, and identifying players who may be showing signs of problem gambling. | Usage data, transaction logs, responsible gaming inputs |
| Legal and regulatory compliance — retaining records required by anti-money laundering law, responding to lawful requests from authorities, and maintaining audit trails. | All categories, as required by law |
| Platform improvement — analysing aggregated, anonymised usage data to improve the performance, features, and game selection of the Platform. | Anonymised usage data, cookie data |
| Marketing communications — sending you promotional offers, bonus notifications, and news about new games or seasonal promotions (e.g., BPL, Eid, Pohela Boishakh specials), where you have opted in to receive such communications. | Registration data, usage data, communication preferences |
kb22 does not use automated decision-making — including profiling that produces legal or similarly significant effects — without providing you with an opportunity to request human review of the decision. If automated processes are used to flag your account (for example, for fraud screening), a member of the kb22 compliance team reviews the flag before any account action is taken.
4 Legal Bases for Processing
Every instance of personal data processing carried out by kb22 is grounded in at least one lawful legal basis. The primary legal bases on which kb22 relies are as follows:
- Contractual necessity: Processing that is necessary for the performance of your player account agreement with kb22 — including account creation, payment processing, KYC verification, and customer support.
- Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering obligations, age-verification requirements, and responses to lawful requests from law enforcement or regulatory authorities.
- Legitimate interests: Processing necessary for kb22's legitimate business interests where those interests are not overridden by your fundamental rights and freedoms. This includes fraud prevention, platform security, responsible gaming monitoring, and aggregated analytics used to improve the Platform.
- Consent: Processing based on your freely given, specific, and informed consent — primarily for the sending of marketing communications and the use of non-essential analytical cookies. You may withdraw your consent at any time without penalty by updating your preferences in your account dashboard or contacting [email protected].
5 Sharing Your Information
kb22 does not sell, rent, or trade your personal information to any third party for commercial or marketing purposes. Your data may be shared in the following limited circumstances only:
- Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, and Visa/Mastercard processing networks, solely to facilitate deposits and withdrawals on your account. These providers receive only the minimum data necessary to complete the transaction.
- Identity verification providers: Accredited third-party KYC and age-verification services that process your identity documents to confirm eligibility under the kb22 Terms & Conditions. These providers act as data processors under written data-processing agreements.
- Fraud prevention and risk services: Third-party security providers that supply risk-intelligence services used to detect and prevent fraud, money laundering, and account takeover. Data shared with these providers is used only for the purpose of protecting the Platform and its players.
- Game technology providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified game studios that supply the gaming software on the Platform. These providers may receive anonymised session identifiers for the purpose of game delivery, but they do not receive your full name, contact details, or payment information.
- Legal and regulatory authorities: Law enforcement agencies, financial intelligence units, or other regulatory bodies where kb22 is legally required to disclose information — for example, in response to a court order, a lawful police request, or an obligation under anti-money laundering law.
- Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of the kb22 business, your personal data may be transferred to the successor entity as part of the transaction, subject to equivalent data-protection protections being in place.
6 International Data Transfers
kb22 primarily stores and processes player data within secure data centres serving the Asia-Pacific region. However, some of our third-party service providers — including certain game technology suppliers and fraud-prevention services — may be located in, or process data in, jurisdictions outside Bangladesh.
Where personal data is transferred internationally, kb22 ensures that appropriate safeguards are in place before the transfer occurs. These safeguards include:
- Contractual clauses in the data-processing agreements with the relevant third-party processor that require that processor to apply data-protection standards equivalent to those applied by kb22.
- Limiting international transfers to providers whose data-protection practices have been assessed and approved by the kb22 compliance team.
- Transferring only the minimum data necessary to fulfil the specific purpose of the transfer.
If you would like further information about the international transfer safeguards applicable to your data, please contact the kb22 support team at [email protected].
7 Data Retention
kb22 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. The following retention schedule applies:
| Data category | Retention period | Reason |
|---|---|---|
| Account registration data | Duration of active account + 7 years after closure | Anti-money laundering legal obligation |
| Identity verification documents | 7 years from date of verification | KYC regulatory requirement |
| Transaction records (deposits, withdrawals, wagers) | 7 years from transaction date | Financial record-keeping obligation |
| Customer support communications | 3 years from last interaction | Dispute resolution and quality assurance |
| Responsible gaming records | 7 years from account closure | Player protection and regulatory audit |
| Marketing consent records | Until consent is withdrawn + 1 year | Proof of consent basis |
| Website usage and cookie data | Up to 13 months from collection | Platform improvement analytics |
At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Anonymised, aggregated data — from which no individual can be identified — may be retained indefinitely for statistical and business-planning purposes.
8 Cookies & Tracking Technologies
kb22 uses cookies and similar technologies (such as local storage and session tokens) on the Platform to ensure it functions correctly and to improve the player experience. The cookies used by kb22 fall into three categories:
- Strictly necessary cookies: These cookies are essential for the Platform to function and cannot be disabled without breaking core features such as account login, session management, and the maintenance of your game history and responsible gaming preferences within a session. No consent is required for strictly necessary cookies.
- Functional cookies: These cookies remember your account preferences (such as preferred language, notification settings, and game lobby filters) to personalise your experience. Functional cookies are enabled by default but can be disabled in your account settings. Disabling them will affect personalisation features but will not prevent you from using the Platform.
- Analytical cookies: These cookies collect anonymised information about how players navigate the Platform, which games are most popular, and where technical errors occur. This data is used exclusively to improve the Platform's performance and game catalogue. Analytical cookies require your consent and can be disabled at any time in your account privacy settings.
kb22 does not use advertising cookies, tracking pixels from social media platforms, or any third-party marketing cookies. The Platform does not participate in cross-site advertising networks.
9 Your Privacy Rights
As a kb22 player, you hold the following rights with respect to the personal data that kb22 holds about you. To exercise any of these rights, contact the kb22 support team at [email protected] with the subject line "Privacy Rights Request" and include your registered username and mobile number for identity verification purposes.
kb22 will respond to all valid privacy rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 60 days, and you will be notified of the extension and the reason for it within the initial 30-day window. There is no fee for submitting a privacy rights request. If a request is manifestly unfounded or excessive, kb22 reserves the right to charge a reasonable administrative fee or refuse to act on the request, with written explanation.
10 Children & Minors
The kb22 Platform is strictly intended for adults aged 21 years and above. kb22 does not knowingly collect, process, or store personal data belonging to persons under the age of 21. Proof of age is required before any account is fully verified or any withdrawal is processed.
If kb22 becomes aware that personal data has been collected from an individual under the age of 21, that data will be immediately deleted, the associated account will be closed, and any funds held in the account will be returned to the depositing payment method after verification, in accordance with the kb22 Terms & Conditions.
11 Security Measures
kb22 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, and unlawful disclosure. Key measures include:
- 256-bit SSL/TLS encryption on all data transmitted between your device and the kb22 servers.
- Encryption at rest for sensitive personal data fields including identity document images and payment method details stored in the kb22 database.
- Two-factor authentication (2FA) available to all registered players as an optional additional security layer on account login.
- Role-based access controls limiting kb22 employee access to player personal data on a strict need-to-know basis. All access is logged and audited.
- Regular penetration testing and vulnerability assessments conducted by independent security professionals to identify and remediate potential weaknesses in the Platform.
- Incident response procedures enabling kb22 to detect, contain, and report data security breaches in a timely manner. In the event of a breach that is likely to result in a risk to your rights and freedoms, kb22 will notify you without undue delay.
While kb22 takes all reasonable steps to protect your data, no internet-based system is completely immune from attack. You also have a role to play in keeping your account secure: use a strong, unique password, enable 2FA, and never share your login credentials with any other person. If you suspect that your account has been compromised, contact the kb22 support team immediately at [email protected].
12 Third-Party Links
The kb22 Platform does not contain links to third-party websites for commercial or advertising purposes. All navigation links on this site direct to pages within the kb22.io domain. If, in the context of a specific promotion or communication, a reference is made to a third-party brand (such as a game provider's official site), kb22 takes no responsibility for the privacy practices or content of those third-party websites.
kb22 recommends that you review the privacy policy of any third-party website you visit independently, as those websites operate under their own data-protection frameworks which are entirely separate from this Privacy Policy.
13 Changes to This Policy
kb22 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or the way the Platform operates. When material changes are made, kb22 will:
- Update the "Last updated" date displayed at the top of this page and in the hero section above.
- Display a prominent notice on the kb22 Platform for a period of not less than 30 days following the change, directing registered players to review the updated policy.
- Where the changes materially affect the way kb22 processes your personal data, send a direct notification to your registered email address or mobile number at least 14 days before the changes take effect.
Your continued use of the kb22 Platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the updated policy, you should close your account by contacting the kb22 support team before the effective date of the change. Account closure requests will be processed in accordance with the kb22 Terms & Conditions.
14 Contact & Complaints
If you have any questions, concerns, or complaints about this Privacy Policy or about how kb22 handles your personal data, the kb22 Data Protection team is available to assist you 24 hours a day, 7 days a week, in English.
Email: [email protected] (plain text only — not a clickable link)
Response time: All privacy-related enquiries are acknowledged within 24 hours (Bangladesh Standard Time, UTC+6) and resolved within 30 calendar days.
kb22 takes all privacy complaints seriously. Upon receipt of a complaint, the kb22 Data Protection team will:
- Acknowledge your complaint in writing within 24 hours.
- Investigate the complaint thoroughly and impartially.
- Provide you with a written response detailing the outcome of the investigation and any corrective action taken within 30 calendar days.
- Escalate unresolved complaints to senior compliance management if the initial response does not satisfy your concern.
Ready to Play?
Explore kb22 — Bangladesh's Trusted Online Casino
Now that you know how kb22 protects your data, browse our full game selection — from live Cricket betting and Slots to Blackjack MH and Fortune Snake. Safe, secure, and built for Bangladeshi players.