kkff Privacy Policy:
Your Data, Protected

For the purposes of applicable data protection law, kkff is the data controller responsible for the personal data collected and processed in connection with the operation of the platform at https://kkff.vu. As data controller, kkff determines the purposes and means by which your personal data is processed.

If you have any questions, concerns, or requests relating to the processing of your personal data, you may contact our data privacy team using the details set out in Section 15 of this Policy. All data-related correspondence should be directed to the email address provided in that section with the subject line "DATA PRIVACY REQUEST" to ensure it is routed to the correct team without delay.

kkff is committed to maintaining the accuracy, confidentiality, and security of your personal information and to complying with all applicable data protection obligations in relation to the data we hold about you.

kkff collects personal data through two primary means: data you provide to us directly, and data collected automatically when you use the platform. The categories of data we collect are set out in the table below.

kkff does not knowingly collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless this is strictly required for age or identity verification purposes, in which case such data is handled with enhanced security measures and is never shared with third parties for commercial purposes.

kkff processes your personal data for the following clearly defined purposes. We will not use your data for any purpose not described in this Policy without first obtaining your explicit consent or being required to do so by law.

• Account Management: Creating, maintaining, and securing your player account, including authentication, password recovery, and session management.
• Identity Verification (KYC): Verifying your identity and age (21+) as required by our responsible gaming and anti-money laundering obligations before processing withdrawals or in response to unusual account activity.
• Transaction Processing: Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and reconciling your BDT account balance accurately.
• Platform Operation: Delivering game content, calculating outcomes, applying bonuses, enforcing wagering requirements, and maintaining the overall functionality of the kkff platform.
• Customer Support: Responding to your enquiries, resolving complaints, and providing technical assistance via email at [email protected].
• Responsible Gaming: Monitoring gaming patterns for indicators of problem gambling, enforcing self-exclusion and cooling-off periods, and applying deposit limits as configured by the player or required by our responsible gaming policy.
• Fraud Prevention & Security: Detecting and preventing fraud, money laundering, duplicate accounts, unauthorised access, and other prohibited conduct as defined in the kkff Terms & Conditions.
• Legal & Regulatory Compliance: Fulfilling any legal obligations, responding to lawful requests from competent authorities, and maintaining records as required by applicable law.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates via email, but only where you have explicitly opted in to receive such communications. You may opt out at any time via your account settings or by contacting support.
• Platform Improvement: Analysing anonymised and aggregated usage data to identify technical issues, improve game performance, and enhance the overall player experience on the kkff platform.

kkff processes your personal data in accordance with recognised legal bases for data processing. The applicable legal basis depends on the specific purpose for which your data is being processed:

• Contractual Necessity: Processing that is necessary to perform the contract between you and kkff — including account registration, transaction processing, game delivery, and bonus management — is carried out on the basis of contractual necessity. Without this processing, kkff would be unable to provide its services to you.
• Legal Obligation: Processing required to comply with applicable law — including KYC identity verification, anti-money laundering record-keeping, and responding to lawful requests from competent authorities — is carried out on the basis of legal obligation.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and anonymised analytics is carried out on the basis of kkff's legitimate interest in operating a safe, fair, and secure platform. Where we rely on legitimate interests, we have conducted a balancing assessment and are satisfied that our interests are not overridden by your rights.
• Consent: Processing for optional marketing communications is carried out solely on the basis of your freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

kkff does not sell your personal data. We share personal data with third parties only in the following limited and controlled circumstances:

• Payment Processors: We share the minimum financial data necessary with payment service providers (including bKash, Nagad, Rocket, Upay, Visa, and Mastercard) to process your deposit and withdrawal transactions. These providers operate under their own privacy policies and data security standards.
• Game Technology Providers: Certain game data (such as wager amounts and session identifiers) is transmitted to our certified game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — for the purpose of game delivery, RNG certification, and technical support. These providers are contractually prohibited from using this data for purposes beyond the scope of their service agreements with kkff.
• Identity Verification Services: KYC documents are processed by approved third-party identity verification service providers under strict data processing agreements. These providers may not retain or use your documents for any purpose other than completing the verification on behalf of kkff.
• Legal and Regulatory Authorities: Where kkff is required by applicable law, court order, or lawful request from a competent government authority to disclose personal data, we will do so. Where legally permissible, we will notify you of such a disclosure request before complying.
• Fraud Prevention Services: We may share limited data with industry fraud prevention and anti-money laundering databases to identify and prevent prohibited conduct across the online gaming industry.

The kkff platform serves players primarily located in Bangladesh and processes the majority of player data within secure server infrastructure designed to support the Bangladesh Standard Time (BST, UTC+6) operating environment. However, certain third-party service providers engaged by kkff — including game technology providers and identity verification partners — may process data in jurisdictions outside Bangladesh.

Where personal data is transferred internationally, kkff ensures that appropriate safeguards are in place to protect the data to a standard equivalent to or exceeding the protections described in this Policy. These safeguards may include:

• Contractual data processing agreements incorporating industry-standard data protection clauses.
• Requiring the recipient to maintain technical and organisational security measures appropriate to the sensitivity of the data being transferred.
• Restricting the use of transferred data to the specific purpose for which the transfer was made.

If you would like further information about the international transfer arrangements in place for any specific category of your personal data, please contact us at the details in Section 15.

kkff retains personal data for as long as necessary to fulfil the purposes for which it was collected, to maintain an active contractual relationship with you, or as required by applicable legal and regulatory obligations. The table below summarises our standard retention periods by data category:

Upon expiry of the relevant retention period, personal data is securely deleted from active systems or, where deletion is not technically feasible, anonymised such that it can no longer be linked to any identifiable individual. Anonymised data may be retained indefinitely for statistical and platform improvement purposes.

The kkff website uses cookies and similar technologies (collectively "cookies") to ensure the platform functions correctly, to remember your preferences, and to generate anonymised analytics data that helps us improve the platform experience. A cookie is a small text file stored on your device by your web browser when you visit a website.

The types of cookies used by kkff are as follows:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your login session, remember your account preferences, and ensure that the correct game content and BDT currency settings are displayed. These cookies cannot be disabled without preventing core platform functionality.
• Analytics Cookies: We use first-party analytics tools to collect anonymised, aggregated data about how players navigate the kkff platform. This data helps us understand which games are most popular, identify technical errors, and improve page loading performance. No personally identifiable information is collected via analytics cookies.
• Security Cookies: These cookies help kkff identify and mitigate potential security threats, including duplicate login detection, session fixation prevention, and CSRF token management.

You may configure your browser to block or delete cookies at any time. Please note that disabling strictly necessary cookies will impair your ability to log in to and use the kkff platform. Your browser's help documentation will explain how to manage cookie settings for your specific browser.

kkff implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security measures in place include:

• 256-bit SSL/TLS Encryption: All data in transit between your device and kkff servers is encrypted using industry-standard TLS protocols. This includes login credentials, payment data, KYC documents, and support communications.
• Password Hashing: Account passwords are never stored in plain text. They are processed using a strong, industry-standard hashing algorithm with salt, meaning that even internal kkff staff cannot access your password.
• Access Controls: Access to systems containing personal data is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and regular security training.
• Intrusion Detection: kkff employs automated intrusion detection systems that monitor for suspicious access patterns, brute-force login attempts, and other indicators of potential data breach activity on a continuous basis.
• Two-Factor Authentication: All registered players are strongly encouraged to enable two-factor authentication (2FA) via SMS in their account settings to add an additional layer of protection against unauthorised access.
• Regular Security Audits: kkff conducts regular internal and third-party security reviews of its infrastructure to identify and remediate vulnerabilities before they can be exploited.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that poses a high risk to your rights, kkff will notify affected players via their registered email address without undue delay and will take all reasonable steps to contain and remediate the breach.

As a registered player on the kkff platform, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact us at the details set out in Section 15 with the subject line "DATA PRIVACY REQUEST":

• Right of Access: You have the right to request a copy of the personal data kkff holds about you, together with information about how it is being used and with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may update basic account information directly through your account settings panel.
• Right to Erasure: In certain circumstances, you have the right to request that kkff delete personal data we hold about you. This right is subject to overriding legal retention obligations — for example, we are required to retain KYC and transaction records for a minimum of five years.
• Right to Restrict Processing: You may request that kkff restrict the processing of your personal data in certain circumstances, such as while the accuracy of the data is being contested or where you have objected to processing.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object at any time to processing of your personal data that is carried out on the basis of legitimate interests, including where that processing is used for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent , you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

All privacy rights requests are acknowledged within 2 business days of receipt. kkff will provide a substantive response within 30 calendar days. Where a request is complex or numerous, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reasons for it before the initial 30-day period expires.

The kkff platform is strictly intended for adults aged 21 and above. kkff does not knowingly collect, process, or retain personal data from individuals under the age of 21. If you are under 21 years of age, you must not create a kkff account, access the platform, or provide any personal data to kkff.

As part of our KYC verification process, all registered players are required to submit valid proof of age before withdrawal requests are processed. Players who are found to have provided false date-of-birth information during registration will have their accounts suspended immediately and any winnings forfeited in accordance with the kkff Terms & Conditions.

If kkff becomes aware that personal data has been collected from a player who is under the age of 21, we will take immediate steps to close the account, delete all associated personal data, and — where applicable — reverse any transactions linked to that account. If you are a parent or guardian and believe that your child may have created a kkff account, please contact us immediately at [email protected].

The kkff website does not contain outbound hyperlinks to third-party websites as a matter of deliberate policy. All navigation on the kkff platform is internal, using the URL structure defined in the site's navigation menu. This is designed to prevent players from inadvertently navigating away from the kkff platform to unvetted or insecure external destinations.

Notwithstanding the above, some game content delivered by third-party providers such as Pragmatic Play, Evolution Gaming, and Spribe is rendered via secure embedded iframes within the kkff platform environment. The data processing carried out by these providers within their embedded content is governed by their respective provider agreements with kkff, as described in Section 6 of this Policy, and not by the general third-party link disclaimer that would apply to outbound website links.

kkff accepts no responsibility for the privacy practices, data security standards, or content of any third-party website that a player may access independently by typing a URL into their browser. If you choose to access any external website — including those of payment providers such as bKash, Nagad, or Rocket — please review the privacy policy of that website directly before submitting any personal data to it.

kkff reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the operational requirements of the platform. The effective date displayed at the top of this document will be updated each time the Policy is revised.

Where changes are material — meaning they affect the purposes for which we process your data, the categories of data we collect, or the rights available to you — kkff will notify all registered players via their registered email address at least 7 calendar days before the revised Policy takes effect. For minor or clarificatory changes, the updated Policy will be published on this page and the effective date updated accordingly, without individual notification.

Your continued use of the kkff platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the changes. If you do not accept a revised Policy, you must cease using the platform and submit an account closure request to [email protected]. Any personal data associated with your account will be handled in accordance with the retention obligations described in Section 8.

The current version of this Privacy Policy is always accessible via the footer link on every page of the kkff website. We encourage you to review this page periodically to remain informed about how kkff protects your personal data.

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or wish to raise a complaint about how kkff has handled your personal data, please contact our data privacy team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Please use "DATA PRIVACY REQUEST" for privacy rights requests or "DATA PRIVACY COMPLAINT" for formal complaints, to ensure your message is routed to the correct team without delay.
• Response Time: All privacy-related enquiries are acknowledged within 2 business days during Bangladesh Standard Time (BST, UTC+6) operating hours. Substantive responses are provided within 30 calendar days.
• Language: All privacy correspondence is handled in English.

For formal complaints, please include your registered username, a clear description of your concern, the relevant dates and times, and any supporting documentation. kkff will investigate all privacy complaints thoroughly and provide a written outcome within 30 calendar days of receiving a complete complaint submission.