klx8 Privacy Policy — How We Handle Your Data

This Privacy Policy ("Policy") describes how klx8 ("the Platform", "we", "us", "our") collects, uses, stores, shares, and protects the personal information of users ("you", "your", "Player", "Account Holder") who register for and use the klx8 online gaming platform available at klx8.pro, including all associated services, features, and mobile browsing experiences.

By registering an account with klx8, you confirm that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside our Terms and Conditions, which govern the overall relationship between you and klx8. If you do not consent to the terms of this Policy, you must not register an account or use any klx8 service.

klx8 collects personal information through multiple channels: directly from you when you register or use the platform, automatically through your device and browser when you access klx8.pro, and from third-party sources such as payment processors and KYC verification services where necessary. We collect only the data that is required for the purposes set out in this Policy.

Information you provide directly:

• Registration information: full name, date of birth, mobile number (required for bKash/Nagad account matching), and a chosen username.
• KYC verification documents: national ID card (NID), passport, or other government-issued identity document, submitted when identity verification is required.
• Communication records: messages sent to klx8 support, including the content of support chat conversations and any attachments you submit as part of a support request.
• Self-exclusion and responsible gaming preferences: if you activate deposit limits, session time limits, cooling-off periods, or self-exclusion, these preferences are recorded and stored to enforce your chosen restrictions.

Information collected automatically:

• Device and browser data: device type, operating system, browser type and version, screen resolution, and mobile network operator (e.g. Grameenphone, Robi, Banglalink). This data is used for platform compatibility and fraud prevention.
• IP address and approximate geolocation: used to detect access from restricted jurisdictions, identify duplicate account attempts, and support fraud and AML monitoring.
• Session and activity data: pages visited, games played, bet amounts, session durations, and navigation paths within the platform. This data is used for platform improvement, responsible gaming monitoring, and fraud detection.

Information from third parties:

• Payment processor data: transaction reference numbers, payment status, and partial payment method identifiers (such as the first and last digits of a bKash wallet number) returned by bKash, Nagad, Rocket, Upay, and card payment processors to confirm deposit and withdrawal transactions.
• KYC verification service results: pass/fail outcome and document validity confirmation from identity verification partners. klx8 does not receive or store the full document image in all cases; in some cases only the verification result is retained.
• Fraud and AML screening results: outputs from third-party fraud detection and anti-money laundering screening tools that klx8 uses to comply with its operational obligations.

The following table summarises the primary purposes for which klx8 uses your personal data and the data category involved in each use:

klx8 processes your personal data on one or more of the following legal bases:

• Contractual necessity: processing is required to fulfil the agreement between you and klx8 — for example, processing your deposit, verifying your identity, or paying out a withdrawal.
• Legal obligation: certain processing activities — particularly KYC, AML screening, and record-keeping — are required to comply with applicable legal and regulatory obligations. klx8 is required to retain transaction records and identity verification data for defined periods regardless of a player's deletion request.
• Legitimate interests: klx8 processes device data, session activity data, and fraud detection outputs to protect the platform and its players from fraudulent activity, collusion, and security threats. This processing is proportionate and does not override your fundamental privacy rights.
• Consent: where klx8 sends you bonus offers, promotional communications, or seasonal campaign notifications, this is done on the basis of your consent given at registration or subsequently updated in your account settings. You may withdraw consent for marketing communications at any time.

klx8 does not sell, rent, or otherwise transfer your personal data to third parties for their own marketing or commercial purposes. We share personal data with third parties only in the specific circumstances described below, and only to the minimum extent necessary for the stated purpose.

We may share data with the following categories of third party:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa, and Mastercard receive the transaction data necessary to execute deposits and withdrawals on your behalf. Each processor operates under its own privacy policy and data security standards.
• KYC and identity verification providers: third-party identity verification services receive the identity documents and personal details you submit for KYC verification. These providers are contractually obligated to use your data only for the verification purpose and to maintain appropriate data security standards.
• Game content providers: Evolution Gaming, Ezugi, Pragmatic Play, PG Soft, Spribe, and other platform providers may receive session identifiers and game-specific activity data necessary to deliver and validate game outcomes. These providers do not receive your name, NID, or full mobile number.
• Law enforcement and regulatory bodies: klx8 will disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory authorities where required to do so by applicable law, court order, or in connection with an investigation into fraud, match fixing, money laundering, or other illegal activity.

Where personal data is transferred to any third-party service provider operating outside Bangladesh, klx8 takes reasonable steps to ensure that the receiving party maintains data security standards that are equivalent to or higher than those described in this Policy.

klx8 does not store full payment card numbers, CVV codes, or full mobile wallet account numbers on its own servers. When you make a deposit via bKash or Nagad, the payment is processed directly through the respective provider's API. klx8 receives only a transaction reference number and a status confirmation from the provider. Partial identifiers (such as the first and last two digits of a mobile wallet number) may be retained for transaction reconciliation purposes.

All transaction records maintained by klx8 — including deposit amounts, withdrawal amounts, dates, and payment method types — are stored securely and are accessible only to authorised klx8 personnel and, where legally required, to regulatory and law enforcement authorities. Transaction records are retained for the period required by our data retention policy (see Section 8).

klx8 uses cookies and similar tracking technologies when you access klx8.pro via a web browser. Cookies are small data files stored on your device that help the platform recognise your session, remember your preferences, and function correctly. klx8 does not use third-party advertising cookies or cross-site tracking technologies.

klx8 uses the following categories of cookie:

• Strictly necessary cookies: these are essential to the operation of the platform. They include the session authentication cookie that keeps you logged in during your playing session. These cookies cannot be disabled without preventing the platform from functioning.
• Analytics cookies: klx8 may use anonymised session analytics to understand aggregate platform usage patterns — for example, which games are most popular or which pages have the highest exit rates. These analytics are processed at the aggregate level and are not linked to your personal identity.
• Preference cookies: where you have set display preferences on the platform (such as language selection), a preference cookie stores this setting so that it persists across sessions. These cookies contain no sensitive personal data.

You can manage or delete cookies through your browser settings at any time. Disabling strictly necessary cookies will prevent you from logging in to your klx8 account. Disabling analytics or preference cookies will not affect your ability to play but may affect the consistency of your platform experience.

klx8 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or operational obligations. The following general retention periods apply: active account data is retained for the lifetime of the account; transaction records and KYC verification data are retained for a minimum of five years following account closure or the date of the last transaction, whichever is later, in compliance with financial record-keeping requirements; support communications are retained for three years from the date of the interaction; session and gameplay logs are retained for two years.

When a player requests account deletion, klx8 will close the account and remove or anonymise all data that is not subject to a mandatory retention obligation. Data that must be retained for legal compliance purposes will be securely isolated and will not be used for any other purpose during the retention period. Players will be notified in writing when their deletion request has been actioned and of any data categories that must be retained beyond the deletion date.

As a klx8 account holder, you have the following rights in relation to your personal data. To exercise any of these rights, contact klx8 support using the email address listed on this website. klx8 will respond to all valid rights requests within 30 days.

• Right of access: you may request a copy of all personal data that klx8 holds about you, including account information, transaction history, and KYC records. klx8 will provide this in a structured, readable format within the response window.
• Right of rectification: if any personal data klx8 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Corrections to core account details (name, date of birth) may require re-verification via KYC.
• Right of erasure: you may request that klx8 delete your personal data. This right is subject to klx8's legal data retention obligations. Where deletion is not possible in full due to mandatory retention requirements, klx8 will explain which data must be retained and for how long.
• Right to restriction: you may request that klx8 restrict the processing of your personal data in specific circumstances — for example, where you contest the accuracy of the data and verification is pending.
• Right to withdraw consent: where klx8 processes your data on the basis of consent (such as sending promotional communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

klx8 will not discriminate against any player for exercising their data rights. Exercising your right of erasure or right to restrict processing will not affect your ability to make a valid support complaint or pursue a dispute resolution process — klx8 will retain the minimum data necessary to handle an active complaint even if a deletion request is made concurrently.

klx8 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include SSL/TLS encryption on all data transmitted between your device and klx8.pro, restricted access controls so that only authorised personnel can access personal data on a need-to-know basis, regular security reviews of platform infrastructure, and password hashing for all account credentials stored in klx8 systems.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, klx8 will notify affected players without undue delay and will take immediate steps to contain and remediate the breach. klx8 cannot guarantee absolute security — no internet-based system can — but we commit to maintaining industry-standard security practices and responding promptly to any identified security incident.

The klx8 platform is strictly for adults aged 21 and above. klx8 does not knowingly collect personal data from individuals under the age of 21. If klx8 discovers or has reasonable grounds to believe that an account holder is under 21 years of age, the account will be suspended immediately, any funds will be returned to the originating payment method, and all data associated with the underage account will be securely deleted following the completion of any mandatory verification or reporting obligation. If you are a parent or guardian and have reason to believe that a minor in your care has registered on klx8, please contact support immediately using the email address provided on this website.

klx8 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, klx8 will publish the revised Policy at klx8.pro/privacy-policy with an updated effective date and will endeavour to notify registered players via their registered contact details. Your continued use of the klx8 platform after the publication of a revised Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you must stop using the platform and may request account closure.

For any questions, concerns, or requests relating to this Privacy Policy or to the personal data klx8 holds about you, please contact the klx8 support team using the email address displayed on this website. Please include your registered username and a clear description of your request or concern so that the team can assist you efficiently. All privacy-related requests are handled with priority by the klx8 compliance team.

Response times for privacy requests are within 5 business days for acknowledgement and within 30 calendar days for a full response, measured from the date klx8 receives a complete and valid request. klx8 reserves the right to verify the identity of the requesting party before disclosing any personal data in response to an access or portability request.