keg99 Privacy Policy

Introduction

keg99 is Bangladesh's trusted online casino and sports betting platform, accessible at keg99.io. As part of operating the keg99 platform, we necessarily collect and process personal data about the individuals who register accounts with us and interact with our services. We take this responsibility seriously and are committed to handling all personal data in a transparent, secure, and lawful manner.

This Privacy Policy sets out in plain English the categories of personal data that keg99 collects, the purposes for which that data is used, the conditions under which it may be shared with third parties, the period for which it is retained, the security measures in place to protect it, and the rights that players and visitors have in relation to their own data.

This policy applies to all personal data collected through the keg99.io website, the keg99 account registration process, financial transactions conducted through the platform, customer support interactions, and any promotional communications issued by keg99. It applies to all registered players regardless of the device or method through which they access the keg99 platform.

Data Controller

For the purposes of this Privacy Policy, keg99 acts as the data controller in respect of all personal data collected through the keg99.io platform. As data controller, keg99 determines the purposes and means by which personal data is processed and is responsible for ensuring that such processing is conducted lawfully and in accordance with this policy.

All enquiries, requests, and complaints relating to the privacy practices described in this policy should be directed to the keg99 privacy team at the contact details provided in Section 14 of this document. keg99 will respond to all privacy-related correspondence within the timeframes set out in that section.

Data We Collect

keg99 collects personal data from players and visitors through several distinct channels. The categories of data collected and the channel through which each is typically obtained are set out below.

keg99 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data unless specifically required by applicable law in connection with a regulatory investigation. In the ordinary course of operating the platform, such sensitive categories of data are not collected.

How We Use Your Data

keg99 uses the personal data collected from players and visitors for the following specific, documented purposes. Data is not used for any purpose that is incompatible with those listed below without first obtaining appropriate consent or establishing a new legal basis for processing.

• Account Creation and Management: Identity and contact data are used to create and manage your keg99 player account, maintain your account preferences, and administer your account over its lifetime.
• Age and Identity Verification: Identity data and verification documents are used to confirm that all registered players meet the minimum age requirement of 21 years and to verify player identity as required by applicable anti-money laundering obligations.
• Payment Processing: Financial data is used to process deposit and withdrawal transactions through supported payment methods including bKash, Nagad, Rocket, and Upay, and to maintain accurate transaction records.
• Platform Personalisation: Usage and account data are used to personalise the player's experience on the keg99 platform, including presenting relevant game recommendations and tailoring promotional offers where applicable.
• Fraud Prevention and Security: Technical data, usage data, and financial data are analysed to detect and prevent fraudulent activity, money laundering, bonus abuse, account takeover attempts, and other security threats to the platform and its players.
• Customer Support: Contact data and communications data are used to respond to player enquiries, resolve account issues, process complaints, and deliver responsive customer support via email and WhatsApp.
• Responsible Gaming Compliance: Account and usage data are monitored to identify patterns of play that may indicate problem gambling behaviour, enabling keg99 to fulfil its responsible gaming obligations and intervene proactively where appropriate.
• Regulatory Compliance: Identity, financial, and transaction data may be retained and disclosed as required by applicable anti-money laundering regulations, law enforcement requests, or other mandatory legal obligations.
• Marketing Communications: Contact data is used to send promotional emails and notifications to players who have explicitly opted in to receive marketing communications from keg99. This includes notifications about bonuses, seasonal promotions (such as BPL, Eid, and Pohela Boishakh offers), and new game releases.
• Platform Analytics and Improvement: Technical and usage data are used in aggregated and anonymised form to analyse platform performance, identify technical issues, and improve the overall player experience on keg99.io.

Legal Basis for Processing

keg99 processes personal data only where a valid legal basis for doing so exists. The primary legal bases on which keg99 relies for each category of processing activity are as follows:

• Contractual Necessity: Processing that is necessary to perform the contract between keg99 and the player — including account creation, payment processing, and game access — is carried out on the legal basis of contractual necessity. Without this processing, keg99 would be unable to provide the services described in its Terms and Conditions.
• Legal Obligation: Processing carried out to comply with applicable mandatory legal requirements — including anti-money laundering checks, identity verification, and cooperation with regulatory or law enforcement authorities — is conducted on the legal basis of legal obligation.
• Legitimate Interests: Processing conducted to detect and prevent fraud, protect platform security, carry out platform analytics, and improve the player experience is conducted on the basis of keg99's legitimate interests, where those interests are not overridden by the player's fundamental rights and freedoms.
• Consent: Processing carried out for the purpose of sending marketing communications is conducted exclusively on the basis of the player's explicit prior consent. Players who have not opted in to marketing communications will not receive promotional messaging. Players who have consented may withdraw that consent at any time by contacting the keg99 support team.

Data Sharing & Disclosure

keg99 does not sell, rent, or trade personal data to any third party for commercial purposes. Personal data may, however, be shared with the following categories of recipients where necessary and proportionate to the purpose of disclosure:

• Payment Processors: Financial data necessary to process deposit and withdrawal transactions is shared with the relevant payment service providers (bKash, Nagad, Rocket, Upay) strictly to the extent required to execute the transaction. These providers are subject to their own data protection obligations.
• Certified Game Providers: Limited technical data (such as session tokens and game history) is shared with licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi to enable delivery of their games within the keg99 platform. Game providers do not receive identity or financial data beyond what is technically required for session management.
• Identity Verification Services: Where keg99 uses third-party KYC or identity verification services to assist with age and identity checks, the relevant documents and identity data are shared with those providers under strict data-processing agreements.
• Legal and Regulatory Authorities: keg99 may disclose personal data to law enforcement agencies, regulatory bodies, or other government authorities where required to do so by applicable law, court order, or legitimate regulatory request. keg99 will disclose only the minimum data necessary to comply with such requirements.
• Business Transfers: In the event that keg99 undergoes a corporate restructuring, merger, acquisition, or sale of assets, player data held by keg99 may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and the privacy implications thereof prior to the transfer taking effect.

Cookies & Tracking Technologies

keg99 uses cookies and similar tracking technologies on the keg99.io platform to enable core platform functionality, maintain player sessions, and gather analytical data about platform usage. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the keg99 platform to function. They enable player session management, account authentication, and security features. The platform cannot operate without these cookies and they cannot be disabled.
• Functional Cookies: These cookies remember player preferences such as language settings, display preferences, and recently played games to provide a more personalised platform experience. They are set for the duration of the player's session or for a defined period thereafter.
• Analytics Cookies: keg99 uses analytics cookies to collect aggregated information about how players navigate and use the platform. This data is used solely to improve platform performance and the player experience. Where possible, analytics data is anonymised before processing.
• Session Tokens: session_id and auth_token values are stored as secure, HTTP-only cookies to maintain authenticated player sessions. These tokens expire automatically upon logout or after a defined period of inactivity.

Players may manage cookie preferences through their browser settings. Please note that disabling cookies beyond the strictly necessary category may affect the functionality of certain platform features. keg99 does not use third-party advertising cookies or behavioural targeting cookies for the purpose of serving advertisements on third-party websites.

Data Retention

keg99 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. The following retention periods apply to the principal categories of data held by keg99:

After the applicable retention period has expired, personal data is securely deleted or anonymised in accordance with keg99's internal data destruction procedures. Anonymised data may be retained indefinitely for statistical and analytical purposes as it no longer constitutes personal data capable of identifying any individual.

Data Security

keg99 implements a comprehensive set of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security infrastructure includes the following key measures:

• Transport Layer Security: All data transmitted between a player's device and the keg99.io platform is encrypted using 256-bit SSL/TLS encryption. This applies to all pages of the platform including account login, deposit and withdrawal pages, and the player account management portal.
• Password Security: Player account passwords are never stored in plain text. Passwords are processed using a one-way cryptographic hashing algorithm with per-record salting, meaning that even in the event of a data breach, original passwords cannot be recovered from stored hash values.
• Access Controls: Access to systems containing personal data is restricted to authorised keg99 personnel on a strict need-to-know basis. All internal access to player data is logged and subject to periodic audit review.
• Infrastructure Security: The keg99 platform is hosted on secure server infrastructure with firewall protection, intrusion detection systems, and regular security patching. Server access is protected by multi-factor authentication.
• Payment Security: keg99 does not store complete payment method credentials (such as full bKash account numbers or Nagad PIN data) on its own servers. Payment processing is handled by the respective payment service providers through secure API integrations.

While keg99 takes all reasonable precautions to protect player data, no online platform can guarantee absolute security. Players are encouraged to use strong, unique passwords for their keg99 accounts and to contact the keg99 support team immediately if they suspect that their account has been compromised.

Your Rights

As a player on the keg99 platform, you have the following rights in relation to the personal data that keg99 holds about you. Requests to exercise any of these rights may be submitted to the keg99 privacy team at [email protected] and will be acknowledged within 5 business days.

• Right of Access: You have the right to request a copy of the personal data that keg99 holds about you. keg99 will provide this information in a structured, commonly used format within 30 days of receiving a valid access request.
• Right to Rectification: If you believe that any personal data held by keg99 is inaccurate or incomplete, you have the right to request that it be corrected or updated. Players may update certain account details directly through their account settings, or by contacting the support team.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn your consent (in consent-based processing), or where there is no other lawful basis for continued processing. Please note that certain data must be retained to comply with legal obligations (see Section 8) and cannot be deleted on request.
• Right to Restrict Processing: You have the right to request that keg99 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing pending verification of whether keg99's legitimate interests override your own.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a portable, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on keg99's legitimate interests, including profiling for responsible gaming monitoring purposes. keg99 will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (principally marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Children & Minors

The keg99 platform is strictly for adults aged 21 years and above. keg99 does not knowingly collect personal data from any individual under the age of 21. The age verification procedures described in this policy are in place specifically to prevent underage individuals from accessing the platform and to ensure that all registered players are of the legally required minimum age.

If keg99 becomes aware that a registered player is under the age of 21, the player's account will be immediately suspended, all winnings will be forfeited, all deposited funds will be returned to the original payment method where technically possible, and all personal data relating to that account will be deleted in accordance with keg99's data destruction procedures.

If you are a parent or guardian and believe that a minor in your care has registered an account on the keg99 platform, please contact the keg99 support team immediately at [email protected]. keg99 takes all such reports seriously and will act upon them as a priority matter.

Third-Party Services

The keg99 platform integrates with a number of third-party service providers to deliver the full range of services available to players. Each of these third parties operates under its own privacy policy and data-protection practices. keg99 is not responsible for the privacy practices of third-party services beyond its contractual data-protection obligations with those providers.

The principal categories of third-party services integrated within the keg99 platform are as follows:

• Mobile Financial Services: bKash, Nagad, Rocket, and Upay are integrated for deposit and withdrawal processing. Your interactions with these providers are also governed by their own privacy policies and terms of service.
• Game Providers: Certified game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi deliver game content within the keg99 platform. Game sessions are processed through these providers' secure infrastructure. Players interact with game providers' software within the keg99 interface and are subject to those providers' game-level terms.
• Analytics Providers: keg99 may use third-party analytics services to process aggregated usage data for the purpose of platform improvement. Where such services are used, data is anonymised or pseudonymised before transmission to the analytics provider.

keg99 does not embed third-party advertising networks, social media tracking pixels, or affiliate tracking scripts that would transmit personal data to external commercial entities without the player's knowledge or consent.

Changes to This Policy

keg99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services offered on the platform. The "Last Updated" date at the top of this document will be revised whenever a material change is made to the policy.

Where a material change is made that affects the way in which keg99 processes personal data, keg99 will notify registered players by email to the address associated with their account, or by displaying a prominent notice on the keg99 platform prior to the change taking effect. For changes that require your fresh consent (such as a new category of marketing communication), keg99 will seek that consent separately before the new processing commences.

The most current version of this Privacy Policy is always accessible at keg99.io/privacy-policy. Players are encouraged to review this page periodically to stay informed of any updates. Your continued use of the keg99 platform after the publication of any amendment to this policy constitutes your acknowledgement of the revised version.

Contact & Privacy Complaints

All privacy-related requests, enquiries, and complaints should be directed to the keg99 privacy team. All contact details below are provided as plain text only and are not clickable links.

• Privacy Enquiries: [email protected]
• General Support: [email protected]
• WhatsApp Support: +880 1700 000 000 (available 09:00–01:00 BST daily)

keg99 will acknowledge receipt of any privacy-related request or complaint within 5 business days and will provide a substantive response within 30 days. Where a request is complex or involves a large volume of data, keg99 may extend this period by a further 30 days and will notify you of the extension before the initial 30-day period expires.

If you are not satisfied with the way in which keg99 has handled your personal data or responded to a privacy request, you have the right to escalate your complaint through applicable dispute resolution channels. keg 99 encourages players to contact the privacy team directly in the first instance, as most concerns can be resolved quickly through direct communication.