kc221 Privacy Policy — Your Data, Your Rights

1Introduction

kc221 ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of all players and visitors who access kc221.org. This Privacy Policy describes how we collect, use, store, share, and protect personal information in connection with your use of the kc221 Platform, including the website, mobile interface, games, betting services, and payment facilities.

By registering an account or using kc221, you acknowledge that you have read this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this policy, please discontinue use of the Platform and contact us to request deletion of any data we hold about you.

2Data Controller

kc221 is the data controller responsible for your personal information collected and processed through the kc221.org Platform. As data controller, we determine the purposes and means of processing your personal data in accordance with applicable data protection principles.

For all data-related enquiries, please contact us at: [email protected]

3Information We Collect

kc221 collects personal information across several categories depending on how you interact with the Platform. We collect only what is necessary to deliver our services securely and in compliance with applicable obligations.

4How We Use Your Information

kc221 uses the personal information we collect for the following purposes:

• Account creation, authentication, and ongoing account management — verifying your identity, maintaining your account records, and processing your login sessions.
• Processing deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, Visa, and Mastercard — ensuring that transactions are completed accurately and that funds are attributed to the correct account.
• Complying with legal and regulatory obligations — including anti-money laundering (AML) checks, KYC verification, age verification, and responding to lawful requests from competent authorities.
• Delivering responsible gaming tools — monitoring gaming activity for signs of problematic behaviour, enforcing self-exclusion requests, and sending session time notifications where configured.
• Fraud prevention and platform security — detecting suspicious account activity, preventing unauthorised access, investigating potential policy violations, and protecting the integrity of games and betting markets.
• Customer support and communications — responding to your enquiries, resolving complaints, providing platform updates, and sending service-related notifications (e.g. deposit confirmations, withdrawal status updates).

5Legal Basis for Processing

kc221 processes your personal data under one or more of the following legal bases:

• Contractual necessity — processing required to perform the contract between you and kc221 (e.g. operating your account, processing payments, settling bets).
• Legal obligation — processing necessary to comply with applicable laws, including AML/CTF regulations, age verification requirements, and lawful authority requests.
• Legitimate interests — processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where these interests are not overridden by your rights.
• Consent — where we rely on your consent for a specific processing activity (e.g. marketing communications), you may withdraw that consent at any time by contacting us at [email protected].

6Sharing Your Information

kc221 does not sell, rent, or trade your personal data to third parties for commercial purposes. We share your information only in the limited circumstances described below.

Permitted Disclosures

Your personal data may be shared with the following categories of recipients where strictly necessary:

• Payment processors and financial service providers — to facilitate BDT deposits and withdrawals via bKash, Nagad, Rocket, Upay, and card networks. These partners receive only the transaction data required to complete the payment.
• Identity verification and KYC service providers — to verify your age and identity as required. These providers are contractually bound to handle your data securely and use it only for verification purposes.
• Game content providers — game studios such as Pragmatic Play, Evolution Gaming, and Microgaming may receive anonymised session data required to operate their games. No identifiable financial data is passed to game providers.
• Competent legal authorities — where kc221 is required by law, court order, or regulatory authority to disclose personal data. We will notify you of such disclosure where legally permitted to do so.

7Cookies and Tracking Technologies

kc221 uses cookies and similar tracking technologies to operate the Platform and improve your experience. Cookies are small data files stored on your device when you visit kc221.org. We use three categories of cookies:

• Essential cookies — strictly necessary to operate the Platform, maintain your logged-in session, and process transactions. These cannot be disabled without breaking core functionality.
• Analytical cookies — used to understand how players navigate kc221, which pages are most visited, and where technical issues arise. This data is aggregated and anonymised; it does not identify individual players.
• Functional cookies — remember your preferences such as language settings, recently played games, and platform configuration choices to provide a personalised experience across sessions.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of some features on kc221. For more information on managing cookies, refer to your browser's help documentation.

8Data Retention

kc221 retains your personal data for as long as your account remains active and for a period thereafter as required by applicable legal, regulatory, and operational obligations. Specifically: active account data is retained for the duration of the account relationship; financial transaction records are retained for a minimum of five years from the date of the transaction to satisfy AML and financial recordkeeping requirements; support and communication records are retained for two years from the date of last contact.

When your account is closed — whether at your request or due to a policy violation — kc221 will delete or anonymise your personal data within a reasonable period, subject to any retention obligations that require us to keep specific records for longer. You may request confirmation of the data we hold and our retention schedule at any time by contacting [email protected].

9Data Security

kc221 implements industry-standard technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption for all data in transit between your device and our servers, secure storage of account credentials using hashed and salted password protocols, restricted access controls ensuring that only authorised personnel can access personal data on a need-to-know basis, and regular security reviews of our Platform infrastructure.

While we take every reasonable precaution to protect your data, no system is completely immune to security risks. In the event of a data breach that is likely to result in a risk to your rights or freedoms, kc221 will notify affected players as promptly as practicable and take immediate steps to contain and remediate the breach.

10Your Rights

As a player on kc221, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with your account username and a description of your request.

kc221 will respond to all data rights requests within a reasonable timeframe. In some cases, we may need to verify your identity before processing a request. We will not charge a fee for responding to routine requests.

11Children's Privacy

kc221 is an adult entertainment platform strictly intended for persons aged 21 and above. We do not knowingly collect, store, or process personal data relating to anyone under the age of 21. If a parent or guardian believes that a minor has provided personal information to kc221, they should contact us immediately at [email protected]. Upon confirmation, we will delete all relevant data from our records without delay.

12International Data Transfers

kc221 primarily stores and processes player data on servers located in secure data centres. Some of our third-party service providers (such as payment processors and KYC verification partners) may process data outside Bangladesh. Where such transfers occur, kc221 takes steps to ensure that appropriate safeguards are in place, including contractual data protection clauses with service providers, to ensure your data is afforded a comparable level of protection to that required under applicable data protection principles.

13Changes to This Privacy Policy

kc221 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or Platform features. Where changes are material, we will provide notice to registered players via email or an in-platform notification prior to the updated policy taking effect. The effective date at the top of this page will always reflect when the policy was last revised. Your continued use of kc221 after the effective date of any revision constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your data.

14Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way kc221 handles your personal data, our support team is available 24/7 and will respond to all data-related enquiries promptly.

Reach us by email at: [email protected]