Your Privacy Matters
at kk11

kk11 is Bangladesh's most trusted online casino and sports betting platform, accessible at kk11.im. In providing our services, we inevitably collect and process certain personal data about the players who register and play on the platform. We take our data protection responsibilities seriously, and we are committed to handling all personal data in a manner that is fair, transparent, and secure.

This Privacy Policy applies to all personal data collected through the kk11 website, mobile-optimised site, any kk11 application, customer support channels, and any other medium through which players interact with kk11. It should be read alongside our Terms & Conditions, which are available at kk11.im/terms-conditions.

This Policy is written in English and is governed by the principles of applicable data protection law. We review and update this Policy periodically to reflect changes in our data practices, applicable law, or platform functionality. We encourage you to revisit this page periodically to stay informed of the current version.

For the purposes of this Privacy Policy, the data controller responsible for your personal data is kk11, the operator of the online casino and sports betting platform at kk11.im. kk11 is a safe and reliable online gaming platform serving players across Bangladesh, including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.

If you have any questions, concerns, or requests relating to how kk11 handles your personal data, you can contact us by email at [email protected]. Our data support team will acknowledge your message within 24 hours and provide a substantive response within 14 business days, in accordance with the timelines described in Section 11 of this Policy.

kk11 collects personal data in the following categories. We collect only what is necessary for the specific purposes described in this Policy.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information unless specifically required for responsible gaming intervention purposes, in which case such data is handled with additional safeguards and your explicit consent is obtained.

kk11 collects personal data through the following channels and methods:

• Account registration: When you create a kk11 account, you provide your name, date of birth, email address, mobile number, and residential address directly through our registration form.
• KYC verification: When you submit identity documents (NID, passport, driving licence, or proof of address) as part of our Know Your Customer process, we collect and store the identity data contained in those documents.
• Deposits and withdrawals: When you initiate financial transactions on the platform — via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, or Mastercard — we receive transaction data from those payment providers sufficient to process your request and maintain financial records.
• Platform usage: As you use the kk11 website and games, our servers automatically log technical and usage data including your IP address, device details, pages accessed, and session activity.
• Cookies and tracking technologies: Our platform uses cookies, pixel tags, and similar technologies to collect data about how you interact with the website. See Section 8 for a full explanation of our cookie practices.
• Customer support interactions: When you contact our support team by email or live chat, we record the content of those interactions to resolve your query and improve service quality.
• Third-party identity verification: Where required for enhanced KYC checks, we may receive identity and fraud-risk data from third-party verification services that cross-reference your submitted information against public and private databases.

kk11 processes your personal data on the following legal bases, each of which applies to the specific processing activities described against it:

• Contractual necessity: The majority of our data processing is necessary to fulfil our contractual obligations to you as a registered player — including creating and maintaining your account, processing deposits and withdrawals, settling bets, crediting bonuses, and providing customer support.
• Legal obligation: Certain processing activities are required to comply with applicable legal obligations, including anti-money laundering (AML) requirements, Know Your Customer (KYC) obligations, fraud prevention duties, and record-keeping requirements imposed by applicable law.
• Legitimate interests: kk11 processes some data on the basis of its legitimate interests as a business operator — for example, improving platform security, conducting fraud risk analysis, optimising game performance, and analysing aggregated usage patterns to improve the player experience. We always balance these interests against your rights and interests before relying on this basis.
• Consent: Where processing is not covered by the above bases, we rely on your freely given, specific, informed, and unambiguous consent. The primary example is marketing communications — we will only send you promotional emails, SMS messages, or push notifications if you have opted in to receive them. You may withdraw this consent at any time.

kk11 uses the personal data we collect for the following specific purposes:

• To create, maintain, and manage your kk11 account, including authentication and access control.
• To verify your identity and age (21+) as required before permitting real-money gambling activity on the platform.
• To process deposit transactions, credit winnings and bonuses to your account, and process withdrawal requests to your designated payment method.
• To detect and prevent fraud, money laundering, bonus abuse, duplicate account creation, and other forms of prohibited conduct as described in our Terms & Conditions.
• To provide responsive, informed customer support by giving our support agents access to your account history and previous interaction records when you contact us.
• To send you essential account communications — including transaction confirmations, security alerts, responsible gaming notifications, and updates to this Policy or our Terms & Conditions.
• To send you promotional communications (including bonus offers tied to BPL season, IPL, Eid, and Pohela Boishakh promotions) where you have opted in to receive them.
• To monitor your gameplay patterns for the purposes of responsible gaming intervention, where our systems detect indicators consistent with problem gambling behaviour.
• To analyse aggregated, anonymised platform usage data to improve game selection, website performance, payment processing speed, and the overall player experience.
• To comply with all applicable legal and regulatory obligations, including record-keeping requirements, responses to lawful information requests from competent authorities, and AML reporting obligations.

kk11 does not sell, rent, or trade your personal data to third-party marketers, data brokers, or advertising networks. We share your data only with the following categories of trusted third parties, and only to the extent strictly necessary to deliver our services or comply with legal obligations:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive the transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and applicable financial regulation.
• Identity verification providers: Third-party KYC and age verification services receive the identity data you submit during verification in order to cross-check it against relevant databases and return a verification result to kk11.
• Game software providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session identifiers and gameplay data necessary to deliver game content and resolve technical disputes. These studios do not receive your full identity or financial data.
• IT infrastructure and security providers: Cloud hosting, content delivery, and cybersecurity service providers that underpin the kk11 platform may process technical data (including IP addresses and session logs) as part of their infrastructure services, under strict data processing agreements.
• Legal and regulatory authorities: kk11 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent public authorities where required to do so by applicable law, court order, or regulatory direction. We will notify you of such disclosures where legally permitted to do so.
• Professional advisers: kk11's legal counsel, auditors, and compliance consultants may access limited personal data where necessary to provide professional services to kk11, under binding confidentiality obligations.

All third-party data sharing arrangements are governed by data processing agreements that require recipients to handle your data in a manner consistent with applicable data protection law and the standards set out in this Policy.

kk11 uses cookies and similar tracking technologies on the platform to deliver core functionality, improve performance, and understand how players use the site. A cookie is a small text file placed on your device when you visit a website. The following categories of cookies are used on kk11.im:

• Strictly necessary cookies: These cookies are essential for the platform to function. They manage your login session, maintain your account authentication state, and preserve security tokens. Without these cookies, core features of the platform — including account access and payment processing — would not function correctly. These cookies cannot be disabled.
• Functional cookies: These cookies remember your platform preferences — such as your preferred language, display settings, and previously viewed game categories — to provide a more personalised and consistent experience across sessions. These cookies are enabled by default but can be disabled without affecting core platform functionality.
• Analytics cookies: kk11 uses anonymised analytics tools to understand aggregate patterns in how players navigate and use the platform. Analytics data helps us identify performance bottlenecks, improve page load speeds, and optimise game discovery features. No personally identifiable information is transmitted through analytics cookies.
• Security and fraud prevention cookies: These cookies support kk11's fraud detection systems by tracking device fingerprint signals and flagging anomalous session behaviour for human review. They are a component of our broader account security infrastructure.

You can manage cookie preferences through your browser settings at any time. Most modern browsers allow you to block, delete, or restrict cookies through their privacy or security settings. Please note that disabling strictly necessary cookies will impair your ability to log in and use core platform features. Disabling other cookie categories will not affect your ability to place bets or make transactions.

kk11 does not use third-party advertising cookies or behavioural retargeting pixels. We do not share cookie-derived data with advertising networks or use it to display targeted advertisements on external websites.

kk11 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, disclosure, or alteration. Our security infrastructure includes the following controls:

• Encryption in transit: All data transmitted between your device and the kk11 platform is encrypted using TLS 1.2 or higher. Our SSL certificate is maintained and renewed continuously, and all HTTP traffic is automatically redirected to HTTPS to prevent unencrypted data transmission.
• Encryption at rest: Personal data stored in kk11's databases — including identity records, financial transaction history, and KYC documents — is encrypted at rest using AES-256 encryption, the current industry gold standard for data storage security.
• Access controls: Access to personal data within kk11's internal systems is restricted on a strict need-to-know basis. Role-based access control (RBAC) is enforced, meaning each team member can only access the categories of data required for their specific job function. All privileged access is logged and reviewed.
• Multi-factor authentication: Administrative access to kk11's internal systems and data infrastructure requires multi-factor authentication (MFA) in addition to strong password requirements.
• Penetration testing and vulnerability assessments: kk11 conducts regular security assessments, including third-party penetration testing, to identify and remediate vulnerabilities in our platform infrastructure before they can be exploited.
• Incident response: kk11 maintains a documented data breach response procedure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify affected players promptly and take immediate steps to contain, investigate, and remediate the incident.

While kk11 takes every reasonable precaution to safeguard your personal data, no online platform can guarantee absolute security against all possible threats. You also play an important role in keeping your account secure — choose a strong, unique password for your kk11 account, never share it with anyone, and contact support immediately at [email protected] if you suspect any unauthorised access to your account.

kk11 retains personal data only for as long as is necessary to fulfil the purpose for which it was originally collected, or as required by applicable legal and regulatory obligations. The following retention periods apply to the main categories of personal data we hold:

• Account and identity data: Retained for the lifetime of your account and for a minimum of five (5) years following permanent account closure, to satisfy AML record-keeping requirements and to defend against any legal claims that may arise after account closure.
• KYC documents: Copies of identity documents submitted for verification are retained for a minimum of five (5) years from the date of submission, or longer where required by applicable AML or financial regulation.
• Financial transaction records: All deposit, withdrawal, and wagering transaction records are retained for a minimum of seven (7) years from the date of the transaction, consistent with standard financial record-keeping obligations.
• Customer support records: Support ticket content and correspondence are retained for three (3) years from the date of resolution, to allow review of dispute history and ensure consistency in support quality.
• Technical and usage logs: Server logs and session data are retained for up to ninety (90) days for security monitoring and fraud investigation purposes, after which they are deleted or anonymised.
• Marketing consent records: Records of your marketing opt-in or opt-out status are retained for the lifetime of your account and for three (3) years after account closure, to demonstrate compliance with consent obligations.
• Self-exclusion records: Where a player has requested self-exclusion, the record of that exclusion is retained indefinitely to prevent re-registration in breach of the exclusion period.

Upon expiry of the applicable retention period, personal data is securely and permanently deleted from our live systems and backups, or irreversibly anonymised such that it can no longer be linked to an identifiable individual. Anonymised aggregate data may be retained indefinitely for statistical and analytical purposes.

As a player whose personal data is processed by kk11, you hold the following rights in relation to your personal information. kk11 is committed to honouring these rights promptly and without unnecessary restriction.

To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request". Please include your registered username and a clear description of the right you wish to exercise. kk11 will acknowledge your request within 24 hours and provide a full response within 14 business days. In complex cases this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.

kk11 will not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply. We will inform you of any applicable fee before processing your request.

kk11 may, with your prior consent, send you promotional communications about bonuses, new game releases, seasonal promotions (including BPL season offers, Eid special bonuses, Pohela Boishakh promotions, and Independence Day rewards), and other platform news. These communications may be delivered by email, SMS, or push notification, depending on the contact preferences you set during registration or in your account settings.

You are never required to consent to marketing communications as a condition of registering or playing on kk11. Marketing consent is entirely optional and separate from the processing necessary to operate your account.

You may withdraw your marketing consent and unsubscribe from all promotional communications at any time by:

• Clicking the unsubscribe link included in any marketing email sent by kk11.
• Updating your communication preferences in the Notifications section of your kk11 account settings.
• Sending a written opt-out request to [email protected] with the subject line "Marketing Opt-Out".

Withdrawal of marketing consent takes effect within 48 hours of receipt. Please note that even after opting out of marketing communications, you will continue to receive essential transactional and account-related messages — such as deposit confirmations, withdrawal notifications, security alerts, and responsible gaming messages — as these are necessary to operate your account and cannot be disabled independently.

The kk11 platform is strictly intended for adults aged 21 years and above. kk11 does not knowingly collect, process, or retain any personal data relating to individuals under the age of 21. Our registration process includes date-of-birth verification, and all accounts are subject to KYC age verification before real-money gameplay is permitted.

If kk11 becomes aware that personal data has been collected from an individual under the age of 21 — whether through a registration attempt, a reported concern, or a review of existing account data — we will immediately suspend the relevant account, delete all associated personal data, void any transactions or balances, and take appropriate steps to prevent re-registration.

If you have reason to believe that a person under the age of 21 has registered on kk11, or that personal data relating to an underage individual is held on our platform, please contact us immediately at [email protected]. We treat all such reports as a priority and will investigate and respond within 24 hours.

kk11 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. The current version of the Policy will always be accessible at kk11.im/privacy-policy, and the "Last updated" date at the top of the page will be revised whenever material changes are made.

Where an amendment is material — meaning it significantly affects the way we collect, use, or share your personal data — kk11 will make reasonable efforts to notify registered players via the email address on file or via an in-platform notification at the time of next login, giving players at least 14 days to review the changes before they take effect.

Your continued use of the kk11 platform after the effective date of any amended Privacy Policy constitutes your acknowledgement of and agreement to the revised Policy. If you do not agree with the changes, you should cease using the platform and contact support to arrange account closure and data deletion where applicable.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way kk11 handles your personal data, please do not hesitate to get in touch. Our data support team is available to assist you with any of the following:

• General questions about this Privacy Policy or our data practices.
• Requests to exercise any of your data rights described in Section 11.
• Reports of suspected data breaches, unauthorised account access, or privacy concerns.
• Requests to withdraw marketing consent or update your communication preferences.
• Questions about our cookie practices or requests to discuss your cookie options.
• Concerns about underage registration or the collection of data relating to minors.

kk11 is committed to resolving all privacy-related queries fairly, transparently, and promptly. If you are not satisfied with our response to a privacy concern, you have the right to escalate the matter through independent dispute resolution channels. Details of available escalation routes will be provided at the time of our final response to your complaint.