0kbd Privacy Policy — How We Handle Your Personal Data

1.1 This Privacy Policy ("Policy") describes how 0kbd ("the Platform", "we", "us", "our") collects, processes, stores, and protects personal data relating to individuals ("you", "the Player", "User") who access or use the services available at 0kbd.io.

1.2 0kbd is committed to handling your personal data with integrity, transparency, and care. We take our data protection obligations seriously and have implemented technical and organisational measures designed to keep your information safe at every stage of processing.

1.3 This Policy applies to all personal data processed by 0kbd in connection with the provision of its online betting, live casino, slots, and related gaming services. It covers data collected via the 0kbd.io website, mobile-optimised browser sessions, and any associated customer support channels.

1.4 By registering an account on the 0kbd platform or by continuing to use the platform after this Policy has been published or updated, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree, you should discontinue use of the platform and may request account closure by contacting [email protected].

1.5 This Policy should be read alongside the 0kbd Terms & Conditions (available at /terms-conditions) and the Responsible Gaming Policy (available at /responsible-gaming), both of which are incorporated by reference.

2.1 The categories of personal data we collect about you depend on how you interact with the 0kbd platform. The following table summarises the main data categories we may hold:

2.2 We do not collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data for identification purposes) except where strictly required for age verification or identity confirmation as part of the KYC process, and only to the minimum extent necessary.

2.3 We do not store full payment card numbers, CVV codes, or mobile banking PINs. All payment credentials are tokenised or masked at the point of collection. Full payment processing is handled by our payment service partners using their own PCI-DSS-compliant infrastructure.

3.1 Directly from you: The majority of the personal data we hold about you is information you provide voluntarily at registration, during the KYC verification process, when making a deposit or requesting a withdrawal, when contacting our support team, or when updating your account profile.

3.2 Automatically through platform use: When you visit and interact with 0kbd.io, we automatically collect Technical Data and Usage Data through server logs, session tracking, and cookies. This data is collected regardless of whether you are logged in, and is used primarily for platform security, fraud detection, and performance optimisation.

3.3 From third-party identity verification providers: Where we engage a third-party KYC or identity verification service to assist with age and identity checks, that provider may return verification results (pass/fail, identity match score) to 0kbd. We use this data solely to fulfil our age verification obligations.

3.4 From payment service providers: Our payment partners (including those facilitating bKash, Nagad, Rocket, and Upay transactions) may return transaction confirmation data, reference numbers, and account status indicators to 0kbd to enable deposit crediting and withdrawal processing.

3.5 From game providers: Third-party game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) provide game session data and outcome records to 0kbd so that bet histories and game results can be accurately reflected in your account. These providers do not receive your full personal profile — they receive only the session identifiers necessary to link game outcomes to your account.

4.1 0kbd processes your personal data only for specific, legitimate purposes. The table below outlines the primary processing purposes and the data categories involved in each:

4.2 We do not process your personal data for purposes beyond those described in this Policy without first obtaining your explicit consent or updating this Policy with reasonable prior notice.

5.1 0kbd processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the account agreement — including registration, payment processing, and delivery of gaming services.
• Legitimate interests: Processing required to operate a secure, reliable platform — including fraud prevention, security monitoring, and technical performance optimisation — where those interests are not overridden by your fundamental rights.
• Consent: Processing for optional purposes such as personalised marketing communications, where you have provided explicit, informed, and freely given consent. You may withdraw this consent at any time.
• Legal obligation: Processing required to comply with applicable legal obligations, including age verification requirements, anti-money laundering obligations, and any lawful requests from competent authorities.

5.2 Where processing is based on consent, we will record the date and scope of that consent. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

6.1 0kbd does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your data only in the limited circumstances described below, and only to the extent necessary for the specific purpose:

• Payment service providers: bKash, Nagad, Rocket, Upay, and card processing partners receive the minimum data necessary to execute your deposit or withdrawal transaction.
• Identity verification providers: Where third-party KYC tools are used to verify your age or identity, the relevant identity document data is shared solely for that purpose and is subject to the provider's own data protection obligations.
• Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed studios receive anonymised or pseudonymised session data necessary to operate their games within the 0kbd platform.
• IT infrastructure and cloud providers: 0kbd uses third-party hosting, cloud storage, and database services to operate the platform. These providers act as data processors under contractual arrangements that require them to handle data only on 0kbd's instructions.
• Legal and regulatory authorities: We may disclose your personal data to law enforcement agencies, courts, or regulatory bodies where required by applicable law or a lawful order, or where we believe disclosure is necessary to prevent fraud, criminal activity, or harm.

6.2 All third-party service providers engaged by 0kbd are required to maintain appropriate data security standards and to use your personal data only for the purposes specified by 0kbd. We conduct due diligence on our service partners before engaging them and include data protection obligations in our contracts with them.

6.3 0kbd does not transfer personal data to third parties located outside the applicable data protection jurisdiction unless appropriate safeguards are in place to ensure an equivalent level of data protection.

7.1 The 0kbd platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised user experience. Cookies are small text files placed on your device when you visit the site. They are not harmful and do not execute programs or transmit viruses.

7.2 We use the following types of cookies:

• Strictly necessary cookies: Required for the platform to function correctly — including session management, login state maintenance, and security tokens. These cannot be disabled without breaking core platform functionality.
• Performance cookies: Used to collect anonymised data about how players use the platform — including pages visited, time spent, and error events — so we can identify and fix performance issues.
• Functional cookies: Used to remember your preferences, such as your preferred language, currency display (BDT / ৳), and responsible gaming settings.
• Analytics cookies: Used to understand aggregate usage patterns and to improve the platform's content and navigation. Data is aggregated and anonymised where possible.

7.3 You can control non-essential cookies through your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will impair your ability to use the 0kbd platform, including the ability to log in and maintain a session.

7.4 0kbd does not use third-party advertising or remarketing cookies. We do not allow advertising networks to place tracking cookies on the 0kbd platform.

8.1 0kbd retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal obligations, or to resolve disputes and enforce agreements. The following retention periods apply as general guidelines:

• Account and identity data: Retained for the duration of the account relationship and for a minimum of five (5) years following permanent account closure, to satisfy legal and anti-money laundering record-keeping obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction in accordance with financial record-keeping requirements.
• KYC verification documents: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure.
• Gaming and betting history: Retained for the duration of the account and for up to three (3) years following account closure.
• Support communications: Retained for up to three (3) years from the date of the last communication, or longer if related to an ongoing dispute.
• Technical and usage data: Typically retained for up to twelve (12) months in identifiable form, after which it may be anonymised and retained for analytical purposes.

8.2 When personal data is no longer required for any of the purposes described in this Policy and no legal obligation requires its further retention, 0kbd will securely delete or anonymise that data.

9.1 0kbd takes data security seriously. We have implemented a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction.

9.2 Key security measures in place include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the 0kbd platform.
• Password hashing using industry-standard one-way cryptographic algorithms. 0kbd staff cannot read your password in plain text.
• Access controls: Access to personal data within 0kbd is restricted to authorised personnel on a strict need-to-know basis. All internal data access is logged and auditable.
• Payment tokenisation: Full payment credentials (card numbers, mobile banking PINs) are never stored by 0kbd. Payment references are tokenised at the point of capture.
• Intrusion detection and monitoring: The platform is monitored continuously for suspicious activity, unauthorised login attempts, and anomalous transaction patterns.
• Regular security reviews: 0kbd conducts periodic internal security assessments to identify and address potential vulnerabilities in the platform.

9.3 Despite our best efforts, no internet-based system can guarantee absolute security. In the event of a personal data breach that poses a risk to your rights and freedoms, 0kbd will notify affected players and take immediate remedial action.

9.4 You also play a role in keeping your account secure. Choose a strong, unique password for your 0kbd account, do not share your login credentials with anyone, and contact support immediately at [email protected] if you suspect that your account has been compromised.

10.1 As a player on the 0kbd platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with your registered email address and a clear description of your request:

• Right of access: You may request a copy of the personal data we hold about you, along with information about how it is being processed.
• Right to rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it.
• Right to erasure ("right to be forgotten"): You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to our legal obligations to retain certain data as described in Section 8.
• Right to restriction of processing: You may request that we restrict processing of your personal data in certain circumstances, such as while a dispute about its accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing carried out prior to the withdrawal.
• Right to object to marketing: You may opt out of direct marketing communications at any time by using the unsubscribe link in any marketing email or by contacting support.

10.2 0kbd will respond to all valid data rights requests within thirty (30) days. In complex cases, this period may be extended by a further sixty (60) days, in which case we will notify you of the extension and the reason for it.

10.3 We may need to verify your identity before processing a data rights request to ensure that personal data is not disclosed to an unauthorised party. Verification may require you to provide confirmation of your registered email address or additional identifying information.

11.1 The 0kbd platform is strictly intended for use by adults aged 21 years and older. We do not knowingly collect personal data from any person under the age of 21.

11.2 Where 0kbd discovers, or has reasonable grounds to believe, that a user under the age of 21 has registered an account or provided personal data to the platform, we will immediately suspend the account, delete the associated personal data, and reverse any transactions associated with that account where technically possible.

11.3 If you are a parent or guardian and believe that a person under 21 in your care has registered an account on 0kbd, please contact us immediately at [email protected]. We will investigate and take prompt action.

12.1 With your consent, 0kbd may send you marketing communications relating to new games, promotions, bonuses, seasonal events (such as Eid special offers, Pohela Boishakh promotions, or BPL cricket season bonuses), and platform updates. Marketing communications are sent by email only.

12.2 You may opt in to marketing communications during registration or at any time through your account settings. You may opt out at any time by clicking the "unsubscribe" link in any marketing email or by contacting support at [email protected] with the subject line "Marketing Opt-Out".

12.3 Opting out of marketing communications will not affect transactional communications — we will still send you account-related notifications such as deposit confirmations, withdrawal updates, and security alerts. These transactional messages are necessary for the operation of your account and cannot be opted out of while your account is active.

12.4 0kbd does not engage in SMS marketing, WhatsApp marketing, or push notification marketing without explicit prior consent. We do not share your mobile number or email address with third-party marketing companies.

13.1 The 0kbd platform does not contain links to external third-party websites for commercial or promotional purposes. Any links to third-party sites that may appear within game provider content are operated independently by those providers and are outside 0kbd's control.

13.2 0kbd is not responsible for the privacy practices or content of any third-party website or service. If you follow a link to a third-party site, we encourage you to review that site's privacy policy before providing any personal data.

14.1 0kbd reserves the right to update or amend this Privacy Policy at any time. Revised versions will be published on this page with an updated effective date. Where changes are material — such as introducing a new processing purpose or a new category of data sharing — we will notify registered players by email prior to the changes taking effect.

14.2 Your continued use of the 0kbd platform following publication of an amended Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you should cease using the platform and request account closure in accordance with the Terms & Conditions.

14.3 The current version of this Policy is always available at 0kbd.io/privacy-policy. Players are encouraged to review this page periodically to stay informed of how their data is being handled.

15.1 If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 0kbd handles your personal data, please contact the 0kbd Data & Support team using the details below:

15.2 Please include your registered email address, a clear description of your enquiry or request, and any relevant account or transaction references. This ensures that your request is routed to the right team and handled as efficiently as possible.