kf77 Privacy Policy — Your Data, Our Responsibility

This Privacy Policy describes how kf77, operating at kf77.io ("kf77", "we", "us", "our"), collects, uses, stores, and shares personal data about individuals ("you", "your", "user", "player") who access or use the kf77 platform, including the website at kf77.io, any associated mobile interfaces, and all services offered through those channels.

This Privacy Policy applies to all personal data collected from users located anywhere in the world who access the kf77 platform, with particular relevance to users based in Bangladesh. All data practices described in this Privacy Policy are conducted in English, consistent with the operational language of the kf77 platform.

This Privacy Policy should be read alongside the kf77 Terms & Conditions, which are available at kf77.io/terms-conditions, and the kf77 Responsible Gaming Policy, available at kf77.io/responsible-gaming. Together, these documents form the complete set of agreements governing your relationship with kf77.

kf77, operating at kf77.io, acts as the data controller for all personal data collected through the kf77 platform. As data controller, kf77 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out in accordance with applicable data protection principles.

For all privacy-related enquiries, data subject requests, or concerns regarding the processing of your personal data, please contact kf77 using the details provided in Section 16 of this Privacy Policy. kf77 will acknowledge all privacy-related communications within 5 business days (Bangladesh Standard Time, UTC+6).

kf77 collects personal data in several categories depending on how you interact with the platform. The table below summarises the categories of personal data we may collect and specific examples within each category:

kf77 does not knowingly collect sensitive special-category personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where verification of age requires review of identity documents that may incidentally contain such information. In such cases, the data is used solely for the purpose of age and identity verification and is not stored beyond the retention period defined in Section 10.

kf77 collects personal data through the following channels and methods:

• Direct Collection — when you register an account, complete the identity verification process, make a deposit or withdrawal, contact support, or respond to a survey or promotion.
• Automated Technical Collection — through cookies, web server logs, and analytics tools as you browse and interact with the kf77 platform. See Section 7 for full details of cookies and tracking technologies used.
• Payment Processors — when you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Visa, Mastercard, or Dutch-Bangla Bank, our payment partners may share transaction confirmation data with kf77 to enable account crediting and withdrawal processing.
• Identity Verification Providers — where kf77 uses third-party identity verification services to confirm your age and identity, those providers may share the outcome of the verification check and relevant supporting data with kf77.
• Fraud and Compliance Monitoring — kf77's fraud detection systems automatically analyse gameplay patterns, login behaviour, and transaction activity to identify potential abuse, and this analysis may generate derived data points that are associated with your account record.

kf77 processes your personal data on the following legal bases:

• Contract Performance — the majority of data processing by kf77 is necessary to perform the contract between you and kf77, including providing access to casino games and sports betting, processing deposits and withdrawals, and maintaining your account.
• Legal Obligation — kf77 is required to process certain personal data to comply with anti-money-laundering regulations, age verification requirements, and other applicable legal obligations, including retention of transaction records.
• Legitimate Interests — kf77 processes certain data on the basis of its legitimate interests, including fraud prevention, platform security, responsible gaming monitoring, and internal analytics to improve platform performance. These interests do not override your fundamental rights and freedoms.
• Consent — where kf77 processes your data for optional purposes such as sending you marketing communications or personalising promotional offers, we do so on the basis of your freely given, informed consent. You may withdraw this consent at any time.

kf77 uses the personal data we collect for the following specific purposes:

• To register and manage your kf77 account, including processing login requests, maintaining your account balance, and recording your transaction history.
• To verify your identity and confirm that you meet the 21+ age requirement applicable to all kf77 users.
• To process deposits and withdrawals via your chosen payment method, including bKash, Nagad, Rocket, Upay, Visa, Mastercard, and Dutch-Bangla Bank.
• To provide customer support and respond to your enquiries, complaints, and data subject requests.
• To administer bonuses, promotions, and the kf77 VIP programme, including verifying eligibility and tracking wagering requirement progress.
• To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and other prohibited activities as defined in the kf77 Terms & Conditions.
• To monitor gameplay patterns and account behaviour as part of kf77's responsible gaming programme, including identifying users who may be displaying signs of problem gambling.
• To send you transactional communications, including deposit confirmation, withdrawal status updates, and important account notifications — these communications are not optional and are necessary for the operation of your account.
• To send you marketing communications about kf77 promotions, new games, and seasonal offers, where you have provided consent to receive such communications.
• To analyse platform usage data in aggregate form to improve the user experience, optimise game performance, and inform product development decisions.
• To comply with applicable legal and regulatory obligations, including retention of financial transaction records.

kf77 uses cookies and similar tracking technologies to operate the platform efficiently, remember your preferences, and analyse how the platform is used. The following categories of cookies may be set when you visit kf77.io:

• Strictly Necessary Cookies — required for the kf77 platform to function. These include session authentication cookies that keep you logged in across pages, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional Cookies — remember your preferences, such as your selected language, your last-visited game category, and certain display settings. Disabling these cookies may result in a reduced but functional experience.
• Analytics Cookies — collect anonymised data about how visitors interact with the kf77 platform, including pages visited, session duration, and navigation paths. This data is used in aggregate form to improve the platform. kf77 does not use third-party analytics services that transmit identifiable user data to external servers.
• Performance Cookies — monitor platform performance metrics including page load times, error rates, and server response times to ensure a reliable gaming experience for all users.

You can manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. However, blocking strictly necessary cookies will prevent you from logging into your kf77 account and using core platform features.

kf77 does not sell, rent, or trade your personal data. We share your personal data with third parties only in the following limited circumstances:

• Payment Service Providers — bKash, Nagad, Rocket, Upay, Visa, Mastercard, and Dutch-Bangla Bank receive the minimum personal and financial data necessary to process your deposit and withdrawal transactions. These providers are bound by their own privacy policies and applicable financial regulations.
• Identity Verification Providers — where kf77 uses third-party KYC (Know Your Customer) verification services, those providers receive the identity documents and data points required to complete the verification check on kf77's behalf.
• Game Content Providers — providers such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe operate the games available on the kf77 platform. These providers may receive technical session data necessary for game delivery, but do not receive your full personal profile.
• Fraud Prevention Services — kf77 may share account behaviour data with specialist fraud prevention partners to identify and block fraudulent activity. Data shared for this purpose is processed under strict contractual data protection obligations.
• Legal and Regulatory Authorities — kf77 will disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by applicable law, court order, or regulatory directive.
• Business Transfers — in the event that kf77 or its operating business is acquired, merged, or restructured, personal data held by kf77 may be transferred to the acquiring or successor entity, subject to equivalent data protection commitments.

kf77 operates primarily for the Bangladesh market and processes the majority of its data in accordance with Bangladesh Standard Time (UTC+6) operational hours. Some of kf77's third-party service providers — particularly game content providers such as Pragmatic Play, Evolution Gaming, and Microgaming — operate infrastructure located outside Bangladesh. Where personal data is transferred to or processed by systems located in other jurisdictions, kf77 takes appropriate steps to ensure that the transfer is subject to adequate safeguards, including contractual data protection clauses that require the recipient to maintain standards equivalent to those applied by kf77.

kf77 does not transfer your financial data (bKash, Nagad, Rocket account details) to any jurisdiction outside of the relevant payment provider's own operating environment, and all financial data transfers are conducted over encrypted connections.

kf77 retains personal data for as long as necessary to fulfil the purpose for which it was collected, plus any additional period required by applicable legal or regulatory obligations. The table below provides indicative retention periods for the main categories of personal data held by kf77:

Upon expiry of the applicable retention period, personal data is securely and permanently deleted from kf77's systems, or irreversibly anonymised such that it can no longer be associated with any identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and business planning purposes.

kf77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your browser or device and the kf77 platform.
• Encryption of sensitive data at rest within kf77's data stores, including financial account references and identity document data.
• Role-based access controls limiting staff access to personal data strictly to those whose job function requires it.
• Multi-factor authentication for all kf77 staff with access to production data systems.
• Regular internal and external security audits and penetration testing of the kf77 platform infrastructure.
• Intrusion detection and monitoring systems operating continuously to identify and respond to security incidents in real time.
• A documented incident response procedure that includes notifying affected users in the event of a data breach that poses a material risk to their rights and freedoms.

While kf77 takes every reasonable precaution to safeguard your personal data, no internet-based system can guarantee absolute security against all possible threats. You are responsible for maintaining the security of your own login credentials and for notifying kf77 immediately at [email protected] if you suspect any unauthorised access to your account.

The kf77 platform is strictly for adults aged 21 and above. kf77 does not knowingly collect personal data from individuals under the age of 21. The registration process requires users to confirm their date of birth, and kf77 conducts age verification checks on all accounts.

If kf77 discovers or is notified that an account has been registered by an individual under the age of 21, that account will be immediately suspended, all associated personal data will be deleted, and any deposits made to that account will be returned via the original payment method where technically possible. If you believe a minor has registered an account on the kf77 platform, please contact us immediately at [email protected].

As described in the "Your Data Rights" section above, you have a range of rights with respect to the personal data kf77 holds about you. To exercise any of these rights, please submit a written request to kf77 support at [email protected] using your registered email address. Please include "Data Subject Request" in the subject line of your email, and specify which right(s) you wish to exercise and the relevant data categories or time periods.

kf77 will acknowledge your request within 5 business days ( Bangladesh Standard Time, UTC+6) and will provide a substantive response within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days, in which case kf77 will notify you of the extension and the reason for it within the initial 30-day period.

kf77 will not charge a fee for processing a data subject request in normal circumstances. However, if a request is manifestly unfounded or excessive — particularly if it is repetitive in nature — kf77 reserves the right to charge a reasonable administrative fee or refuse to act on the request, providing written reasons for this decision.

kf77 may need to verify your identity before processing a data subject request to ensure that personal data is not disclosed to an unauthorised party. You may be asked to provide a copy of your registered email address confirmation, account username, and a valid identity document before your request is processed.

kf77 may send you promotional emails, SMS messages, or in-platform notifications about bonuses, new game releases, seasonal offers (such as Eid promotions, Pohela Boishakh specials, IPL and BPL betting offers, and T20 World Cup campaigns), and VIP programme updates, provided you have given your consent to receive such communications at the time of registration or subsequently through your account preferences.

You may withdraw your consent to receive marketing communications at any time by:

• Clicking the unsubscribe link included in any marketing email sent by kf77.
• Updating your communication preferences directly within your kf77 account settings.
• Sending a written opt-out request to [email protected] with the subject line "Marketing Opt-Out" from your registered email address.

Please allow up to 5 business days (Bangladesh Standard Time) for your opt-out to take effect across all communication channels. Withdrawing consent to marketing communications will not affect your ability to use the kf77 platform or receive transactional account communications, which are not optional and are required for the operation of your account.

kf77 may update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the services we provide. When we make changes to this Privacy Policy, we will update the "Last updated" date shown at the top of this document.

Where changes to this Privacy Policy are material — meaning they significantly affect the way we process your personal data or the rights available to you — kf77 will provide advance notice of the changes by posting a prominent notice on the kf77.io homepage and, where we hold your email address, by sending you a direct notification at least 14 days before the revised Privacy Policy takes effect.

Your continued use of the kf77 platform after the effective date of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree to the revised Privacy Policy, you should discontinue use of the kf77 platform and may request closure of your account by contacting [email protected].

We recommend that you review this Privacy Policy periodically to stay informed about how kf77 protects your personal data. All previous versions of the kf77 Privacy Policy are superseded upon publication of each new version.

If you have any questions about this Privacy Policy, wish to exercise a data subject right, want to raise a concern about how kf77 processes your personal data, or need to report a suspected data security incident, please contact the kf77 support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: "Data Subject Request — [Your Username]"
• Subject Line for Privacy Concerns: "Privacy Concern — [Brief Description]"
• Response Time: Acknowledgement within 5 business days (Bangladesh Standard Time, UTC+6)
• Operating Hours: Monday to Sunday, 09:00 – 23:00 BST (UTC+6)

kf77 is committed to resolving all privacy-related concerns promptly and transparently. We take every complaint seriously and will provide a written response to every valid privacy enquiry received via the contact details listed above.