ko99 Privacy Policy

This Privacy Policy ("Policy") describes how ko99 ("the Platform", "we", "us", "our") collects, uses, stores, shares, and protects personal data relating to registered players and visitors ("you", "your") who access the ko99 website and associated services at ko99.im.

ko99 is committed to handling your personal data with transparency, integrity, and security. This Policy is written in plain English so that every player — regardless of technical background — can understand exactly what data we hold, why we hold it, and what choices you have.

This Policy applies to all personal data collected through the ko99 website, mobile interface, live chat system, email correspondence, and any other channel through which you interact with ko99. It should be read alongside our Terms & Conditions, which govern your use of the platform as a whole.

For the purposes of this Privacy Policy, ko99 acts as the data controller in respect of all personal data collected from players and site visitors. As data controller, ko99 determines the purposes for which personal data is processed and the means by which that processing is carried out.

All data protection queries, subject access requests, consent withdrawal notices, and formal complaints relating to the handling of personal data should be directed to the ko99 data protection contact at [email protected] with the subject line "Data Protection Request". ko99 will acknowledge all data protection correspondence within 5 business days of receipt.

ko99 collects personal data in several categories depending on the nature of your interaction with the platform. The following table provides a comprehensive overview of the categories of personal data we collect and examples of specific data points within each category.

ko99 does not collect or process sensitive special-category personal data such as health records, biometric identifiers, racial or ethnic origin data, or political opinion data. Where a player voluntarily discloses information of a sensitive nature (for example, disclosing a health condition in the context of a responsible gaming request), that information will be treated with the highest level of confidentiality and used only for the purpose for which it was shared.

ko99 collects personal data through the following channels and mechanisms:

Direct Collection

The majority of personal data held by ko99 is provided directly by you during your interaction with the platform. This includes data submitted during account registration, the KYC verification process, deposit and withdrawal requests, support contact, and voluntary communications with the ko99 team.

Automated Collection

When you visit the ko99 website or use the platform, certain technical and behavioural data is collected automatically by our servers and analytics systems. This includes your IP address, device identifiers, browser information, pages visited, features used, and session duration. This data is collected to maintain platform security, detect fraud, and improve the user experience.

Third-Party Sources

In certain circumstances, ko99 may receive personal data about you from third-party sources, including:

• Identity verification and KYC service providers who perform document checks and fraud screening on our behalf
• Payment service providers (including bKash, Nagad, Rocket, and Upay) who confirm the status and ownership of mobile financial service accounts used for deposits and withdrawals
• Fraud prevention and anti-money laundering (AML) databases used to screen account registrations and transactions against known risk indicators
• Game software providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, JILI, PG Soft) who supply game session and outcome data required for dispute resolution and RTP auditing

Cookies and Tracking Technologies

ko99 uses cookies and similar tracking technologies to collect technical data about your browsing behaviour on our platform. Full details of the types of cookies used and how to manage your cookie preferences are provided in Section 9 of this Policy.

ko99 processes personal data for specific, defined purposes only. The table below sets out each processing purpose, the categories of data used, and the legal basis on which that processing is carried out.

ko99 does not sell, rent, or commercially trade personal data. Data is shared with third parties only where necessary to deliver platform services, comply with legal obligations, or protect the legitimate interests of ko99 and its players. The following categories of third parties may receive personal data from ko99:

Payment Service Providers

Personal data — including your name and payment account identifiers — is shared with bKash, Nagad, Rocket, Upay, and bank partners (including Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank) solely for the purpose of processing deposits and withdrawals in BDT. These providers process data under their own privacy policies and are not permitted to use ko99 player data for any other purpose.

KYC and Identity Verification Providers

Identity and verification document data is shared with third-party KYC and AML screening providers who perform document authentication, sanctions screening, and risk assessment on behalf of ko99. These providers act as data processors under contract with ko99 and are required to handle data in accordance with this Policy.

Game Software Providers

Game session data, account identifiers, and wager information may be shared with game software providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, JILI, and PG Soft for the purposes of game delivery, RTP auditing, and technical support. These providers do not receive your full personal profile and may only use shared data for the specific service they are contracted to provide.

Law Enforcement and Regulatory Bodies

ko99 may disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or lawful request. ko99 will notify affected players of any such disclosure where it is legally permissible to do so.

Business Transfers

In the event that ko99 undergoes a business restructuring, merger, acquisition, or sale of assets, personal data may be transferred to the successor entity as part of that transaction. Players will be notified of any such transfer and of any material change to this Privacy Policy that results from it, in advance of the transfer taking effect wherever practicable.

ko99 retains personal data only for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable legal and regulatory obligations. The following retention periods apply to each category of personal data:

• Account and Identity Data: Retained for the duration of your account and for a minimum of 5 years following account closure, in compliance with standard anti-money laundering record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction, in compliance with financial record-keeping obligations.
• KYC Verification Documents: Retained for the duration of the account and for a minimum of 5 years following account closure. Copies of identity documents are stored in encrypted form.
• Gaming Activity Logs: Retained for 2 years from the date of each session for operational, audit, and responsible gaming monitoring purposes.
• Communications and Support Records: Retained for 2 years from the date of each interaction to support dispute resolution and service quality monitoring.
• Technical and Browsing Data: Retained for 13 months from collection for security monitoring and analytics purposes, after which it is aggregated or deleted.
• Marketing Consent Records: Retained until consent is withdrawn, and for a further 12 months following withdrawal as evidence of the consent history.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

ko99 implements a comprehensive suite of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security measures in place include:

• SSL/TLS encryption applied to all pages of the ko99 platform, ensuring that data transmitted between your browser and our servers is encrypted in transit
• Passwords stored using industry-standard one-way cryptographic hashing algorithms — plaintext passwords are never stored or accessible
• Access to personal data within ko99's systems is restricted on a strict need-to-know basis, with role-based access controls and comprehensive audit logging of all data access events
• Regular internal security reviews and vulnerability assessments of platform infrastructure
• Anomaly detection and fraud monitoring systems that flag unusual account activity — including atypical login locations, unusual transaction patterns, and multiple account indicators — for review by the ko99 security team
• Secure, access-controlled data storage environments with encryption at rest for sensitive data categories

While ko99 takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security. You play an important role in keeping your account secure by using a strong, unique password, enabling two-factor authentication, and never sharing your login credentials with any third party. If you suspect your account has been compromised, contact ko99 support immediately at [email protected].

ko99 uses cookies and similar tracking technologies (including local storage and session storage) to operate the platform, maintain session state, prevent fraud, and analyse platform usage. The following categories of cookies are used:

Strictly Necessary Cookies

These cookies are essential for the ko99 platform to function. They maintain your login session, preserve your account preferences, protect against cross-site request forgery, and enable core security features. Strictly necessary cookies cannot be disabled without impairing platform functionality.

Performance and Analytics Cookies

These cookies collect anonymised information about how visitors use the ko99 platform — including which pages are visited most frequently, how long sessions last, and where errors occur. This data is used to improve platform performance, identify usability issues, and prioritise development work. Analytics data is aggregated and does not identify individual users.

Functional Cookies

Functional cookies enable the platform to remember your preferences and provide a more personalised experience. Examples include remembering your preferred language, your most recently played game categories, and your account display settings. Disabling functional cookies may affect the personalisation features of the platform.

Managing Your Cookie Preferences

You can manage and control non-essential cookies through your browser settings. Most modern browsers allow you to block, delete, or receive alerts about cookies. Note that blocking strictly necessary cookies will prevent you from logging into your ko99 account. For detailed guidance on managing cookies in your specific browser, refer to your browser's help documentation.

As a ko99 player, you have a number of rights in relation to the personal data we hold about you. These rights are described below, along with guidance on how to exercise each one.

To exercise any of the rights described above, please contact ko99 at support@ko99. im with the subject line "Data Rights Request". Please include your registered username and a clear description of the right you wish to exercise. Ko99 will verify your identity before processing any data rights request and will respond within 30 days of receiving a verified request. In complex cases, this period may be extended by a further 30 days, in which case you will be notified of the extension and the reason for it.

ko99 may send promotional communications to players who have opted in to receive them. These communications may include information about deposit bonuses, free spin offers, tournament announcements, seasonal promotions tied to events such as the BPL, IPL, T20 World Cup, Eid, Pohela Boishakh, and Victory Day, as well as new game releases from providers including Pragmatic Play, Evolution Gaming, and Spribe.

ko99 will only send marketing communications where you have given explicit consent to receive them. Consent is collected at the point of registration and can be updated at any time through your account notification preferences dashboard.

Withdrawing Marketing Consent

You may withdraw consent to receive marketing communications at any time by:

• Updating your notification preferences in your ko99 account dashboard
• Clicking the unsubscribe link included in any marketing email sent by ko99
• Contacting the ko99 support team at [email protected] with the subject line "Unsubscribe Request"

Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal. Following a valid opt-out request, ko99 will cease sending marketing communications within 5 business days. Note that service-related communications — such as account security alerts, deposit confirmations, withdrawal notifications, and responsible gaming reminders — are not marketing communications and will continue to be sent regardless of your marketing preferences.

The ko99 platform is strictly intended for adults aged 21 and above. ko99 does not knowingly collect personal data from individuals under the age of 21. Registration on the ko99 platform requires confirmation that you are aged 21 or over, and the KYC verification process is designed to detect and prevent access by underage individuals.

If ko99 becomes aware that personal data has been collected from an individual who is under 21 years of age, that data will be deleted promptly and the associated account will be closed. If you are a parent or guardian and believe that a minor in your care has registered an account on ko99, please contact us immediately at [email protected] so that the matter can be investigated and resolved without delay.

ko99 operates digital infrastructure that may involve the storage or processing of personal data on servers located outside Bangladesh. Where personal data is transferred to a country that does not provide an equivalent level of data protection, ko99 ensures that appropriate safeguards are in place to protect your data. These safeguards may include standard contractual clauses, binding corporate rules, or equivalent contractual data protection obligations imposed on the receiving party.

Personal data processed by third-party game software providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may be stored or processed on servers in the countries where those providers operate. Ko99 requires all such providers to maintain data protection standards consistent with the principles set out in this Policy and to process player data only for the specific purposes for which it was shared.

By using the ko99 platform and accepting this Privacy Policy, you acknowledge and consent to the transfer of your personal data to countries outside Bangladesh where this is necessary to deliver platform services, subject to the safeguards described above.

ko99 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, industry best practice, platform functionality, or our data processing activities. Where a material change to this Policy is made, ko99 will notify registered players by email to the address registered on their account, or by displaying a prominent notice on the ko99 platform, no less than 14 days before the amended Policy takes effect.

The date of the most recent revision is displayed at the top of this page. We encourage all players to review this Policy periodically to stay informed about how ko99 handles their personal data. Continued use of the ko99 platform following the effective date of an amended Policy constitutes acceptance of the revised terms.

Where an amendment requires a new form of consent — for example, if we introduce a new processing purpose for which consent is the applicable legal basis — ko99 will seek fresh, explicit consent from existing players before commencing that processing activity.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ko99 handles your personal data, please contact us using the details below. Ko99 is committed to resolving all privacy-related enquiries promptly and transparently.

• General Privacy Enquiries: Email [email protected] with the subject line "Privacy Enquiry". Response within 24 hours during standard support hours.
• Data Rights Requests: Email [email protected] with the subject line "Data Rights Request". Include your registered username and a description of the right you wish to exercise.
• Data Breach Reports: If you believe your account has been compromised or that a data breach has occurred, email [email protected] immediately with the subject line "Security Concern" for priority handling.
• Marketing Opt-Out: Email [email protected] with the subject line "Unsubscribe Request" or update your preferences directly in your account dashboard.

Ko99 support operates Monday to Sunday, 08:00–24:00 Bangladesh Standard Time (BST, UTC+6). Live chat support is available 24 hours a day, 7 days a week for urgent privacy and security queries.