ko9 Privacy Policy

This Privacy Policy ("Policy") describes how ko9 ("the Platform", "we", "us", "our") collects, uses, stores, and discloses personal data relating to players, visitors, and other individuals ("you", "your") who access or use the ko9 website at https://ko9.games or any associated mobile web application.

ko9 is committed to protecting your privacy and handling your personal data with the care and transparency it deserves. We collect only the data we need to operate the Platform, process payments, verify your identity, prevent fraud, and comply with applicable legal obligations. We do not sell your personal data to third parties for their own marketing purposes under any circumstances.

This Policy should be read together with our Terms & Conditions and Responsible Gaming policy. By registering an account, accessing the Platform, or placing a bet on ko9, you acknowledge that you have read and understood this Policy in full.

ko9 reserves the right to update this Policy at any time. Material changes will be communicated via a notice on the Platform. Your continued use of ko9 after any such notice constitutes acceptance of the revised Policy. The "Last updated" date at the top of this page always reflects the most recent revision.

ko9 does not sell, rent, or trade your personal data to any third party. We share data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and card network processors (Visa, Mastercard) receive transaction data strictly to process your deposits and withdrawals.
• Identity Verification Providers: Our KYC partner receives copies of identity documents solely to complete age and identity verification. They are contractually prohibited from using this data for any other purpose.
• Game Studios: Certified third-party game providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive a session token to facilitate gameplay. They do not receive your full identity or financial data.
• Fraud and Security Services: Anonymised device fingerprints and behavioural signals may be shared with fraud detection partners to protect all players on the Platform.
• Legal and Regulatory Authorities: We will disclose personal data to law enforcement, regulators, or courts when required to do so by applicable law or a valid legal order.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of ko9's business, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third parties with whom we share personal data are required to implement appropriate technical and organisational security measures and are prohibited from processing your data for any purpose beyond those specified in their agreement with ko9.

ko9 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Active account data (identity, contact, financial): Retained for the duration of your account plus five (5) years following account closure.
• KYC documents: Retained in encrypted form for five (5) years following account closure.
• Transaction records: Retained for seven (7) years for audit and legal compliance purposes.
• Support communications: Retained for three (3) years following the close of the relevant support case.
• Marketing consent records: Retained for three (3) years from the date consent was last confirmed, or until withdrawn, whichever is earlier.
• Technical and usage logs: Retained in anonymised, aggregated form for up to two (2) years for analytics purposes.

When the applicable retention period expires, your data is securely deleted or anonymised so that it can no longer be linked to you as an individual.

To exercise any of the above rights, contact our support team at [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within five (5) business days and aim to fulfil it within thirty (30) days. In complex cases we may extend this period by a further thirty (30) days, in which case we will notify you and explain the reason for the delay.

Please note that some rights are subject to exceptions. For example, we cannot delete data that we are legally obliged to retain, and we cannot provide data portability for data processed on the basis of legal compliance rather than contractual necessity.

ko9 uses first-party cookies and similar technologies (local storage, session storage) to operate the Platform. Specifically, we use:

• Strictly Necessary Cookies: Required to keep you logged in, maintain your game session, and remember your responsible gaming settings. These cannot be disabled without breaking core Platform functionality.
• Performance Cookies: Used to collect anonymised data about which pages are visited most frequently and how long sessions last. This helps us improve the Platform experience. These cookies do not identify individual users.
• Preference Cookies: Used to remember your language and notification preferences between sessions.

We do not use third-party advertising or retargeting cookies. No data collected via cookies on ko9 is shared with external advertising networks. You can clear cookies at any time via your mobile browser settings; however, clearing strictly necessary cookies will log you out of your ko9 account.

ko9 implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Industry-standard bcrypt hashing for all stored passwords — we never store passwords in plain text.
• Access controls ensuring that only authorised ko9 personnel can access personal data, on a strict need-to-know basis.
• Regular security audits and penetration testing of the Platform infrastructure.
• Automatic session timeouts after periods of inactivity to protect accounts on shared devices.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights or freedoms, ko9 will notify affected players without undue delay and take all reasonable steps to mitigate the impact.

You also have a role to play in keeping your account secure. Please use a strong, unique password for your ko9 account and do not share your credentials with any third party. If you suspect your account has been compromised, contact [email protected] immediately.

ko9 is strictly an adult platform. Players must be 21 years of age or older to register and use the Platform. We do not knowingly collect personal data from individuals under the age of 21.

Age verification is conducted at the point of registration and may be re-verified at any time, including prior to processing a withdrawal. If ko9 discovers that an account has been registered by a person under the age of 21, the account will be immediately suspended, all bets will be voided, deposits will be returned (less any withdrawals already made), and any personal data collected will be securely deleted.

If you believe that a minor has gained access to a ko9 account — whether through shared device use or shared credentials — please contact us immediately at [email protected] so that we can take prompt action.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a privacy concern, please contact our Data Protection team:

• Email: [email protected] (subject line: "Privacy Enquiry")
• Support Hours: 24/7, in English and Bengali
• Response Time: We aim to acknowledge all privacy enquiries within five (5) business days.

If you are not satisfied with our response to your privacy complaint, you have the right to escalate the matter to the competent supervisory authority in the jurisdiction applicable to your situation. ko9 will cooperate fully with any such authority in the resolution of your complaint.