kox8 Privacy
Policy

1 Data Controller

kox8 operates as the data controller for all personal information collected through the kox8 platform. As data controller, kox8 determines the purposes and means by which your personal data is processed. If you have any questions about how your data is handled, you may contact our data protection team directly at [email protected].

This Policy applies to all users of the kox8 platform, with particular relevance to players accessing kox8 from Bangladesh. kox8 is committed to the responsible and transparent handling of personal data in accordance with internationally recognised data protection principles.

2 Data We Collect

kox8 collects personal data in the following categories. Collection is limited to information that is necessary for the stated purposes outlined in this Policy:

kox8 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, genetic data, or biometric data for identification purposes, unless required by applicable legal or regulatory obligations.

3 How We Collect Data

kox8 collects your personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing identity verification, making a deposit or withdrawal, contacting customer support, or participating in promotions.
• Automated technologies: Technical and usage data collected automatically when you access and interact with the kox8 platform, including through cookies, server logs, and similar tracking technologies (see Section 7).
• Third-party payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard when you make deposits or request withdrawals.
• Identity verification services: Where kox8 uses third-party Know Your Customer (KYC) or identity verification services to confirm the accuracy of the information you have provided.
• Publicly available sources: In limited circumstances, kox8 may verify certain information using publicly accessible databases to meet fraud prevention or legal compliance obligations.

4 How We Use Your Data

kox8 uses personal data for the following purposes, each of which is grounded in a legitimate legal basis as described in Section 5:

• Account creation and management: To register, maintain, and administer your kox8 player account, including processing your identity verification documents.
• Payment processing: To process deposits and withdrawals in Bangladeshi Taka (৳) through your chosen payment method, and to maintain accurate records of all financial transactions.
• Responsible gaming: To monitor your gaming activity for signs of problem gambling behaviour, to enforce deposit limits or self-exclusion requests you have set, and to fulfil our duty of care obligations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover, and other forms of abuse on the platform.
• Platform improvement: To analyse aggregated usage data to understand how players interact with kox8, identify issues, and develop new features and game offerings.
• Customer support: To respond to your enquiries, resolve complaints, and provide technical assistance when you contact our support team at [email protected].
• Marketing communications: To send you promotional offers, bonus notifications, and updates about new games or features — but only where you have given explicit consent to receive such communications.
• Legal compliance: To comply with applicable legal and regulatory obligations, including anti-money-laundering (AML) requirements, record-keeping duties, and responding to lawful requests from competent authorities.

5 Legal Basis for Processing

kox8 processes your personal data on one or more of the following legal bases:

• Contract performance: Processing that is necessary to fulfil our contractual obligations to you as a registered kox8 player — including account management, payment processing, and game provision.
• Legitimate interests: Processing carried out in pursuit of kox8's legitimate business interests, including fraud detection, platform security, and service improvement, provided such interests are not overridden by your rights and freedoms.
• Legal obligation: Processing required to comply with applicable laws and regulations, including identity verification obligations, AML record-keeping, and cooperation with lawful authority requests.
• Consent: Processing for which you have provided clear, informed, and freely given consent — such as receiving marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Data Sharing

kox8 does not sell your personal data. We may share your data with the following categories of recipients where necessary and proportionate:

• Payment providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, Mastercard — to process your financial transactions securely.
• Game software providers: Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, Spribe — limited technical data necessary to deliver game functionality and maintain fair play records.
• Identity verification services: Third-party KYC providers used to verify your identity documents as part of our account opening and ongoing compliance procedures.
• IT infrastructure providers: Cloud hosting, server management, and cybersecurity service providers that process data on kox8's behalf under strict data processing agreements.
• Legal and regulatory authorities: Where kox8 is required by law, court order, or regulatory directive to disclose personal data to competent authorities.
• Professional advisers: Lawyers, auditors, and compliance consultants who are bound by professional confidentiality obligations and require access to certain data to provide their services.

All third parties with whom kox8 shares personal data are required to handle that data in accordance with this Policy and applicable data protection standards. kox8 does not permit third-party service providers to use your data for their own purposes beyond the services they provide to kox8.

7 Cookies & Tracking Technologies

kox8 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small data files stored on your device when you visit kox8.io. They help us remember your session, understand how you use the site, and deliver relevant content.

kox8 uses the following categories of cookies:

• Strictly necessary cookies: Essential for the platform to function correctly, including maintaining your login session, processing transactions, and enforcing security settings. These cookies cannot be disabled.
• Analytics cookies: Used to collect anonymised information about how visitors interact with kox8.io, helping us identify popular pages, detect errors, and improve the overall user experience.
• Functional cookies: Remember your preferences and settings (such as language and device type) to personalise your experience on return visits.
• Marketing cookies: Used to deliver relevant promotional content and measure the effectiveness of our marketing campaigns, only where you have consented.

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the kox8 platform. For strictly necessary cookies, disabling them through browser settings is not recommended as it may prevent you from accessing key platform features.

8 Data Retention

kox8 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting obligations.

• Active accounts: Personal data is retained for the duration of your active account relationship with kox8.
• Closed accounts: Following account closure, kox8 retains identity, financial, and transaction records for a minimum of five (5) years in accordance with anti-money-laundering and record-keeping requirements.
• Marketing data: Marketing preference data and related correspondence are retained until you withdraw consent, after which it is deleted within 30 days.
• Technical and usage data: Anonymised or aggregated usage data may be retained indefinitely for analytics purposes, as it cannot be used to identify individual players.
• Support correspondence: Customer support interactions are retained for up to three (3) years from the date of the last interaction to assist with future enquiries and dispute resolution.

When personal data is no longer required, kox8 will securely delete or anonymise it in accordance with our internal data lifecycle management procedures.

9 Your Rights

As a kox8 player, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request". kox8 will respond to all valid requests within a reasonable timeframe.

Please note that some rights are subject to exemptions. For example, kox8 may be required to retain certain data to comply with legal obligations even where a deletion request is received. In such cases, kox8 will explain the basis for any limitation on your request.

10 Data Security

kox8 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and kox8 servers.
• Encryption of sensitive data at rest, including financial records and identity documents.
• Role-based access controls ensuring that only authorised personnel can access personal data on a need-to-know basis.
• Regular security vulnerability assessments and penetration testing of the kox8 platform.
• Multi-factor authentication requirements for internal staff accessing systems containing personal data.
• Incident response procedures to detect, report, and respond to data breaches promptly.

While kox8 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights, kox8 will notify affected players without undue delay and take immediate steps to mitigate the impact.

11 International Data Transfers

As an online platform serving players in Bangladesh, kox8 may transfer personal data to servers or service providers located outside Bangladesh. Where such transfers occur, kox8 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Policy.

Safeguards for international transfers may include contractual data processing agreements with service providers, standard contractual clauses, or transfers to jurisdictions that maintain recognised data protection standards. kox8 only engages international service providers who can demonstrate adequate data protection capabilities.

12 Children's Privacy

The kox8 platform is strictly for adults aged 21 and above. kox8 does not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not register an account or use any service on the kox8 platform.

If kox8 becomes aware that personal data has been collected from a person under the age of 21, the relevant account will be immediately closed and the data will be securely deleted. If you have reason to believe that a minor has registered an account on kox8, please notify us immediately at [email protected].

Parents and guardians of individuals under the age of 21 are encouraged to use parental control tools to prevent access to online gambling platforms. kox8 supports responsible gambling initiatives aimed at protecting young and vulnerable people.

13 Changes to This Policy

kox8 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable laws, or the services we offer. When we make material changes to this Policy, we will notify existing players via email or through an in-platform notification prior to the changes taking effect.

The effective date at the top of this Policy indicates when it was last reviewed and updated. We encourage you to review this Policy periodically. Continued use of the kox8 platform following notification of any update constitutes your acceptance of the revised Policy.

If you do not accept any change to this Policy, you should cease using the kox8 platform and may contact us to request account closure and withdrawal of your available balance.

14 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way kox8 handles your personal data, please contact our data protection team using the following details:

• Email: [email protected] (subject line: "Privacy Enquiry" or "Data Rights Request")
• Response time: kox8 aims to respond to all privacy-related enquiries within 5 business days (Bangladesh Standard Time, UTC+6).
• Support hours: 24/7 live chat support is available on the kox8 platform for urgent data security concerns.

kox8 takes all privacy enquiries seriously and is committed to resolving any concerns fairly and transparently. Where a complaint cannot be resolved to your satisfaction through direct engagement with kox8, you retain the right to escalate the matter through appropriate legal channels in your jurisdiction.