kaya9 Privacy Policy

This Privacy Policy ("Policy") describes how kaya9 ("kaya9", "we", "us", "our") collects, processes, stores, uses, and protects personal data provided by or obtained from individuals ("you", "your", "Player") who access or use the kaya9 platform at kaya9.io, including all associated services, betting markets, casino products, support channels, and promotional communications.

kaya9 is committed to maintaining the highest standards of data privacy and information security. This Policy is written in plain, accessible English so that every kaya9 player in Bangladesh understands exactly how their data is handled and what rights they have at every stage of their relationship with kaya9.

By registering an Account on kaya9, making a deposit, placing a bet, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. This Policy should be read together with our Terms & Conditions and our Responsible Gaming Policy, each of which forms part of the overall agreement between you and kaya9.

kaya9 acts as the data controller in respect of all personal data collected and processed through the Platform. As data controller, kaya9 determines the purposes for which personal data is processed and the means by which that processing takes place.

kaya9 may engage third-party service providers who process personal data on kaya9's behalf in their capacity as data processors. Such processors are contractually bound to process personal data only in accordance with kaya9's written instructions and are prohibited from using that data for any purpose other than the specific service they are engaged to provide.

All enquiries relating to this Privacy Policy, including requests to exercise your data rights, should be directed to our support team. Contact details are provided in Section 14 of this Policy.

kaya9 collects personal data through several channels: directly from you when you register, verify your account, make a deposit or withdrawal, contact support, or participate in promotions; automatically through your use of the Platform; and, where applicable, from third-party identity verification or fraud prevention services. The categories of personal data we collect are set out below.

kaya9 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, health information (other than data provided voluntarily in the context of responsible gaming), or biometric data (other than government-issued identity documents submitted for KYC verification).

kaya9 uses personal data for the following specific purposes. Each purpose is tied to a legal basis for processing, which is set out in Section 5 of this Policy.

• Account Registration and Management: To create, maintain, and administer your kaya9 Account, verify your identity, and ensure that only one Account exists per individual.
• Identity Verification (KYC): To verify that you meet kaya9's eligibility requirements, including the minimum age requirement of 21 years, and to comply with applicable anti-money laundering (AML) and know-your-customer (KYC) obligations.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment channels, and to maintain an accurate transaction record for your Account.
• Service Delivery: To provide access to sports betting markets (including BPL, IPL, T20 World Cup, and international cricket), live casino games, slots, and all other products available on the kaya9 Platform.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, bonus abuse, multi-accounting, money laundering, and other Prohibited Activities as defined in our Terms & Conditions.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling, enforce self-exclusion requests and deposit limits, and deliver appropriate responsible gaming interventions where warranted.
• Customer Support: To respond to your enquiries, resolve complaints, and improve the quality of our support service.
• Promotions and Marketing: Where you have provided explicit consent, to send you personalised promotional offers, bonus notifications, and updates about new games or features by email or SMS. You may opt out at any time by contacting support.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the Platform's performance, design, and product offering.
• Legal Compliance: To comply with applicable legal and regulatory obligations, including responding to lawful requests from law enforcement authorities.

kaya9 processes personal data only where a valid legal basis exists for doing so. The primary legal bases on which kaya9 relies are as follows:

• Contractual Necessity: Processing that is necessary to perform the contract between you and kaya9 — specifically, to register your Account, process payments, deliver betting and gaming services, and fulfil withdrawal requests.
• Legal Obligation: Processing that is required for kaya9 to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) legislation, KYC verification requirements, and lawful requests from competent authorities.
• Legitimate Interests: Processing that is necessary for kaya9's legitimate business interests, provided those interests are not overridden by your rights and freedoms. This includes fraud prevention, network and information security, responsible gaming monitoring, and platform analytics.
• Consent: Where kaya9 relies on your consent as the legal basis for processing — for example, for direct marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

kaya9 does not sell, rent, or trade your personal data to any third party for marketing, advertising, or commercial purposes. Personal data is shared only in the following limited and necessary circumstances:

• Payment Providers: Financial data (such as your mobile wallet number or bank account reference) is shared with payment processing partners including bKash, Nagad, Rocket, Upay, Visa, and Mastercard, solely for the purpose of processing your deposits and withdrawals. These providers operate under their own privacy policies and are subject to applicable financial regulation.
• Identity Verification Services: Where required to complete KYC verification, identity data may be shared with third-party identity verification providers engaged by kaya9 as data processors. These providers are bound by strict confidentiality obligations and may not use your data for any purpose other than verification.
• Game Content Providers: Technical session data (such as your account identifier, bet amounts, and game results) is shared with licensed game content providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — solely to facilitate gameplay, resolve disputes, and ensure fair play certification.
• Law Enforcement and Regulatory Authorities: kaya9 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required or permitted by applicable law, including in connection with anti-money laundering investigations or court orders.
• Professional Advisers: kaya9 may share personal data with legal advisers, auditors, or accountants on a strictly need-to-know basis, subject to professional confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of assets, personal data held by kaya9 may be transferred to the acquiring entity. You will be notified of any such transfer and of any changes to this Privacy Policy that result from it.

kaya9 uses cookies and similar technologies (including local storage and session tokens) to enable core Platform functionality, maintain your login session, remember your preferences, and gather anonymised analytics to improve the Platform experience. We do not use third-party behavioural advertising cookies or cross-site tracking technologies.

Strictly necessary cookies cannot be disabled as they are essential for the Platform to function. You may disable functional and analytics cookies through your browser settings; however, doing so may affect certain Platform features. Most modern browsers allow you to manage cookie preferences via the browser's privacy or settings menu.

kaya9 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Account and Identity Data: Retained for the duration of your active Account and for a minimum of five (5) years following permanent Account closure, to comply with AML record-keeping obligations.
• Financial Transaction Data: Retained for a minimum of five (5) years from the date of each transaction, in compliance with financial record-keeping requirements.
• Gaming Activity Data: Retained for a minimum of three (3) years from the date of each activity record, to enable dispute resolution, bonus auditing, and responsible gaming monitoring.
• Customer Support Communications: Retained for three (3) years from the date of each interaction.
• Marketing Consent Records: Retained for the duration of your consent and for one (1) year following your opt-out, as evidence of your consent status.
• Technical and Analytics Data: Anonymised analytics data may be retained indefinitely. Non-anonymised technical logs are retained for a maximum of twelve (12) months.

Following the expiry of the applicable retention period, personal data is securely deleted using industry-standard data destruction methods, or irreversibly anonymised so that it can no longer be associated with any individual.

kaya9 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the kaya9 Platform is encrypted in transit using industry-standard TLS protocols. The padlock icon in your browser confirms that your connection to kaya9.io is secure.
• Password Hashing: Account passwords are stored exclusively in hashed and salted form using a strong cryptographic hashing algorithm. kaya9 staff cannot access your password in plain text under any circumstances.
• Access Controls: Access to personal data within kaya9's internal systems is restricted to staff who genuinely require it to perform their job functions. Role-based access controls and audit logging are enforced across all data systems.
• Network Security: kaya9's infrastructure is protected by firewalls, intrusion detection systems, and regular penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Secure Payment Tokenisation: Payment card details processed through Visa and Mastercard are handled by PCI-DSS compliant processors. kaya9 does not store raw card numbers on its own servers.
• Incident Response: kaya9 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to affected individuals, kaya9 will notify affected Players promptly and take immediate remedial action.

As a kaya9 player, you have the following rights in respect of your personal data. To exercise any of these rights, please contact our support team at [email protected] with your request. kaya9 will respond within thirty (30) calendar days.

• Right of Access: You have the right to request a copy of the personal data that kaya9 holds about you, together with information about how that data is processed.
• Right to Rectification: You have the right to request that inaccurate or incomplete personal data is corrected without undue delay.
• Right to Erasure ("Right to be Forgotten"): You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where you object to processing and there are no overriding legitimate grounds. Note that kaya9 may be required by law to retain certain data (e.g., AML records) even following a deletion request.
• Right to Restriction of Processing: You have the right to request that kaya9 restricts the processing of your personal data in certain circumstances, for example while the accuracy of the data is being contested.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of kaya9's legitimate interests. kaya9 will cease such processing unless it can demonstrate compelling legitimate grounds that override your rights.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

The kaya9 Platform is strictly intended for adults aged 21 years and above. kaya9 does not knowingly collect personal data from individuals under the age of 21. If kaya9 discovers or reasonably suspects that a registered Player is under 21 years of age, the Account will be immediately closed, all funds will be forfeited, and all associated personal data will be deleted in accordance with our age verification procedures.

Parents and guardians who believe that a minor may have registered on the Platform or provided personal data to kaya9 are encouraged to contact our support team immediately at [email protected]. kaya9 takes underage gambling extremely seriously and will act promptly on any such notification.

The kaya9 Platform may contain references to third-party payment providers, game studios, and sports data providers. While kaya9 takes care to reference reputable partners only, kaya9 has no control over the data practices of third-party websites or services and accepts no responsibility for their privacy policies or procedures.

This Privacy Policy applies exclusively to personal data processed by kaya9 in connection with the kaya9 Platform. When you interact with a third-party service provider — for example, by initiating a bKash transfer through the bKash app — you do so subject to that provider's own terms and privacy policy. kaya9 strongly encourages you to review the privacy policies of any third-party services you use in connection with your kaya9 Account.

kaya9 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the services we offer. When material changes are made, kaya9 will update the "Last updated" date at the top of this Policy and, where appropriate, notify affected Players by email at the registered address on file or via a prominent notice on the Platform.

Continued use of the kaya9 Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated Policy. If you do not agree to the revised Policy, you must cease using the Platform and close your Account. The most current version of this Privacy Policy is always available at kaya9.io/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or kaya9's data processing practices, please contact our support team. Our English-language support team is available 24 hours a day, seven days a week, with an average response time of under one hour.

• Support Email: [email protected]
• Availability: 24/7 in English
• Response Time: Under 1 hour
• Headquarters: Dhaka, Bangladesh

For data rights requests (access, rectification, erasure, portability, objection), please include "Data Rights Request" in the subject line of your email and provide sufficient information to allow kaya9 to verify your identity and locate your Account. kaya9 will acknowledge your request within five (5) business days and provide a substantive response within thirty (30) calendar days of receipt.

Please do not share your Account password or full payment credentials in any communication with our support team. kaya9 staff will never request your password.