kd67 Privacy Policy

Last updated: November 2026

Who We Are

kd67 is an online betting and casino platform serving players in Bangladesh. When you create an account, place a bet, or use any part of the kd67 website or mobile app, we act as the data controller for the personal information you provide.

This Privacy Policy explains what data we hold, why we hold it, and how you can exercise control over it. If you have questions at any point, write to us at [email protected].

Data We Collect

We only collect information that is genuinely necessary for running a safe, compliant gambling service.

Information you give us directly

• Account registration: full name, date of birth, email address, mobile number, and country of residence.
• KYC verification: a copy of your National ID Card (NID), Passport, or Driving Licence. This is required before your first withdrawal.
• Payment details: your bKash, Nagad, or Rocket account number; bank account details if you use Bank Transfer. We do not store full card numbers.
• Support conversations: chat transcripts, emails, or any files you send to our 24/7 support team.

Information collected automatically

• Device and browser data: IP address, browser type, operating system, device identifiers.
• Usage data: pages visited, games played, bets placed, session duration, and click patterns.
• Transaction logs: deposit and withdrawal timestamps, amounts in ৳ (BDT), and payment reference numbers.
• App data: if you use the kd67 app (Android, version 3.9.7), we collect crash reports and performance metrics to improve stability.

How We Use Your Data

We never sell your personal data to third-party advertisers. If you opted in to promotional emails and want to stop receiving them, use the unsubscribe link in any email or contact [email protected].

When We Share Data

kd67 does not trade or rent your data. We share it only in these specific situations:

• Payment processors: bKash, Nagad, Rocket, and banking partners receive only the minimum data needed to complete your transaction.
• Game providers: FA Chai, Habanero, JILI, Spribe, Playtech, and PG Soft receive anonymised session tokens. They do not receive your name, phone number, or payment details.
• KYC verification services: your identity document is shared with our compliance partner to confirm authenticity. Documents are stored in encrypted form and deleted after the review period.
• Law enforcement or regulators: if we receive a valid legal request, we comply with applicable law. We will notify you unless prohibited from doing so.

Cookies and Tracking

kd67 uses cookies and similar technologies to keep your session active, remember your language preference, and understand how players navigate the platform.

You can clear cookies through your browser settings at any time. Clearing essential cookies will log you out of your kd67 account.

How Long We Keep Data

We keep your data for as long as your account is open and for a defined period afterwards to meet legal obligations.

• Account and transaction records: retained for 7 years from the date of each transaction, as required by financial regulations.
• KYC documents: kept for 5 years after account closure, then permanently deleted.
• Support chat transcripts: kept for 2 years from the date of the conversation.
• Analytics and usage logs: anonymised after 12 months; raw logs deleted after 24 months.
• Marketing preferences: deleted within 30 days of withdrawing consent.

When a retention period ends, we either delete the data securely or anonymise it so it can no longer identify you.

Your Rights

As a kd67 player, you have the following rights over the personal data we hold:

• Access: request a copy of the data we hold about you.
• Correction: ask us to fix inaccurate or incomplete information.
• Deletion: ask us to delete your data, subject to legal retention requirements. Note that mandatory KYC and transaction records cannot be deleted until the statutory period ends.
• Restriction: ask us to pause processing your data while a dispute is resolved.
• Portability: receive your account and transaction data in a structured, machine-readable format.
• Withdraw consent: opt out of marketing emails or analytics cookies at any time, without affecting the lawfulness of processing that happened before you withdrew consent.

To exercise any of these rights, email [email protected] with the subject line "Data Request". We will respond within 30 days.

Security Measures

kd67 uses industry-standard technical and organisational controls to protect your data:

• All data in transit is encrypted with TLS 1.2 or higher.
• Passwords are hashed using a strong one-way algorithm — we cannot read your password.
• Payment account numbers are stored in tokenised form; raw account strings are never logged.
• KYC documents are stored in an encrypted, access-controlled vault. Only authorised compliance staff can view them.
• We conduct regular internal security reviews and patch critical vulnerabilities within 48 hours of discovery.

Players Under 18

kd67 is strictly for players aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has created an account, please contact us immediately at [email protected]. We will close the account and delete all associated data without delay.

Age verification is part of our KYC process. We require a valid NID, Passport, or Driving Licence before approving any withdrawal.

Changes to This Policy

We may update this Privacy Policy when our practices change or when regulations require it. When we make a material change, we will post a notice on the kd67 platform and send an email to your registered address at least 7 days before the change takes effect.

Continuing to use kd67 after the effective date means you accept the updated policy. If you do not agree, you can close your account by contacting support before the change takes effect.

Get in Touch

For any privacy-related question, data request, or complaint, reach us here:

If you are not satisfied with our response, you have the right to file a complaint with the relevant data protection authority in your jurisdiction.