Privacy Policy — kx10win

kx10win collects personal data from players and platform visitors in order to provide a safe, secure, and compliant betting and casino experience. The categories of personal information we collect are described below. We collect only what is necessary for the stated purposes and do not gather data beyond what is required for platform operations, legal compliance, and player protection.

Identity and contact information collected at the point of registration includes your full legal name, date of birth, residential address within Bangladesh (including city — whether Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or elsewhere), email address, and mobile phone number associated with a Bangladeshi mobile network operator.

Financial information includes your preferred payment method details such as your bKash account number, Nagad account number, Rocket account number, Upay account details, bank account information for Dutch-Bangla Bank, City Bank, BRAC Bank, or card details for Visa and Mastercard transactions. We do not store full card numbers — card data is handled by our certified payment processors in accordance with PCI DSS standards.

Verification documents requested as part of our Know Your Customer (KYC) process may include copies of your National Identity Card (NID), passport, driving licence, and utility bills or bank statements as proof of address.

Behavioural and usage data collected automatically when you use the kx10win platform includes your IP address, device type, browser type and version, operating system, referring URL, pages visited, session duration, betting history, game history, deposit and withdrawal records, and in-platform communication logs.

• Registration data: Name, date of birth, email, mobile number, and residential address.
• Financial data: Payment method identifiers (bKash, Nagad, Rocket, Upay, bank accounts, card references).
• KYC documents: NID, passport, proof of address — collected when identity verification is required.
• Usage data: IP address, device identifiers, session logs, betting history, and game play records.
• Communications: Records of live chat sessions, emails, and support tickets submitted to kx10win.
• Cookies and tracking data: Data collected via cookies and similar technologies — see Section 4 for full details.

kx10win uses the personal data it collects strictly for the purposes described in this Privacy Policy. We do not use your data for any purpose that is incompatible with the reasons it was originally collected. The primary uses of your personal information are set out below.

Purpose	Data Used	Legal Basis
Account creation and management	Identity, contact, and financial data	Contractual necessity
Processing deposits and withdrawals	Financial and payment method data	Contractual necessity
Identity and age verification (KYC)	KYC documents, date of birth	Legal obligation
Anti-money-laundering monitoring	Transaction history, identity data	Legal obligation
Responsible Gaming controls	Behavioural and usage data	Legitimate interest / Legal obligation
Customer support	Identity, contact, communication records	Contractual necessity
Platform improvement and analytics	Usage and behavioural data	Legitimate interest
Promotional communications	Contact data, preferences	Consent
Fraud prevention and security	All categories as required	Legitimate interest / Legal obligation

kx10win may send promotional communications to players who have opted in to receive them. These communications may include information about new games, seasonal promotions tied to events such as the BPL cricket season, IPL, Eid, or Pohela Boishakh, and personalised bonus offers. Players may withdraw consent to receive marketing communications at any time by contacting our support team or using the unsubscribe option in any marketing email.

We do not use automated profiling or algorithmic decision-making processes that produce legal or similarly significant effects on players without human oversight.

kx10win does not sell your personal data. We do not rent or trade your information to third-party advertisers or data brokers. We share player data only in the limited circumstances described below, and only with parties who are contractually obligated to handle your data in a manner consistent with this Privacy Policy.

Payment processors and financial institutions: To facilitate deposits and withdrawals, we share the minimum necessary financial information with our payment partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and card payment processors for Visa and Mastercard transactions. These parties operate their own privacy policies and are responsible for the security of your data within their systems.

Game providers and technology partners: To deliver casino and sports betting products, kx10win works with licensed game studios and platform technology providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised session data necessary to render games and resolve technical disputes.

Identity verification and KYC service providers: To comply with our age and identity verification obligations, we may share identity documents with certified third-party KYC verification services. These services are bound by strict data protection and confidentiality agreements.

Legal and regulatory authorities: kx10win is obligated to disclose player information to relevant authorities when required by law, including in response to court orders, law enforcement requests, anti-money-laundering investigations, or fraud prevention inquiries. We will notify affected players of such disclosures where permitted to do so by law.

• Payment partners: bKash, Nagad, Rocket, Upay, and banking partners — for transaction processing only.
• Game studios: Pragmatic Play, Evolution, Spribe, etc. — anonymised session data only.
• KYC providers: Certified verification services — identity documents for compliance purposes.
• Legal authorities: Disclosed only when required by applicable law or court order.
• Business successors: In the event of a merger or acquisition, player data may transfer to a successor entity subject to equivalent privacy protections.

kx10win uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, maintain your login session, and understand how players interact with the site. This section explains the types of cookies in use and how you can manage them.

A cookie is a small text file placed on your device by a website when you visit it. Cookies do not contain executable code and cannot access other files on your device. They are widely used to make websites work efficiently and to provide useful information to site operators.

Cookie Type	Purpose	Duration
Strictly Necessary	Maintain login sessions, process transactions, load platform components. Cannot be disabled without breaking platform functionality.	Session / up to 24 hours
Functional	Remember your language preference, display settings, and game lobby layout choices to personalise your experience.	Up to 90 days
Analytics	Collect anonymised data on page views, session lengths, and user journeys to help us improve the platform. No personally identifiable information is included.	Up to 13 months
Security	Detect and prevent fraudulent activity, bot traffic, and unauthorised access attempts by verifying device and session integrity.	Session / up to 7 days

You can manage or disable non-essential cookies through your browser settings. Most modern browsers allow you to view, delete, and block cookies on a per-site basis. Please note that disabling strictly necessary cookies will impair your ability to log in and use the kx10win platform. kx10win does not currently use third-party advertising cookies or cross-site tracking cookies for behavioural advertising purposes.

kx10win takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational measures to protect your information against unauthorised access, accidental loss, alteration, or disclosure. No system can guarantee absolute security, but kx10win applies industry-standard best practices at every layer of its infrastructure.

• SSL/TLS encryption: All data transmitted between your browser or mobile device and kx10win's servers is encrypted using SSL/TLS protocols. Look for the padlock icon in your browser's address bar when visiting kx10win.net.
• Encrypted data storage: Sensitive personal data stored on kx10win's servers is encrypted at rest using AES-256 encryption. Database access is restricted to authorised personnel only.
• Access controls: Internal access to player data is governed by strict role-based access control (RBAC) policies. Staff members can only access the specific data required to perform their legitimate job functions.
• Two-factor authentication: kx10win supports two-factor authentication (2FA) for player accounts where available. Players are encouraged to enable 2FA to add an additional layer of account protection.
• Penetration testing: kx10win's platform undergoes regular security assessments and penetration testing by qualified security professionals to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a confirmed data breach that may affect player personal information, kx10win has an incident response plan in place to contain the breach, assess the impact, and notify affected players promptly.

Players are also responsible for their own account security. You should use a strong, unique password for your kx10win account and never share your login credentials with anyone else. If you believe your account has been compromised, contact our support team immediately via live chat or at [email protected].

kx10win retains your personal data for as long as your account remains active and for a defined period thereafter, in accordance with our legal and regulatory obligations. We do not keep data beyond what is necessary for the purposes described in this Privacy Policy.

The specific retention periods applicable to different categories of personal data are outlined below. These periods reflect the minimum requirements imposed by financial regulations, anti-money-laundering obligations, and general business record-keeping standards applicable in the jurisdiction in which kx10win operates.

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years post-closure	AML / regulatory compliance
KYC verification documents	Duration of account + 5 years post-closure	Legal obligation
Transaction and financial records	7 years from transaction date	Financial record-keeping / AML
Betting and gaming history	Duration of account + 3 years post-closure	Dispute resolution / Responsible Gaming
Customer support communications	3 years from last interaction	Service quality / dispute resolution
Analytics and usage data	13 months (rolling)	Platform improvement (anonymised)
Marketing preferences	Until consent is withdrawn	Consent-based processing

When the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual. Where data is anonymised rather than deleted, the resulting anonymised dataset may be retained indefinitely for statistical and analytical purposes.

Players who close their kx10win account should be aware that certain data categories will be retained for the periods specified above even after account closure. This is a legal requirement that kx10win cannot waive on a player-by-player basis.

As a kx10win player, you hold a number of rights with respect to your personal data. kx10win is committed to honouring these rights and will respond to all valid data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.

• Right of access: You have the right to request a copy of all personal data that kx10win holds about you. This is sometimes referred to as a Subject Access Request (SAR). We will provide the information in a structured, commonly used, and machine-readable format where technically feasible.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You can update basic account details directly through your account settings, or contact our support team for assistance.
• Right to erasure: In certain circumstances — such as where the data is no longer necessary for the purpose it was collected, or where you withdraw consent and no other legal basis applies — you have the right to request the deletion of your personal data. Note that this right is subject to our legal retention obligations described in Section 6.
• Right to restrict processing: You may request that kx10win restrict the processing of your data in certain circumstances, for example where you contest the accuracy of the data or where you have objected to processing pending verification of our legitimate grounds.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a portable format and to have it transferred to another service provider where technically feasible.
• Right to object: You have the right to object to the processing of your personal data where it is carried out on the basis of our legitimate interests. You also have an absolute right to object to the use of your data for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based solely on your consent (such as for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact our Data Protection team at [email protected], clearly stating the right you wish to exercise and providing sufficient information to verify your identity. We may request identity verification before processing a data rights request to prevent unauthorised access to another person's data.

kx10win reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When material changes are made, we will notify registered players by email or via an in-platform notification prior to the changes taking effect. The effective date at the top of this document will always reflect the date of the most recent revision.

We encourage all players to review this Privacy Policy periodically to stay informed about how kx10win protects their personal information. Continued use of the kx10win platform following the effective date of any updated Privacy Policy constitutes your acknowledgment of the changes. Where a proposed change materially affects how we use your data in a way that requires fresh consent, we will seek that consent separately before applying the new processing activity.

This Privacy Policy was last reviewed and updated on 1 January 2026. Previous versions of this document are available upon request by contacting our Data Protection team.

Data Protection Contact: For any questions, concerns, or data rights requests relating to this Privacy Policy or kx10win's data handling practices, please contact our Data Protection team. We aim to resolve all privacy-related enquiries promptly and transparently.

• Email: [email protected] — use subject "Privacy Enquiry" for fastest routing.
• Response time: Data rights requests fulfilled within 30 calendar days.
• Support hours: 24/7 live chat available; WhatsApp support 09:00–24:00 BST daily.
• Language: All privacy communications handled in English.