kl89 Privacy Policy

Introduction

kl89 is committed to protecting the privacy and personal data of every player who uses the kl89 betting and casino platform. This Privacy Policy sets out in clear, plain terms how kl89 collects, uses, stores, shares, and protects your personal information when you visit kl89.onl, register an account, make a deposit, place a bet, or contact our support team.

We understand that privacy is a serious matter. The players who use kl89 in Bangladesh trust us with sensitive personal and financial information, and we take that responsibility seriously. Every data handling decision at kl89 is guided by three principles: collect only what is necessary, use it only for its stated purpose, and protect it with appropriate technical and organisational measures.

This Privacy Policy is effective from 1 January 2026. It applies to personal data collected both online (via kl89.onl and any associated mobile-compatible interfaces) and through direct communications with kl89 support via email. If you have any questions about how kl89 handles your data, please contact us at [email protected].

Data Controller

For the purposes of this Privacy Policy, kl89 acts as the data controller in respect of personal data collected from players who use the kl89 platform. As data controller, kl89 determines the purposes and means by which personal data is processed, and is responsible for ensuring that processing activities comply with applicable data protection principles.

kl89 operates under an international gaming licence. The platform is made available to players in Bangladesh on the basis that players are accessing the service in a personal, recreational capacity and have confirmed that they meet the eligibility requirements set out in the kl89 Terms & Conditions, including the minimum age of 21 years.

All data-related enquiries, access requests, correction requests, and deletion requests should be directed to the kl89 data team at [email protected], clearly marking your message with the subject line "Data Privacy Request" to ensure prompt handling.

Data We Collect

kl89 collects personal data in several categories depending on how you interact with the platform. The following data type cards describe each category and provide examples of the specific data points within each category:

How We Collect Your Data

kl89 collects personal data through the following channels and methods:

• Direct registration: When you complete the kl89 account registration form, you provide identity, contact, and password data directly to kl89.
• Account activity: When you deposit funds, place bets, play casino games, or use responsible gaming tools, kl89 records the relevant transaction and gaming activity data automatically.
• KYC submission: When you submit verification documents in response to a kl89 KYC request, those documents and the data they contain are collected and stored securely.
• Support communications: When you contact kl89 support by email at [email protected], the content and metadata of that communication is recorded.
• Automatic technical collection: When you visit kl89.onl, technical data (IP address, browser type, device data, session data) is collected automatically via server logs and cookies. See Section 7 for details on cookie usage.
• Third-party payment providers: When you process a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a card network, kl89 receives a transaction confirmation and reference from the relevant payment gateway. kl89 does not receive your full payment credentials from these providers.

Purpose & Legal Basis for Processing

kl89 processes your personal data only where there is a lawful basis and a defined purpose for doing so. The table below summarises the key processing activities, the purpose of each, and the corresponding legal basis:

Where kl89 relies on legitimate interests as a legal basis, those interests are balanced against your privacy rights. kl89 will not rely on legitimate interests where those interests are overridden by your fundamental right to privacy.

Data Sharing

kl89 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Personal data may be shared with carefully selected third parties only where necessary to deliver the kl89 service or to comply with a legal obligation. The categories of recipients with whom data may be shared are as follows:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard receive the minimum transaction data necessary to process deposits and withdrawals on your behalf.
• Game studio providers: Pragmatic Play, PG Soft, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session identifiers and account reference data to facilitate game loading, RNG logging, and bet settlement. These providers do not receive your identity documents or payment details.
• Identity verification and KYC service providers: Third-party KYC tools that assist kl89 in verifying the identity and age of players may process document images and biometric comparison data strictly for verification purposes.
• Fraud prevention and security services: Specialist anti-fraud providers may receive IP address data, device fingerprinting data, and transaction patterns to identify and prevent fraudulent activity on the kl89 platform.
• Legal and regulatory authorities: Where kl89 is required by law, court order, or regulatory authority to disclose player data, kl89 will comply with that obligation. kl89 will, where permitted, notify the affected player of any such disclosure.
• Professional advisors: Lawyers, auditors, and accountants who provide professional services to kl89 may access player data on a need-to-know basis, subject to confidentiality obligations.

All third parties with whom kl89 shares personal data are required to handle that data in accordance with applicable data protection standards and to use it only for the specific purpose for which it was shared.

Cookies & Tracking Technologies

kl89.onl uses cookies and similar tracking technologies to enable core platform functionality, remember your preferences, analyse site usage, and detect fraudulent or unusual access patterns. The following categories of cookies are used by kl89:

• Strictly necessary cookies: These cookies are essential for the kl89 platform to function. They maintain your login session, store your language preference, and protect against cross-site request forgery (CSRF). These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: These cookies remember choices you have made on kl89 — such as your preferred deposit method, sport category, or responsible gaming settings — so you do not have to reconfigure these preferences every time you visit.
• Analytics cookies: kl89 uses aggregated, anonymised analytics data to understand how players navigate the platform, which features are most used, and where usability issues may exist. This data is used solely to improve the kl89 product and does not identify individual users.
• Security cookies: Cookies used to detect bot activity, IP reputation signals, and unusual login patterns. These are part of kl89's fraud prevention infrastructure and cannot be disabled.

By continuing to use kl89.onl after reviewing this Privacy Policy, you acknowledge kl89's use of cookies as described above. You may manage non-essential cookies through your browser settings; however, disabling strictly necessary or security cookies may prevent you from accessing certain features of the kl89 platform.

Data Retention

kl89 retains personal data for as long as necessary to fulfil the purposes for which it was collected, and for as long as required to meet applicable legal, regulatory, and compliance obligations. The following retention periods apply as a general guide:

• Active account data: Retained for the full duration of your account's active status, plus a minimum of 5 years following permanent account closure, to meet anti-money laundering (AML) record-keeping obligations.
• KYC and identity documents: Retained for a minimum of 5 years from the date of verification, in line with standard financial compliance requirements. Where a regulatory authority requires a longer retention period, the longer period applies.
• Transaction records: Deposit and withdrawal records are retained for a minimum of 5 years from the date of the transaction.
• Betting and gaming history: Retained for a minimum of 3 years from the date of each session, and for the duration of any active dispute or complaint relating to that session.
• Support communications: Retained for 3 years from the date of the most recent communication in a support thread.
• Marketing consent records: Retained for the duration of your marketing subscription plus 2 years following unsubscription, as evidence of consent and withdrawal of consent.

When data is no longer required, kl89 will securely delete or anonymise it in accordance with our internal data disposal procedures. Anonymised, aggregated data (which cannot be used to identify individual players) may be retained indefinitely for statistical and product analysis purposes.

Data Security

kl89 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• TLS/SSL encryption: All data transmitted between your browser and kl89.onl is encrypted in transit using current TLS standards. This applies to login, registration, deposits, withdrawals, and all account management actions.
• Encrypted data storage: Sensitive personal data fields — including identity document records and payment references — are encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to player personal data within kl89's internal systems is restricted on a strict need-to-know basis. Employees and contractors do not have access to player data beyond what is required for their specific operational role.
• Two-step authentication: kl89 offers two-step SMS verification for player accounts and requires it for internal administrative access to systems containing personal data.
• Regular security assessments: kl89's platform is subject to regular security testing to identify and remediate vulnerabilities before they can be exploited.
• Incident response procedures: kl89 maintains documented procedures for detecting, assessing, and responding to personal data breaches. In the event of a breach that poses a risk to affected players, kl89 will notify those players and relevant authorities as required by applicable law.

International Data Transfers

kl89 operates as an international platform. In the course of delivering the kl89 service to players in Bangladesh, your personal data may be transferred to and processed in countries other than Bangladesh — for example, where kl89's game studio partners (Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, Microgaming, Spribe, Ezugi) or payment processing infrastructure are based.

Where personal data is transferred internationally, kl89 takes steps to ensure that an adequate level of protection is applied to that data in the recipient jurisdiction. This may include relying on contractual data protection clauses with receiving parties, requiring that recipients adhere to recognised international data security standards, or other appropriate safeguards.

By using the kl89 platform and accepting this Privacy Policy, you acknowledge that your personal data may be transferred internationally as described in this section. If you have concerns about international transfers of your data, please contact kl89 at [email protected].

Your Data Rights

As a player on the kl89 platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact kl89 at [email protected] with the subject line "Data Rights Request":

• Right of Access: You may request a copy of the personal data that kl89 holds about you. kl89 will provide this information within 30 days of receiving a valid request, free of charge.
• Right to Rectification: If any personal data kl89 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. kl89 will process correction requests promptly and may request supporting documentation to validate the corrected information.
• Right to Erasure: You may request that kl89 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where it has been processed unlawfully. Note that kl89 may be required to retain certain data for legal and compliance reasons even where an erasure request is made — in such cases, kl89 will explain which data must be retained and why.
• Right to Restriction of Processing: You may request that kl89 restrict the processing of your data — for example, while a correction request is being verified — rather than deleting it outright.
• Right to Data Portability: Where kl89 processes your data on the basis of consent or contract, and where processing is carried out by automated means, you may request a structured, machine-readable copy of the data you provided to kl89.
• Right to Object: You may object to kl89 processing your data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, where you believe your fundamental rights override those interests.
• Right to Withdraw Consent: Where kl89 relies on your consent as the legal basis for processing (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Children & Minors

kl89 is strictly an adults-only platform. The minimum age to register and use kl89 is 21 years. kl89 does not knowingly collect personal data from any person under the age of 21. The age verification process during registration, and the KYC process that may be required before a withdrawal is processed, are specifically designed to prevent underage access.

If kl89 becomes aware that personal data has been collected from a person under the age of 21 — whether through a registration oversight or misrepresentation of age by the registrant — the following steps will be taken immediately:

• The account will be suspended and access will be revoked.
• Any balance in the account will be held pending review and will not be paid out.
• All personal data associated with the underage account will be deleted as soon as practicably possible, subject to any legal obligation to retain records of the incident.

Parents or guardians who suspect that a minor has registered an account on kl89 are urged to contact kl89 at [email protected] immediately. kl89 will investigate and take action as a matter of priority.

Marketing Communications

kl89 may send you promotional communications — including bonus offers, match promotions, seasonal campaigns (such as Eid specials, BPL cricket promotions, or T20 World Cup offers), and platform announcements — where you have given your explicit consent to receive such communications during registration or via your account marketing preferences.

kl89's marketing communications are sent via email to the address registered on your account. kl89 does not send unsolicited SMS marketing messages or use third-party push notification providers for promotional purposes.

You may opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link included in any kl89 marketing email.
• Updating your marketing preferences in the kl89 account settings panel.
• Emailing [email protected] with the subject line "Unsubscribe Marketing" and your registered username.

Opting out of marketing communications will not affect transactional messages — such as deposit confirmations, withdrawal notifications, KYC request emails, or account security alerts. These communications are necessary for the operation of your account and cannot be opted out of while the account remains active.

Third-Party Services & Links

The kl89 platform integrates with third-party services — including game studios (Pragmatic Play, PG Soft, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi), payment gateways (bKash, Nagad, Rocket, Upay, card networks), and KYC verification tools — in order to deliver a complete betting and casino experience to players in Bangladesh.

Each of these third-party service providers operates under their own privacy policies and data handling practices. kl89 does not control and is not responsible for the privacy practices of third-party providers. Players are encouraged to review the privacy policies of any third-party service they interact with — for example, when completing a bKash payment or loading a Pragmatic Play slot game.

kl89.onl does not contain links to external third-party websites for advertising or affiliate purposes. If at any time a link to an external site appears on kl89.onl, it will be clearly identified as an external resource, and kl89 accepts no responsibility for the content or data practices of that external site.

Updates to This Privacy Policy

kl89 reserves the right to update or revise this Privacy Policy at any time to reflect changes in data handling practices, updates to the kl89 platform, changes in applicable law, or feedback from players. All updates are effective from the date they are published on kl89.onl.

Where a change is material — for example, a change to the categories of data collected, a new category of third-party recipient, or a change to the legal basis for a key processing activity — kl89 will display a prominent notice on the kl89 platform for a minimum of 14 days before the change takes effect. Where kl89 has your email address and the change is significant enough to affect your rights, kl89 will also send a notification to your registered email address.

The effective date displayed at the top of this document reflects the date of the most recent revision. Players are encouraged to review this Privacy Policy periodically to stay informed of how kl89 handles their personal data. Continued use of the kl89 platform following the publication of an updated Privacy Policy constitutes acceptance of the revised terms.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to how kl89 handles your personal data, please contact the kl89 data team using the details below. We aim to respond to all privacy-related enquiries within 5 business days.

When contacting us about a data rights request, please include your registered username and, where relevant, a brief description of the specific data or processing activity your request relates to. This helps kl89 locate your data accurately and respond promptly.

kl89 takes all privacy concerns seriously. If you are not satisfied with kl89's response to a privacy complaint, you may seek further recourse through the relevant data protection authority in your jurisdiction.