1kbd Privacy Policy — How We Protect Your Data

1kbd collects personal data from you directly when you register an account, make a deposit or withdrawal, contact support, or interact with the platform. We also collect certain technical data automatically when you visit the site. The categories of data we collect are as follows:

1kbd does not collect sensitive personal data such as biometric data, racial or ethnic origin, religious beliefs, or health data, except where expressly required for age verification or KYC compliance purposes.

1kbd uses the personal data we collect for the following specific, lawful purposes:

• Account management: to create, maintain, verify, and administer your 1kbd player account, including password resets and security alerts.
• Payment processing: to process your BDT deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain transaction records for dispute resolution.
• Identity and age verification: to confirm that you meet the minimum age requirement of 21 years and that your identity matches the payment methods registered to your account.
• Responsible gaming monitoring: to track gameplay patterns and identify early indicators of problem gambling, enabling us to apply account-level controls or to prompt self-exclusion as appropriate.
• Marketing and promotions: to send you relevant bonus offers, promotional news, and platform updates where you have not opted out of receiving such communications.
• Fraud prevention and security: to detect and investigate suspicious activity, unauthorised access attempts, duplicate account registrations, and prohibited conduct as defined in the Terms & Conditions.

1kbd will not use your personal data for any purpose incompatible with those listed above without obtaining your explicit consent beforehand.

1kbd processes your personal data on the following legal grounds:

• Contractual necessity: processing your identity, contact, and financial data is necessary to perform the player account agreement and to facilitate deposit and withdrawal services.
• Legal obligation: retaining transaction records, identity verification data, and gameplay logs is required to comply with anti-money laundering obligations and age verification standards.
• Legitimate interests: processing technical and gameplay data to improve platform performance, prevent fraud, and ensure the integrity of games and betting markets.
• Consent: sending optional marketing communications (such as bonus offer notifications) where you have opted in to receive such communications. You may withdraw consent at any time by contacting support.

1kbd does not sell your personal data. We may share your personal data with the following categories of recipient, strictly limited to what is necessary for each purpose:

• Payment processors and mobile banking partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard): solely to facilitate transaction processing and to verify payment method ownership.
• Game technology providers (including Evolution Gaming, Pragmatic Play, Ezugi, Spribe, Microgaming, NetEnt): technical session data is shared to facilitate live game operation and RNG certification compliance.
• Regulatory and law enforcement authorities: where 1kbd is legally required to disclose information in connection with anti-money laundering investigations, court orders, or other lawful demands.
• Fraud prevention and security service providers: to assist with the detection, investigation, and prevention of account fraud, bonus abuse, and prohibited conduct.

Because 1kbd serves the Bangladesh market and processes payments primarily through mobile banking services including bKash, Nagad, Rocket, and Upay, the handling of payment-related personal data warrants specific attention. When you make a deposit or withdrawal, 1kbd records the mobile banking number associated with your account and the transaction reference issued by the payment provider.

1kbd applies the following specific safeguards to payment data:

• Mobile banking account numbers are stored in encrypted form in 1kbd's database. Only authorised staff with a verified business need may access decrypted payment identifiers.
• 1kbd does not store full card numbers for Visa or Mastercard transactions. Card payments are tokenised by the payment gateway and 1kbd retains only the last four digits and the card type for display purposes.
• Transaction records are retained for a minimum of 5 years from the date of the transaction to satisfy anti-money laundering record-keeping obligations. They may not be deleted on request during this mandatory retention window.

1kbd retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply: active account data is retained for the duration of your account plus 5 years after closure; transaction and financial records are retained for a minimum of 5 years; gameplay logs for responsible gaming monitoring are retained for 3 years; marketing preference data is retained until you withdraw consent or request deletion.

When data is no longer required for any retention purpose, 1kbd will securely destroy or anonymise it. Anonymised or aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and platform improvement purposes.

Subject to applicable law, you have the following rights in relation to the personal data 1kbd holds about you:

• Right of access: you may request a copy of all personal data 1kbd holds about you. We will provide this within 30 days of a verified request.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it.
• Right to erasure: you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to restrict processing: you may request that we temporarily stop processing your data in certain circumstances, for example while a correction request is being verified.
• Right to withdraw marketing consent: you may opt out of marketing communications at any time by contacting support. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please contact 1kbd at [email protected] with the subject line "Privacy Rights Request", your registered mobile number, and a clear description of your request. We will acknowledge your request within 5 Bangladesh Standard Time business days and aim to fulfil it within 30 days.

1kbd uses cookies and similar tracking technologies to operate the platform, recognise returning users, maintain session states, and gather analytics data. The following types of cookies are used:

• Essential session cookies: required for the platform to function. They maintain your logged-in state and remember your session preferences. These cannot be disabled without preventing you from using the platform.
• Analytics cookies: collect anonymised data about how users navigate the platform — including pages visited, session duration, and device type — to help 1kbd improve the user experience.
• Fraud-detection cookies: used to fingerprint sessions and flag anomalous behaviour patterns consistent with bot activity, multiple-account usage, or other prohibited conduct.

You can control or delete cookies through your mobile browser settings. Note that disabling essential session cookies will prevent you from logging into your 1kbd account. Disabling analytics cookies will not affect your ability to use the platform.

1kbd implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include SSL/TLS encryption for all data in transit, hashed password storage, access controls restricting data access to authorised personnel only, and regular security assessments of platform infrastructure.

While 1kbd takes all reasonable steps to protect your data, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, 1kbd will notify affected users without undue delay and will take prompt remediation steps. You are responsible for keeping your own account credentials secure and should contact support immediately if you suspect your account has been compromised.

The 1kbd platform is strictly for adults aged 21 and above. 1kbd does not knowingly collect personal data from any person under the age of 21. If we become aware that personal data has been collected from a person under 21, we will delete that data immediately and close the associated account. If you believe a person under 21 has registered an account on 1kbd, please contact us at [email protected] so that we can take prompt action.

1kbd reserves the right to update this Privacy Policy at any time. The effective date at the top of this page will be updated whenever material changes are made. Where practicable, 1kbd will provide advance notice of significant changes via a platform notification or by contacting you at your registered mobile number or email address.

Your continued use of the 1kbd platform following publication of an updated Privacy Policy constitutes acceptance of the revised terms. If you object to any change, you may request account closure by contacting support and your personal data will be handled in accordance with the retention obligations described in Section 6.

For all privacy-related enquiries, data subject access requests, correction requests, erasure requests, or complaints about how 1kbd handles your personal data, please contact the 1kbd privacy team using the email address displayed in the site footer. Please use the subject line that corresponds to your request type (e.g., "Data Access Request", "Erasure Request", "Privacy Complaint") and include your registered mobile number so that we can verify your identity before processing your request.

1kbd aims to respond to all privacy-related requests within 5 Bangladesh Standard Time business days and to fully resolve them within 30 calendar days of receipt. If your request is complex or if we receive a high volume of requests simultaneously, we may extend the resolution period by a further 30 days, in which case we will notify you of the extension and the reason for it.