ka33 Privacy Policy

1Definitions

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information that directly or indirectly identifies a natural person, including name, mobile number, date of birth, payment account details, device identifiers, and IP address.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, transfer, and deletion.
• "Data Controller" means ka33, the entity responsible for determining the purposes and means of processing personal data collected through the platform.
• "Data Processor" means any third-party service provider that processes personal data on behalf of ka33 under a written data processing agreement.
• "Player" means any individual who has registered an account on the ka33 platform.
• "MFS" means Mobile Financial Service, including bKash, Nagad, Rocket, and Upay as operated in Bangladesh.
• "Cookies" means small text files placed on your device by the ka33 platform for session management, analytics, and performance optimisation purposes.
• "Sensitive Data" means a subset of personal data that warrants a higher degree of protection, including financial account details and identity document information.

2Personal Data We Collect

ka33 collects personal data across several categories depending on how you interact with the platform. The table below summarises the principal categories of data collected:

3How We Collect Your Data

ka33 collects personal data through the following channels:

• Direct submission: Information you provide when completing the account registration form, submitting identity verification documents, making a deposit or withdrawal request, or contacting the support team.
• Automated technical collection: Technical and behavioural data collected automatically as you navigate the platform, including through server logs, session tracking, and analytics tools integrated into the ka33 website.
• Payment processors: Transaction confirmation data received from MFS providers such as bKash, Nagad, and Rocket following a deposit or withdrawal. ka33 receives confirmation of the transaction amount and a reference identifier — not your full wallet credentials.
• Identity verification partners: Where ka33 uses a third-party KYC (Know Your Customer) service to verify identity documents, that service returns a verification result and relevant identity data to ka33 for account authentication purposes.
• Cookies and similar technologies: As described further in Section 7 of this Policy.

4Purpose of Processing

ka33 processes your personal data only for the specific, documented purposes listed below. We do not process your data for any purpose that is incompatible with the purpose for which it was originally collected without obtaining your separate consent.

5Legal Basis for Processing

ka33 processes personal data on one or more of the following legal bases depending on the nature of the processing activity:

• Contractual necessity: Processing required to perform the contract between ka33 and the player, including account management, transaction processing, and dispute resolution.
• Legal obligation: Processing required to comply with applicable legal requirements, including identity verification obligations, anti-money laundering (AML) checks, and record-keeping requirements.
• Legitimate interests: Processing carried out for ka33's legitimate business interests — including fraud prevention, platform security, and responsible gaming monitoring — where those interests are not overridden by the player's rights and freedoms.
• Consent: Processing activities that require your explicit opt-in consent, such as sending promotional and marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

6Data Sharing and Disclosure

ka33 does not sell, rent, or trade your personal data to any third party. We share personal data with third parties only in the following limited circumstances:

• Payment processors: MFS providers (bKash, Nagad, Rocket, Upay) and card payment processors receive only the transaction data necessary to complete your deposit or withdrawal request.
• KYC and identity verification partners: Where a third-party KYC service is used, your identity document data is shared with that service solely for the purpose of verifying your identity and returned to ka33 with a verification result.
• Game content providers: Software providers such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe may receive anonymised session data for game performance and audit purposes. These providers do not receive personally identifiable information.
• IT infrastructure and security providers: Cloud hosting, server management, and cybersecurity service providers that support the operation of the ka33 platform process technical data under strict data processing agreements that limit their use of that data to the contracted purpose.
• Legal authorities: ka33 will disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by applicable law or lawful order, and only to the extent required by that obligation.

7Cookies and Tracking Technologies

The ka33 platform uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your logged-in session, and to analyse how players interact with the site so that we can improve the user experience over time.

Types of cookies used by ka33:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in between page loads and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without preventing the platform from working.
• Functional cookies: Used to remember your preferences such as language settings, preferred payment method display, and game lobby layout preferences. These are not strictly necessary but improve your experience.
• Analytics cookies: Used to collect anonymised data about how players navigate the platform — which pages are visited most, how long sessions last, and where players encounter errors. This data helps ka33 prioritise platform improvements. Analytics data does not identify you personally.
• Security cookies: Short-lived tokens used to detect suspicious login patterns, unusual device changes, and potential account takeover attempts as part of ka33's fraud prevention system.

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from accessing the ka33 platform. Disabling functional or analytics cookies will not prevent access but may result in a reduced experience.

8Data Security

ka33 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and ka33's servers.
• Encryption of sensitive data at rest, including identity document images and financial transaction records.
• Role-based access controls ensuring that only authorised ka33 personnel with a documented business need can access personal data.
• OTP (one-time password) verification sent to your registered mobile number when a new device attempts to log in to your account.
• Automated fraud detection systems that monitor account activity in real time and trigger alerts for unusual patterns.
• Regular internal security audits and vulnerability assessments of the ka33 platform infrastructure.
• Strict data processing agreements with all third-party vendors that access personal data.

9Data Retention

ka33 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked to an identifiable individual.

10Your Data Rights

As a player on the ka33 platform, you have the following rights in relation to your personal data. You may exercise any of these rights by contacting the ka33 support team via live chat or by emailing [email protected].

• Right of access: You have the right to request a copy of all personal data that ka33 holds about you. We will provide this information within a reasonable timeframe following identity verification.
• Right to rectification: If any personal data held by ka33 is inaccurate or incomplete, you have the right to request that it be corrected or updated promptly.
• Right to erasure: You may request deletion of your personal data where the data is no longer necessary for the purpose it was collected, where you withdraw consent (for consent-based processing), or where you believe the data has been processed unlawfully. This right is subject to our legal retention obligations — we cannot delete data that we are legally required to retain.
• Right to restriction: You may request that ka33 restrict the processing of your personal data while a complaint or objection is being investigated.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling. ka33 will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before withdrawal.
• Right to data portability: Where processing is carried out by automated means and on the basis of consent or contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format.

11Third-Party Links

The ka33 platform may contain references to third-party game providers, payment methods, or informational resources. Where such references include links, clicking those links will take you away from the ka33 platform. ka33 is not responsible for the privacy practices or content of any third-party website or service. We recommend reviewing the privacy policy of any third-party service before providing your personal data to it.

12Children and Minors

The ka33 platform is strictly intended for adults aged 21 and above. ka33 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been submitted by or on behalf of a person under 21, we will immediately close the associated account, void any balances, and securely delete the data.

Parents and guardians who believe that a minor may have accessed the ka33 platform are urged to contact the support team immediately via live chat so that appropriate action can be taken without delay.

13Marketing Communications

ka33 may send promotional communications — including bonus offers, tournament announcements, and seasonal promotions — to players who have explicitly opted in to receive marketing messages. These communications are delivered via SMS to the registered mobile number.

You may withdraw your consent to receive marketing communications at any time by:

• Contacting the ka33 support team via live chat and requesting opt-out
• Replying to an SMS promotional message with the word "STOP"
• Updating your notification preferences in your ka33 account settings panel

Following a valid opt-out request, ka33 will cease sending marketing communications within a reasonable processing period, typically within 5 business days. Opting out of marketing does not affect your ability to receive transactional account notifications such as deposit confirmations, withdrawal status updates, and security alerts — these are essential communications linked to your account and cannot be disabled.

14International Data Transfers

ka33 operates a platform serving players located in Bangladesh. Some of our third-party service providers — including cloud infrastructure, analytics, and KYC verification partners — may be based outside Bangladesh and may process personal data in other jurisdictions. Where personal data is transferred internationally, ka33 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to the protections described in this Privacy Policy.

Safeguards for international transfers include: contractual clauses requiring the receiving party to apply equivalent data protection standards; restricting data to the minimum necessary subset for the contracted service; and periodic reviews of the security practices of international data processors.

15Changes to This Privacy Policy

ka33 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. When a material change is made, ka33 will notify registered players via their registered mobile number or through a prominent notice on the platform homepage.

The effective date of the most current version of this Privacy Policy is always displayed at the top of this page. Continued use of the ka33 platform after the effective date of any revision constitutes acceptance of the updated Privacy Policy. If you do not agree with the revised Policy, you should cease using the platform and request account closure in accordance with the Terms and Conditions.

16Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ka33, please contact us through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the live chat widget on the ka33 platform
• Email: [email protected] (plain text — not a clickable link)
• Operating hours: Bangladesh Standard Time (BST, UTC+6), around the clock
• Response time: ka33 aims to acknowledge all privacy-related enquiries within 24 hours and provide a substantive response within 30 calendar days