kgtime Privacy Policy
Effective as of 1 January 2026

1 Data Controller Information

kgtime operates as the data controller in respect of all personal data collected from players who register and use the kgtime platform at https://kgtime.biz. As the data controller, kgtime determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

If you have any questions or concerns about how kgtime handles your personal data, you may contact the kgtime Data Protection team via live chat (available 24 hours a day, 7 days a week) or by writing to [email protected]. All data-related enquiries will be acknowledged within 2 business days and resolved within 30 days unless exceptional complexity requires an extension.

2 Data We Collect

kgtime collects personal data across several categories. The table below summarises the main categories of data we collect, the specific data points within each category, and the primary purpose for which each category is processed.

kgtime collects only the minimum data necessary for the stated purposes. We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly required for age and identity verification.

3 How We Collect Your Data

kgtime collects personal data through the following channels:

3.1 Direct Provision

Data you provide directly when registering a kgtime account, completing KYC verification, submitting a deposit or withdrawal request, contacting customer support, or responding to a kgtime survey or promotion.

3.2 Automated Technical Collection

Data collected automatically when you access and interact with the kgtime platform, including IP address, device identifiers, session logs, and gameplay records. This data is collected via server logs, session management systems, and platform analytics tools operated by kgtime.

3.3 Cookies and Similar Technologies

Data collected via cookies, pixel tags, local storage, and similar tracking technologies placed on your device when you visit kgtime. See Section 9 (Cookies and Tracking) for full details.

3.4 Third-Party Sources

Data received from third-party identity verification providers, payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard), and fraud prevention services where kgtime has engaged them to verify your identity or assess transaction risk. kgtime only receives the minimum data necessary from these third parties.

4 How We Use Your Data

kgtime uses your personal data for the following purposes:

• Account management: Creating, maintaining, and securing your kgtime player account, verifying your identity and age, and processing your login and session activity.
• Transaction processing: Facilitating deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, and others), generating transaction records, and issuing receipts.
• Fraud prevention and security: Detecting and investigating suspicious activity, preventing money laundering, identifying unauthorised access, and complying with anti-fraud obligations.
• Responsible gaming: Monitoring player behaviour for signs of problem gambling, applying deposit limits and self-exclusion periods requested by players, and providing relevant support resources.
• Legal and regulatory compliance: Retaining records as required by applicable law, responding to lawful requests from authorities, and cooperating with gaming integrity investigations.
• Customer support: Responding to your enquiries, resolving disputes, and improving the quality of kgtime's support services based on interaction records.
• Platform improvement: Analysing aggregated, anonymised usage data to improve game performance, payment flow, navigation, and overall platform reliability.
• Marketing (with consent): Sending promotional communications, personalised bonus offers, and event notifications to players who have opted in to receive such communications. You may withdraw this consent at any time by contacting kgtime support.

5 Legal Basis for Processing

kgtime processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to perform the contract between you and kgtime — including account registration, game access, and payment processing. Without this processing, kgtime cannot provide its services to you.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) regulations, age verification requirements, and record-keeping obligations.
• Legitimate interests: Processing carried out for kgtime's legitimate business interests, including fraud prevention, platform security, and service quality improvement, where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing carried out based on your explicit, freely given consent — specifically, receiving marketing communications and promotional offers. Where consent is the basis, you have the right to withdraw it at any time without affecting the lawfulness of prior processing.

6 Sharing Your Data

kgtime shares your personal data only in the following limited and controlled circumstances:

6.1 Payment Processors

To complete your deposit and withdrawal transactions, kgtime shares the minimum necessary payment reference and transaction details with your chosen payment provider (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, Visa, Mastercard). These providers operate under their own privacy policies and are bound by contractual data protection obligations with kgtime.

6.2 Identity Verification Providers

To fulfil KYC requirements, kgtime may share your identity documents and verification data with accredited third-party identity verification services. These providers process your data solely for verification purposes and are prohibited from using it for any other purpose.

6.3 Game Content Providers

kgtime's platform hosts games from third-party providers including Pragmatic Play, NetEnt, Microgaming, Evolution Gaming, Spribe, and Ezugi. These providers may receive anonymised session and game-result data required to render and validate game outcomes. No personally identifiable information is shared with game providers beyond what is strictly necessary for game functionality.

6.4 Law Enforcement and Regulatory Bodies

kgtime may disclose your personal data to law enforcement agencies, regulatory authorities, or other competent bodies if required to do so by law, court order, or in good-faith belief that such disclosure is necessary to investigate fraud, protect the safety of any person, or enforce kgtime's legal rights.

6.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of kgtime's business assets, your personal data may be transferred to the acquiring entity as part of the transaction. kgtime will notify you via a prominent notice on the kgtime platform before your data becomes subject to a materially different privacy policy.

7 Data Retention

kgtime retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data: Retained for the duration of your kgtime account plus a minimum of 5 years after the account is closed, to satisfy legal and regulatory record-keeping obligations.
• Transaction records: Retained for a minimum of 5 years from the date of the transaction, in compliance with applicable financial record-keeping requirements.
• KYC and identity documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later.
• Customer support records: Retained for 3 years from the date of the last interaction, to enable resolution of any delayed disputes or complaints.
• Technical logs and session data: Retained for 12 months from the date of collection, after which they are automatically deleted or anonymised.
• Marketing preference data: Retained until you withdraw your consent to marketing communications, after which your opt-in record is archived for 3 years for compliance purposes.

Once the applicable retention period expires, kgtime will securely delete or anonymise your personal data so that it can no longer be associated with you.

8 Data Security

kgtime employs a multi-layered security infrastructure to protect your personal data against unauthorised access, alteration, disclosure, and destruction. Our technical and organisational security measures include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and the kgtime platform, ensuring that personal data and payment information cannot be intercepted in transit.
• Password hashing: All player passwords are stored in irreversibly hashed form using a strong cryptographic algorithm. kgtime staff cannot retrieve your password in plain text under any circumstances.
• Payment tokenisation: Payment method details submitted during transactions are tokenised. Full card numbers and mobile banking credentials are never stored on kgtime servers beyond the instant required to complete the transaction.
• Access controls: Access to personal data within kgtime's systems is restricted to authorised staff on a strict need-to-know basis. All staff with data access undergo regular security training and are bound by confidentiality obligations.
• Intrusion detection and monitoring: kgtime operates 24/7 automated intrusion detection systems and security monitoring to identify and respond to potential threats in real time.
• Regular security assessments: kgtime's platform undergoes regular vulnerability assessments and security reviews. Any identified vulnerabilities are remediated on a priority basis.

9 Cookies and Tracking

kgtime uses cookies and similar tracking technologies on its platform to enable core functionality, improve your experience, and support platform analytics. The following categories of cookies are used:

9.1 Strictly Necessary Cookies

These cookies are essential for the kgtime platform to function. They manage your login session, maintain your gaming state across pages, and process your payment transactions. These cookies cannot be disabled without preventing core platform functionality. No consent is required for strictly necessary cookies as they are essential to deliver the service you have requested.

9.2 Analytics Cookies

kgtime uses first-party analytics cookies to collect aggregated, anonymised data about how players navigate and use the platform. This data helps kgtime identify technical issues, optimise page performance, and improve game delivery. Analytics cookies do not collect personally identifiable information in isolation.

9.3 Preference Cookies

These cookies remember your display preferences and settings on kgtime — such as your preferred game view or language setting — so that you do not need to reconfigure them on each visit.

9.4 Managing Cookies

You may manage or delete cookies through your browser settings. Please note that disabling cookies beyond strictly necessary ones may affect your ability to use certain features of the kgtime platform. For full instructions on managing cookies in your specific browser, refer to your browser's help documentation.

10 Your Data Rights

As a kgtime player whose personal data is processed under this Privacy Policy, you have the following rights in relation to your data:

• Right of access: You may request a copy of the personal data kgtime holds about you. kgtime will provide this information within 30 days of a verified request.
• Right to rectification: If any personal data kgtime holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic account details directly from your account dashboard.
• Right to erasure: You may request that kgtime delete your personal data where it is no longer necessary for the purpose for which it was collected, subject to kgtime's legal retention obligations. kgtime cannot delete data it is legally required to retain.
• Right to restriction: You may request that kgtime restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to data portability: Where processing is based on your consent or on a contract, you may request that kgtime provide your personal data to you in a structured, commonly used, machine-readable format.
• Right to object: You may object to kgtime processing your personal data on the grounds of legitimate interests, including profiling for direct marketing purposes. kgtime will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time by contacting kgtime support. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, contact kgtime support via live chat or email [email protected] with the subject line "Data Rights Request". kgtime may ask you to verify your identity before processing your request to protect against unauthorised access to your data.

11 Protection of Minors

kgtime is strictly an 18+ platform. kgtime does not knowingly collect personal data from any person under the age of 18. If kgtime becomes aware that it has inadvertently collected personal data from a minor, that data will be permanently deleted without delay and the associated account will be closed immediately.

If you are a parent or guardian and believe that a minor in your care has registered a kgtime account or provided personal data to kgtime, please contact kgtime support at [email protected] immediately. kgtime takes child safety seriously and will act on all such notifications within 24 hours.

12 International Data Transfers

kgtime's primary operations and data infrastructure are oriented toward serving the Bangladesh market. In certain circumstances, your personal data may be transferred to or accessed from systems located outside Bangladesh — for example, where kgtime uses internationally hosted payment processing infrastructure or third-party game content delivery networks.

Where such transfers occur, kgtime takes reasonable steps to ensure that your personal data receives an equivalent level of protection as it would within Bangladesh, including through contractual data protection clauses with the relevant third-party recipients. By using kgtime, you acknowledge and consent to such transfers occurring where necessary to deliver the services you have requested.

13 Changes to This Policy

kgtime reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we provide. When we make material changes to this Privacy Policy, we will notify registered players by displaying a prominent notice upon login and, where practicable, by sending a notification to the email address registered on your account.

The effective date shown at the top of this page will be updated to reflect the date on which the revised Privacy Policy takes effect. We encourage you to review this Privacy Policy periodically to stay informed about how kgtime protects your data. Your continued use of kgtime after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way kgtime processes your personal data, please reach out through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week directly on the kgtime platform. Average response time: 2–5 minutes.
• Support Email: [email protected] (plain text only — not a clickable link). Response within 2 business days.

For formal data rights requests (access, rectification, erasure, portability, objection), please include "Data Rights Request" in the subject line of your email and provide sufficient detail to allow kgtime to identify your account and the specific right you wish to exercise. kgtime will acknowledge your request within 2 business days and aim to resolve it within 30 days.

kgtime is committed to resolving all privacy-related concerns directly with you. If, however, you are dissatisfied with kgtime's response to a data rights request, you may seek further recourse through any applicable dispute resolution mechanism available to you under local law.