k499 Privacy Policy — How We Handle Your Personal Data

1 Introduction

k499 ("we", "us", "our", "the Platform") is committed to protecting and respecting the privacy of every individual who uses our online betting and casino services. We operate the k499 platform as an offshore licensed gaming service, serving players primarily based in Bangladesh who wish to access cricket betting, live casino, slots, and related gaming products.

This Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by k499. "Personal data" means any information that relates to an identified or identifiable natural person — for example, your name, email address, mobile number, payment details, or device identifiers.

We take our data protection obligations seriously. k499 does not sell personal data to third parties for unrelated marketing purposes. We collect only what is necessary to deliver our services safely, fairly, and in compliance with applicable anti-money laundering and responsible gaming obligations. All data handling described in this Policy is conducted in accordance with internationally recognised data protection principles.

If you have any questions about how k499 handles your personal data, or if you wish to exercise any of the rights described in Section 9 of this Policy, please contact our Data Protection team at [email protected].

2 Data We Collect

k499 collects personal data in two principal ways: data you provide to us directly, and data that is automatically generated when you use our platform. The categories of personal data we collect are set out in the table below.

2.1 Data You Provide Directly

2.2 Data Collected Automatically

3 How We Use Your Data

k499 uses the personal data it collects for the purposes listed below. We do not use your personal data for any purpose incompatible with those listed here without first obtaining your explicit consent or as required by law.

• Account Management: To register and maintain your k499 account, verify your identity through the KYC process, manage your login credentials, and communicate essential account information to you.
• Service Delivery: To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, and Bangladesh bank transfer; to settle your sports bets including BPL, IPL, T20 World Cup, and Bangladesh Tigers fixtures; and to provide access to live casino, slots, and other gaming products.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, money laundering, account takeover attempts, and other illegal or prohibited activities on the k499 platform.
• Responsible Gaming: To monitor betting patterns for signs of problem gambling behaviour, to apply deposit limits, self-exclusion periods, and cooling-off restrictions you have requested, and to contact you proactively where our monitoring suggests you may benefit from responsible gaming support.
• Legal & Regulatory Compliance: To comply with applicable anti-money laundering obligations, to retain transaction records for the required statutory period, and to respond to lawful requests from competent authorities.
• Customer Support: To respond to your support queries, complaints, and dispute submissions in a timely and accurate manner, and to maintain records of those communications for quality assurance purposes.
• Platform Improvement: To analyse aggregate usage data in order to improve the performance, functionality, and user experience of the k499 platform, and to identify and fix technical issues.
• Marketing Communications: To send you promotional offers, bonus notifications, and updates about new features or seasonal campaigns (such as Eid or BPL promotions) — but only where you have consented to receive such communications or where we have a legitimate interest in informing you about directly related services. You may opt out of marketing communications at any time by contacting [email protected].

4 Legal Basis for Processing

k499 processes your personal data only where a valid legal basis exists. The primary legal bases on which we rely are as follows:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and k499 — specifically, to register and manage your account, process financial transactions, and deliver the betting and gaming services you have requested.
• Legal Obligation: Processing is required to comply with applicable anti-money laundering regulations, KYC obligations, and any other legal requirements to which k499 is subject as an offshore gaming operator.
• Legitimate Interests: Processing is necessary for our legitimate interests — including fraud prevention, platform security, responsible gaming monitoring, and internal analytics — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on your consent (for example, for optional marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5 Data Sharing & Third Parties

k499 does not sell, rent, or trade your personal data to third parties for their own marketing purposes under any circumstances. We may share your personal data with carefully selected third parties only in the limited circumstances described below.

5.1 Service Providers

k499 engages third-party service providers who process personal data on our behalf in order to support platform operations. These include payment processing partners (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank), identity verification and KYC service providers, fraud detection and anti-money laundering screening services, and cloud infrastructure and hosting providers. All service providers are bound by contractual data processing agreements that restrict their use of your data solely to the purposes for which it has been shared.

5.2 Game Providers

Where you access live casino games or slots provided by independent studios — including Evolution Gaming, Pragmatic Play, Pragmatic Play Live, NetEnt, Microgaming, Spribe, and Ezugi — limited technical data (such as your session token and game round identifiers) may be transmitted to those providers' systems solely for the purpose of delivering the game session. These providers are contractually prohibited from using this data for any other purpose.

5.3 Legal & Regulatory Disclosures

k499 may disclose personal data to law enforcement agencies, regulatory authorities, or other competent bodies where we are legally required to do so, or where disclosure is necessary to prevent or detect fraud, money laundering, or other criminal activity. Such disclosures will be made without prior notice to the account holder where legally required or where notice would compromise the investigation.

6 Cookies & Tracking Technologies

k499 uses cookies and similar tracking technologies to operate the platform efficiently, maintain your session, remember your preferences, and analyse platform performance. By continuing to use the k499 platform, you consent to our use of cookies in accordance with this Policy.

6.1 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They enable core features such as account login, session management, and secure payment processing. These cookies cannot be disabled without severely impairing your ability to use k499.
• Performance & Analytics Cookies: These cookies collect aggregated, anonymised information about how users interact with the k499 platform — such as which pages are most visited and how users navigate between sections. This data is used to improve platform performance and user experience.
• Functionality Cookies: These cookies remember your preferences — such as your language setting, preferred payment method, and display options — so you do not need to re-enter them each time you visit.
• Security Cookies: These cookies support our fraud detection and account security systems by identifying unusual login patterns or suspicious activity associated with your session.

6.2 Managing Cookies

You can control cookie settings through your web browser. Most modern browsers allow you to block or delete cookies; however, disabling strictly necessary cookies will prevent you from logging in or using core platform features. For detailed instructions on managing cookies in your browser, refer to your browser's help documentation. Note that cookie preference changes apply at the device and browser level and do not affect data already collected.

7 Data Retention

k499 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. Our standard data retention periods are as follows:

Once the relevant retention period has expired, personal data is securely deleted or anonymised in a manner that prevents re-identification. Anonymised and aggregated data may be retained indefinitely for statistical and analytical purposes without restriction.

8 Data Security

k499 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes the following measures:

• 256-Bit SSL Encryption: All data transmitted between your device and the k499 platform is encrypted using industry-standard 256-bit SSL/TLS encryption. This applies to all account pages, deposit and withdrawal flows, and login sessions.
• Password Security: Account passwords are never stored in plain text. k499 uses strong one-way cryptographic hashing algorithms to store password data, meaning that even internal staff cannot retrieve your plain-text password.
• Two-Factor Authentication: k499 offers optional two-factor authentication (2FA) for all registered accounts. Enabling 2FA significantly reduces the risk of unauthorised account access even if your login credentials are compromised.
• Access Controls: Access to personal data within k499's internal systems is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Regular Security Audits: k499 conducts periodic security assessments of its platform infrastructure, including vulnerability scanning and penetration testing, to identify and remediate potential security weaknesses before they can be exploited.
• Fraud Monitoring: k499's automated fraud detection systems monitor account activity and financial transactions in real time for anomalies that may indicate account takeover, identity theft, or financial fraud.

9 Your Rights

As a user of the k499 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our Data Protection team at [email protected] with your registered account username and a clear description of your request. We will respond within a reasonable timeframe, typically within 30 calendar days.

• Right of Access: You have the right to request a copy of the personal data k499 holds about you, along with information about how it is being used and the legal basis for its processing.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You can update many personal details directly from within your account settings.
• Right to Erasure: In certain circumstances, you may request that k499 delete personal data we hold about you. Note that this right is subject to limitations where we are legally required to retain data — for example, to comply with anti-money laundering record-keeping obligations.
• Right to Restrict Processing: You may request that k499 temporarily restrict the processing of your personal data while a dispute about its accuracy or lawfulness is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contract, you have the right to receive a copy of the personal data you have provided to k499 in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data where k499 relies on legitimate interests as its legal basis. You also have the right to object to direct marketing at any time without providing a reason.
• Right to Withdraw Consent: Where k499 processes your data based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

10 Children's Privacy

The k499 platform is strictly intended for adults aged 21 years and above. k499 does not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not access, register on, or use the k499 platform under any circumstances.

If k499 becomes aware that personal data has been collected from an individual who is under 21 years of age, we will take immediate steps to close the associated account, return any deposited funds where practicable, forfeit any bonus winnings, and permanently delete all personal data associated with that account from our systems.

11 Third-Party Links

The k499 platform may contain references to third-party services such as payment processors (bKash, Nagad, Rocket, Upay) and game providers (Evolution Gaming, Pragmatic Play, Spribe, Ezugi, NetEnt, Microgaming). Interactions with these third-party services — including completing a mobile wallet payment or launching a game — may be subject to the privacy policies of the respective third party.

k499 is not responsible for the privacy practices or content of any third-party service. We recommend that you review the privacy policies of any third-party service you interact with in connection with your use of k499. The existence of a technical integration with a third-party provider does not constitute an endorsement of that provider's privacy practices.

12 International Data Transfers

k499 operates as an offshore platform and its server infrastructure, along with certain third-party service providers, may be located outside of Bangladesh. As a result, your personal data may be transferred to and processed in countries other than the country in which you are resident.

Where personal data is transferred internationally, k499 ensures that appropriate safeguards are in place to protect that data to a standard at least equivalent to the protections afforded under internationally recognised data protection frameworks. These safeguards include contractual data processing agreements with all third-party recipients that impose binding data protection obligations consistent with this Policy.

By registering an account and using the k499 platform, you acknowledge and consent to the transfer of your personal data to k499's server infrastructure and service providers in accordance with this Policy.

13 Changes to This Policy

k499 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will publish the revised Policy on this page with an updated effective date. Where practicable, we will notify registered players of significant changes via email or in-platform notification prior to the changes taking effect.

We encourage you to review this Policy periodically to stay informed about how k499 handles your personal data. Your continued use of the k499 platform following the publication of any revised Policy constitutes your acceptance of the updated terms. If you disagree with any changes to this Policy, you should cease using the platform and request account closure.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or k499's handling of your personal data, please reach out to our Data Protection team using the contact details below. We are committed to responding promptly and transparently to all privacy-related enquiries.

When submitting a privacy-related request, please include your registered account username, a clear description of your request or concern, and any relevant reference numbers if you are following up on a previous query. k499 may request identity verification before actioning account-specific data requests in order to protect your data from unauthorised access.