How kesino Collects, Uses, and Protects Your Personal Data

1. Information We Collect

kesino collects personal data through several channels: directly from you when you register, make a deposit, contact support, or participate in a promotion; automatically when you interact with the platform; and in limited circumstances from trusted third-party verification partners. The categories of personal data we collect are set out below.

1.1 Registration and Identity Data

When you open an account, we collect your full legal name, date of birth, residential address, email address, and mobile phone number. This information is required to create and administer your account and forms the basis of our Know Your Customer (KYC) verification process. You may also be asked to provide a government-issued photo ID (National Identity Card, passport, or driving licence) and proof of address at the withdrawal stage.

1.2 Financial and Transaction Data

To process deposits and withdrawals in Bangladeshi Taka (৳), kesino collects payment method details including your bKash, Nagad, Rocket, or Upay mobile wallet number, or your bank account and card details where applicable. We do not store full card numbers on our servers — card data is tokenised and handled by our PCI-DSS compliant payment processor. We retain records of all transaction amounts, dates, and methods for regulatory and fraud-prevention purposes.

1.3 Technical and Usage Data

When you use the kesino platform, our servers automatically log certain technical data including your IP address, device type and operating system, browser type and version, pages visited, time spent on each page, game sessions initiated, and click-path data. This information is used to maintain platform security, diagnose technical issues, and improve the overall user experience. It is not used to build individual marketing profiles.

1.4 Communications Data

If you contact our support team via email or live chat, we retain the content of those communications along with metadata such as the date, time, and subject matter. This allows us to track the resolution of your query and maintain service quality records. Support communications are stored for a maximum of 36 months from the date of the last interaction.

1.5 Data Collected from Third Parties

In certain circumstances kesino may receive personal data about you from trusted third-party sources. These include identity verification providers who confirm the authenticity of your KYC documents, fraud detection services that flag unusual account activity, and payment processors who confirm transaction status. We do not purchase marketing data or contact lists from any third party.

Data Category	Examples	Legal Basis for Processing
Identity Data	Full name, date of birth, NID scan, passport copy	Contract performance; legal obligation (KYC)
Contact Data	Email address, mobile number, residential address	Contract performance; legitimate interests
Financial Data	Mobile wallet number, bank account reference, transaction history	Contract performance; legal obligation (AML)
Technical Data	IP address, device ID, browser fingerprint, session logs	Legitimate interests (security and fraud prevention)
Usage Data	Game history, bet amounts, login timestamps, page views	Contract performance; legitimate interests
Marketing Preferences	Email opt-in status, SMS consent, preferred game categories	Consent (freely given, withdrawable at any time)

2. How We Use Your Data

kesino processes your personal data only for the specific, legitimate purposes described in this section. We do not use your data for any purpose that is incompatible with the reason for which it was originally collected.

2.1 Account Administration and Service Delivery

The primary use of your data is to create and manage your kesino account, authenticate your identity when you log in, process deposits and withdrawals in Bangladeshi Taka, and deliver the games and betting markets you choose to use. Without processing your identity and financial data, we cannot fulfil our contractual obligations to you as a player.

2.2 Identity Verification and Age Confirmation

kesino is strictly an 18+ platform. We are obligated to verify that every player is of legal age before allowing withdrawal transactions. Your identity documents are used solely for this verification purpose. Verified identity data is retained in accordance with our data retention schedule described in Section 6. We do not use your ID documents for any other purpose, including targeted advertising.

2.3 Fraud Prevention and Security

We process your technical and transaction data to monitor for unusual patterns that may indicate fraudulent activity, multi-accounting, money laundering, or abuse of our promotions system. This processing is based on our legitimate interest in protecting the integrity of the platform and the safety of all players. Automated fraud checks may temporarily flag your account for manual review — we will contact you promptly by email if this occurs.

2.4 Customer Support

When you contact the kesino support team, we use your account data and the content of your communications to diagnose and resolve your query. Support agents are trained in data minimisation and access only the account fields necessary to address the specific issue you raise.

2.5 Marketing Communications

With your explicit consent, kesino may send you promotional emails, SMS messages, or in-platform notifications about new games, seasonal bonuses (such as Eid or Pohela Boishakh promotions), BPL cricket betting markets, and other platform updates. Consent for marketing is separate from your agreement to these Terms and can be withdrawn at any time without affecting your ability to use the platform. To opt out, visit Account Settings or email [email protected] with the subject line "Unsubscribe".

2.6 Platform Improvement and Analytics

Aggregated, anonymised usage data is analysed to understand how players navigate the platform, which game categories are most popular, and where technical friction points exist. This analysis helps our development team prioritise improvements. The resulting insights are statistical in nature and cannot be used to identify individual players.

3. Data Sharing & Third Parties

kesino does not sell or rent your personal data to any third party. We share personal data with external organisations only in the limited circumstances described below, and always subject to strict contractual data protection obligations.

3.1 Payment Processors

To facilitate deposits and withdrawals, we share the minimum necessary transaction data with our payment processing partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and card networks such as Visa and Mastercard. Each partner processes your payment data in accordance with their own privacy policies and applicable financial regulations.

3.2 Identity Verification Providers

Your KYC documents (name, date of birth, ID scan) are shared with our identity verification partner for the sole purpose of confirming your age and identity. Verification providers are contractually prohibited from using your data for any other purpose and are required to delete raw document images after verification is complete.

3.3 Game Studio Providers

Live casino game studios (including Evolution Gaming, Ezugi, and Pragmatic Play Live) and RNG game providers receive a session token and your Account ID when you launch a game. This allows them to attribute game results to your account for record-keeping purposes. Game providers do not receive your name, address, payment details, or any other personal data beyond what is necessary to run the game session.

3.4 Legal and Regulatory Disclosure

We may disclose your personal data to law enforcement agencies, financial intelligence units, or other competent authorities if we are required to do so by applicable law or a valid legal order. Where we are legally permitted to do so, we will notify you of such a disclosure request before complying.

4. Cookies & Tracking Technologies

kesino uses cookies and similar technologies to operate certain essential platform functions and to understand how players use the site. This section explains what types of cookies we use and how you can manage them.

4.1 Essential Cookies

These cookies are strictly necessary for the platform to function. They manage your login session, maintain your wallet balance state during a game session, and protect against cross-site request forgery (CSRF) attacks. You cannot opt out of essential cookies without losing access to the platform, as they are integral to its security architecture.

4.2 Performance and Analytics Cookies

We use first-party analytics cookies to collect anonymised data about how players navigate the platform — for example, which pages are visited most often, how long players spend on game category pages, and where they exit the site. This data is aggregated and never tied to your personal Account. You can opt out of analytics cookies via your browser settings without affecting platform functionality.

4.3 Preference Cookies

Preference cookies remember your settings such as your chosen display language and any accessibility options you have enabled. These cookies make your experience more consistent across sessions but are not essential to core platform operation.

4.4 What We Do Not Use

kesino does not use third-party advertising cookies, behavioural targeting pixels, social media tracking scripts, or any cross-site tracking technology that builds profiles of your activity outside the kesino platform. We do not embed Facebook Pixel, Google Ads remarketing tags, or similar tools on any page of the site.

4.5 Managing Cookies

You can view, restrict, or delete cookies at any time through your browser's settings menu. All major browsers (Chrome, Firefox, Edge, Safari) provide detailed instructions for cookie management in their respective help documentation. Disabling non-essential cookies will not prevent you from using the core features of the kesino platform.

5. Data Security Measures

kesino takes the security of your personal data seriously. We implement a layered set of technical and organisational controls to protect your information against unauthorised access, accidental loss, alteration, or disclosure.

5.1 Technical Controls

• Transport encryption: All connections to kesino.vip are enforced over HTTPS using TLS 1.2 or higher with 256-bit cipher suites.
• At-rest encryption: Sensitive database fields including identity document references and financial account numbers are encrypted at rest using AES-256.
• Password hashing: Account passwords are never stored in plain text. We use a modern adaptive hashing algorithm (bcrypt) with a per-user salt.
• Two-factor authentication: Players are encouraged to enable two-factor authentication (2FA) on their accounts via the Security section of Account Settings.
• Network segregation: Our payment processing infrastructure is isolated from the public-facing web layer within a separately firewalled network zone.

5.2 Organisational Controls

• Access to personal data is restricted to kesino staff and contractors who have a genuine operational need for it, under a strict role-based access control policy.
• All staff with access to personal data receive mandatory data protection training on joining the organisation and annually thereafter.
• Third-party service providers are vetted for data security practices before onboarding and are subject to contractual data processing obligations.

5.3 Breach Notification

In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, kesino will notify affected players by email without undue delay and no later than 72 hours after becoming aware of the breach. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the steps we are taking to address it.

6. Data Retention

kesino retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The retention periods below apply from the date of the last relevant activity or event.

Data Category	Retention Period	Reason
Account and identity data	5 years after account closure	Anti-money laundering and KYC regulatory requirements
Transaction records	7 years after the transaction date	Financial record-keeping and fraud audit trail
Game session logs	3 years after the session date	Dispute resolution and fairness verification
Support communications	3 years after last interaction	Service quality, escalation reference
Technical / server logs	90 days (rolling)	Security monitoring and incident investigation
Marketing consent records	Until consent is withdrawn, then 1 year	Proof of consent in case of complaint

When the applicable retention period expires, personal data is securely deleted or permanently anonymised so that it can no longer be associated with you as an individual. Anonymised, aggregated data may be retained indefinitely for statistical analysis.

7. Your Privacy Rights

As a player using the kesino platform, you hold the following rights with respect to the personal data we process about you. These rights can be exercised free of charge by contacting [email protected] with the subject line "Privacy Request".

7.1 Right of Access

You may request a copy of all personal data that kesino holds about you, together with a description of the purposes for which it is processed, the categories of data involved, and any third parties with whom it has been shared. We will respond to access requests within 72 hours.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as updating a phone number) can be made directly within your Account Settings. Corrections to identity data require re-submission of the relevant KYC document for verification.

7.3 Right to Erasure

You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent on which processing was based, or where you object to processing and no overriding legitimate grounds exist. Please note that we are unable to delete data we are legally required to retain — such as transaction records subject to anti-money laundering regulations — but we will delete all data not covered by such an obligation.

7.4 Right to Data Portability

You may request your personal data in a structured, commonly used, machine-readable format (CSV or JSON) so that it can be transferred to another service provider of your choice. This right applies to data processed on the basis of your consent or to fulfil a contract with you.

7.5 Right to Object to Marketing

You may withdraw consent for marketing communications at any time without giving any reason. This will not affect your ability to use the platform or the lawfulness of marketing that was sent before your withdrawal of consent. Opt-out requests are processed within 24 hours.

7.6 Right to Lodge a Complaint

If you believe your privacy rights have not been adequately respected by kesino, you are entitled to raise a formal complaint. Please contact [email protected] in the first instance so that we can attempt to resolve the matter directly. We commit to acknowledging complaints within 24 hours and providing a substantive response within 10 business days.

8. Policy Updates & Contact

8.1 How We Notify You of Changes

kesino reviews this Privacy Policy at least once per calendar year and whenever a significant change to our data processing activities occurs. Material changes — defined as any change that expands the categories of data collected, introduces a new processing purpose, or reduces your rights — will be communicated to registered players by email at least 14 days before taking effect. Minor clarifications (such as improved wording that does not alter substance) will be published on this page with an updated review date without individual notification.

8.2 Continued Use as Acceptance

Your continued use of the kesino platform after the effective date of a revised Privacy Policy constitutes your acceptance of the revised policy. If you do not agree with the changes, you must stop using the platform and submit a data deletion request to [email protected] before the new policy takes effect.

8.3 Contact for Privacy Matters

All privacy-related enquiries, data subject access requests, rectification requests, erasure requests, and complaints should be directed to:

• Email: [email protected] (subject line: "Privacy Request")
• Response time: Acknowledgement within 24 hours; full response within 72 hours for standard requests
• Language: English preferred; all formal responses will be issued in English

Please include your registered email address and Account ID in any privacy request so that we can locate your records promptly and verify your identity before processing the request.